last executing test programs:

1m27.776608752s ago: executing program 2 (id=67):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000003000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c13024000000000000000000c"], 0xd4}, 0x1, 0x0, 0x0, 0x11}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0xc0001, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15)
ioctl$TCSETS(r0, 0x40384708, &(0x7f0000000040)={0x8, 0x1, 0xd8, 0x3f, 0x6, "3eccd25569e20900"})

1m27.676232975s ago: executing program 2 (id=68):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000040)=0xb6d)
ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)=0xc)

1m27.563333412s ago: executing program 2 (id=69):
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901)
r1 = fspick(r0, &(0x7f0000000000)='.\x00', 0x0)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280))
fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0)

1m27.420967261s ago: executing program 2 (id=72):
syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000002240)=ANY=[@ANYBLOB="00e3078fbb81fca067351e718b1742354077ee6bdefb8addaf7c0c235850b66dac0ba564a370a77264f1a57d44c84efc49fa6c64b9351ea8fd59a458a7791fedcc466b0eab6ca6dd32fcc642517fa3219450b91e3118bf2b9d3cfa562ea44c058252d29181c81c637c6ba7d179122eee61e5c9f68165b6abd469da8d90c0632f7265bb040411d5748c475bb33a7ce77afb2ea533f1653d8cb67dad989bb0a1c16881f0d91d6cbd3751c289aecf4a00"/185, @ANYBLOB="b12398658f5ec6488081d04c33b5a507b1cac8c4376c1895046a1e6e068e53d002eb4279796b4c014f4febee026f87bd0eea7d27598f7ff2687552fdd651", @ANYRESOCT=0x0, @ANYRES64], 0x1, 0x497, &(0x7f0000002480)="$eJzs281vG8Ufx/HPbGJnk/b3w31yC6qEJSSKiiix05I+gRRa0iL1gbYJAqEWhcYJVhMnitOqraCtxKFHoEggJA7l0AtCVZHgAgcOcOM/4MKtBy6YEycQms2sd+26JK0fEjfvl5R4vPv17uzM7OysdywAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACC9/MpQf9Ysdy4AAEA7HTt1sj/H9R8AgFVlhPt/AACA1cTI0ycy+uHTsjkavF/gHykUz18cPThc/2O9JvhkVxBv//xsbmDnrhcGd4ev//35Zntcx0+NDGUOzEzPzuVLpfx4ZrRYODsznl/yFhr9fK3tQQFkps+dH5+YKGVyOwaqVl9M3e1Zk07tG0zvfzqMHT04PHwqFtOdeOi93+N+I/ykPF2XUfnj2+aYJE+Nl8UibafVeoOD2B4cxOjB4eBApgpjxXm70oQF4VWXSTIsozbURUM2SjZfJtmce7aEPJVktCldNscldYXl8GzwxfDiG/Cako0HZvN5WlJGHVBnK1iPPO2S0Y09Kb1myyys/27p/eXOHFquW55uy2jbS2VzIugP7Plku80jr2deLU7MxGKNcWdUp18f2mmF902+PB0LzviyObncmUHb2cHSaRntHLkQjCsUjEsf2zd46PBIfISxeZHt2NgdLr2Ua3IiNnQwyzSGAAAAAAAAAB51vvGC7+I+/8YP3mfcMyCsEsbT8zL683A5eDQen5fQFZvfUdHpz35am/9e/8DM7KW5wuS783XX9/lD75Tm58bO1l+tXnvyVX0dvtg8hgYljKfdMrr6z51ovylj064biHZ0a3+UN9/UrA3azf8X5rOEzxD2Dm+Op+tm+QGej6XcfumfgOYwxtOQjCa+3+LmfvTpnj7IxX0roz9ubnVxXtIGhadpKvjvTxSm8v029icZffl3GBtMM9MaF7shis3aWE9GHx2tjl3rYjdGsTkbe0hGP5+pH7spih2wsR/IaPb3TBjbZ2OfdLHpKHbH2Zmp8ZYV8Apn+/8rMlr/YsaEdenKy3WzXZXYW+9F/f212g3dp89vtP9PxZZdc+3wrm2vZ7YEbS9or1799npdRl9/t9XFLbSVpFu/Lvgftdc3ZDT5S3Vsn4tdH8Vml1ywHcLW/9syyhXvVMrG1b+rgdj1P1b/T9S2jhbV/7rYspTbb09zDh2SSpcunxubmsrPkSBBYgmJHq2IbCySCPvlh9/OMndMaAt7/f9MRm+e+LUy3nHXfzesjsZ/f12Jrv97azfUouv/+tiyvW40kuiW/Pnp2URa8kuXLj9XmB6bzE/miwO57J7+PTsHs4lkOLaLUg0X1SMp4e7VLnz4VeX+rHr8V3/831e7oRbV/waXzXCfUSfVlMNf9Wz9/yajt368U7mPtvV/sxJRPf4P77OeeWrhtXJ+tqj+N8aWpdx+/9eE4wYAAAAAAAAAAAAAAACATpcwnm7IyD/dbcLfRi1l/t89P5hq0fyvdGzZeJt+r9BwoQJAB/Dk6QsZbVPZXLUL1kpH4694pP0bAAD//3VdHM0=")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.swap.current\x00', 0x275a, 0x0)

1m27.248379455s ago: executing program 2 (id=75):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000079106b000000000087000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)

1m26.869725523s ago: executing program 2 (id=76):
r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)=0x3)
r1 = syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x14b000)
syz_open_dev$sndpcmp(&(0x7f0000000440), 0x0, 0x0)
close(r1)

1m26.508539285s ago: executing program 32 (id=76):
r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)=0x3)
r1 = syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x14b000)
syz_open_dev$sndpcmp(&(0x7f0000000440), 0x0, 0x0)
close(r1)

45.692934743s ago: executing program 3 (id=431):
mknod(&(0x7f00000048c0)='./file0\x00', 0x0, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f0000008380)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008df76a250000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000131a5d9400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0)
lseek(r2, 0x400, 0x1)

42.369758088s ago: executing program 3 (id=446):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000380), r0)
sendmsg$NFC_CMD_LLC_SET_PARAMS(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x1c, r2, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x8080)

42.301674625s ago: executing program 3 (id=448):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x2000000, {0x7}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x180}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x0)

42.235977922s ago: executing program 3 (id=451):
syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x4080, &(0x7f00000001c0)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000002,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000002,nostrict,uid=', @ANYRESOCT=0x0, @ANYRES16], 0x2, 0xc36, &(0x7f0000002540)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

42.029328964s ago: executing program 3 (id=456):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x1e3d00, 0x0)
ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000440)={0xe000003, 0xfffffffffffffe55, 0x0, 0x1, 0x5})

41.868397395s ago: executing program 3 (id=459):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = dup(r0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c)
sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043)
r2 = dup(r0)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000a40)={0x0, @in6={{0xa, 0x4e24, 0x5, @loopback, 0x1}}, 0x4, 0x1, 0xf06, 0x0, 0xac, 0x7d, 0x5}, 0x9c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)
write$tun(r1, &(0x7f0000000300)={@void, @void, @mpls={[], @generic="99"}}, 0x1)
sendmsg$nl_route_sched(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x2000c800}, 0x2400c800)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty, 0x3}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0x6, 0x8, 0x1b}, 0x9c)

41.688154304s ago: executing program 33 (id=459):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = dup(r0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c)
sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043)
r2 = dup(r0)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000a40)={0x0, @in6={{0xa, 0x4e24, 0x5, @loopback, 0x1}}, 0x4, 0x1, 0xf06, 0x0, 0xac, 0x7d, 0x5}, 0x9c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)
write$tun(r1, &(0x7f0000000300)={@void, @void, @mpls={[], @generic="99"}}, 0x1)
sendmsg$nl_route_sched(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x2000c800}, 0x2400c800)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty, 0x3}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0x6, 0x8, 0x1b}, 0x9c)

2.267312783s ago: executing program 4 (id=885):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
getsockopt(r0, 0x9, 0x1, 0x0, 0x0)

2.265677211s ago: executing program 4 (id=886):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000440)='mm_page_free\x00', 0xffffffffffffffff, 0x0, 0x1000}, 0x18)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000b28000)=0x3)
poll(&(0x7f0000b2c000), 0x0, 0xffffffffffbffff8)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
fcntl$setown(0xffffffffffffffff, 0x8, 0x0)
tkill(0x0, 0x13)
stat(0x0, 0x0)
write(r1, &(0x7f00000009c0)="3bf58d7d", 0x4)
sendfile(r1, r0, 0x0, 0x3ffff)
sendfile(r1, r0, 0x0, 0x7fffeffd)

1.20352608s ago: executing program 4 (id=899):
r0 = syz_open_dev$sndpcmp(&(0x7f0000000380), 0x1, 0x8000)
ioctl$SNDRV_PCM_IOCTL_UNLINK(r0, 0x4161, 0x0)

1.137293962s ago: executing program 1 (id=902):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000040)=0x6, 0x4)

1.069508966s ago: executing program 1 (id=903):
r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
ioctl$VIDIOC_G_SLICED_VBI_CAP(r0, 0xc0745645, &(0x7f0000000040)={0x7f, [0x5, 0x8, 0x1, 0x1, 0xa, 0x7, 0x9, 0xff6, 0x9, 0x7, 0x6, 0xe, 0x0, 0x7, 0xf7, 0x2341, 0x2, 0x5, 0x1, 0x7ff, 0x8, 0x5, 0x269b, 0xab, 0x4, 0x9, 0x9, 0x4b7, 0x1, 0x1, 0xff, 0x1, 0x5, 0x2, 0x224, 0x7, 0x3399, 0x80, 0x8, 0x6, 0xfffa, 0x7fff, 0x7fff, 0x7, 0xc, 0x9, 0x9, 0x1a2f], 0x1})

1.06903381s ago: executing program 4 (id=904):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = getpid()
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000280)={0x0, 0x0})
syz_open_procfs(r4, &(0x7f00000000c0)='uid_map\x00')
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0xd, 0x8, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x2, &(0x7f0000000200)=[{0x15, 0x0, 0x1}, {0x1}]})
syz_mount_image$qnx6(&(0x7f0000009e00), &(0x7f0000009e40)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="6d6d000000002c6d6d695f66730500"], 0x1, 0x9dc3, &(0x7f0000009ec0)="$eJwEwAMAbQUAwNBs27aXbdu2bS/3ro1s27Zt27a/0blvgPcP8IEBPjjAhwb48AAfGeCjA3xsgI8P8IkBPjnApwb49ACfGeCzA3xugM8P8IUBvjjAlwb48gBfGeCrA3xtgK8P8I0BvjnAtwb49gDfGeC7A3xvgO8P8IMBfjjAjwb48QA/GeCnA/xsgJ8P8IsBfjnArwb49QC/GeC3A/xugN8P8IcB/jjAnwb48wB/GeCvA/xtgL8P8I8B/jnAvwb49wD/GeC/A/xvgEMGOHSAwwY4fIAjBjhygKMGOHqAYwY4doDjBDhugOMFOH6AEwQ4YYATBThxgJMEOGmAkwU4eYBTBDhlgFMFOHWA0wQ4bYDTBTh9gDMEOGOAMwU4c4CzBDhrgLMFOHuAcwQ4Z4BzBTh3gPMEOG+A8wU4f4ALBLhggAsFuHCAiwS4aICLBbh4gEsEuGSASwW4dIDLBEiAywa4XIDLB7hCgCsGuFKAKwe4SoCrBrhagKsHuEaAawa4VoBrB7hOgOsGuF6A6we4QYAbBrhRgBsHuEmAmwa4WYCbB7hFgFsGuFWAWwe4TYDbBrhdgNsHuEOAOwa4U4A7B7hLgLsGuFuAuwe4R4B7BrhXgHsHuE+A+wa4X4D7B3hAgAcGeFCABwd4SICHBnhYgIcHeESARwZ4VIBHB3hMgMcGeFyAxwd4QoAnBnhSgCcHeEqApwZogKcFeHqAZwR4ZoBnBXh2gOcEeG6AgwCDAMMAowDjAJMA0wCzAPMAiwDLAKsA6wCbANsAuwD7AM8L8PwALwjwwgAvCvDiAC8J8NIALwvw8gCvCPDKAK8K8OoArwnw2gCvC/D6AG8I8MYAbwrw5gBvCfDWAG8L8PYA7wjwzgDvCvDuAO8J8N4A7wvw/gAfCPDBAB8K8OEAHwnw0QAfC/DxAJ8I8MkAnwrw6QCfCfDZAJ8L8PkAXwjwxQBfCvDlAF8J8NUAXwvw9QDfCPDNAN8K8O0A3wnw3QDfC/D9AD8I8MMAPwrw4wA/CfDTAD8L8PMAvwjwywC/CvDrAL8J8NsAvwvw+wB/CPDHAH8K8OcAfwnw1wB/C/D3AP8I8M8A/wrw7wD/CfDfAP8LcEiAQwMcFuDwAEcEODLAUQGODnBMgGMDHCfEcUMcL8TxQ5wgxAlDnCjEiUOcJMRJQ5wsxMlDnCLEKUOcKsSpQ5wmxGlDnC7E6UOcIcQZQ5wpxJlDnCXEWUOcLcTZQ5wjxDlDnCvEuUOcJ8R5Q5wvxPlDXCDEBUNcKMSFQ1wkxEVDXCzExUNcIsQlQ1wqxKVDXCZEQlw2xOVCXD7EFUJcMcSVQlw5xFVCXDXE1UJcPcQ1QlwzxLVCXDvEdUJcN8T1Qlw/xA1C3DDEjULcOMRNQtw0xM1C3DzELULcMsStQtw6xG1C3DbE7ULcPsQdQtwxxJ1C3DnEXULcNcTdQtw9xD1C3DPEvULcO8R9Qtw3xP1C3D/EA0I8MMSDQjw4xENCPDTEw0I8PMQjQjwyxKNCPDrEY0I8NsTjQjw+xBNCPDHEk0I8OcRTQjw1REM8LcTTQzwjxDNDPCvEs0M8J8RzQxyEGIQYhhiFGIeYhJiGmIWYh1iEWIZYhViH2ITYhtiF2Id4Xojnh3hBiBeGeFGIF4d4SYiXhnhZiJeHeEWIV4Z4VYhXh3hNiNeGeF2I14d4Q4g3hnhTiDeHeEuIt4Z4W4i3h3hHiHeGeFeId4d4T4j3hnhfiPeH+ECID4b4UIgPh/hIiI+G+FiIj4f4RIhPhvhUiE+H+EyIz4b4XIjPh/hCiC+G+FKIL4f4SoivhvhaiK+H+EaIb4b4Vohvh/hOiO+G+F6I74f4QYgfhvhRiB+H+EmIn4b4WYifh/hFiF+G+FWIX4f4TYjfhvhdiN+H+EOIP4b4U4g/h/hLiL+G+FuIv4f4R4h/hvhXiH+H+E+I/4b4X4hDQhwa4rAQh4c4IsSRIY4KcXSIY0IcG+I4EY4b4XgRjh/hBBFOGOFEEU4c4SQRThrhZBFOHuEUEU4Z4VQRTh3hNBFOG+F0EU4f4QwRzhjhTBHOHOEsEc4a4WwRzh7hHBHOGeFcEc4d4TwRzhvhfBHOH+ECES4Y4UIRLhzhIhEuGuFiES4e4RIRLhnhUhEuHeEyERLhshEuF+HyEa4Q4YoRrhThyhGuEuGqEa4W4eoRrhHhmhGuFeHaEa4T4boRrhfh+hFuEOGGEW4U4cYRbhLhphFuFuHmEW4R4ZYRbhXh1hFuE+G2EW4X4fYR7hDhjhHuFOHOEe4S4a4R7hbh7hHuEeGeEe4V4d4R7hPhvhHuF+H+ER4Q4YERHhThwREeEuGhER4W4eERHhHhkREeFeHRER4T4bERHhfh8RGeEOGJEZ4U4ckRnhLhqREa4WkRnh7hGRGeGeFZEZ4d4TkRnhvhIMIgwjDCKMI4wiTCNMIswjzCIsIywirCOsImwjbCLsI+wvMiPD/CCyK8MMKLIrw4wksivDTCyyK8PMIrIrwywqsivDrCayK8NsLrIrw+whsivDHCmyK8OcJbIrw1wtsivD3COyK8M8K7Irw7wnsivDfC+yK8P8IHInwwwocifDjCRyJ8NMLHInw8wicifDLCpyJ8OsJnInw2wucifD7CFyJ8McKXInw5wlcifDXC1yJ8PcI3InwzwrcifDvCdyJ8N8L3Inw/wg8i/DDCjyL8OMJPIvw0ws8i/DzCLyL8MsKvIvw6wm8i/DbC7yL8PsIfIvwxwp8i/DnCXyL8NcLfIvw9wj8i/DPCvyL8O8J/Ivw3wv8iHBLh0AiHRTg8whERjoxwVISjIxwT4dgIx4lx3BjHi3H8GCeIccIYJ4px4hgniXHSGCeLcfIYp4hxyhininHqGKeJcdoYp4tx+hhniHHGGGeKceYYZ4lx1hhni3H2GOeIcc4Y54px7hjniXHeGOeLcf4YF4hxwRgXinHhGBeJcdEYF4tx8RiXiHHJGJeKcekYl4mRGJeNcbkYl49xhRhXjHGlGFeOcZUYV41xtRhXj3GNGNeMca0Y145xnRjXjXG9GNePcYMYN4xxoxg3jnGTGDeNcbMYN49xixi3jHGrGLeOcZsYt41xuxi3j3GHGHeMcacYd45xlxh3jXG3GHePcY8Y94xxrxj3jnGfGPeNcb8Y94/xgBgPjPGgGA+O8ZAYD43xsBgPj/GIGI+M8agYj47xmBiPjfG4GI+P8YQYT4zxpBhPjvGUGE+N0RhPi/H0GM+I8cwYz4rx7BjPifHcGAcxBjGGMUYxxjEmMaYxZjHmMRYxljFWMdYxNjG2MXYx9jGeF+P5MV4Q44UxXhTjxTFeEuOlMV4W4+UxXhHjlTFeFePVMV4T47UxXhfj9THeEOONMd4U480x3hLjrTHeFuPtMd4R450x3hXj3THeE+O9Md4X4/0xPhDjgzE+FOPDMT4S46MxPhbj4zE+EeOTMT4V49MxPhPjszE+F+PzMb4Q44sxvhTjyzG+EuOrMb4W4+sxvhHjmzG+FePbMb4T47sxvhfj+zF+EOOHMX4U48cxfhLjpzF+FuPnMX4R45cxfhXj1zF+E+O3MX4X4/cx/hDjjzH+FOPPMf4S468x/hbj7zH+EeOfMf4V498x/hPjvzH+F+OQGIfGOCzG4TGOiHFkjKNiHB3jmBjHxjhOguMmOF6C4yc4QYITJjhRghMnOEmCkyY4WYKTJzhFglMmOFWCUyc4TYLTJjhdgtMnOEOCMyY4U4IzJzhLgrMmOFuCsyc4R4JzJjhXgnMnOE+C8yY4X4LzJ7hAggsmuFCCCye4SIKLJrhYgosnuESCSya4VIJLJ7hMgiS4bILLJbh8giskuGKCKyW4coKrJLhqgqsluHqCayS4ZoJrJbh2guskuG6C6yW4foIbJLhhghsluHGCmyS4aYKbJbh5glskuGWCWyW4dYLbJLhtgtsluH2COyS4Y4I7JbhzgrskuGuCuyW4e4J7JLhngnsluHeC+yS4b4L7Jbh/ggckeGCCByV4cIKHJHhogocleHiCRyR4ZIJHJXh0gsckeGyCxyV4fIInJHhigicleHKCpyR4aoImeFqCpyd4RoJnJnhWgmcneE6C5yY4SDBIMEwwSjBOMEkwTTBLME+wSLBMsEqwTrBJsE2wS7BP8LwEz0/wggQvTPCiBC9O8JIEL03wsgQvT/CKBK9M8KoEr07wmgSvTfC6BK9P8IYEb0zwpgRvTvCWBG9N8LYEb0/wjgTvTPCuBO9O8J4E703wvgTvT/CBBB9M8KEEH07wkQQfTfCxBB9P8IkEn0zwqQSfTvCZBJ9N8LkEn0/whQRfTPClBF9O8JUEX03wtQRfT/CNBN9M8K0E307wnQTfTfC9BN9P8IMEP0zwowQ/TvCTBD9N8LMEP0/wiwS/TPCrBL9O8JsEv03wuwS/T/CHBH9M8KcEf07wlwR/TfC3BH9P8I8E/0zwrwT/TvCfBP9N8L8EhyQ4NMFhCQ5PcESCIxMcleDoBMckODbBcVIcN8XxUhw/xQlSnDDFiVKcOMVJUpw0xclSnDzFKVKcMsWpUpw6xWlSnDbF6VKcPsUZUpwxxZlSnDnFWVKcNcXZUpw9xTlSnDPFuVKcO8V5Upw3xflSnD/FBVJcMMWFUlw4xUVSXDTFxVJcPMUlUlwyxaVSXDrFZVIkxWVTXC7F5VNcIcUVU1wpxZVTXCXFVVNcLcXVU1wjxTVTXCvFtVNcJ8V1U1wvxfVT3CDFDVPcKMWNU9wkxU1T3CzFzVPcIsUtU9wqxa1T3CbFbVPcLsXtU9whxR1T3CnFnVPcJcVdU9wtxd1T3CPFPVPcK8W9U9wnxX1T3C/F/VM8IMUDUzwoxYNTPCTFQ1M8LMXDUzwixSNTPCrFo1M8JsVjUzwuxeNTPCHFE1M8KcWTUzwlxVNTNMXTUjw9xTNSPDPFs1I8O8VzUjw3xUGKQYphilGKcYpJimmKWYp5ikWKZYpVinWKTYptil2KfYrnpXh+ihekeGGKF6V4cYqXpHhpipeleHmKV6R4ZYpXpXh1itekeG2K16V4fYo3pHhjijeleHOKt6R4a4q3pXh7inekeGeKd6V4d4r3pHhviveleH+KD6T4YIoPpfhwio+k+GiKj6X4eIpPpPhkik+l+HSKz6T4bIrPpfh8ii+k+GKKL6X4coqvpPhqiq+l+HqKb6T4Zopvpfh2iu+k+G6K76X4foofpPhhih+l+HGKn6T4aYqfpfh5il+k+GWKX6X4dYrfpPhtit+l+H2KP6T4Y4o/pfhzir+k+GuKv6X4e4p/pPhnin+l+HeK/6T4b4r/pTgkxaEpDktxeIojUhyZ4qgUR6c4JsWxKY6T4bgZjpfh+BlOkOGEGU6U4cQZTpLhpBlOluHkGU6R4ZQZTpXh1BlOk+G0GU6X4fQZzpDhjBnOlOHMGc6S4awZzpbh7BnOkeGcGc6V4dwZzpPhvBnOl+H8GS6Q4YIZLpThwhkukuGiGS6W4eIZLpHhkhkuleHSGS6TIRkum+FyGS6f4QoZrpjhShmunOEqGa6a4WoZrp7hGhmumeFaGa6d4ToZrpvhehmun+EGGW6Y4UYZbpzhJhlumuFmGW6e4RYZbpnhVhluneE2GW6b4XYZbp/hDhnumOFOGe6c4S4Z7prhbhnunuEeGe6Z4V4Z7p3hPhnum+F+Ge6f4QEZHpjhQRkenOEhGR6a4WEZHp7hERkemeFRGR6d4TEZHpvhcRken+EJGZ6Y4UkZnpzhKRmemqEZnpbh6RmekeGZGZ6V4dkZnpPhuRkOMgwyDDOMMowzTDJMM8wyzDMsMiwzrDKsM2wybDPsMuwzPC/D8zO8IMMLM7wow4szvCTDSzO8LMPLM7wiwyszvCrDqzO8JsNrM7wuw+szvCHDGzO8KcObM7wlw1szvC3D2zO8I8M7M7wrw7szvCfDezO8L8P7M3wgwwczfCjDhzN8JMNHM3wsw8czfCLDJzN8KsOnM3wmw2czfC7D5zN8IcMXM3wpw5czfCXDVzN8LcPXM3wjwzczfCvDtzN8J8N3M3wvw/cz/CDDDzP8KMOPM/wkw08z/CzDzzP8IsMvM/wqw68z/CbDbzP8LsPvM/whwx8z/CnDnzP8JcNfM/wtw98z/CPDPzP8K8O/M/wnw38z/C/DIRkOzXBYhsMzHJHhyAxHZTg6wzEZjs1wnBzHzXG8HMfPcYIcJ8xxohwnznGSHCfNcbIcJ89xihynzHGqHKfOcZocp81xuhynz3GGHGfMcaYcZ85xlhxnzXG2HGfPcY4c58xxrhznznGeHOfNcb4c589xgRwXzHGhHBfOcZEcF81xsRwXz3GJHJfMcakcl85xmRzJcdkcl8tx+RxXyHHFHFfKceUcV8lx1RxXy3H1HNfIcc0c18px7RzXyXHdHNfLcf0cN8hxwxw3ynHjHDfJcdMcN8tx8xy3yHHLHLfKcesct8lx2xy3y3H7HHfIccccd8px5xx3yXHXHHfLcfcc98hxzxz3ynHvHPfJcd8c98tx/xwPyPHAHA/K8eAcD8nx0BwPy/HwHI/I8cgcj8rx6ByPyfHYHI/L8fgcT8jxxBxPyvHkHE/J8dQczfG0HE/P8Ywcz8zxrBzPzvGcHM/NcZBjkGOYY5RjnGOSY5pjlmOeY5FjmWOVY51jk2ObY5djn+N5OZ6f4wU5XpjjRTlenOMlOV6a42U5Xp7jFTlemeNVOV6d4zU5XpvjdTlen+MNOd6Y40053pzjLTnemuNtOd6e4x053pnjXTneneM9Od6b43053p/jAzk+mONDOT6c4yM5PprjYzk+nuMTOT6Z41M5Pp3jMzk+m+NzOT6f4ws5vpjjSzm+nOMrOb6a42s5vp7jGzm+meNbOb6d4zs5vpvjezm+n+MHOX6Y40c5fpzjJzl+muNnOX6e4xc5fpnjVzl+neM3OX6b43c5fp/jDzn+mONPOf6c4y85/prjbzn+nuMfOf6Z4185/p3jPzn+m+N/OQ7JcWiOw3IcnuOIHEfmOCrH0TmOyXFsjuMUOG6B4xU4foETFDhhgRMVOHGBkxQ4aYGTFTh5gVMUOGWBUxU4dYHTFDhtgdMVOH2BMxQ4Y4EzFThzgbMUOGuBsxU4e4FzFDhngXMVOHeB8xQ4b4HzFTh/gQsUuGCBCxW4cIGLFLhogYsVuHiBSxS4ZIFLFbh0gcsUSIHLFrhcgcsXuEKBKxa4UoErF7hKgasWuFqBqxe4RoFrFrhWgWsXuE6B6xa4XoHrF7hBgRsWuFGBGxe4SYGbFrhZgZsXuEWBWxa4VYFbF7hNgdsWuF2B2xe4Q4E7FrhTgTsXuEuBuxa4W4G7F7hHgXsWuFeBexe4T4H7FrhfgfsXeECBBxZ4UIEHF3hIgYcWeFiBhxd4RIFHFnhUgUcXeEyBxxZ4XIHHF3hCgScWeFKBJxd4SoGnFmiBpxV4eoFnFHhmgWcVeHaB5xR4boGDAoMCwwKjAuMCkwLTArMC8wKLAssCqwLrApsC2wK7AvsCzyvw/AIvKPDCAi8q8OICLynw0gIvK/DyAq8o8MoCryrw6gKvKfDaAq8r8PoCbyjwxgJvKvDmAm8p8NYCbyvw9gLvKPDOAu8q8O4C7ynw3gLvK/D+Ah8o8MECHyrw4QIfKfDRAh8r8PECnyjwyQKfKvDpAp8p8NkCnyvw+QJfKPDFAl8q8OUCXynw1QJfK/D1At8o8M0C3yrw7QLfKfDdAt8r8P0CPyjwwwI/KvDjAj8p8NMCPyvw8wK/KPDLAr8q8OsCvynw2wK/K/D7An8o8McCfyrw5wJ/KfDXAn8r8PcC/yjwzwL/KvDvAv8p8N8C/ytwSIFDCxxW4PACRxQ4ssBRBY4ucEyBYwscp8RxSxyvxPFLnKDECUucqMSJS5ykxElLnKzEyUucosQpS5yqxKlLnKbEaUucrsTpS5yhxBlLnKnEmUucpcRZS5ytxNlLnKPEOUucq8S5S5ynxHlLnK/E+UtcoMQFS1yoxIVLXKTERUtcrMTFS1yixCVLXKrEpUtcpkRKXLbE5UpcvsQVSlyxxJVKXLnEVUpctcTVSly9xDVKXLPEtUpcu8R1Sly3xPVKXL/EDUrcsMSNSty4xE1K3LTEzUrcvMQtStyyxK1K3LrEbUrctsTtSty+xB1K3LHEnUrcucRdSty1xN1K3L3EPUrcs8S9Sty7xH1K3LfE/Urcv8QDSjywxINKPLjEQ0o8tMTDSjy8xCNKPLLEo0o8usRjSjy2xONKPL7EE0o8scSTSjy5xFNKPLVESzytxNNLPKPEM0s8q8SzSzynxHNLHJQYlBiWGJUYl5iUmJaYlZiXWJRYlliVWJfYlNiW2JXYl3heieeXeEGJF5Z4UYkXl3hJiZeWeFmJl5d4RYlXlnhViVeXeE2J15Z4XYnXl3hDiTeWeFOJN5d4S4m3lnhbibeXeEeJd5Z4V4l3l3hPifeWeF+J95f4QIkPlvhQiQ+X+EiJj5b4WImPl/hEiU+W+FSJT5f4TInPlvhcic+X+EKJL5b4Uokvl/hKia+W+FqJr5f4RolvlvhWiW+X+E6J75b4Xonvl/hBiR+W+FGJH5f4SYmflvhZiZ+X+EWJX5b4VYlfl/hNid+W+F2J35f4Q4k/lvhTiT+X+EuJv5b4W4m/l/hHiX+W+FeJf5f4T4n/lvhfiUNKHFrisBKHlziixJEljipxdIljShxb4jgVjlvheBWOX+EEFU5Y4UQVTlzhJBVOWuFkFU5e4RQVTlnhVBVOXeE0FU5b4XQVTl/hDBXOWOFMFc5c4SwVzlrhbBXOXuEcFc5Z4VwVzl3hPBXOW+F8Fc5f4QIVLljhQhUuXOEiFS5a4WIVLl7hEhUuWeFSFS5d4TIVUuGyFS5X4fIVrlDhihWuVOHKFa5S4aoVrlbh6hWuUeGaFa5V4doVrlPhuhWuV+H6FW5Q4YYVblThxhVuUuGmFW5W4eYVblHhlhVuVeHWFW5T4bYVblfh9hXuUOGOFe5U4c4V7lLhrhXuVuHuFe5R4Z4V7lXh3hXuU+G+Fe5X4f4VHlDhgRUeVOHBFR5S4aEVHlbh4RUeUeGRFR5V4dEVHlPhsRUeV+HxFZ5Q4YkVnlThyRWeUuGpFVrhaRWeXuEZFZ5Z4VkVnl3hORWeW+GgwqDCsMKowrjCpMK0wqzCvMKiwrLCqsK6wqbCtsKuwr7C8yo8v8ILKrywwosqvLjCSyq8tMLLKry8wisqvLLCqyq8usJrKry2wusqvL7CGyq8scKbKry5wlsqvLXC2yq8vcI7KryzwrsqvLvCeyq8t8L7Kry/wgcqfLDChyp8uMJHKny0wscqfLzCJyp8ssKnKny6wmcqfLbC5yp8vsIXKnyxwpcqfLnCVyp8tcLXKny9wjcqfLPCtyp8u8J3Kny3wvcqfL/CDyr8sMKPKvy4wk8q/LTCzyr8vMIvKvyywq8q/LrCbyr8tsLvKvy+wh8q/LHCnyr8ucJfKvy1wt8q/L3CPyr8s8K/Kvy7wn8q/LfC/yocUuHQCodVOLzCERWOrHBUhaMrHFPh2ArHqXHcGsercfwaJ6hxwhonqnHiGiepcdIaJ6tx8hqnqHHKGqeqceoap6lx2hqnq3H6GmeoccYaZ6px5hpnqXHWGmercfYa56hxzhrnqnHuGuepcd4a56tx/hoXqHHBGheqceEaF6lx0RoXq3HxGpeocckal6px6RqXqZEal61xuRqXr3GFGlescaUaV65xlRpXrXG1GlevcY0a16xxrRrXrnGdGtetcb0a169xgxo3rHGjGjeucZMaN61xsxo3r3GLGrescasat65xmxq3rXG7GrevcYcad6xxpxp3rnGXGnetcbcad69xjxr3rHGvGveucZ8a961xvxr3r/GAGg+s8aAaD67xkBoPrfGwGg+v8Ygaj6zxqBqPrvGYGo+t8bgaj6/xhBpPrPGkGk+u8ZQaT63RGk+r8fQaz6jxzBrPqvHsGs+p8dwaBzUGNYY1RjXGNSY1pjVmNeY1FjWWNVY11jU2NbY1djX2NZ5X4/k1XlDjhTVeVOPFNV5S46U1Xlbj5TVeUeOVNV5V49U1XlPjtTVeV+P1Nd5Q44013lTjzTXeUuOtNd5W4+013lHjnTXeVePdNd5T47013lfj/TU+UOODNT5U48M1PlLjozU+VuPjNT5R45M1PlXj0zU+U+OzNT5X4/M1vlDjizW+VOPLNb5S46s1vlbj6zW+UeObNb5V49s1vlPjuzW+V+P7NX5Q44c1flTjxzV+UuOnNX5W4+c1flHjlzV+VePXNX5T47c1flfj9zX+UOOPNf5U4881/lLjrzX+VuPvNf5R4581/lXj3zX+U+O/Nf5X45Aah9Y4rMbhNY6ocWSNo2ocXeOYGsfWOE6D4zY4XoPjNzhBgxM2OFGDEzc4SYOTNjhZg5M3OEWDUzY4VYNTNzhNg9M2OF2D0zc4Q4MzNjhTgzM3OEuDszY4W4OzNzhHg3M2OFeDczc4T4PzNjhfg/M3uECDCza4UIMLN7hIg4s2uFiDize4RINLNrhUg0s3uEyDNLhsg8s1uHyDKzS4YoMrNbhyg6s0uGqDqzW4eoNrNLhmg2s1uHaD6zS4boPrNbh+gxs0uGGDGzW4cYObNLhpg5s1uHmDWzS4ZYNbNbh1g9s0uG2D2zW4fYM7NLhjgzs1uHODuzS4a4O7Nbh7g3s0uGeDezW4d4P7NLhvg/s1uH+DBzR4YIMHNXhwg4c0eGiDhzV4eINHNHhkg0c1eHSDxzR4bIPHNXh8gyc0eGKDJzV4coOnNHhqgzZ4WoOnN3hGg2c2eFaDZzd4ToPnNjhoMGgwbDBqMG4waTBtMGswb7BosGywarBusGmwbbBrsG/wvAbPb/CCBi9s8KIGL27wkgYvbfCyBi9v8IoGr2zwqgavbvCaBq9t8LoGr2/whgZvbPCmBm9u8JYGb23wtgZvb/COBu9s8K4G727wngbvbfC+Bu9v8IEGH2zwoQYfbvCRBh9t8LEGH2/wiQafbPCpBp9u8JkGn23wuQafb/CFBl9s8KUGX27wlQZfbfC1Bl9v8I0G32zwrQbfbvCdBt9t8L0G32/wgwY/bPCjBj9u8JMGP23wswY/b/CLBr9s8KsGv27wmwa/bfC7Br9v8IcGf2zwpwZ/bvCXBn9t8LcGf2/wjwb/bPCvBv9u8J8G/23wvwaHNDi0wWENDm9wRIMjGxzV4OgGxzQ4tsFxWhy3xfFaHL/FCVqcsMWJWpy4xUlanLTFyVqcvMUpWpyyxalanLrFaVqctsXpWpy+xRlanLHFmVqcucVZWpy1xdlanL3FOVqcs8W5Wpy7xXlanLfF+Vqcv8UFWlywxYVaXLjFRVpctMXFWly8xSVaXLLFpVpcusVlWqTFZVtcrsXlW1yhxRVbXKnFlVtcpcVVW1ytxdVbXKPFNVtcq8W1W1ynxXVbXK/F9VvcoMUNW9yoxY1b3KTFTVvcrMXNW9yixS1b3KrFrVvcpsVtW9yuxe1b3KHFHVvcqcWdW9ylxV1b3K3F3Vvco8U9W9yrxb1b3KfFfVvcr8X9WzygxQNbPKjFg1s8pMVDWzysxcNbPKLFI1s8qsWjWzymxWNbPK7F41s8ocUTWzypxZNbPKXFU1u0xdNaPL3FM1o8s8WzWjy7xXNaPLfFQYtBi2GLUYtxi0mLaYtZi3mLRYtli1WLdYtNi22LXYt9i+e1eH6LF7R4YYsXtXhxi5e0eGmLl7V4eYtXtHhli1e1eHWL17R4bYvXtXh9ize0eGOLN7V4c4u3tHhri7e1eHuLd7R4Z4t3tXh3i/e0eG+L97V4f4sPtPhgiw+1+HCLj7T4aIuPtfh4i0+0+GSLT7X4dIvPtPhsi8+1+HyLL7T4Yosvtfhyi6+0+GqLr7X4eotvtPhmi2+1+HaL77T4bovvtfh+ix+0+GGLH7X4cYuftPhpi5+1+HmLX7T4ZYtftfh1i9+0+G2L37X4fYs/tPhjiz+1+HOLv7T4a4u/tfh7i3+0+GeLf7X4d4v/tPhvi/+1OKTFoS0Oa3F4iyNaHNniqBZHtzimxbEtjtPhuB2O1+H4HU7Q4YQdTtThxB1O0uGkHU7W4eQdTtHhlB1O1eHUHU7T4bQdTtfh9B3O0OGMHc7U4cwdztLhrB3O1uHsHc7R4ZwdztXh3B3O0+G8Hc7X4fwdLtDhgh0u1OHCHS7S4aIdLtbh4h0u0eGSHS7V4dIdLtMhHS7b4XIdLt/hCh2u2OFKHa7c4Sodrtrhah2u3uEaHa7Z4Vodrt3hOh2u2+F6Ha7f4QYdbtjhRh1u3OEmHW7a4WYdbt7hFh1u2eFWHW7d4TYdbtvhdh1u3+EOHe7Y4U4d7tzhLh3u2uFuHe7e4R4d7tnhXh3u3eE+He7b4X4d7t/hAR0e2OFBHR7c4SEdHtrhYR0e3uERHR7Z4VEdHt3hMR0e2+FxHR7f4QkdntjhSR2e3OEpHZ7aoR2e1uHpHZ7R4ZkdntXh2R2e0+G5HQ46DDoMO4w6jDtMOkw7zDrMOyw6LDusOqw7bDpsO+w67Ds8r8PzO7ygwws7vKjDizu8pMNLO7ysw8s7vKLDKzu8qsOrO7ymw2s7vK7D6zu8ocMbO7ypw5s7vKXDWzu8rcPbO7yjwzs7vKvDuzu8p8N7O7yvw/s7fKDDBzt8qMOHO3ykw0c7fKzDxzt8osMnO3yqw6c7fKbDZzt8rsPnO3yhwxc7fKnDlzt8pcNXO3ytw9c7fKPDNzt8q8O3O3ynw3c7fK/D9zv8oMMPO/yow487/KTDTzv8rMPPO/yiwy87/KrDrzv8psNvO/yuw+87/KHDHzv8qcOfO/ylw187/K3D3zv8o8M/O/yrw787/KfDfzv8r8MhHQ7tcFiHwzsc0eHIDkd1OLrDMR2O7XCcHsftcbwex+9xgh4n7HGiHifucZIeJ+1xsh4n73GKHqfscaoep+5xmh6n7XG6HqfvcYYeZ+xxph5n7nGWHmftcbYeZ+9xjh7n7HGuHufucZ4e5+1xvh7n73GBHhfscaEeF+5xkR4X7XGxHhfvcYkel+xxqR6X7nGZHulx2R6X63H5HlfoccUeV+px5R5X6XHVHlfrcfUe1+hxzR7X6nHtHtfpcd0e1+tx/R436HHDHjfqceMeN+lx0x4363HzHrfoccset+px6x636XHbHrfrcfsed+hxxx536nHnHnfpcdced+tx9x736HHPHvfqce8e9+lx3x7363H/Hg/o8cAeD+rx4B4P6fHQHg/r8fAej+jxyB6P6vHoHo/p8dgej+vx+B5P6PHEHk/q8eQeT+nx1B7t8bQeT+/xjB7P7PGsHs/u8Zwez+1x0GPQY9hj1GPcY9Jj2mPWY95j0WPZY9Vj3WPTY9tj12Pf43k9nt/jBT1e2ONFPV7c4yU9XtrjZT1e3uMVPV7Z41U9Xt3jNT1e2+N1PV7f4w093tjjTT3e3OMtPd7a42093t7jHT3e2eNdPd7d4z093tvj/wTAAwBtBQDA0Gzbtpdt27ZtL9t810a2bdu27fpG574B3j/ABwb44AAfGuDDA3xkgI8O8LEBPj7AJwb45ACfGuDTA3xmgM8O8LkBPj/AFwb44gBfGuDLA3xlgK8O8LUBvj7ANwb45gDfGuDbA3xngO8O8L0Bvj/ADwb44QA/GuDHA/xkgJ8O8LMBfj7ALwb45QC/GuDXA/xmgN8O8LsBfj/AHwb44wB/GuDPA/xlgL8O8LcB/j7APwb45wD/GuDfA/xngP8O8L8BDhng0AEOG+DwAY4Y4MgBjhrg6AGOGeDYAY4T4LgBjhfg+AFOEOCEAU4U4MQBThLgpAFOFuDkAU4R4JQBThXg1AFOE+C0AU4X4PQBzhDgjAHOFODMAc4S4KwBzhbg7AHOEeCcAc4V4NwBzhPgvAHOF+D8AS4Q4IIBLhTgwgEuEuCiAS4W4OIBLhHgkgEuFeDSAS4TIAEuG+ByAS4f4AoBrhjgSgGuHOAqAa4a4GoBrh7gGgGuGeBaAa4d4DoBrhvgegGuH+AGAW4Y4EYBbhzgJgFuGuBmAW4e4BYBbhngVgFuHeA2AW4b4HYBbh/gDgHuGOBOAe4c4C4B7hrgbgHuHuAeAe4Z4F4B7h3gPgHuG+B+Ae4f4AEBHhjgQQEeHOAhAR4a4GEBHh7gEQEeGeBRAR4d4DEBHhvgcQEeH+AJAZ4Y4EkBnhzgKQGeGqABnhbg6QGeEeCZAZ4V4NkBnhPguQGeF+D5AV4Q4IUBXhTgxQFeEuClAV4W4OUBXhHglQFeFeDVAV4T4LUBDgIMAgwDjAKMA0wCTAPMAswDLAIsA6wCrANsAmwD7ALsA7wuwOsDvCHAGwO8KcCbA7wlwFsDvC3A2wO8I8A7A7wrwLsDvCfAewO8L8D7A3wgwAcDfCjAhwN8JMBHA3wswMcDfCLAJwN8KsCnA3wmwGcDfC7A5wN8IcAXA3wpwJcDfCXAVwN8LcDXA3wjwDcDfCvAtwN8J8B3A3wvwPcD/CDADwP8KMCPA/wkwE8D/CzAzwP8IsAvA/wqwK8D/CbAbwP8LsDvA/whwB8D/CnAnwP8JcBfA/wtwN8D/CPAPwP8K8C/A/wnwH8D/C/AIQEODXBYgMMDHBHgyABHBTg6wDEBjg1wnBDHDXG8EMcPcYIQJwxxohAnDnGSECcNcbIQJw9xihCnDHGqEKcOcZoQpw1xuhCnD3GGEGcMcaYQZw5xlhBnDXG2EGcPcY4Q5wxxrhDnDnGeEOcNcb4Q5w9xgRAXDHGhEBcOcZEQFw1xsRAXD3GJEJcMcakQlw5xmRAJcdkQlwtx+RBXCHHFEFcKceUQVwlx1RBXC3H1ENcIcc0Q1wpx7RDXCXHdENcLcf0QNwhxwxA3CnHjEDcJcdMQNwtx8xC3CHHLELcKcesQtwlx2xC3C3H7EHcIcccQdwpx5xB3CXHXEHcLcfcQ9whxzxD3CnHvEPcJcd8Q9wtx/xAPCPHAEA8K8eAQDwnx0BAPC/HwEI8I8cgQjwrx6BCPCfHYEI8L8fgQTwjxxBBPCvHkEE8J8dQQDfG0EE8P8YwQzwzxrBDPDvGcEM8N8bwQzw/xghAvDPGiEC8O8ZIQLw3xshAvD/GKEK8M8aoQrw7xmhCvDXEQYhBiGGIUYhxiEmIaYhZiHmIRYhliFWIdYhNiG2IXYh/idSFeH+INId4Y4k0h3hziLSHeGuJtId4e4h0h3hniXSHeHeI9Id4b4n0h3h/iAyE+GOJDIT4c4iMhPhriYyE+HuITIT4Z4lMhPh3iMyE+G+JzIT4f4gshvhjiSyG+HOIrIb4a4mshvh7iGyG+GeJbIb4d4jshvhvieyG+H+IHIX4Y4kchfhziJyF+GuJnIX4e4hchfhniVyF+HeI3IX4b4nchfh/iDyH+GOJPIf4c4i8h/hribyH+HuIfIf4Z4l8h/h3iPyH+G+J/IQ4JcWiIw0IcHuKIEEeGOCrE0SGOCXFsiONEOG6E40U4foQTRDhhhBNFOHGEk0Q4aYSTRTh5hFNEOGWEU0U4dYTTRDhthNNFOH2EM0Q4Y4QzRThzhLNEOGuEs0U4e4RzRDhnhHNFOHeE80Q4b4TzRTh/hAtEuGCEC0W4cISLRLhohItFuHiES0S4ZIRLRbh0hMtESITLRrhchMtHuEKEK0a4UoQrR7hKhKtGuFqEq0e4RoRrRrhWhGtHuE6E60a4XoTrR7hBhBtGuFGEG0e4SYSbRrhZhJtHuEWEW0a4VYRbR7hNhNtGuF2E20e4Q4Q7RrhThDtHuEuEu0a4W4S7R7hHhHtGuFeEe0e4T4T7RrhfhPtHeECEB0Z4UIQHR3hIhIdGeFiEh0d4RIRHRnhUhEdHeEyEx0Z4XITHR3hChCdGeFKEJ0d4SoSnRmiEp0V4eoRnRHhmhGdFeHaE50R4boTnRXh+hBdEeGGEF0V4cYSXRHhphJdFeHmEV0R4ZYRXRXh1hNdEeG2EgwiDCMMIowjjCJMI0wizCPMIiwjLCKsI6wibCNsIuwj7CK+L8PoIb4jwxghvivDmCG+J8NYIb4vw9gjviPDOCO+K8O4I74nw3gjvi/D+CB+I8MEIH4rw4QgfifDRCB+L8PEIn4jwyQifivDpCJ+J8NkIn4vw+QhfiPDFCF+K8OUIX4nw1Qhfi/D1CN+I8M0I34rw7QjfifDdCN+L8P0IP4jwwwg/ivDjCD+J8NMIP4vw8wi/iPDLCL+K8OsIv4nw2wi/i/D7CH+I8McIf4rw5wh/ifDXCH+L8PcI/4jwzwj/ivDvCP+J8N8I/4twSIRDIxwW4fAIR0Q4MsJREY6OcEyEYyMcJ8ZxYxwvxvFjnCDGCWOcKMaJY5wkxkljnCzGyWOcIsYpY5wqxqljnCbGaWOcLsbpY5whxhljnCnGmWOcJcZZY5wtxtljnCPGOWOcK8a5Y5wnxnljnC/G+WNcIMYFY1woxoVjXCTGRWNcLMbFY1wixiVjXCrGpWNcJkZiXDbG5WJcPsYVYlwxxpViXDnGVWJcNcbVYlw9xjViXDPGtWJcO8Z1Ylw3xvViXD/GDWLcMMaNYtw4xk1i3DTGzWLcPMYtYtwyxq1i3DrGbWLcNsbtYtw+xh1i3DHGnWLcOcZdYtw1xt1i3D3GPWLcM8a9Ytw7xn1i3DfG/WLcP8YDYjwwxoNiPDjGQ2I8NMbDYjw8xiNiPDLGo2I8OsZjYjw2xuNiPD7GE2I8McaTYjw5xlNiPDVGYzwtxtNjPCPGM2M8K8azYzwnxnNjPC/G82O8IMYLY7woxotjvCTGS2O8LMbLY7wixitjvCrGq2O8JsZrYxzEGMQYxhjFGMeYxJjGmMWYx1jEWMZYxVjH2MTYxtjF2Md4XYzXx3hDjDfGeFOMN8d4S4y3xnhbjLfHeEeMd8Z4V4x3x3hPjPfGeF+M98f4QIwPxvhQjA/H+EiMj8b4WIyPx/hEjE/G+FSMT8f4TIzPxvhcjM/H+EKML8b4Uowvx/hKjK/G+FqMr8f4RoxvxvhWjG/H+E6M78b4Xozvx/hBjB/G+FGMH8f4SYyfxvhZjJ/H+EWMX8b4VYxfx/hNjN/G+F2M38f4Q4w/xvhTjD/H+EuMv8b4W4y/x/hHjH/G+FeMf8f4T4z/xvhfjENiHBrjsBiHxzgixpExjopxdIxjYhwb4zgJjpvgeAmOn+AECU6Y4EQJTpzgJAlOmuBkCU6e4BQJTpngVAlOneA0CU6b4HQJTp/gDAnOmOBMCc6c4CwJzprgbAnOnuAcCc6Z4FwJzp3gPAnOm+B8Cc6f4AIJLpjgQgkunOAiCS6a4GIJLp7gEgkumeBSCS6d4DIJkuCyCS6X4PIJrpDgigmulODKCa6S4KoJrpbg6gmukeCaCa6V4NoJrpPgugmul+D6CW6Q4IYJbpTgxglukuCmCW6W4OYJbpHglgluleDWCW6T4LYJbpfg9gnukOCOCe6U4M4J7pLgrgnuluDuCe6R4J4J7pXg3gnuk+C+Ce6X4P4JHpDggQkelODBCR6S4KEJHpbg4QkekeCRCR6V4NEJHpPgsQkel+DxCZ6Q4IkJnpTgyQmekuCpCZrgaQmenuAZCZ6Z4FkJnp3gOQmem+B5CZ6f4AUJXpjgRQlenOAlCV6a4GUJXp7gFQlemeBVCV6d4DUJXpvgIMEgwTDBKME4wSTBNMEswTzBIsEywSrBOsEmwTbBLsE+wesSvD7BGxK8McGbErw5wVsSvDXB2xK8PcE7ErwzwbsSvDvBexK8N8H7Erw/wQcSfDDBhxJ8OMFHEnw0wccSfDzBJxJ8MsGnEnw6wWcSfDbB5xJ8PsEXEnwxwZcSfDnBVxJ8NcHXEnw9wTcSfDPBtxJ8O8F3Enw3wfcSfD/BDxL8MMGPEvw4wU8S/DTBzxL8PMEvEvwywa8S/DrBbxL8NsHvEvw+wR8S/DHBnxL8OcFfEvw1wd8S/D3BPxL8M8G/Evw7wX8S/DfB/xIckuDQBIclODzBEQmOTHBUgqMTHJPg2ATHSXHcFMdLcfwUJ0hxwhQnSnHiFCdJcdIUJ0tx8hSnSHHKFKdKceoUp0lx2hSnS3H6FGdIccYUZ0px5hRnSXHWFGdLcfYU50hxzhTnSnHuFOdJcd4U50tx/hQXSHHBFBdKceEUF0lx0RQXS3HxFJdIcckUl0px6RSXSZEUl01xuRSXT3GFFFdMcaUUV05xlRRXTXG1FFdPcY0U10xxrRTXTnGdFNdNcb0U109xgxQ3THGjFDdOcZMUN01xsxQ3T3GLFLdMcasUt05xmxS3TXG7FLdPcYcUd0xxpxR3TnGXFHdNcbcUd09xjxT3THGvFPdOcZ8U901xvxT3T/GAFA9M8aAUD07xkBQPTfGwFA9P8YgUj0zxqBSPTvGYFI9N8bgUj0/xhBRPTPGkFE9O8ZQUT03RFE9L8fQUz0jxzBTPSvHsFM9J8dwUz0vx/BQvSPHCFC9K8eIUL0nx0hQvS/HyFK9I8coUr0rx6hSvSfHaFAcpBimGKUYpxikmKaYpZinmKRYplilWKdYpNim2KXYp9ilel+L1Kd6Q4o0p3pTizSnekuKtKd6W4u0p3pHinSneleLdKd6T4r0p3pfi/Sk+kOKDKT6U4sMpPpLioyk+luLjKT6R4pMpPpXi0yk+k+KzKT6X4vMpvpDiiym+lOLLKb6S4qspvpbi6ym+keKbKb6V4tspvpPiuym+l+L7KX6Q4ocpfpTixyl+kuKnKX6W4ucpfpHilyl+leLXKX6T4rcpfpfi9yn+kOKPKf6U4s8p/pLiryn+luLvKf6R4p8p/pXi3yn+k+K/Kf6X4pAUh6Y4LMXhKY5IcWSKo1IcneKYFMemOE6G42Y4XobjZzhBhhNmOFGGE2c4SYaTZjhZhpNnOEWGU2Y4VYZTZzhNhtNmOF2G02c4Q4YzZjhThjNnOEuGs2Y4W4azZzhHhnNmOFeGc2c4T4bzZjhfhvNnuECGC2a4UIYLZ7hIhotmuFiGi2e4RIZLZrhUhktnuEyGZLhshstluHyGK2S4YoYrZbhyhqtkuGqGq2W4eoZrZLhmhmtluHaG62S4bobrZbh+hhtkuGGGG2W4cYabZLhphptluHmGW2S4ZYZbZbh1httkuG2G22W4fYY7ZLhjhjtluHOGu2S4a4a7Zbh7hntkuGeGe2W4d4b7ZLhvhvtluH+GB2R4YIYHZXhwhodkeGiGh2V4eIZHZHhkhkdleHSGx2R4bIbHZXh8hidkeGKGJ2V4coanZHhqhmZ4WoanZ3hGhmdmeFaGZ2d4TobnZnhehudneEGGF2Z4UYYXZ3hJhpdmeFmGl2d4RYZXZnhVhldneE2G12Y4yDDIMMwwyjDOMMkwzTDLMM+wyLDMsMqwzrDJsM2wy7DP8LoMr8/whgxvzPCmDG/O8JYMb83wtgxvz/CODO/M8K4M787wngzvzfC+DO/P8IEMH8zwoQwfzvCRDB/N8LEMH8/wiQyfzPCpDJ/O8JkMn83wuQyfz/CFDF/M8KUMX87wlQxfzfC1DF/P8I0M38zwrQzfzvCdDN/N8L0M38/wgww/zPCjDD/O8JMMP83wsww/z/CLDL/M8KsMv87wmwy/zfC7DL/P8IcMf8zwpwx/zvCXDH/N8LcMf8/wjwz/zPCvDP/O8J8M/83wvwyHZDg0w2EZDs9wRIYjMxyV4egMx2Q4NsNxchw3x/FyHD/HCXKcMMeJcpw4x0lynDTHyXKcPMcpcpwyx6lynDrHaXKcNsfpcpw+xxlynDHHmXKcOcdZcpw1x9lynD3HOXKcM8e5cpw7x3lynDfH+XKcP8cFclwwx4VyXDjHRXJcNMfFclw8xyVyXDLHpXJcOsdlciTHZXNcLsflc1whxxVzXCnHlXNcJcdVc1wtx9VzXCPHNXNcK8e1c1wnx3VzXC/H9XPcIMcNc9wox41z3CTHTXPcLMfNc9wixy1z3CrHrXPcJsdtc9wux+1z3CHHHXPcKcedc9wlx11z3C3H3XPcI8c9c9wrx71z3CfHfXPcL8f9czwgxwNzPCjHg3M8JMdDczwsx8NzPCLHI3M8Ksejczwmx2NzPC7H43M8IccTczwpx5NzPCXHU3M0x9NyPD3HM3I8M8ezcjw7x3NyPDfH83I8P8cLcrwwx4tyvDjHS3K8NMfLcrw8xytyvDLHq3K8Osdrcrw2x0GOQY5hjlGOcY5JjmmOWY55jkWOZY5VjnWOTY5tjl2OfY7X5Xh9jjfkeGOON+V4c4635HhrjrfleHuOd+R4Z4535Xh3jvfkeG+O9+V4f44P5Phgjg/l+HCOj+T4aI6P5fh4jk/k+GSOT+X4dI7P5Phsjs/l+HyOL+T4Yo4v5fhyjq/k+GqOr+X4eo5v5Phmjm/l+HaO7+T4bo7v5fh+jh/k+GGOH+X4cY6f5Phpjp/l+HmOX+T4ZY5f5fh1jt/k+G2O3+X4fY4/5Phjjj/l+HOOv+T4a46/5fh7jn/k+GeOf+X4d47/5Phvjv/lOCTHoTkOy3F4jiNyHJnjqBxH5zgmx7E5jlPguAWOV+D4BU5Q4IQFTlTgxAVOUuCkBU5W4OQFTlHglAVOVeDUBU5T4LQFTlfg9AXOUOCMBc5U4MwFzlLgrAXOVuDsBc5R4JwFzlXg3AXOU+C8Bc5X4PwFLlDgggUuVODCBS5S4KIFLlbg4gUuUeCSBS5V4NIFLlMgBS5b4HIFLl/gCgWuWOBKBa5c4CoFrlrgagWuXuAaBa5Z4FoFrl3gOgWuW+B6Ba5f4AYFbljgRgVuXOAmBW5a4GYFbl7gFgVuWeBWBW5d4DYFblvgdgVuX+AOBe5Y4E4F7lzgLgXuWuBuBe5e4B4F7lngXgXuXeA+Be5b4H4F7l/gAQUeWOBBBR5c4CEFHlrgYQUeXuARBR5Z4FEFHl3gMQUeW+BxBR5f4AkFnljgSQWeXOApBZ5aoAWeVuDpBZ5R4JkFnlXg2QWeU+C5BZ5X4PkFXlDghQVeVODFBV5S4KUFXlbg5QVeUeCVBV5V4NUFXlPgtQUOCgwKDAuMCowLTApMC8wKzAssCiwLrAqsC2wKbAvsCuwLvK7A6wu8ocAbC7ypwJsLvKXAWwu8rcDbC7yjwDsLvKvAuwu8p8B7C7yvwPsLfKDABwt8qMCHC3ykwEcLfKzAxwt8osAnC3yqwKcLfKbAZwt8rsDnC3yhwBcLfKnAlwt8pcBXC3ytwNcLfKPANwt8q8C3C3ynwHcLfK/A9wv8oMAPC/yowI8L/KTATwv8rMDPC/yiwC8L/KrArwv8psBvC/yuwO8L/KHAHwv8qcCfC/ylwF8L/K3A3wv8o8A/C/yrwL8L/KfAfwv8r8AhBQ4tcFiBwwscUeDIAkcVOLrAMQWOLXCcEsctcbwSxy9xghInLHGiEicucZISJy1xshInL3GKEqcscaoSpy5xmhKnLXG6EqcvcYYSZyxxphJnLnGWEmctcbYSZy9xjhLnLHGuEucucZ4S5y1xvhLnL3GBEhcscaESFy5xkRIXLXGxEhcvcYkSlyxxqRKXLnGZEilx2RKXK3H5ElcoccUSVypx5RJXKXHVElcrcfUS1yhxzRLXKnHtEtcpcd0S1ytx/RI3KHHDEjcqceMSNylx0xI3K3HzErcoccsStypx6xK3KXHbErcrcfsSdyhxxxJ3KnHnEncpcdcSdytx9xL3KHHPEvcqce8S9ylx3xL3K3H/Eg8o8cASDyrx4BIPKfHQEg8r8fASjyjxyBKPKvHoEo8p8dgSjyvx+BJPKPHEEk8q8eQSTynx1BIt8bQSTy/xjBLPLPGsEs8u8ZwSzy3xvBLPL/GCEi8s8aISLy7xkhIvLfGyEi8v8YoSryzxqhKvLvGaEq8tcVBiUGJYYlRiXGJSYlpiVmJeYlFiWWJVYl1iU2JbYldiX+J1JV5f4g0l3ljiTSXeXOItJd5a4m0l3l7iHSXeWeJdJd5d4j0l3lvifSXeX+IDJT5Y4kMlPlziIyU+WuJjJT5e4hMlPlniUyU+XeIzJT5b4nMlPl/iCyW+WOJLJb5c4islvlriayW+XuIbJb5Z4lslvl3iOyW+W+J7Jb5f4gclfljiRyV+XOInJX5a4mclfl7iFyV+WeJXJX5d4jclflvidyV+X+IPJf5Y4k8l/lziLyX+WuJvJf5e4h8l/lniXyX+XeI/Jf5b4n8lDilxaInDShxe4ogSR5Y4qsTRJY4pcWyJ41Q4boXjVTh+hRNUOGGFE1U4cYWTVDhphZNVOHmFU1Q4ZYVTVTh1hdNUOG2F01U4fYUzVDhjhTNVOHOFs1Q4a4WzVTh7hXNUOGeFc1U4d4XzVDhvhfNVOH+FC1S4YIULVbhwhYtUuGiFi1W4eIVLVLhkhUtVuHSFy1RIhctWuFyFy1e4QoUrVrhShStXuEqFq1a4WoWrV7hGhWtWuFaFa1e4ToXrVrhehetXuEGFG1a4UYUbV7hJhZtWuFmFm1e4RYVbVrhVhVtXuE2F21a4XYXbV7hDhTtWuFOFO1e4S4W7VrhbhbtXuEeFe1a4V4V7V7hPhftWuF+F+1d4QIUHVnhQhQdXeEiFh1Z4WIWHV3hEhUdWeFSFR1d4TIXHVnhchcdXeEKFJ1Z4UoUnV3hKhadWaIWnVXh6hWdUeGaFZ1V4doXnVHhuhedVeH6FF1R4YYUXVXhxhZdUeGmFl1V4eYVXVHhlhVdVeHWF11R4bYWDCoMKwwqjCuMKkwrTCrMK8wqLCssKqwrrCpsK2wq7CvsKr6vw+gpvqPDGCm+q8OYKb6nw1gpvq/D2Cu+o8M4K76rw7grvqfDeCu+r8P4KH6jwwQofqvDhCh+p8NEKH6vw8QqfqPDJCp+q8OkKn6nw2Qqfq/D5Cl+o8MUKX6rw5QpfqfDVCl+r8PUK36jwzQrfqvDtCt+p8N0K36vw/Qo/qPDDCj+q8OMKP6nw0wo/q/DzCr+o8MsKv6rw6wq/qfDbCr+r8PsKf6jwxwp/qvDnCn+p8NcKf6vw9wr/qPDPCv+q8O8K/6nw3wr/q3BIhUMrHFbh8ApHVDiywlEVjq5wTIVjKxynxnFrHK/G8WucoMYJa5yoxolrnKTGSWucrMbJa5yixilrnKrGqWucpsZpa5yuxulrnKHGGWucqcaZa5ylxllrnK3G2Wuco8Y5a5yrxrlrnKfGeWucr8b5a1ygxgVrXKjGhWtcpMZFa1ysxsVrXKLGJWtcqsala1ymRmpctsblaly+xhVqXLHGlWpcucZValy1xtVqXL3GNWpcs8a1aly7xnVqXLfG9Wpcv8YNatywxo1q3LjGTWrctMbNaty8xi1q3LLGrWrcusZtaty2xu1q3L7GHWrcscadaty5xl1q3LXG3WrcvcY9atyzxr1q3LvGfWrct8b9aty/xgNqPLDGg2o8uMZDajy0xsNqPLzGI2o8ssajajy6xmNqPLbG42o8vsYTajyxxpNqPLnGU2o8tUZrPK3G02s8o8YzazyrxrNrPKfGc2s8r8bza7ygxgtrvKjGi2u8pMZLa7ysxstrvKLGK2u8qsara7ymxmtrHNQY1BjWGNUY15jUmNaY1ZjXWNRY1ljVWNfY1NjW2NXY13hdjdfXeEONN9Z4U40313hLjbfWeFuNt9d4R4131nhXjXfXeE+N99Z4X4331/hAjQ/W+FCND9f4SI2P1vhYjY/X+ESNT9b4VI1P1/hMjc/W+FyNz9f4Qo0v1vhSjS/X+EqNr9b4Wo2v1/hGjW/W+FaNb9f4To3v1vheje/X+EGNH9b4UY0f1/hJjZ/W+FmNn9f4RY1f1vhVjV/X+E2N39b4XY3f1/hDjT/W+FONP9f4S42/1vhbjb/X+EeNf9b4V41/1/hPjf/W+F+NQ2ocWuOwGofXOKLGkTWOqnF0jWNqHFvjOA2O2+B4DY7f4AQNTtjgRA1O3OAkDU7a4GQNTt7gFA1O2eBUDU7d4DQNTtvgdA1O3+AMDc7Y4EwNztzgLA3O2uBsDc7e4BwNztngXA3O3eA8Dc7b4HwNzt/gAg0u2OBCDS7c4CINLtrgYg0u3uASDS7Z4FINLt3gMg3S4LINLtfg8g2u0OCKDa7U4MoNrtLgqg2u1uDqDa7R4JoNrtXg2g2u0+C6Da7X4PoNbtDghg1u1ODGDW7S4KYNbtbg5g1u0eCWDW7V4NYNbtPgtg1u1+D2De7Q4I4N7tTgzg3u0uCuDe7W4O4N7tHgng3u1eDeDe7T4L4N7tfg/g0e0OCBDR7U4MENHtLgoQ0e1uDhDR7R4JENHtXg0Q0e0+CxDR7X4PENntDgiQ2e1ODJDZ7S4KkN2uBpDZ7e4BkNntngWQ2e3eA5DZ7b4HkNnt/gBQ1e2OBFDV7c4CUNXtrgZQ1e3uAVDV7Z4FUNXt3gNQ1e2+CgwaDBsMGowbjBpMG0wazBvMGiwbLBqsG6wabBtsGuwb7B6xq8vsEbGryxwZsavLnBWxq8tcHbGry9wTsavLPBuxq8u8F7Gry3wfsavL/BBxp8sMGHGny4wUcafLTBxxp8vMEnGnyywacafLrBZxp8tsHnGny+wRcafLHBlxp8ucFXGny1wdcafL3BNxp8s8G3Gny7wXcafLfB9xp8v8EPGvywwY8a/LjBTxr8tMHPGvy8wS8a/LLBrxr8usFvGvy2we8a/L7BHxr8scGfGvy5wV8a/LXB3xr8vcE/Gvyzwb8a/LvBfxr8t8H/GhzS4NAGhzU4vMERDY5scFSDoxsc0+DYBsdpcdwWx2tx/BYnaHHCFidqceIWJ2lx0hYna3HyFqdoccoWp2px6hanaXHaFqdrcfoWZ2hxxhZnanHmFmdpcdYWZ2tx9hbnaHHOFudqce4W52lx3hbna3H+FhdoccEWF2px4RYXaXHRFhdrcfEWl2hxyRaXanHpFpdpkRaXbXG5FpdvcYUWV2xxpRZXbnGVFldtcbUWV29xjRbXbHGtFtducZ0W121xvRbXb3GDFjdscaMWN25xkxY3bXGzFjdvcYsWt2xxqxa3bnGbFrdtcbsWt29xhxZ3bHGnFnducZcWd21xtxZ3b3GPFvdsca8W925xnxb3bXG/Fvdv8YAWD2zxoBYPbvGQFg9t8bAWD2/xiBaPbPGoFo9u8ZgWj23xuBaPb/GEFk9s8aQWT27xlBZPbdEWT2vx9BbPaPHMFs9q8ewWz2nx3BbPa/H8Fi9o8cIWL2rx4hYvafHSFi9r8fIWr2jxyhavavHqFq9p8doWBy0GLYYtRi3GLSYtpi1mLeYtFi2WLVYt1i02LbYtdi32LV7X4vUt3tDijS3e1OLNLd7S4q0t3tbi7S3e0eKdLd7V4t0t3tPivS3e1+L9LT7Q4oMtPtTiwy0+0uKjLT7W4uMtPtHiky0+1eLTLT7T4rMtPtfi8y2+0OKLLb7U4sstvtLiqy2+1uLrLb7R4pstvtXi2y2+0+K7Lb7X4vstftDihy1+1OLHLX7S4qctftbi5y1+0eKXLX7V4tctftPity1+1+L3Lf7Q4o8t/tTizy3+0uKvLf7W4u8t/tHiny3+1eLfLf7T4r8t/tfikBaHtjisxeEtjmhxZIujWhzd4pgWx7Y4Tofjdjheh+N3OEGHE3Y4UYcTdzhJh5N2OFmHk3c4RYdTdjhVh1N3OE2H03Y4XYfTdzhDhzN2OFOHM3c4S4ezdjhbh7N3OEeHc3Y4V4dzdzhPh/N2OF+H83e4QIcLdrhQhwt3uEiHi3a4WIeLd7hEh0t2uFSHS3e4TId0uGyHy3W4fIcrdLhihyt1uHKHq3S4aoerdbh6h2t0uGaHa3W4dofrdLhuh+t1uH6HG3S4YYcbdbhxh5t0uGmHm3W4eYdbdLhlh1t1uHWH23S4bYfbdbh9hzt0uGOHO3W4c4e7dLhrh7t1uHuHe3S4Z4d7dbh3h/t0uG+H+3W4f4cHdHhghwd1eHCHh3R4aIeHdXh4h0d0eGSHR3V4dIfHdHhsh8d1eHyHJ3R4YocndXhyh6d0eGqHdnhah6d3eEaHZ3Z4Vodnd3hOh+d2eF6H53d4QYcXdnhRhxd3eEmHl3Z4WYeXd3hFh1d2eFWHV3d4TYfXdjjoMOgw7DDqMO4w6TDtMOsw77DosOyw6rDusOmw7bDrsO/wug6v7/CGDm/s8KYOb+7wlg5v7fC2Dm/v8I4O7+zwrg7v7vCeDu/t8L4O7+/wgQ4f7PChDh/u8JEOH+3wsQ4f7/CJDp/s8KkOn+7wmQ6f7fC5Dp/v8IUOX+zwpQ5f7vCVDl/t8LUOX+/wjQ7f7PCtDt/u8J0O3+3wvQ7f7/CDDj/s8KMOP+7wkw4/7fCzDj/v8IsOv+zwqw6/7vCbDr/t8LsOv+/whw5/7PCnDn/u8JcOf+3wtw5/7/CPDv/s8K8O/+7wnw7/7fC/Dod0OLTDYR0O73BEhyM7HNXh6A7HdDi2w3F6HLfH8Xocv8cJepywx4l6nLjHSXqctMfJepy8xyl6nLLHqXqcusdpepy2x+l6nL7HGXqcsceZepy5x1l6nLXH2Xqcvcc5epyzx7l6nLvHeXqct8f5epy/xwV6XLDHhXpcuMdFely0x8V6XLzHJXpcsselely6x2V6pMdle1yux+V7XKHHFXtcqceVe1ylx1V7XK3H1Xtco8c1e1yrx7V7XKfHdXtcr8f1e9ygxw173KjHjXvcpMdNe9ysx8173KLHLXvcqsete9ymx2173K7H7Xvcoccde9ypx5173KXHXXvcrcfde9yjxz173KvHvXvcp8d9e9yvx/17PKDHA3s8qMeDezykx0N7PKzHw3s8oscjezyqx6N7PKbHY3s8rsfjezyhxxN7PKnHk3s8pcdTe7TH03o8vcczejyzx7N6PLvHc3o8t8fzejy/xwt6vLDHi3q8uMdLery0x8t6vLzHK3q8sserery6x2t6vLbHQY9Bj2GPUY9xj0mPaY9Zj3mPRY9lj1WPdY9Nj22PXY99j9f1eH2PN/R4Y4839Xhzj7f0eGuPt/V4e4939Hhnj3f1eHeP9/R4b4//EwAPALQVAABDs23bXrZt27a9bNvGuzaybdu29Y3OfQO8f4APDPDBAT40wIcH+MgAHx3gYwN8fIBPDPDJAT41wKcH+MwAnx3gcwN8foAvDPDFAb40wJcH+MoAXx3gawN8fYBvDPDNAb41wLcH+M4A3x3gewN8f4AfDPDDAX40wI8H+MkAPx3gZwP8fIBfDPDLAX41wK8H+M0Avx3gdwP8foA/DPDHAf40wJ8H+MsAfx3gbwP8fYB/DPDPAf41wL8H+M8A/x3gfwMcMsChAxw2wOEDHDHAkQMcNcDRAxwzwLEDHCfAcQMcL8DxA5wgwAkDnCjAiQOcJMBJA5wswMkDnCLAKQOcKsCpA5wmwGkDnC7A6QOcIcAZA5wpwJkDnCXAWQOcLcDZA5wjwDkDnCvAuQOcJ8B5A5wvwPkDXCDABQNcKMCFA1wkwEUDXCzAxQNcIsAlA1wqwKUDXCZAAlw2wOUCXD7AFQJcMcCVAlw5wFUCXDXA1QJcPcA1AlwzwLUCXDvAdQJcN8D1Alw/wA0C3DDAjQLcOMBNAtw0wM0C3DzALQLcMsCtAtw6wG0C3DbA7QLcPsAdAtwxwJ0C3DnAXQLcNcDdAtw9wD0C3DPAvQLcO8B9Atw3wP0C3D/AAwI8MMCDAjw4wEMCPDTAwwI8PMAjAjwywKMCPDrAYwI8NsDjAjw+wBMCPDHAkwI8OcBTAjw1QAM8LcDTAzwjwDMDPCvAswM8J8BzAzwvwPMDvCDACwO8KMCLA7wkwEsDvCzAywO8IsArA7wqwKsDvCbAawO8LsDrA7whwBsDvCnAmwO8JcBbA7wtwNsDvCPAOwO8K8C7A7wnwHsDHAQYBBgGGAUYB5gEmAaYBZgHWARYBlgFWAfYBNgG2AXYB3hfgPcH+ECADwb4UIAPB/hIgI8G+FiAjwf4RIBPBvhUgE8H+EyAzwb4XIDPB/hCgC8G+FKALwf4SoCvBvhagK8H+EaAbwb4VoBvB/hOgO8G+F6A7wf4QYAfBvhRgB8H+EmAnwb4WYCfB/hFgF8G+FWAXwf4TYDfBvhdgN8H+EOAPwb4U4A/B/hLgL8G+FuAvwf4R4B/BvhXgH8H+E+A/wb4X4BDAhwa4LAAhwc4IsCRAY4KcHSAYwIcG+A4IY4b4nghjh/iBCFOGOJEIU4c4iQhThriZCFOHuIUIU4Z4lQhTh3iNCFOG+J0IU4f4gwhzhjiTCHOHOIsIc4a4mwhzh7iHCHOGeJcIc4d4jwhzhvifCHOH+ICIS4Y4kIhLhziIiEuGuJiIS4e4hIhLhniUiEuHeIyIRLisiEuF+LyIa4Q4oohrhTiyiGuEuKqIa4W4uohrhHimiGuFeLaIa4T4rohrhfi+iFuEOKGIW4U4sYhbhLipiFuFuLmIW4R4pYhbhXi1iFuE+K2IW4X4vYh7hDijiHuFOLOIe4S4q4h7hbi7iHuEeKeIe4V4t4h7hPiviHuF+L+IR4Q4oEhHhTiwSEeEuKhIR4W4uEhHhHikSEeFeLRIR4T4rEhHhfi8SGeEOKJIZ4U4skhnhLiqSEa4mkhnh7iGSGeGeJZIZ4d4jkhnhvieSGeH+IFIV4Y4kUhXhziJSFeGuJlIV4e4hUhXhniVSFeHeI1IV4b4nUhXh/iDSHeGOJNId4c4i0h3hribSHeHuIdId4Z4l0h3h3iPSHeG+IgxCDEMMQoxDjEJMQ0xCzEPMQixDLEKsQ6xCbENsQuxD7E+0K8P8QHQnwwxIdCfDjER0J8NMTHQnw8xCdCfDLEp0J8OsRnQnw2xOdCfD7EF0J8McSXQnw5xFdCfDXE10J8PcQ3QnwzxLdCfDvEd0J8N8T3Qnw/xA9C/DDEj0L8OMRPQvw0xM9C/DzEL0L8MsSvQvw6xG9C/DbE70L8PsQfQvwxxJ9C/DnEX0L8NcTfQvw9xD9C/DPEv0L8O8R/Qvw3xP9CHBLi0BCHhTg8xBEhjgxxVIijQxwT4tgQx4lw3AjHi3D8CCeIcMIIJ4pw4ggniXDSCCeLcPIIp4hwygininDqCKeJcNoIp4tw+ghniHDGCGeKcOYIZ4lw1ghni3D2COeIcM4I54pw7gjniXDeCOeLcP4IF4hwwQgXinDhCBeJcNEIF4tw8QiXiHDJCJeKcOkIl4mQCJeNcLkIl49whQhXjHClCFeOcJUIV41wtQhXj3CNCNeMcK0I145wnQjXjXC9CNePcIMIN4xwowg3jnCTCDeNcLMIN49wiwi3jHCrCLeOcJsIt41wuwi3j3CHCHeMcKcId45wlwh3jXC3CHePcI8I94xwrwj3jnCfCPeNcL8I94/wgAgPjPCgCA+O8JAID43wsAgPj/CICI+M8KgIj47wmAiPjfC4CI+P8IQIT4zwpAhPjvCUCE+N0AhPi/D0CM+I8MwIz4rw7AjPifDcCM+L8PwIL4jwwggvivDiCC+J8NIIL4vw8giviPDKCK+K8OoIr4nw2givi/D6CG+I8MYIb4rw5ghvifDWCG+L8PYI74jwzgjvivDuCO+J8N4IBxEGEYYRRhHGESYRphFmEeYRFhGWEVYR1hE2EbYRdhH2Ed4X4f0RPhDhgxE+FOHDET4S4aMRPhbh4xE+EeGTET4V4dMRPhPhsxE+F+HzEb4Q4YsRvhThyxG+EuGrEb4W4esRvhHhmxG+FeHbEb4T4bsRvhfh+xF+EOGHEX4U4ccRfhLhpxF+FuHnEX4R4ZcRfhXh1xF+E+G3EX4X4fcR/hDhjxH+FOHPEf4S4a8R/hbh7xH+EeGfEf4V4d8R/hPhvxH+F+GQCIdGOCzC4RGOiHBkhKMiHB3hmAjHRjhOjOPGOF6M48c4QYwTxjhRjBPHOEmMk8Y4WYyTxzhFjFPGOFWMU8c4TYzTxjhdjNPHOEOMM8Y4U4wzxzhLjLPGOFuMs8c4R4xzxjhXjHPHOE+M88Y4X4zzx7hAjAvGuFCMC8e4SIyLxrhYjIvHuESMS8a4VIxLx7hMjMS4bIzLxbh8jCvEuGKMK8W4coyrxLhqjKvFuHqMa8S4Zoxrxbh2jOvEuG6M68W4fowbxLhhjBvFuHGMm8S4aYybxbh5jFvEuGWMW8W4dYzbxLhtjNvFuH2MO8S4Y4w7xbhzjLvEuGuMu8W4e4x7xLhnjHvFuHeM+8S4b4z7xbh/jAfEeGCMB8V4cIyHxHhojIfFeHiMR8R4ZIxHxXh0jMfEeGyMx8V4fIwnxHhijCfFeHKMp8R4aozGeFqMp8d4RoxnxnhWjGfHeE6M58Z4Xoznx3hBjBfGeFGMF8d4SYyXxnhZjJfHeEWMV8Z4VYxXx3hNjNfGeF2M18d4Q4w3xnhTjDfHeEuMt8Z4W4y3x3hHjHfGeFeMd8d4T4z3xjiIMYgxjDGKMY4xiTGNMYsxj7GIsYyxirGOsYmxjbGLsY/xvhjvj/GBGB+M8aEYH47xkRgfjfGxGB+P8YkYn4zxqRifjvGZGJ+N8bkYn4/xhRhfjPGlGF+O8ZUYX43xtRhfj/GNGN+M8a0Y347xnRjfjfG9GN+P8YMYP4zxoxg/jvGTGD+N8bMYP4/xixi/jPGrGL+O8ZsYv43xuxi/j/GHGH+M8acYf47xlxh/jfG3GH+P8Y8Y/4zxrxj/jvGfGP+N8b8Yh8Q4NMZhMQ6PcUSMI2McFePoGMfEODbGcRIcN8HxEhw/wQkSnDDBiRKcOMFJEpw0wckSnDzBKRKcMsGpEpw6wWkSnDbB6RKcPsEZEpwxwZkSnDnBWRKcNcHZEpw9wTkSnDPBuRKcO8F5Epw3wfkSnD/BBRJcMMGFElw4wUUSXDTBxRJcPMElElwywaUSXDrBZRIkwWUTXC7B5RNcIcEVE1wpwZUTXCXBVRNcLcHVE1wjwTUTXCvBtRNcJ8F1E1wvwfUT3CDBDRPcKMGNE9wkwU0T3CzBzRPcIsEtE9wqwa0T3CbBbRPcLsHtE9whwR0T3CnBnRPcJcFdE9wtwd0T3CPBPRPcK8G9E9wnwX0T3C/B/RM8IMEDEzwowYMTPCTBQxM8LMHDEzwiwSMTPCrBoxM8JsFjEzwuweMTPCHBExM8KcGTEzwlwVMTNMHTEjw9wTMSPDPBsxI8O8FzEjw3wfMSPD/BCxK8MMGLErw4wUsSvDTByxK8PMErErwywasSvDrBaxK8NsHrErw+wRsSvDHBmxK8OcFbErw1wdsSvD3BOxK8M8G7Erw7wXsSvDfBQYJBgmGCUYJxgkmCaYJZgnmCRYJlglWCdYJNgm2CXYJ9gvcleH+CDyT4YIIPJfhwgo8k+GiCjyX4eIJPJPhkgk8l+HSCzyT4bILPJfh8gi8k+GKCLyX4coKvJPhqgq8l+HqCbyT4ZoJvJfh2gu8k+G6C7yX4foIfJPhhgh8l+HGCnyT4aYKfJfh5gl8k+GWCXyX4dYLfJPhtgt8l+H2CPyT4Y4I/Jfhzgr8k+GuCvyX4e4J/JPhngn8l+HeC/yT4b4L/JTgkwaEJDktweIIjEhyZ4KgERyc4JsGxCY6T4rgpjpfi+ClOkOKEKU6U4sQpTpLipClOluLkKU6R4pQpTpXi1ClOk+K0KU6X4vQpzpDijCnOlOLMKc6S4qwpzpbi7CnOkeKcKc6V4twpzpPivCnOl+L8KS6Q4oIpLpTiwikukuKiKS6W4uIpLpHikikuleLSKS6TIikum+JyKS6f4goprpjiSimunOIqKa6a4moprp7iGimumeJaKa6d4joprpvieimun+IGKW6Y4kYpbpziJilumuJmKW6e4hYpbpniViluneI2KW6b4nYpbp/iDinumOJOKe6c4i4p7pribinunuIeKe6Z4l4p7p3iPinum+J+Ke6f4gEpHpjiQSkenOIhKR6a4mEpHp7iESkemeJRKR6d4jEpHpvicSken+IJKZ6Y4kkpnpziKSmemqIpnpbi6SmekeKZKZ6V4tkpnpPiuSmel+L5KV6Q4oUpXpTixSlekuKlKV6W4uUpXpHilSleleLVKV6T4rUpXpfi9SnekOKNKd6U4s0p3pLirSneluLtKd6R4p0p3pXi3Snek+K9KQ5SDFIMU4xSjFNMUkxTzFLMUyxSLFOsUqxTbFJsU+xS7FO8L8X7U3wgxQdTfCjFh1N8JMVHU3wsxcdTfCLFJ1N8KsWnU3wmxWdTfC7F51N8IcUXU3wpxZdTfCXFV1N8LcXXU3wjxTdTfCvFt1N8J8V3U3wvxfdT/CDFD1P8KMWPU/wkxU9T/CzFz1P8IsUvU/wqxa9T/CbFb1P8LsXvU/whxR9T/CnFn1P8JcVfU/wtxd9T/CPFP1P8K8W/U/wnxX9T/C/FISkOTXFYisNTHJHiyBRHpTg6xTEpjk1xnAzHzXC8DMfPcIIMJ8xwogwnznCSDCfNcLIMJ89wigynzHCqDKfOcJoMp81wugynz3CGDGfMcKYMZ85wlgxnzXC2DGfPcI4M58xwrgznznCeDOfNcL4M589wgQwXzHChDBfOcJEMF81wsQwXz3CJDJfMcKkMl85wmQzJcNkMl8tw+QxXyHDFDFfKcOUMV8lw1QxXy3D1DNfIcM0M18pw7QzXyXDdDNfLcP0MN8hwwww3ynDjDDfJcNMMN8tw8wy3yHDLDLfKcOsMt8lw2wy3y3D7DHfIcMcMd8pw5wx3yXDXDHfLcPcM98hwzwz3ynDvDPfJcN8M98tw/wwPyPDADA/K8OAMD8nw0AwPy/DwDI/I8MgMj8rw6AyPyfDYDI/L8PgMT8jwxAxPyvDkDE/J8NQMzfC0DE/P8IwMz8zwrAzPzvCcDM/N8LwMz8/wggwvzPCiDC/O8JIML83wsgwvz/CKDK/M8KoMr87wmgyvzfC6DK/P8IYMb8zwpgxvzvCWDG/N8LYMb8/wjgzvzPCuDO/O8J4M781wkGGQYZhhlGGcYZJhmmGWYZ5hkWGZYZVhnWGTYZthl2Gf4X0Z3p/hAxk+mOFDGT6c4SMZPprhYxk+nuETGT6Z4VMZPp3hMxk+m+FzGT6f4QsZvpjhSxm+nOErGb6a4WsZvp7hGxm+meFbGb6d4TsZvpvhexm+n+EHGX6Y4UcZfpzhJxl+muFnGX6e4RcZfpnhVxl+neE3GX6b4XcZfp/hDxn+mOFPGf6c4S8Z/prhbxn+nuEfGf6Z4V8Z/p3hPxn+m+F/GQ7JcGiGwzIcnuGIDEdmOCrD0RmOyXBshuPkOG6O4+U4fo4T5DhhjhPlOHGOk+Q4aY6T5Th5jlPkOGWOU+U4dY7T5DhtjtPlOH2OM+Q4Y44z5ThzjrPkOGuOs+U4e45z5DhnjnPlOHeO8+Q4b47z5Th/jgvkuGCOC+W4cI6L5LhojovluHiOS+S4ZI5L5bh0jsvkSI7L5rhcjsvnuEKOK+a4Uo4r57hKjqvmuFqOq+e4Ro5r5rhWjmvnuE6O6+a4Xo7r57hBjhvmuFGOG+e4SY6b5rhZjpvnuEWOW+a4VY5b57hNjtvmuF2O2+e4Q4475rhTjjvnuEuOu+a4W46757hHjnvmuFeOe+e4T4775rhfjvvneECOB+Z4UI4H53hIjofmeFiOh+d4RI5H5nhUjkfneEyOx+Z4XI7H53hCjifmeFKOJ+d4So6n5miOp+V4eo5n5HhmjmfleHaO5+R4bo7n5Xh+jhfkeGGOF+V4cY6X5HhpjpfleHmOV+R4ZY5X5Xh1jtfkeG2O1+V4fY435HhjjjfleHOOt+R4a4635Xh7jnfkeGeOd+V4d4735HhvjoMcgxzDHKMc4xyTHNMcsxzzHIscyxyrHOscmxzbHLsc+xzvy/H+HB/I8cEcH8rx4RwfyfHRHB/L8fEcn8jxyRyfyvHpHJ/J8dkcn8vx+RxfyPHFHF/K8eUcX8nx1Rxfy/H1HN/I8c0c38rx7RzfyfHdHN/L8f0cP8jxwxw/yvHjHD/J8dMcP8vx8xy/yPHLHL/K8escv8nx2xy/y/H7HH/I8cccf8rx5xx/yfHXHH/L8fcc/8jxzxz/yvHvHP/J8d8c/8txSI5DcxyW4/AcR+Q4MsdROY7OcUyOY3Mcp8BxCxyvwPELnKDACQucqMCJC5ykwEkLnKzAyQucosApC5yqwKkLnKbAaQucrsDpC5yhwBkLnKnAmQucpcBZC5ytwNkLnKPAOQucq8C5C5ynwHkLnK/A+QtcoMAFC1yowIULXKTARQtcrMDFC1yiwCULXKrApQtcpkAKXLbA5QpcvsAVClyxwJUKXLnAVQpctcDVCly9wDUKXLPAtQpcu8B1Cly3wPUKXL/ADQrcsMCNCty4wE0K3LTAzQrcvMAtCtyywK0K3LrAbQrctsDtCty+wB0K3LHAnQrcucBdCty1wN0K3L3APQrcs8C9Cty7wH0K3LfA/Qrcv8ADCjywwIMKPLjAQwo8tMDDCjy8wCMKPLLAowo8usBjCjy2wOMKPL7AEwo8scCTCjy5wFMKPLVACzytwNMLPKPAMws8q8CzCzynwHMLPK/A8wu8oMALC7yowIsLvKTASwu8rMDLC7yiwCsLvKrAqwu8psBrC7yuwOsLvKHAGwu8qcCbC7ylwFsLvK3A2wu8o8A7C7yrwLsLvKfAewscFBgUGBYYFRgXmBSYFpgVmBdYFFgWWBVYF9gU2BbYFdgXeF+B9xf4QIEPFvhQgQ8X+EiBjxb4WIGPF/hEgU8W+FSBTxf4TIHPFvhcgc8X+EKBLxb4UoEvF/hKga8W+FqBrxf4RoFvFvhWgW8X+E6B7xb4XoHvF/hBgR8W+FGBHxf4SYGfFvhZgZ8X+EWBXxb4VYFfF/hNgd8W+F2B3xf4Q4E/FvhTgT8X+EuBvxb4W4G/F/hHgX8W+FeBfxf4T4H/FvhfgUMKHFrgsAKHFziiwJEFjipwdIFjChxb4DgljlvieCWOX+IEJU5Y4kQlTlziJCVOWuJkJU5e4hQlTlniVCVOXeI0JU5b4nQlTl/iDCXOWOJMJc5c4iwlzlribCXOXuIcJc5Z4lwlzl3iPCXOW+J8Jc5f4gIlLljiQiUuXOIiJS5a4mIlLl7iEiUuWeJSJS5d4jIlUuKyJS5X4vIlrlDiiiWuVOLKJa5S4qolrlbi6iWuUeKaJa5V4tolrlPiuiWuV+L6JW5Q4oYlblTixiVuUuKmJW5W4uYlblHiliVuVeLWJW5T4rYlblfi9iXuUOKOJe5U4s4l7lLiriXuVuLuJe5R4p4l7lXi3iXuU+K+Je5X4v4lHlDigSUeVOLBJR5S4qElHlbi4SUeUeKRJR5V4tElHlPisSUeV+LxJZ5Q4oklnlTiySWeUuKpJVriaSWeXuIZJZ5Z4lklnl3iOSWeW+J5JZ5f4gUlXljiRSVeXOIlJV5a4mUlXl7iFSVeWeJVJV5d4jUlXlvidSVeX+INJd5Y4k0l3lziLSXeWuJtJd5e4h0l3lniXSXeXeI9Jd5b4qDEoMSwxKjEuMSkxLTErMS8xKLEssSqxLrEpsS2xK7EvsT7Sry/xAdKfLDEh0p8uMRHSny0xMdKfLzEJ0p8ssSnSny6xGdKfLbE50p8vsQXSnyxxJdKfLnEV0p8tcTXSny9xDdKfLPEt0p8u8R3Sny3xPdKfL/ED0r8sMSPSvy4xE9K/LTEz0r8vMQvSvyyxK9K/LrEb0r8tsTvSvy+xB9K/LHEn0r8ucRfSvy1xN9K/L3EP0r8s8S/Svy7xH9K/LfE/0ocUuLQEoeVOLzEESWOLHFUiaNLHFPi2BLHqXDcCsercPwKJ6hwwgonqnDiCiepcNIKJ6tw8gqnqHDKCqeqcOoKp6lw2gqnq3D6CmeocMYKZ6pw5gpnqXDWCmercPYK56hwzgrnqnDuCuepcN4K56tw/goXqHDBCheqcOEKF6lw0QoXq3DxCpeocMkKl6pw6QqXqZAKl61wuQqXr3CFClescKUKV65wlQpXrXC1ClevcI0K16xwrQrXrnCdCtetcL0K169wgwo3rHCjCjeucJMKN61wswo3r3CLCrescKsKt65wmwq3rXC7CrevcIcKd6xwpwp3rnCXCnetcLcKd69wjwr3rHCvCveucJ8K961wvwr3r/CACg+s8KAKD67wkAoPrfCwCg+v8IgKj6zwqAqPrvCYCo+t8LgKj6/whApPrPCkCk+u8JQKT63QCk+r8PQKz6jwzArPqvDsCs+p8NwKz6vw/AovqPDCCi+q8OIKL6nw0govq/DyCq+o8MoKr6rw6gqvqfDaCq+r8PoKb6jwxgpvqvDmCm+p8NYKb6vw9grvqPDOCu+q8O4K76nw3goHFQYVhhVGFcYVJhWmFWYV5hUWFZYVVhXWFTYVthV2FfYV3lfh/RU+UOGDFT5U4cMVPlLhoxU+VuHjFT5R4ZMVPlXh0xU+U+GzFT5X4fMVvlDhixW+VOHLFb5S4asVvlbh6xW+UeGbFb5V4dsVvlPhuxW+V+H7FX5Q4YcVflThxxV+UuGnFX5W4ecVflHhlxV+VeHXFX5T4bcVflfh9xX+UOGPFf5U4c8V/lLhrxX+VuHvFf5R4Z8V/lXh3xX+U+G/Ff5X4ZAKh1Y4rMLhFY6ocGSFoyocXeGYCsdWOE6N49Y4Xo3j1zhBjRPWOFGNE9c4SY2T1jhZjZPXOEWNU9Y4VY1T1zhNjdPWOF2N09c4Q40z1jhTjTPXOEuNs9Y4W42z1zhHjXPWOFeNc9c4T43z1jhfjfPXuECNC9a4UI0L17hIjYvWuFiNi9e4RI1L1rhUjUvXuEyN1LhsjcvVuHyNK9S4Yo0r1bhyjavUuGqNq9W4eo1r1LhmjWvVuHaN69S4bo3r1bh+jRvUuGGNG9W4cY2b1LhpjZvVuHmNW9S4ZY1b1bh1jdvUuG2N29W4fY071LhjjTvVuHONu9S4a4271bh7jXvUuGeNe9W4d4371LhvjfvVuH+NB9R4YI0H1XhwjYfUeGiNh9V4eI1H1HhkjUfVeHSNx9R4bI3H1Xh8jSfUeGKNJ9V4co2n1HhqjdZ4Wo2n13hGjWfWeFaNZ9d4To3n1nhejefXeEGNF9Z4UY0X13hJjZfWeFmNl9d4RY1X1nhVjVfXeE2N19Z4XY3X13hDjTfWeFONN9d4S4231nhbjbfXeEeNd9Z4V41313hPjffWOKgxqDGsMaoxrjGpMa0xqzGvsaixrLGqsa6xqbGtsauxr/G+Gu+v8YEaH6zxoRofrvGRGh+t8bEaH6/xiRqfrPGpGp+u8Zkan63xuRqfr/GFGl+s8aUaX67xlRpfrfG1Gl+v8Y0a36zxrRrfrvGdGt+t8b0a36/xgxo/rPGjGj+u8ZMaP63xsxo/r/GLGr+s8asav67xmxq/rfG7Gr+v8Ycaf6zxpxp/rvGXGn+t8bcaf6/xjxr/rPGvGv+u8Z8a/63xvxqH1Di0xmE1Dq9xRI0jaxxV4+gax9Q4tsZxGhy3wfEaHL/BCRqcsMGJGpy4wUkanLTByRqcvMEpGpyywakanLrBaRqctsHpGpy+wRkanLHBmRqcucFZGpy1wdkanL3BORqcs8G5Gpy7wXkanLfB+Rqcv8EFGlywwYUaXLjBRRpctMHFGly8wSUaXLLBpRpcusFlGqTBZRtcrsHlG1yhwRUbXKnBlRtcpcFVG1ytwdUbXKPBNRtcq8G1G1ynwXUbXK/B9RvcoMENG9yowY0b3KTBTRvcrMHNG9yiwS0b3KrBrRvcpsFtG9yuwe0b3KHBHRvcqcGdG9ylwV0b3K3B3Rvco8E9G9yrwb0b3KfBfRvcr8H9GzygwQMbPKjBgxs8pMFDGzyswcMbPKLBIxs8qsGjGzymwWMbPK7B4xs8ocETGzypwZMbPKXBUxu0wdMaPL3BMxo8s8GzGjy7wXMaPLfB8xo8v8ELGrywwYsavLjBSxq8tMHLGry8wSsavLLBqxq8usFrGry2wesavL7BGxq8scGbGry5wVsavLXB2xq8vcE7GryzwbsavLvBexq8t8FBg0GDYYNRg3GDSYNpg1mDeYNFg2WDVYN1g02DbYNdg32D9zV4f4MPNPhggw81+HCDjzT4aIOPNfh4g080+GSDTzX4dIPPNPhsg881+HyDLzT4YoMvNfhyg680+GqDrzX4eoNvNPhmg281+HaD7zT4boPvNfh+gx80+GGDHzX4cYOfNPhpg581+HmDXzT4ZYNfNfh1g980+G2D3zX4fYM/NPhjgz81+HODvzT4a4O/Nfh7g380+GeDfzX4d4P/NPhvg/81OKTBoQ0Oa3B4gyMaHNngqAZHNzimwbENjtPiuC2O1+L4LU7Q4oQtTtTixC1O0uKkLU7W4uQtTtHilC1O1eLULU7T4rQtTtfi9C3O0OKMLc7U4swtztLirC3O1uLsLc7R4pwtztXi3C3O0+K8Lc7X4vwtLtDigi0u1OLCLS7S4qItLtbi4i0u0eKSLS7V4tItLtMiLS7b4nItLt/iCi2u2OJKLa7c4iotrtriai2u3uIaLa7Z4lotrt3iOi2u2+J6La7f4gYtbtjiRi1u3OImLW7a4mYtbt7iFi1u2eJWLW7d4jYtbtvidi1u3+IOLe7Y4k4t7tziLi3u2uJuLe7e4h4t7tniXi3u3eI+Le7b4n4t7t/iAS0e2OJBLR7c4iEtHtriYS0e3uIRLR7Z4lEtHt3iMS0e2+JxLR7f4gktntjiSS2e3OIpLZ7aoi2e1uLpLZ7R4pktntXi2S2e0+K5LZ7X4vktXtDihS1e1OLFLV7S4qUtXtbi5S1e0eKVLV7V4tUtXtPitS1e1+L1Ld7Q4o0t3tTizS3e0uKtLd7W4u0t3tHinS3e1eLdLd7T4r0tDloMWgxbjFqMW0xaTFvMWsxbLFosW6xarFtsWmxb7FrsW7yvxftbfKDFB1t8qMWHW3ykxUdbfKzFx1t8osUnW3yqxadbfKbFZ1t8rsXnW3yhxRdbfKnFl1t8pcVXW3ytxddbfKPFN1t8q8W3W3ynxXdbfK/F91v8oMUPW/yoxY9b/KTFT1v8rMXPW/yixS9b/KrFr1v8psVvW/yuxe9b/KHFH1v8qcWfW/ylxV9b/K3F31v8o8U/W/yrxb9b/KfFf1v8r8UhLQ5tcViLw1sc0eLIFke1OLrFMS2ObXGcDsftcLwOx+9wgg4n7HCiDifucJIOJ+1wsg4n73CKDqfscKoOp+5wmg6n7XC6DqfvcIYOZ+xwpg5n7nCWDmftcLYOZ+9wjg7n7HCuDufucJ4O5+1wvg7n73CBDhfscKEOF+5wkQ4X7XCxDhfvcIkOl+xwqQ6X7nCZDulw2Q6X63D5DlfocMUOV+pw5Q5X6XDVDlfrcPUO1+hwzQ7X6nDtDtfpcN0O1+tw/Q436HDDDjfqcOMON+lw0w4363DzDrfocMsOt+pw6w636XDbDrfrcPsOd+hwxw536nDnDnfpcNcOd+tw9w736HDPDvfqcO8O9+lw3w7363D/Dg/o8MAOD+rw4A4P6fDQDg/r8PAOj+jwyA6P6vDoDo/p8NgOj+vw+A5P6PDEDk/q8OQOT+nw1A7t8LQOT+/wjA7P7PCsDs/u8JwOz+3wvA7P7/CCDi/s8KIOL+7wkg4v7fCyDi/v8IoOr+zwqg6v7vCaDq/t8LoOr+/whg5v7PCmDm/u8JYOb+3wtg5v7/CODu/s8K4O7+7wng7v7XDQYdBh2GHUYdxh0mHaYdZh3mHRYdlh1WHdYdNh22HXYd/hfR3e3+EDHT7Y4UMdPtzhIx0+2uFjHT7e4RMdPtnhUx0+3eEzHT7b4XMdPt/hCx2+2OFLHb7c4Ssdvtrhax2+3uEbHb7Z4Vsdvt3hOx2+2+F7Hb7f4QcdftjhRx1+3OEnHX7a4Wcdft7hFx1+2eFXHX7d4Tcdftvhdx1+3+EPHf7Y4U8d/tzhLx3+2uFvHf7e4R8d/tnhXx3+3eE/Hf7b4X8dDulwaIfDOhze4YgOR3Y4qsPRHY7pcGyH4/Q4bo/j9Th+jxP0OGGPE/U4cY+T9Dhpj5P1OHmPU/Q4ZY9T9Th1j9P0OG2P0/U4fY8z9DhjjzP1OHOPs/Q4a4+z9Th7j3P0OGePc/U4d4/z9Dhvj/P1OH+PC/S4YI8L9bhwj4v0uGiPi/W4eI9L9Lhkj0v1uHSPy/RIj8v2uFyPy/e4Qo8r9rhSjyv3uEqPq/a4Wo+r97hGj2v2uFaPa/e4To/r9rhej+v3uEGPG/a4UY8b97hJj5v2uFmPm/e4RY9b9rhVj1v3uE2P2/a4XY/b97hDjzv2uFOPO/e4S4+79rhbj7v3uEePe/a4V49797hPj/v2uF+P+/d4QI8H9nhQjwf3eEiPh/Z4WI+H93hEj0f2eFSPR/d4TI/H9nhcj8f3eEKPJ/Z4Uo8n93hKj6f2aI+n9Xh6j2f0eGaPZ/V4do/n9Hhuj+f1eH6PF/R4YY8X9Xhxj5f0eGmPl/V4eY9X9Hhlj1f1eHWP1/R4bY/X9Xh9jzf0eGOPN/V4c4+39Hhrj7f1eHuPd/R4Z4939Xh3j/f0eG+Pgx6DHsMeox7jHpMe0x6zHvMeix7LHqse6x6bHtseux77Hv8nAB4AaCsAAIZm27a9bNu2bXvZtm27d21k27b9jU4wwHCA0QDjASYDTAeYDTAfYDHAcoDVAOsBNgNsB9gNsB/gcwN8foAvDPDFAb40wJcH+MoAXx3gawN8fYBvDPDNAb41wLcH+M4A3x3gewN8f4AfDPDDAX40wI8H+MkAPx3gZwP8fIBfDPDLAX41wK8H+M0Avx3gdwP8foA/DPDHAf40wJ8H+MsAfx3gbwP8fYB/DPDPAf41wL8H+M8A/x3gfwMcMsChAxw2wOEDHDHAkQMcNcDRAxwzwLEDHCfAcQMcL8DxA5wgwAkDnCjAiQOcJMBJA5wswMkDnCLAKQOcKsCpA5wmwGkDnC7A6QOcIcAZA5wpwJkDnCXAWQOcLcDZA5wjwDkDnCvAuQOcJ8B5A5wvwPkDXCDABQNcKMCFA1wkwEUDXCzAxQNcIsAlA1wqwKUDXCZAAlw2wOUCXD7AFQJcMcCVAlw5wFUCXDXA1QJcPcA1AlwzwLUCXDvAdQJcN8D1Alw/wA0C3DDAjQLcOMBNAtw0wM0C3DzALQLcMsCtAtw6wG0C3DbA7QLcPsAdAtwxwJ0C3DnAXQLcNcDdAtw9wD0C3DPAvQLcO8B9Atw3wP0C3D/AAwI8MMCDAjw4wEMCPDTAwwI8PMAjAjwywKMCPDrAYwI8NsDjAjw+wBMCPDHAkwI8OcBTAjw1QAM8LcDTAzwjwDMDPCvAswM8J8BzAzwvwPMDvCDACwO8KMCLA7wkwEsDvCzAywO8IsArA7wqwKsDvCbAawO8LsDrA7whwBsDvCnAmwO8JcBbA7wtwNsDvCPAOwO8K8C7A7wnwHsDvC/A+wN8IMAHA3wowIcDfCTARwN8LMDHA3wiwCcDfCrApwN8JsBnAxwEGAQYBhgFGAeYBJgGmAWYB1gEWAZYBVgH2ATYBtgF2Af4XIDPB/hCgC8G+FKALwf4SoCvBvhagK8H+EaAbwb4VoBvB/hOgO8G+F6A7wf4QYAfBvhRgB8H+EmAnwb4WYCfB/hFgF8G+FWAXwf4TYDfBvhdgN8H+EOAPwb4U4A/B/hLgL8G+FuAvwf4R4B/BvhXgH8H+E+A/wb4X4BDAhwa4LAAhwc4IsCRAY4KcHSAYwIcG+A4IY4b4nghjh/iBCFOGOJEIU4c4iQhThriZCFOHuIUIU4Z4lQhTh3iNCFOG+J0IU4f4gwhzhjiTCHOHOIsIc4a4mwhzh7iHCHOGeJcIc4d4jwhzhvifCHOH+ICIS4Y4kIhLhziIiEuGuJiIS4e4hIhLhniUiEuHeIyIRLisiEuF+LyIa4Q4oohrhTiyiGuEuKqIa4W4uohrhHimiGuFeLaIa4T4rohrhfi+iFuEOKGIW4U4sYhbhLipiFuFuLmIW4R4pYhbhXi1iFuE+K2IW4X4vYh7hDijiHuFOLOIe4S4q4h7hbi7iHuEeKeIe4V4t4h7hPiviHuF+L+IR4Q4oEhHhTiwSEeEuKhIR4W4uEhHhHikSEeFeLRIR4T4rEhHhfi8SGeEOKJIZ4U4skhnhLiqSEa4mkhnh7iGSGeGeJZIZ4d4jkhnhvieSGeH+IFIV4Y4kUhXhziJSFeGuJlIV4e4hUhXhniVSFeHeI1IV4b4nUhXh/iDSHeGOJNId4c4i0h3hribSHeHuIdId4Z4l0h3h3iPSHeG+J9Id4f4gMhPhjiQyE+HOIjIT4a4mMhPh7iEyE+GeJTIT4d4jMhPhviIMQgxDDEKMQ4xCTENMQsxDzEIsQyxCrEOsQmxDbELsQ+xOdCfD7EF0J8McSXQnw5xFdCfDXE10J8PcQ3QnwzxLdCfDvEd0J8N8T3Qnw/xA9C/DDEj0L8OMRPQvw0xM9C/DzEL0L8MsSvQvw6xG9C/DbE70L8PsQfQvwxxJ9C/DnEX0L8NcTfQvw9xD9C/DPEv0L8O8R/Qvw3xP9CHBLi0BCHhTg8xBEhjgxxVIijQxwT4tgQx4lw3AjHi3D8CCeIcMIIJ4pw4ggniXDSCCeLcPIIp4hwygininDqCKeJcNoIp4tw+ghniHDGCGeKcOYIZ4lw1ghni3D2COeIcM4I54pw7gjniXDeCOeLcP4IF4hwwQgXinDhCBeJcNEIF4tw8QiXiHDJCJeKcOkIl4mQCJeNcLkIl49whQhXjHClCFeOcJUIV41wtQhXj3CNCNeMcK0I145wnQjXjXC9CNePcIMIN4xwowg3jnCTCDeNcLMIN49wiwi3jHCrCLeOcJsIt41wuwi3j3CHCHeMcKcId45wlwh3jXC3CHePcI8I94xwrwj3jnCfCPeNcL8I94/wgAgPjPCgCA+O8JAID43wsAgPj/CICI+M8KgIj47wmAiPjfC4CI+P8IQIT4zwpAhPjvCUCE+N0AhPi/D0CM+I8MwIz4rw7AjPifDcCM+L8PwIL4jwwggvivDiCC+J8NIIL4vw8giviPDKCK+K8OoIr4nw2givi/D6CG+I8MYIb4rw5ghvifDWCG+L8PYI74jwzgjvivDuCO+J8N4I74vw/ggfiPDBCB+K8OEIH4nw0Qgfi/DxCJ+I8MkIn4rw6QififDZCAcRBhGGEUYRxhEmEaYRZhHmERYRlhFWEdYRNhG2EXYR9hE+F+HzEb4Q4YsRvhThyxG+EuGrEb4W4esRvhHhmxG+FeHbEb4T4bsRvhfh+xF+EOGHEX4U4ccRfhLhpxF+FuHnEX4R4ZcRfhXh1xF+E+G3EX4X4fcR/hDhjxH+FOHPEf4S4a8R/hbh7xH+EeGfEf4V4d8R/hPhvxH+F+GQCIdGOCzC4RGOiHBkhKMiHB3hmAjHRjhOjOPGOF6M48c4QYwTxjhRjBPHOEmMk8Y4WYyTxzhFjFPGOFWMU8c4TYzTxjhdjNPHOEOMM8Y4U4wzxzhLjLPGOFuMs8c4R4xzxjhXjHPHOE+M88Y4X4zzx7hAjAvGuFCMC8e4SIyLxrhYjIvHuESMS8a4VIxLx7hMjMS4bIzLxbh8jCvEuGKMK8W4coyrxLhqjKvFuHqMa8S4Zoxrxbh2jOvEuG6M68W4fowbxLhhjBvFuHGMm8S4aYybxbh5jFvEuGWMW8W4dYzbxLhtjNvFuH2MO8S4Y4w7xbhzjLvEuGuMu8W4e4x7xLhnjHvFuHeM+8S4b4z7xbh/jAfEeGCMB8V4cIyHxHhojIfFeHiMR8R4ZIxHxXh0jMfEeGyMx8V4fIwnxHhijCfFeHKMp8R4aozGeFqMp8d4RoxnxnhWjGfHeE6M58Z4Xoznx3hBjBfGeFGMF8d4SYyXxnhZjJfHeEWMV8Z4VYxXx3hNjNfGeF2M18d4Q4w3xnhTjDfHeEuMt8Z4W4y3x3hHjHfGeFeMd8d4T4z3xnhfjPfH+ECMD8b4UIwPx/hIjI/G+FiMj8f4RIxPxvhUjE/H+EyMz8Y4iDGIMYwxijGOMYkxjTGLMY+xiLGMsYqxjrGJsY2xi7GP8bkYn4/xhRhfjPGlGF+O8ZUYX43xtRhfj/GNGN+M8a0Y347xnRjfjfG9GN+P8YMYP4zxoxg/jvGTGD+N8bMYP4/xixi/jPGrGL+O8ZsYv43xuxi/j/GHGH+M8acYf47xlxh/jfG3GH+P8Y8Y/4zxrxj/jvGfGP+N8b8Yh8Q4NMZhMQ6PcUSMI2McFePoGMfEODbGcRIcN8HxEhw/wQkSnDDBiRKcOMFJEpw0wckSnDzBKRKcMsGpEpw6wWkSnDbB6RKcPsEZEpwxwZkSnDnBWRKcNcHZEpw9wTkSnDPBuRKcO8F5Epw3wfkSnD/BBRJcMMGFElw4wUUSXDTBxRJcPMElElwywaUSXDrBZRIkwWUTXC7B5RNcIcEVE1wpwZUTXCXBVRNcLcHVE1wjwTUTXCvBtRNcJ8F1E1wvwfUT3CDBDRPcKMGNE9wkwU0T3CzBzRPcIsEtE9wqwa0T3CbBbRPcLsHtE9whwR0T3CnBnRPcJcFdE9wtwd0T3CPBPRPcK8G9E9wnwX0T3C/B/RM8IMEDEzwowYMTPCTBQxM8LMHDEzwiwSMTPCrBoxM8JsFjEzwuweMTPCHBExM8KcGTEzwlwVMTNMHTEjw9wTMSPDPBsxI8O8FzEjw3wfMSPD/BCxK8MMGLErw4wUsSvDTByxK8PMErErwywasSvDrBaxK8NsHrErw+wRsSvDHBmxK8OcFbErw1wdsSvD3BOxK8M8G7Erw7wXsSvDfB+xK8P8EHEnwwwYcSfDjBRxJ8NMHHEnw8wScSfDLBpxJ8OsFnEnw2wUGCQYJhglGCcYJJgmmCWYJ5gkWCZYJVgnWCTYJtgl2CfYLPJfh8gi8k+GKCLyX4coKvJPhqgq8l+HqCbyT4ZoJvJfh2gu8k+G6C7yX4foIfJPhhgh8l+HGCnyT4aYKfJfh5gl8k+GWCXyX4dYLfJPhtgt8l+H2CPyT4Y4I/Jfhzgr8k+GuCvyX4e4J/JPhngn8l+HeC/yT4b4L/JTgkwaEJDktweIIjEhyZ4KgERyc4JsGxCY6T4rgpjpfi+ClOkOKEKU6U4sQpTpLipClOluLkKU6R4pQpTpXi1ClOk+K0KU6X4vQpzpDijCnOlOLMKc6S4qwpzpbi7CnOkeKcKc6V4twpzpPivCnOl+L8KS6Q4oIpLpTiwikukuKiKS6W4uIpLpHikikuleLSKS6TIikum+JyKS6f4goprpjiSimunOIqKa6a4moprp7iGimumeJaKa6d4joprpvieimun+IGKW6Y4kYpbpziJilumuJmKW6e4hYpbpniViluneI2KW6b4nYpbp/iDinumOJOKe6c4i4p7pribinunuIeKe6Z4l4p7p3iPinum+J+Ke6f4gEpHpjiQSkenOIhKR6a4mEpHp7iESkemeJRKR6d4jEpHpvicSken+IJKZ6Y4kkpnpziKSmemqIpnpbi6SmekeKZKZ6V4tkpnpPiuSmel+L5KV6Q4oUpXpTixSlekuKlKV6W4uUpXpHilSleleLVKV6T4rUpXpfi9SnekOKNKd6U4s0p3pLirSneluLtKd6R4p0p3pXi3Snek+K9Kd6X4v0pPpDigyk+lOLDKT6S4qMpPpbi4yk+keKTKT6V4tMpPpPisykOUgxSDFOMUoxTTFJMU8xSzFMsUixTrFKsU2xSbFPsUuxTfC7F51N8IcUXU3wpxZdTfCXFV1N8LcXXU3wjxTdTfCvFt1N8J8V3U3wvxfdT/CDFD1P8KMWPU/wkxU9T/CzFz1P8IsUvU/wqxa9T/CbFb1P8LsXvU/whxR9T/CnFn1P8JcVfU/wtxd9T/CPFP1P8K8W/U/wnxX9T/C/FISkOTXFYisNTHJHiyBRHpTg6xTEpjk1xnAzHzXC8DMfPcIIMJ8xwogwnznCSDCfNcLIMJ89wigynzHCqDKfOcJoMp81wugynz3CGDGfMcKYMZ85wlgxnzXC2DGfPcI4M58xwrgznznCeDOfNcL4M589wgQwXzHChDBfOcJEMF81wsQwXz3CJDJfMcKkMl85wmQzJcNkMl8tw+QxXyHDFDFfKcOUMV8lw1QxXy3D1DNfIcM0M18pw7QzXyXDdDNfLcP0MN8hwwww3ynDjDDfJcNMMN8tw8wy3yHDLDLfKcOsMt8lw2wy3y3D7DHfIcMcMd8pw5wx3yXDXDHfLcPcM98hwzwz3ynDvDPfJcN8M98tw/wwPyPDADA/K8OAMD8nw0AwPy/DwDI/I8MgMj8rw6AyPyfDYDI/L8PgMT8jwxAxPyvDkDE/J8NQMzfC0DE/P8IwMz8zwrAzPzvCcDM/N8LwMz8/wggwvzPCiDC/O8JIML83wsgwvz/CKDK/M8KoMr87wmgyvzfC6DK/P8IYMb8zwpgxvzvCWDG/N8LYMb8/wjgzvzPCuDO/O8J4M783wvgzvz/CBDB/M8KEMH87wkQwfzfCxDB/P8IkMn8zwqQyfzvCZDJ/NcJBhkGGYYZRhnGGSYZphlmGeYZFhmWGVYZ1hk2GbYZdhn+FzGT6f4QsZvpjhSxm+nOErGb6a4WsZvp7hGxm+meFbGb6d4TsZvpvhexm+n+EHGX6Y4UcZfpzhJxl+muFnGX6e4RcZfpnhVxl+neE3GX6b4XcZfp/hDxn+mOFPGf6c4S8Z/prhbxn+nuEfGf6Z4V8Z/p3hPxn+m+F/GQ7JcGiGwzIcnuGIDEdmOCrD0RmOyXBshuPkOG6O4+U4fo4T5DhhjhPlOHGOk+Q4aY6T5Th5jlPkOGWOU+U4dY7T5DhtjtPlOH2OM+Q4Y44z5ThzjrPkOGuOs+U4e45z5DhnjnPlOHeO8+Q4b47z5Th/jgvkuGCOC+W4cI6L5LhojovluHiOS+S4ZI5L5bh0jsvkSI7L5rhcjsvnuEKOK+a4Uo4r57hKjqvmuFqOq+e4Ro5r5rhWjmvnuE6O6+a4Xo7r57hBjhvmuFGOG+e4SY6b5rhZjpvnuEWOW+a4VY5b57hNjtvmuF2O2+e4Q4475rhTjjvnuEuOu+a4W46757hHjnvmuFeOe+e4T4775rhfjvvneECOB+Z4UI4H53hIjofmeFiOh+d4RI5H5nhUjkfneEyOx+Z4XI7H53hCjifmeFKOJ+d4So6n5miOp+V4eo5n5HhmjmfleHaO5+R4bo7n5Xh+jhfkeGGOF+V4cY6X5HhpjpfleHmOV+R4ZY5X5Xh1jtfkeG2O1+V4fY435HhjjjfleHOOt+R4a4635Xh7jnfkeGeOd+V4d4735HhvjvfleH+OD+T4YI4P5fhwjo/k+GiOj+X4eI5P5Phkjk/l+HSOz+T4bI6DHIMcwxyjHOMckxzTHLMc8xyLHMscqxzrHJsc2xy7HPscn8vx+RxfyPHFHF/K8eUcX8nx1Rxfy/H1HN/I8c0c38rx7RzfyfHdHN/L8f0cP8jxwxw/yvHjHD/J8dMcP8vx8xy/yPHLHL/K8escv8nx2xy/y/H7HH/I8cccf8rx5xx/yfHXHH/L8fcc/8jxzxz/yvHvHP/J8d8c/8txSI5DcxyW4/AcR+Q4MsdROY7OcUyOY3Mcp8BxCxyvwPELnKDACQucqMCJC5ykwEkLnKzAyQucosApC5yqwKkLnKbAaQucrsDpC5yhwBkLnKnAmQucpcBZC5ytwNkLnKPAOQucq8C5C5ynwHkLnK/A+QtcoMAFC1yowIULXKTARQtcrMDFC1yiwCULXKrApQtcpkAKXLbA5QpcvsAVClyxwJUKXLnAVQpctcDVCly9wDUKXLPAtQpcu8B1Cly3wPUKXL/ADQrcsMCNCty4wE0K3LTAzQrcvMAtCtyywK0K3LrAbQrctsDtCty+wB0K3LHAnQrcucBdCty1wN0K3L3APQrcs8C9Cty7wH0K3LfA/Qrcv8ADCjywwIMKPLjAQwo8tMDDCjy8wCMKPLLAowo8usBjCjy2wOMKPL7AEwo8scCTCjy5wFMKPLVACzytwNMLPKPAMws8q8CzCzynwHMLPK/A8wu8oMALC7yowIsLvKTASwu8rMDLC7yiwCsLvKrAqwu8psBrC7yuwOsLvKHAGwu8qcCbC7ylwFsLvK3A2wu8o8A7C7yrwLsLvKfAewu8r8D7C3ygwAcLfKjAhwt8pMBHC3yswMcLfKLAJwt8qsCnC3ymwGcLHBQYFBgWGBUYF5gUmBaYFZgXWBRYFlgVWBfYFNgW2BXYF/hcgc8X+EKBLxb4UoEvF/hKga8W+FqBrxf4RoFvFvhWgW8X+E6B7xb4XoHvF/hBgR8W+FGBHxf4SYGfFvhZgZ8X+EWBXxb4VYFfF/hNgd8W+F2B3xf4Q4E/FvhTgT8X+EuBvxb4W4G/F/hHgX8W+FeBfxf4T4H/FvhfgUMKHFrgsAKHFziiwJEFjipwdIFjChxb4DgljlvieCWOX+IEJU5Y4kQlTlziJCVOWuJkJU5e4hQlTlniVCVOXeI0JU5b4nQlTl/iDCXOWOJMJc5c4iwlzlribCXOXuIcJc5Z4lwlzl3iPCXOW+J8Jc5f4gIlLljiQiUuXOIiJS5a4mIlLl7iEiUuWeJSJS5d4jIlUuKyJS5X4vIlrlDiiiWuVOLKJa5S4qolrlbi6iWuUeKaJa5V4tolrlPiuiWuV+L6JW5Q4oYlblTixiVuUuKmJW5W4uYlblHiliVuVeLWJW5T4rYlblfi9iXuUOKOJe5U4s4l7lLiriXuVuLuJe5R4p4l7lXi3iXuU+K+Je5X4v4lHlDigSUeVOLBJR5S4qElHlbi4SUeUeKRJR5V4tElHlPisSUeV+LxJZ5Q4oklnlTiySWeUuKpJVriaSWeXuIZJZ5Z4lklnl3iOSWeW+J5JZ5f4gUlXljiRSVeXOIlJV5a4mUlXl7iFSVeWeJVJV5d4jUlXlvidSVeX+INJd5Y4k0l3lziLSXeWuJtJd5e4h0l3lniXSXeXeI9Jd5b4n0l3l/iAyU+WOJDJT5c4iMlPlriYyU+XuITJT5Z4lMlPl3iMyU+W+KgxKDEsMSoxLjEpMS0xKzEvMSixLLEqsS6xKbEtsSuxL7E50p8vsQXSnyxxJdKfLnEV0p8tcTXSny9xDdKfLPEt0p8u8R3Sny3xPdKfL/ED0r8sMSPSvy4xE9K/LTEz0r8vMQvSvyyxK9K/LrEb0r8tsTvSvy+xB9K/LHEn0r8ucRfSvy1xN9K/L3EP0r8s8S/Svy7xH9K/LfE/0ocUuLQEoeVOLzEESWOLHFUiaNLHFPi2BLHqXDcCsercPwKJ6hwwgonqnDiCiepcNIKJ6tw8gqnqHDKCqeqcOoKp6lw2gqnq3D6CmeocMYKZ6pw5gpnqXDWCmercPYK56hwzgrnqnDuCuepcN4K56tw/goXqHDBCheqcOEKF6lw0QoXq3DxCpeocMkKl6pw6QqXqZAKl61wuQqXr3CFClescKUKV65wlQpXrXC1ClevcI0K16xwrQrXrnCdCtetcL0K169wgwo3rHCjCjeucJMKN61wswo3r3CLCrescKsKt65wmwq3rXC7CrevcIcKd6xwpwp3rnCXCnetcLcKd69wjwr3rHCvCveucJ8K961wvwr3r/CACg+s8KAKD67wkAoPrfCwCg+v8IgKj6zwqAqPrvCYCo+t8LgKj6/whApPrPCkCk+u8JQKT63QCk+r8PQKz6jwzArPqvDsCs+p8NwKz6vw/AovqPDCCi+q8OIKL6nw0govq/DyCq+o8MoKr6rw6gqvqfDaCq+r8PoKb6jwxgpvqvDmCm+p8NYKb6vw9grvqPDOCu+q8O4K76nw3grvq/D+Ch+o8MEKH6rw4QofqfDRCh+r8PEKn6jwyQqfqvDpCp+p8NkKBxUGFYYVRhXGFSYVphVmFeYVFhWWFVYV1hU2FbYVdhX2FT5X4fMVvlDhixW+VOHLFb5S4asVvlbh6xW+UeGbFb5V4dsVvlPhuxW+V+H7FX5Q4YcVflThxxV+UuGnFX5W4ecVflHhlxV+VeHXFX5T4bcVflfh9xX+UOGPFf5U4c8V/lLhrxX+VuHvFf5R4Z8V/lXh3xX+U+G/Ff5X4ZAKh1Y4rMLhFY6ocGSFoyocXeGYCsdWOE6N49Y4Xo3j1zhBjRPWOFGNE9c4SY2T1jhZjZPXOEWNU9Y4VY1T1zhNjdPWOF2N09c4Q40z1jhTjTPXOEuNs9Y4W42z1zhHjXPWOFeNc9c4T43z1jhfjfPXuECNC9a4UI0L17hIjYvWuFiNi9e4RI1L1rhUjUvXuEyN1LhsjcvVuHyNK9S4Yo0r1bhyjavUuGqNq9W4eo1r1LhmjWvVuHaN69S4bo3r1bh+jRvUuGGNG9W4cY2b1LhpjZvVuHmNW9S4ZY1b1bh1jdvUuG2N29W4fY071LhjjTvVuHONu9S4a4271bh7jXvUuGeNe9W4d4371LhvjfvVuH+NB9R4YI0H1XhwjYfUeGiNh9V4eI1H1HhkjUfVeHSNx9R4bI3H1Xh8jSfUeGKNJ9V4co2n1HhqjdZ4Wo2n13hGjWfWeFaNZ9d4To3n1nhejefXeEGNF9Z4UY0X13hJjZfWeFmNl9d4RY1X1nhVjVfXeE2N19Z4XY3X13hDjTfWeFONN9d4S4231nhbjbfXeEeNd9Z4V41313hPjffWeF+N99f4QI0P1vhQjQ/X+EiNj9b4WI2P1/hEjU/W+FSNT9f4TI3P1jioMagxrDGqMa4xqTGtMasxr7GosayxqrGusamxrbGrsa/xuRqfr/GFGl+s8aUaX67xlRpfrfG1Gl+v8Y0a36zxrRrfrvGdGt+t8b0a36/xgxo/rPGjGj+u8ZMaP63xsxo/r/GLGr+s8asav67xmxq/rfG7Gr+v8Ycaf6zxpxp/rvGXGn+t8bcaf6/xjxr/rPGvGv+u8Z8a/63xvxqH1Di0xmE1Dq9xRI0jaxxV4+gax9Q4tsZxGhy3wfEaHL/BCRqcsMGJGpy4wUkanLTByRqcvMEpGpyywakanLrBaRqctsHpGpy+wRkanLHBmRqcucFZGpy1wdkanL3BORqcs8G5Gpy7wXkanLfB+Rqcv8EFGlywwYUaXLjBRRpctMHFGly8wSUaXLLBpRpcusFlGqTBZRtcrsHlG1yhwRUbXKnBlRtcpcFVG1ytwdUbXKPBNRtcq8G1G1ynwXUbXK/B9RvcoMENG9yowY0b3KTBTRvcrMHNG9yiwS0b3KrBrRvcpsFtG9yuwe0b3KHBHRvcqcGdG9ylwV0b3K3B3Rvco8E9G9yrwb0b3KfBfRvcr8H9GzygwQMbPKjBgxs8pMFDGzyswcMbPKLBIxs8qsGjGzymwWMbPK7B4xs8ocETGzypwZMbPKXBUxu0wdMaPL3BMxo8s8GzGjy7wXMaPLfB8xo8v8ELGrywwYsavLjBSxq8tMHLGry8wSsavLLBqxq8usFrGry2wesavL7BGxq8scGbGry5wVsavLXB2xq8vcE7GryzwbsavLvBexq8t8H7Gry/wQcafLDBhxp8uMFHGny0wccafLzBJxp8ssGnGny6wWcafLbBQYNBg2GDUYNxg0mDaYNZg3mDRYNlg1WDdYNNg22DXYN9g881+HyDLzT4YoMvNfhyg680+GqDrzX4eoNvNPhmg281+HaD7zT4boPvNfh+gx80+GGDHzX4cYOfNPhpg581+HmDXzT4ZYNfNfh1g980+G2D3zX4fYM/NPhjgz81+HODvzT4a4O/Nfh7g380+GeDfzX4d4P/NPhvg/81OKTBoQ0Oa3B4gyMaHNngqAZHNzimwbENjtPiuC2O1+L4LU7Q4oQtTtTixC1O0uKkLU7W4uQtTtHilC1O1eLULU7T4rQtTtfi9C3O0OKMLc7U4swtztLirC3O1uLsLc7R4pwtztXi3C3O0+K8Lc7X4vwtLtDigi0u1OLCLS7S4qItLtbi4i0u0eKSLS7V4tItLtMiLS7b4nItLt/iCi2u2OJKLa7c4iotrtriai2u3uIaLa7Z4lotrt3iOi2u2+J6La7f4gYtbtjiRi1u3OImLW7a4mYtbt7iFi1u2eJWLW7d4jYtbtvidi1u3+IOLe7Y4k4t7tziLi3u2uJuLe7e4h4t7tniXi3u3eI+Le7b4n4t7t/iAS0e2OJBLR7c4iEtHtriYS0e3uIRLR7Z4lEtHt3iMS0e2+JxLR7f4gktntjiSS2e3OIpLZ7aoi2e1uLpLZ7R4pktntXi2S2e0+K5LZ7X4vktXtDihS1e1OLFLV7S4qUtXtbi5S1e0eKVLV7V4tUtXtPitS1e1+L1Ld7Q4o0t3tTizS3e0uKtLd7W4u0t3tHinS3e1eLdLd7T4r0t3tfi/S0+0OKDLT7U4sMtPtLioy0+1uLjLT7R4pMtPtXi0y0+0+KzLQ5aDFoMW4xajFtMWkxbzFrMWyxaLFusWqxbbFpsW+xa7Ft8rsXnW3yhxRdbfKnFl1t8pcVXW3ytxddbfKPFN1t8q8W3W3ynxXdbfK/F91v8oMUPW/yoxY9b/KTFT1v8rMXPW/yixS9b/KrFr1v8psVvW/yuxe9b/KHFH1v8qcWfW/ylxV9b/K3F31v8o8U/W/yrxb9b/KfFf1v8r8UhLQ5tcViLw1sc0eLIFke1OLrFMS2ObXGcDsftcLwOx+9wgg4n7HCiDifucJIOJ+1wsg4n73CKDqfscKoOp+5wmg6n7XC6DqfvcIYOZ+xwpg5n7nCWDmftcLYOZ+9wjg7n7HCuDufucJ4O5+1wvg7n73CBDhfscKEOF+5wkQ4X7XCxDhfvcIkOl+xwqQ6X7nCZDulw2Q6X63D5DlfocMUOV+pw5Q5X6XDVDlfrcPUO1+hwzQ7X6nDtDtfpcN0O1+tw/Q436HDDDjfqcOMON+lw0w4363DzDrfocMsOt+pw6w636XDbDrfrcPsOd+hwxw536nDnDnfpcNcOd+tw9w736HDPDvfqcO8O9+lw3w7363D/Dg/o8MAOD+rw4A4P6fDQDg/r8PAOj+jwyA6P6vDoDo/p8NgOj+vw+A5P6PDEDk/q8OQOT+nw1A7t8LQOT+/wjA7P7PCsDs/u8JwOz+3wvA7P7/CCDi/s8KIOL+7wkg4v7fCyDi/v8IoOr+zwqg6v7vCaDq/t8LoOr+/whg5v7PCmDm/u8JYOb+3wtg5v7/CODu/s8K4O7+7wng7v7fC+Du/v8IEOH+zwoQ4f7vCRDh/t8LEOH+/wiQ6f7PCpDp/u8JkOn+1w0GHQYdhh1GHcYdJh2mHWYd5h0WHZYdVh3WHTYdth12Hf4XMdPt/hCx2+2OFLHb7c4Ssdvtrhax2+3uEbHb7Z4Vsdvt3hOx2+2+F7Hb7f4QcdftjhRx1+3OEnHX7a4Wcdft7hFx1+2eFXHX7d4Tcdftvhdx1+3+EPHf7Y4U8d/tzhLx3+2uFvHf7e4R8d/tnhXx3+3eE/Hf7b4X8dDulwaIfDOhze4YgOR3Y4qsPRHY7pcGyH4/Q4bo/j9Th+jxP0OGGPE/U4cY+T9Dhpj5P1OHmPU/Q4ZY9T9Th1j9P0OG2P0/U4fY8z9DhjjzP1OHOPs/Q4a4+z9Th7j3P0OGePc/U4d4/z9Dhvj/P1OH+PC/S4YI8L9bhwj4v0uGiPi/W4eI9L9Lhkj0v1uHSPy/RIj8v2uFyPy/e4Qo8r9rhSjyv3uEqPq/a4Wo+r97hGj2v2uFaPa/e4To/r9rhej+v3uEGPG/a4UY8b97hJj5v2uFmPm/e4RY9b9rhVj1v3uE2P2/a4XY/b97hDjzv2uFOPO/e4S4+79rhbj7v3uEePe/a4V49797hPj/v2uF+P+/d4QI8H9nhQjwf3eEiPh/Z4WI+H93hEj0f2eFSPR/d4TI/H9nhcj8f3eEKPJ/Z4Uo8n93hKj6f2aI+n9Xh6j2f0eGaPZ/V4do/n9Hhuj+f1eH6PF/R4YY8X9Xhxj5f0eGmPl/V4eY9X9Hhlj1f1eHWP1/R4bY/X9Xh9jzf0eGOPN/V4c4+39Hhrj7f1eHuPd/R4Z4939Xh3j/f0eG+P9/V4f48P9Phgjw/1+HCPj/T4aI+P9fh4j0/0+GSPT/X4dI/P9Phsj4Me/w8AAP//wLDz/g==")

968.7108ms ago: executing program 0 (id=907):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200000, &(0x7f0000003180)={[{@nodioread_nolock}, {@mblk_io_submit}]}, 0x1, 0x574, &(0x7f0000001980)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0)
pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x1bfc)

968.544645ms ago: executing program 1 (id=908):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket(0x2, 0x3, 0x1)
syz_emit_ethernet(0x46, &(0x7f0000000040)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x2, 0xb, 0x38, 0x6a, 0x0, 0x8, 0x1, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x39}}, @redirect={0x5, 0x2, 0x0, @remote, {0x5, 0x4, 0x3, 0x3f, 0x501, 0x66, 0x7f2, 0x48, 0x1, 0xf, @loopback, @empty}, "2b3e2a0da8e29c99"}}}}}, 0x0)

869.552312ms ago: executing program 1 (id=909):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0)
recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000300))

510.019159ms ago: executing program 1 (id=910):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1480, 0x2104}, [@IFLA_IFNAME={0x14, 0x3, 'macvtap0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x80)

495.257312ms ago: executing program 0 (id=911):
syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000080)='./file1\x00', 0x8040, &(0x7f0000000780)=ANY=[@ANYBLOB="747970653dc3a0c6f22c666f7263652c756d61736b3d30303030303030303030303030303030303030373237312c6e6f6465636f6d706f73652c6e6f626172726965722c6e6f626172726965722c6e6c733d63703836312c0000428788e0069f938c36913062a7f486408e18d7381bf36e6783d30f5fdb1614c96a2d2a6cc454a8ffc4f58beaf04bebcda9beea37feb3cca076bf02c7da5c0f790bc290aac6f2045ecb5d40662d0be11bf0a0a83a7a1fcd01f68e9bee62f4d19530ca7ecdc623a4399b73ffd319337077165cba9828f9c61b644a009ba739b18a05e531e43ad041548e38e509f94d2180828c9407faedd2afd65f18b5befbf9d0efd9c1a2ca1da1e7d174cc08fe1c163e17994c07"], 0x44, 0x703, &(0x7f0000000c00)="$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")
chroot(&(0x7f0000000000)='./file0/../file0\x00')

366.625728ms ago: executing program 0 (id=912):
syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYRES64=0x0], 0x0, 0x7b7, &(0x7f00000002c0)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000c40)='./bus\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000005c0)='./bus\x00')
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108)
getdents64(r0, &(0x7f0000006400)=""/4109, 0x100d)

361.145518ms ago: executing program 1 (id=913):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f00000001c0)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c6572726f72733d72656d6f756e742d726f2c61636c2c00a9b504852143b698d2e379891a0dde7f9adfca8cbec85bf8e749e04e"], 0x11, 0x443f, &(0x7f00000088c0)="$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")
setxattr$trusted_overlay_origin(&(0x7f0000000240)='.\x00', &(0x7f0000000000), 0x0, 0x0, 0x0)

269.961547ms ago: executing program 0 (id=914):
capset(&(0x7f0000000140)={0x20080522}, &(0x7f0000000240)={0x0, 0x0, 0x338})
setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, 0x0, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000001c0)={0x0, 0x7, 0xffff00ba})

170.095187ms ago: executing program 0 (id=915):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="f80000003e000701feffffff00000000017c0000040042800c00018006000600800a0000d1000280cb001480080007"], 0xf8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)

169.771619ms ago: executing program 0 (id=916):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000a00)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
r1 = syz_io_uring_setup(0x10d2, &(0x7f0000000340)={0x0, 0x6bf6, 0x100, 0x5, 0x12}, &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000300)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000040)=[r1], 0x1)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1})
io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0)

119.153672ms ago: executing program 4 (id=917):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$packet(0x11, 0x3, 0x300)
socketpair(0x1, 0x2, 0x1, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmmsg(r0, &(0x7f0000000280)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xdd86, r2}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)='O', 0x1}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x0)

0s ago: executing program 4 (id=918):
listen(0xffffffffffffffff, 0x6)
pipe(0x0)
syz_mount_image$exfat(&(0x7f0000000280), &(0x7f0000000000)='./file2\x00', 0x2208050, &(0x7f0000000140)=ANY=[], 0x1, 0x151b, &(0x7f0000011680)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000200)=""/179, 0xb3)

kernel console output (not intermixed with test programs):

4] usb 4-1: config 0 descriptor??
[   84.768070][ T5914] hub 4-1:0.0: USB hub found
[   84.783804][   T33] audit: type=1800 audit(1756720540.526:3): pid=6415 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.150" name="file1" dev="loop0" ino=30 res=0 errno=0
[   84.840883][ T5900] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   84.858253][ T6417] loop0: detected capacity change from 0 to 2048
[   84.888147][ T6417] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   84.923391][ T5857] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   84.972210][ T5914] hub 4-1:0.0: 1 port detected
[   85.000055][ T5900] usb 2-1: Using ep0 maxpacket: 8
[   85.006047][ T5900] usb 2-1: config 0 has no interfaces?
[   85.020123][ T5900] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee
[   85.025199][ T5900] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   85.037242][ T5900] usb 2-1: Product: syz
[   85.039385][ T5900] usb 2-1: Manufacturer: syz
[   85.043027][ T5900] usb 2-1: SerialNumber: syz
[   85.048251][ T5900] usb 2-1: config 0 descriptor??
[   85.259575][ T5900] usb 2-1: USB disconnect, device number 5
[   85.270256][   T10] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[   85.432433][   T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   85.436572][   T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[   85.440497][   T10] usb 1-1: config 1 has no interface number 0
[   85.443176][   T10] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   85.447849][   T10] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping
[   85.454124][   T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   85.457388][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   85.460617][   T10] usb 1-1: Product: syz
[   85.462315][   T10] usb 1-1: Manufacturer: syz
[   85.464157][   T10] usb 1-1: SerialNumber: syz
[   85.577569][ T5914] hub 4-1:0.0: activate --> -90
[   85.806178][ T6425] loop1: detected capacity change from 0 to 1024
[   85.824699][ T6425] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   85.829732][ T6425] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   86.079968][ T5900] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[   86.231541][ T5900] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0
[   86.234867][ T5900] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0
[   86.239122][ T5900] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x92, changing to 0x82
[   86.244143][ T5900] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 65267, setting to 1024
[   86.249015][ T5900] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024
[   86.255687][ T5900] usb 2-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=9e.7f
[   86.258745][ T5900] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   86.261794][ T5900] usb 2-1: Product: syz
[   86.263398][ T5900] usb 2-1: Manufacturer: syz
[   86.265241][ T5900] usb 2-1: SerialNumber: syz
[   86.271132][ T5900] usb 2-1: config 0 descriptor??
[   86.273779][ T6425] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[   86.277088][   T10] cdc_ncm 1-1:1.1: bind() failure
[   86.282123][ T5900] redrat3 2-1:0.0: Couldn't find all endpoints
[   86.287036][   T10] usb 1-1: USB disconnect, device number 6
[   86.302203][ T6428] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[   86.388312][ T5900] usb 4-1: USB disconnect, device number 2
[   86.440030][ T5914] usb 4-1.1: new full-speed USB device number 3 using dummy_hcd
[   86.443906][ T5914] usb 4-1-port1: attempt power cycle
[   86.520605][   T24] usb 2-1: USB disconnect, device number 6
[   86.836258][ T6432] loop0: detected capacity change from 0 to 8
[   86.863567][ T6432] SQUASHFS error: Failed to read block 0x2d7: -5
[   86.866329][ T6432] SQUASHFS error: Unable to read metadata cache entry [2d5]
[   87.039629][ T5852] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   87.432699][ T6446] cifs: Unknown parameter 'no'aN[Gzob,er;%j
[   87.432699][ T6446] z,@qJ#"h/.W1ȱnNC"C׈E)8+1<;8+`#'
[   88.220461][ T6478] loop0: detected capacity change from 0 to 40427
[   88.226755][ T6478] F2FS-fs (loop0): build fault injection rate: 771
[   88.229962][ T5900] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[   88.237426][ T6478] F2FS-fs (loop0): invalid crc value
[   88.304095][ T6478] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   88.321841][ T6478] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   88.346410][ T6478] F2FS-fs (loop0): Unexpected flush for atomic writes: ino=10, npages=1
[   88.351403][ T6478] syz.0.173: attempt to access beyond end of device
[   88.351403][ T6478] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   88.378805][ T5857] syz-executor: attempt to access beyond end of device
[   88.378805][ T5857] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[   88.385492][ T5900] usb 4-1: Using ep0 maxpacket: 16
[   88.392909][ T5857] CPU: 1 UID: 0 PID: 5857 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[   88.392925][ T5857] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   88.392933][ T5857] Call Trace:
[   88.392938][ T5857]  <TASK>
[   88.392943][ T5857]  dump_stack_lvl+0x189/0x250
[   88.392960][ T5857]  ? preempt_schedule_thunk+0x16/0x30
[   88.392979][ T5857]  ? __pfx_dump_stack_lvl+0x10/0x10
[   88.393016][ T5857]  ? __pfx_queue_work_on+0x10/0x10
[   88.393029][ T5857]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[   88.393045][ T5857]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   88.393068][ T5857]  f2fs_handle_critical_error+0x37c/0x540
[   88.393089][ T5857]  f2fs_write_end_io+0x886/0xb60
[   88.393113][ T5857]  __submit_merged_bio+0x27a/0x6a0
[   88.393134][ T5857]  __submit_merged_write_cond+0x255/0x530
[   88.393154][ T5857]  f2fs_write_data_pages+0x261d/0x3000
[   88.393195][ T5857]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   88.393277][ T5857]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[   88.393293][ T5857]  ? lockdep_hardirqs_on+0x9c/0x150
[   88.393310][ T5857]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   88.393341][ T5857]  ? __lock_acquire+0xab9/0xd20
[   88.393367][ T5857]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   88.393385][ T5857]  do_writepages+0x32e/0x550
[   88.393410][ T5857]  ? do_raw_spin_unlock+0x4d/0x240
[   88.393427][ T5857]  filemap_fdatawrite+0x199/0x240
[   88.393443][ T5857]  ? __pfx_filemap_fdatawrite+0x10/0x10
[   88.393490][ T5857]  ? do_raw_spin_unlock+0x4d/0x240
[   88.393507][ T5857]  f2fs_sync_dirty_inodes+0x31f/0x830
[   88.393529][ T5857]  f2fs_write_checkpoint+0x95a/0x1df0
[   88.393558][ T5857]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[   88.393599][ T5857]  ? f2fs_stop_gc_thread+0x7f/0xb0
[   88.393610][ T5857]  ? kfree+0x18e/0x440
[   88.393625][ T5857]  ? kill_f2fs_super+0x298/0x6c0
[   88.393641][ T5857]  kill_f2fs_super+0x2c3/0x6c0
[   88.393657][ T5857]  ? __pfx_kill_f2fs_super+0x10/0x10
[   88.393666][ T5857]  ? radix_tree_delete_item+0x2b6/0x400
[   88.393687][ T5857]  ? shrinker_free+0x2ce/0x3e0
[   88.393706][ T5857]  deactivate_locked_super+0xbc/0x130
[   88.393722][ T5857]  cleanup_mnt+0x425/0x4c0
[   88.393735][ T5857]  ? lockdep_hardirqs_on+0x9c/0x150
[   88.393752][ T5857]  task_work_run+0x1d4/0x260
[   88.393770][ T5857]  ? __pfx_task_work_run+0x10/0x10
[   88.393784][ T5857]  ? __x64_sys_umount+0x122/0x160
[   88.393802][ T5857]  ? exit_to_user_mode_loop+0x40/0x110
[   88.393821][ T5857]  exit_to_user_mode_loop+0xec/0x110
[   88.393837][ T5857]  do_syscall_64+0x2bd/0x3b0
[   88.393853][ T5857]  ? lockdep_hardirqs_on+0x9c/0x150
[   88.393868][ T5857]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   88.393880][ T5857]  ? exc_page_fault+0x9f/0xf0
[   88.393897][ T5857]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   88.393907][ T5857] RIP: 0033:0x7f7f69d8ff17
[   88.393918][ T5857] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[   88.393927][ T5857] RSP: 002b:00007ffc3f43b168 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[   88.393940][ T5857] RAX: 0000000000000000 RBX: 00007f7f69e11c05 RCX: 00007f7f69d8ff17
[   88.393948][ T5857] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc3f43b220
[   88.393954][ T5857] RBP: 00007ffc3f43b220 R08: 0000000000000000 R09: 0000000000000000
[   88.393961][ T5857] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc3f43c2b0
[   88.393968][ T5857] R13: 00007f7f69e11c05 R14: 00000000000158b7 R15: 00007ffc3f43c2f0
[   88.393989][ T5857]  </TASK>
[   88.394283][ T5857] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[   88.537678][ T5900] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 78, changing to 10
[   88.541777][ T5900] usb 4-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00
[   88.545274][ T5900] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   88.552422][ T5900] usb 4-1: config 0 descriptor??
[   88.965865][ T5900] uclogic 0003:2179:0053.0003: interface is invalid, ignoring
[   89.166640][ T2304] usb 4-1: USB disconnect, device number 7
[   89.384574][ T6519] ieee802154 phy0 wpan0: encryption failed: -22
[   89.712039][ T6523] futex_wake_op: syz.1.184 tries to shift op by 144; fix this program
[   89.996565][ T6525] loop0: detected capacity change from 0 to 256
[   90.023986][ T6525] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[   90.133868][ T6534] loop3: detected capacity change from 0 to 4096
[   90.157204][ T6536] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   90.511354][ T6553] loop1: detected capacity change from 0 to 2048
[   90.533377][ T6553] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found
[   90.541951][ T6553] UDF-fs: Scanning with blocksize 512 failed
[   90.578046][ T6553] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   90.745760][ T6561] loop3: detected capacity change from 0 to 4096
[   90.775276][ T6562] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   90.965301][ T6572] loop1: detected capacity change from 0 to 512
[   90.968609][ T6572] EXT4-fs: Ignoring removed nomblk_io_submit option
[   90.979011][ T6572] EXT4-fs: Ignoring removed i_version option
[   90.998711][ T6572] EXT4-fs (loop1): 1 orphan inode deleted
[   91.006814][ T6572] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   91.051524][ T5852] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   91.648159][ T6588] loop1: detected capacity change from 0 to 32768
[   91.664576][ T6588] jfs_strtoUCS: char2uni returned -22.
[   91.666942][ T6588] charset = cp936, char = 0xd4
[   91.700075][   T24] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[   91.850073][   T24] usb 1-1: Using ep0 maxpacket: 32
[   91.853181][ T6592] loop1: detected capacity change from 0 to 128
[   91.857680][   T24] usb 1-1: config 0 has an invalid interface number: 23 but max is 0
[   91.861063][   T24] usb 1-1: config 0 has no interface number 0
[   91.863672][   T24] usb 1-1: config 0 interface 23 has no altsetting 0
[   91.876531][ T6592] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   91.888933][ T6592] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   91.940045][   T24] usb 1-1: New USB device found, idVendor=0557, idProduct=2002, bcdDevice=b6.ad
[   91.943672][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   91.946907][   T24] usb 1-1: Product: syz
[   91.948659][   T24] usb 1-1: Manufacturer: syz
[   91.965765][   T24] usb 1-1: SerialNumber: syz
[   91.972113][   T24] usb 1-1: config 0 descriptor??
[   92.219379][ T6586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   92.224716][ T6586] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   92.242432][   T24] kaweth 1-1:0.23: Firmware present in device.
[   92.245593][   T24] kaweth 1-1:0.23: Error reading configuration (-71), no net device created
[   92.255512][   T24] kaweth 1-1:0.23: probe with driver kaweth failed with error -5
[   92.612861][   T24] usb 1-1: USB disconnect, device number 7
[   92.647586][ T6594] loop3: detected capacity change from 0 to 32768
[   92.654956][ T6594] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.215 (6594)
[   92.678040][ T6594] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   92.688502][ T6594] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[   92.711834][ T6594] BTRFS info (device loop3): enabling ssd optimizations
[   92.714356][ T6594] BTRFS info (device loop3): enabling free space tree
[   92.743043][ T6134] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   93.092562][ T6628] netlink: 'syz.1.223': attribute type 4 has an invalid length.
[   93.197776][ T6634] loop1: detected capacity change from 0 to 16
[   93.234790][ T6634] erofs (device loop1): mounted with root inode @ nid 36.
[   93.292248][ T6640] loop3: detected capacity change from 0 to 1024
[   93.302787][ T6640] hfsplus: failed to load root directory
[   93.560199][ T6642] loop0: detected capacity change from 0 to 32768
[   93.563535][ T6642] XFS: noikeep mount option is deprecated.
[   93.623424][ T6642] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   93.665359][ T6642] XFS (loop0): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[   93.675046][ T6642] XFS (loop0): Starting recovery (logdev: internal)
[   93.693988][ T6642] XFS (loop0): Ending recovery (logdev: internal)
[   93.763350][ T6638] XFS (loop0): Metadata corruption detected at xfs_btree_lookup_get_block+0x3c5/0x500, xfs_bnobt block 0x8
[   93.768401][ T6638] XFS (loop0): Unmount and run xfs_repair
[   93.773373][ T6638] XFS (loop0): Internal error i != 1 at line 628 of file fs/xfs/libxfs/xfs_alloc.c.  Caller xfs_alloc_fixup_trees+0x929/0xd20
[   93.778944][ T6638] CPU: 0 UID: 0 PID: 6638 Comm: syz.0.227 Not tainted syzkaller #0 PREEMPT(full) 
[   93.778961][ T6638] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   93.778968][ T6638] Call Trace:
[   93.778975][ T6638]  <TASK>
[   93.778980][ T6638]  dump_stack_lvl+0x189/0x250
[   93.778999][ T6638]  ? __pfx__xfs_alert_tag+0x10/0x10
[   93.779014][ T6638]  ? __pfx_dump_stack_lvl+0x10/0x10
[   93.779031][ T6638]  ? __pfx_xfs_btree_lookup+0x10/0x10
[   93.779050][ T6638]  xfs_corruption_error+0x122/0x170
[   93.779065][ T6638]  ? xfs_alloc_fixup_trees+0x929/0xd20
[   93.779085][ T6638]  xfs_alloc_fixup_trees+0x95e/0xd20
[   93.779101][ T6638]  ? xfs_alloc_fixup_trees+0x929/0xd20
[   93.779121][ T6638]  ? __pfx_xfs_alloc_fixup_trees+0x10/0x10
[   93.779138][ T6638]  ? rcu_is_watching+0x15/0xb0
[   93.779151][ T6638]  ? xfs_alloc_ag_vextent_lastblock+0x3e2/0x6e0
[   93.779193][ T6638]  ? rcu_is_watching+0x15/0xb0
[   93.779211][ T6638]  xfs_alloc_cur_finish+0xd3/0x4b0
[   93.779233][ T6638]  xfs_alloc_ag_vextent_near+0xd1a/0x1230
[   93.779267][ T6638]  ? __pfx_xfs_alloc_ag_vextent_near+0x10/0x10
[   93.779285][ T6638]  ? xfs_group_grab+0x28/0x480
[   93.779298][ T6638]  ? xfs_alloc_vextent_prepare_ag+0x1b2/0x610
[   93.779317][ T6638]  xfs_alloc_vextent_iterate_ags+0x640/0x940
[   93.779344][ T6638]  xfs_alloc_vextent_start_ag+0x388/0x850
[   93.779365][ T6638]  xfs_bmapi_allocate+0x188e/0x2e00
[   93.779394][ T6638]  ? __pfx_xfs_bmapi_allocate+0x10/0x10
[   93.779417][ T6638]  ? xfs_iext_lookup_extent+0x41e/0x7e0
[   93.779431][ T6638]  ? xfs_iext_prev+0x35a/0x370
[   93.779443][ T6638]  ? xfs_iext_get_extent+0x1bb/0x370
[   93.779461][ T6638]  xfs_bmapi_write+0x7df/0x1260
[   93.779486][ T6638]  ? __pfx_xfs_bmapi_write+0x10/0x10
[   93.779519][ T6638]  ? rcu_is_watching+0x15/0xb0
[   93.779535][ T6638]  xfs_da_grow_inode_int+0x298/0x860
[   93.779559][ T6638]  ? __pfx_xfs_da_grow_inode_int+0x10/0x10
[   93.779575][ T6638]  ? xfs_attr3_leaf_lookup_int+0xaaa/0xe90
[   93.779594][ T6638]  xfs_da_grow_inode+0x16d/0x390
[   93.779608][ T6638]  ? __pfx_xfs_da_grow_inode+0x10/0x10
[   93.779620][ T6638]  ? xfs_da3_node_lookup_int+0x111e/0x1330
[   93.779646][ T6638]  xfs_attr3_leaf_split+0x15e/0xa60
[   93.779662][ T6638]  ? __pfx_xfs_attr3_leaf_split+0x10/0x10
[   93.779683][ T6638]  xfs_da3_split+0x2f8/0x10d0
[   93.779701][ T6638]  xfs_attr_set_iter+0x1d5b/0x4b70
[   93.779713][ T6638]  ? filename_setxattr+0x274/0x600
[   93.779728][ T6638]  ? path_setxattrat+0x364/0x3a0
[   93.779737][ T6638]  ? __x64_sys_setxattr+0xbc/0xe0
[   93.779754][ T6638]  ? __pfx_xfs_attr_set_iter+0x10/0x10
[   93.779776][ T6638]  ? kasan_quarantine_put+0xdd/0x220
[   93.779792][ T6638]  ? lockdep_hardirqs_on+0x9c/0x150
[   93.779814][ T6638]  ? __xfs_trans_commit+0x3e0/0xbd0
[   93.779829][ T6638]  ? kmem_cache_free+0x18f/0x400
[   93.779863][ T6638]  ? __xfs_trans_commit+0x3e0/0xbd0
[   93.779882][ T6638]  ? __xfs_trans_commit+0x4c7/0xbd0
[   93.779907][ T6638]  xfs_attr_finish_item+0xed/0x320
[   93.779924][ T6638]  ? __pfx_xfs_attr_finish_item+0x10/0x10
[   93.779936][ T6638]  xfs_defer_finish_one+0x5c8/0xcf0
[   93.779962][ T6638]  ? __pfx_xfs_defer_finish_one+0x10/0x10
[   93.779982][ T6638]  xfs_defer_finish_noroll+0x910/0x12d0
[   93.779997][ T6638]  ? xfs_trans_commit+0x10b/0x1c0
[   93.780015][ T6638]  ? __pfx_xfs_defer_finish_noroll+0x10/0x10
[   93.780026][ T6638]  ? inode_set_ctime_current+0x740/0xb40
[   93.780045][ T6638]  ? inode_maybe_inc_iversion+0x17c/0x1e0
[   93.780063][ T6638]  xfs_trans_commit+0x10b/0x1c0
[   93.780078][ T6638]  ? __pfx_xfs_trans_commit+0x10/0x10
[   93.780097][ T6638]  ? xfs_trans_log_inode+0x12c/0x1a0
[   93.780113][ T6638]  xfs_attr_set+0xdc6/0x1210
[   93.780133][ T6638]  ? __pfx_xfs_attr_set+0x10/0x10
[   93.780152][ T6638]  ? xfs_da_hashname+0x59d/0x740
[   93.780186][ T6638]  ? do_raw_spin_lock+0x121/0x290
[   93.780208][ T6638]  ? xfs_attr_change+0x2ac/0x390
[   93.780228][ T6638]  xfs_xattr_set+0x14d/0x250
[   93.780248][ T6638]  ? __pfx_xfs_xattr_set+0x10/0x10
[   93.780273][ T6638]  ? evm_protect_xattr+0x4d4/0xa90
[   93.780291][ T6638]  ? __pfx_evm_protect_xattr+0x10/0x10
[   93.780306][ T6638]  ? __pfx_xfs_xattr_set+0x10/0x10
[   93.780321][ T6638]  __vfs_setxattr+0x43c/0x480
[   93.780348][ T6638]  __vfs_setxattr_noperm+0x12d/0x660
[   93.780369][ T6638]  vfs_setxattr+0x16b/0x2f0
[   93.780389][ T6638]  ? __pfx_vfs_setxattr+0x10/0x10
[   93.780403][ T6638]  ? mnt_get_write_access+0x223/0x2a0
[   93.780424][ T6638]  filename_setxattr+0x274/0x600
[   93.780448][ T6638]  ? __pfx_filename_setxattr+0x10/0x10
[   93.780468][ T6638]  ? getname_flags+0x1e5/0x540
[   93.780483][ T6638]  path_setxattrat+0x364/0x3a0
[   93.780503][ T6638]  ? __pfx_path_setxattrat+0x10/0x10
[   93.780515][ T6638]  ? do_futex+0x333/0x420
[   93.780546][ T6638]  ? __bad_area_nosemaphore+0x3fb/0x780
[   93.780562][ T6638]  ? rcu_is_watching+0x15/0xb0
[   93.780576][ T6638]  __x64_sys_setxattr+0xbc/0xe0
[   93.780590][ T6638]  do_syscall_64+0xfa/0x3b0
[   93.780605][ T6638]  ? lockdep_hardirqs_on+0x9c/0x150
[   93.780621][ T6638]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   93.780640][ T6638]  ? exc_page_fault+0x9f/0xf0
[   93.780657][ T6638]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   93.780669][ T6638] RIP: 0033:0x7f7f69d8ebe9
[   93.780682][ T6638] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   93.780692][ T6638] RSP: 002b:00007f7f6ac6b038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc
[   93.780705][ T6638] RAX: ffffffffffffffda RBX: 00007f7f69fc5fa0 RCX: 00007f7f69d8ebe9
[   93.780713][ T6638] RDX: 0000200000000200 RSI: 00002000000001c0 RDI: 0000200000000000
[   93.780720][ T6638] RBP: 00007f7f69e11e19 R08: 0000000000000000 R09: 0000000000000000
[   93.780728][ T6638] R10: 0000000000000841 R11: 0000000000000246 R12: 0000000000000000
[   93.780735][ T6638] R13: 00007f7f69fc6038 R14: 00007f7f69fc5fa0 R15: 00007ffc3f43bed8
[   93.780755][ T6638]  </TASK>
[   94.010699][ T6638] XFS (loop0): Corruption detected. Unmount and run xfs_repair
[   94.014104][ T6642] XFS (loop0): Metadata corruption detected at xfs_btree_lookup_get_block+0x3c5/0x500, xfs_bnobt block 0x8
[   94.019983][ T6642] XFS (loop0): Unmount and run xfs_repair
[   94.023981][ T6638] XFS (loop0): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0xcc0/0x12d0 (fs/xfs/libxfs/xfs_defer.c:721).  Shutting down filesystem.
[   94.031317][ T6638] XFS (loop0): Please unmount the filesystem and rectify the problem(s)
[   94.128939][ T5857] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   94.505028][ T6686] loop3: detected capacity change from 0 to 1024
[   94.555482][   T26] hfsplus: b-tree write err: -5, ino 4
[   94.728598][ T6698] loop1: detected capacity change from 0 to 2048
[   94.769603][ T6698] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   95.096985][ T6721] loop1: detected capacity change from 0 to 128
[   95.143882][ T6721] syz.1.261: attempt to access beyond end of device
[   95.143882][ T6721] loop1: rw=34817, sector=102, nr_sectors = 32 limit=128
[   95.430095][ T6732] netlink: 176 bytes leftover after parsing attributes in process `syz.1.264'.
[   95.904084][ T6752] loop1: detected capacity change from 0 to 1764
[   96.098599][ T6756] loop1: detected capacity change from 0 to 256
[   96.107888][ T6756] vfat: Deprecated parameter 'posix'
[   96.115516][ T6756] FAT-fs: "posix" option is obsolete, not supported now
[   96.360190][ T6774] loop1: detected capacity change from 0 to 512
[   96.366444][ T6774] EXT4-fs: Ignoring removed orlov option
[   96.382258][ T6774] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[   96.390742][ T6774] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002]
[   96.401878][ T6774] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #15: comm syz.1.284: corrupted in-inode xattr: e_value size too large
[   96.410189][ T6774] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.284: couldn't read orphan inode 15 (err -117)
[   96.426084][ T6774] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   96.527607][ T5852] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   96.597831][ T6783] loop0: detected capacity change from 0 to 2048
[   96.615046][ T6785] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   96.632764][ T6783] NILFS error (device loop0): nilfs_check_folio: bad entry in directory #12: rec_len is smaller than minimal - offset=1024, inode=0, rec_len=0, name_len=0
[   96.646386][ T6783] Remounting filesystem read-only
[   96.746727][ T6789] netlink: 140 bytes leftover after parsing attributes in process `syz.0.290'.
[   96.750056][ T5900] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[   96.900003][ T5900] usb 4-1: Using ep0 maxpacket: 16
[   96.923227][ T5900] usb 4-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[   96.927203][ T5900] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   96.932259][ T5900] usb 4-1: Product: syz
[   96.934111][ T5900] usb 4-1: Manufacturer: syz
[   96.936243][ T5900] usb 4-1: SerialNumber: syz
[   96.949091][ T5900] usb 4-1: config 0 descriptor??
[   96.958203][ T5900] visor 4-1:0.0: Sony Clie 3.5 converter detected
[   97.400393][ T5900] usb 4-1: Sony Clie 3.5 converter now attached to ttyUSB0
[   97.594168][ T2304] usb 4-1: USB disconnect, device number 8
[   97.621731][ T2304] clie_3.5 ttyUSB0: Sony Clie 3.5 converter now disconnected from ttyUSB0
[   97.634359][ T2304] visor 4-1:0.0: device disconnected
[   98.189209][ T6805] program syz.3.296 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   98.360298][ T6799] loop0: detected capacity change from 0 to 32768
[   98.419319][ T6807] loop1: detected capacity change from 0 to 40427
[   98.423623][ T6807] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[   98.426809][ T6807] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[   98.434536][ T6807] F2FS-fs (loop1): invalid crc value
[   98.492424][ T6807] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   98.505639][ T6807] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[   98.508449][ T6807] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   98.565485][ T6817] netlink: 24 bytes leftover after parsing attributes in process `syz.3.301'.
[   98.812337][ T6825] loop1: detected capacity change from 0 to 1024
[   98.834140][ T6825] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   98.844400][ T6825] ext4 filesystem being mounted at /103/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   98.904759][ T5852] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   99.331993][ T6834] netlink: 24 bytes leftover after parsing attributes in process `syz.1.306'.
[   99.673930][ T6846] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.310'.
[   99.986674][ T6849] warning: `syz.1.311' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  100.067723][ T6851] loop3: detected capacity change from 0 to 128
[  100.081350][ T6851] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement.
[  100.302500][ T6872] netlink: 'syz.3.322': attribute type 4 has an invalid length.
[  100.347126][ T6872] netlink: 'syz.3.322': attribute type 4 has an invalid length.
[  101.740329][   T10] IPVS: starting estimator thread 0...
[  101.802587][ T6908] loop1: detected capacity change from 0 to 1024
[  101.830466][ T6906] IPVS: using max 82 ests per chain, 196800 per kthread
[  101.920805][ T2304] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  103.094580][ T6916] loop1: detected capacity change from 0 to 262144
[  103.104313][ T6916] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.340 (6916)
[  103.115135][ T6916] BTRFS info (device loop1): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53
[  103.119167][ T6916] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm
[  103.138777][ T2304] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  103.154471][ T2304] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  103.163124][ T2304] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  103.183167][ T2304] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  103.186562][ T2304] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  103.193217][ T2304] usb 1-1: config 0 descriptor??
[  103.200585][ T6916] BTRFS info (device loop1): enabling ssd optimizations
[  103.203561][ T6916] BTRFS info (device loop1): using spread ssd allocation scheme
[  103.206251][ T6916] BTRFS info (device loop1): enabling free space tree
[  103.244762][   T33] audit: type=1800 audit(1756720558.986:4): pid=6916 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.340" name="bus" dev="loop1" ino=263 res=0 errno=0
[  103.445863][ T5852] BTRFS info (device loop1): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53
[  103.635506][ T6952] loop3: detected capacity change from 0 to 256
[  103.636000][ T2304] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  103.682064][ T6952] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011bf5, chksum : 0xcea91b8a, utbl_chksum : 0xe619d30d)
[  103.697481][ T6952] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186)
[  104.086680][ T6958] loop3: detected capacity change from 0 to 32768
[  104.121751][ T6958] JBD2: Ignoring recovery information on journal
[  104.127876][ T6963] loop1: detected capacity change from 0 to 1024
[  104.173103][ T6963] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  104.187283][ T6958] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  104.239670][ T5852] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  104.376233][ T6969] OCFS2: ERROR (device loop3): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #17056 has bad parent pointer (312, expected 74)
[  104.385076][ T6969] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  104.388904][ T6969] OCFS2: File system is now read-only.
[  104.414004][ T6969] (syz.3.352,6969,1):_ocfs2_free_suballoc_bits:2579 ERROR: status = -30
[  104.425204][ T6969] (syz.3.352,6969,1):ocfs2_remove_inode:775 ERROR: status = -30
[  104.453338][ T6969] (syz.3.352,6969,1):ocfs2_wipe_inode:897 ERROR: status = -30
[  104.464136][ T6969] (syz.3.352,6969,1):ocfs2_delete_inode:1158 ERROR: status = -30
[  105.173456][ T6981] process 'syz.1.358' launched '/dev/fd/6' with NULL argv: empty string added
[  105.891591][ T6134] ocfs2: Unmounting device (7,3) on (node local)
[  106.229967][   T51] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  106.270746][ T6986] loop0: detected capacity change from 0 to 32768
[  106.280249][ T6986] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.362 (6986)
[  106.290868][ T6986] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  106.295041][ T6986] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm
[  106.298775][ T6986] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  106.337843][ T6986] BTRFS info (device loop0): rebuilding free space tree
[  106.363228][ T6986] BTRFS info (device loop0): disabling free space tree
[  106.366384][ T6986] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  106.371501][ T6986] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  106.379956][   T51] usb 2-1: Using ep0 maxpacket: 16
[  106.382354][ T6986] BTRFS info (device loop0): allowing degraded mounts
[  106.385349][ T6986] BTRFS info (device loop0): enabling ssd optimizations
[  106.388400][ T6986] BTRFS info (device loop0): enabling disk space caching
[  106.391820][ T6986] BTRFS info (device loop0): force clearing of disk cache
[  106.393306][   T51] usb 2-1: config 0 has an invalid interface number: 214 but max is 0
[  106.394832][ T6986] BTRFS info (device loop0): use zlib compression, level 3
[  106.397264][   T51] usb 2-1: config 0 has no interface number 0
[  106.399348][   T51] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5
[  106.406336][   T51] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  106.410708][   T51] usb 2-1: Product: syz
[  106.412511][   T51] usb 2-1: Manufacturer: syz
[  106.414510][   T51] usb 2-1: SerialNumber: syz
[  106.422542][   T51] usb 2-1: config 0 descriptor??
[  106.445733][ T6986] BTRFS info (device loop0): balance: start -f -sprofiles=raid0|dup|0x800,usage=47244704239,drange=5..0,vrange=288230376151711744..1,limit=471..128,stripes=0..0
[  106.459097][ T6986] BTRFS info (device loop0): balance: ended with status: 0
[  106.498257][ T5914] usb 1-1: USB disconnect, device number 8
[  106.503061][ T5857] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  106.675009][   T51] usb 2-1: USB disconnect, device number 7
[  106.748556][ T7013] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.365'.
[  107.049544][ T7022] loop0: detected capacity change from 0 to 512
[  107.066590][ T7022] EXT4-fs error (device loop0): ext4_iget_extra_inode:5104: inode #15: comm syz.0.368: corrupted in-inode xattr: invalid ea_ino
[  107.080191][ T7022] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.368: couldn't read orphan inode 15 (err -117)
[  107.088729][ T7022] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  107.826178][ T5857] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  108.155942][ T7040] loop1: detected capacity change from 0 to 16
[  108.164936][ T7040] erofs (device loop1): mounted with root inode @ nid 36.
[  108.257091][ T7044] loop0: detected capacity change from 0 to 2048
[  108.311168][ T7044] Alternate GPT is invalid, using primary GPT.
[  108.314067][ T7044]  loop0: p2 p3 p7
[  108.462980][ T7048] loop3: detected capacity change from 0 to 256
[  108.471002][ T7048] exfat: Deprecated parameter 'utf8'
[  108.530378][ T7050] loop0: detected capacity change from 0 to 4096
[  108.534610][ T7048] exFAT-fs (loop3): error, data size is invalid(34359738378)
[  108.539625][ T7046] loop1: detected capacity change from 0 to 32768
[  108.572695][ T7046] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  108.619272][ T7046] OCFS2: ERROR (device loop1): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #2304 has bad signature 
[  108.644546][ T7046] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  108.648196][ T7046] OCFS2: File system is now read-only.
[  108.652316][ T7046] (syz.1.378,7046,0):ocfs2_search_chain:1852 ERROR: status = -30
[  108.656093][ T7046] (syz.1.378,7046,0):ocfs2_search_chain:1940 ERROR: status = -30
[  108.659370][ T7046] (syz.1.378,7046,0):ocfs2_claim_suballoc_bits:2010 ERROR: status = -30
[  108.663413][ T7046] (syz.1.378,7046,0):ocfs2_claim_suballoc_bits:2063 ERROR: status = -30
[  108.666846][ T7046] (syz.1.378,7046,0):__ocfs2_claim_clusters:2438 ERROR: status = -30
[  108.670522][ T7046] (syz.1.378,7046,0):__ocfs2_claim_clusters:2446 ERROR: status = -30
[  108.675415][ T7046] (syz.1.378,7046,0):ocfs2_local_alloc_new_window:1199 ERROR: status = -30
[  108.679009][ T7046] (syz.1.378,7046,0):ocfs2_local_alloc_new_window:1224 ERROR: status = -30
[  108.682940][ T7046] (syz.1.378,7046,0):ocfs2_local_alloc_slide_window:1298 ERROR: status = -30
[  108.686733][ T7046] (syz.1.378,7046,0):ocfs2_local_alloc_slide_window:1317 ERROR: status = -30
[  108.691771][ T7046] (syz.1.378,7046,0):ocfs2_reserve_local_alloc_bits:672 ERROR: status = -30
[  108.695279][ T7046] (syz.1.378,7046,0):ocfs2_reserve_local_alloc_bits:710 ERROR: status = -30
[  108.699265][ T7046] (syz.1.378,7046,0):ocfs2_reserve_clusters_with_limit:1172 ERROR: status = -30
[  108.705022][ T7046] (syz.1.378,7046,0):ocfs2_reserve_clusters_with_limit:1221 ERROR: status = -30
[  108.708724][ T7046] (syz.1.378,7046,0):ocfs2_expand_inline_dir:2864 ERROR: status = -30
[  108.712194][ T7046] (syz.1.378,7046,0):ocfs2_extend_dir:3211 ERROR: status = -30
[  108.715409][ T7046] (syz.1.378,7046,0):ocfs2_prepare_dir_for_insert:4316 ERROR: status = -30
[  108.718829][ T7046] (syz.1.378,7046,0):ocfs2_rename:1486 ERROR: status = -30
[  108.723585][ T7046] (syz.1.378,7046,0):ocfs2_rename:1702 ERROR: status = -30
[  108.746945][ T5852] (syz-executor,5852,0):ocfs2_inode_is_valid_to_delete:948 ERROR: Skipping delete of system file 72
[  108.755573][ T7050] ntfs3(loop0): ino=21, "file1" The size of extended attributes must not exceed 64KiB
[  108.767084][ T5852] ocfs2: Unmounting device (7,1) on (node local)
[  109.200085][ T5236] Bluetooth: hci2: command 0x0405 tx timeout
[  109.311923][ T7061] loop1: detected capacity change from 0 to 128
[  109.344477][ T7061] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  109.354374][ T7061] ext4 filesystem being mounted at /136/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  109.416566][ T5852] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  109.681560][ T7067] raw_sendmsg: syz.1.385 forgot to set AF_INET. Fix it!
[  109.718694][ T7071] loop3: detected capacity change from 0 to 8
[  109.739093][ T7071] SQUASHFS error: xz decompression failed, data probably corrupt
[  109.745151][ T7071] SQUASHFS error: Failed to read block 0x108: -5
[  109.747615][ T7071] SQUASHFS error: Unable to read metadata cache entry [106]
[  109.757390][ T7071] SQUASHFS error: Unable to read inode 0x11f
[  109.817562][ T7077] loop1: detected capacity change from 0 to 1024
[  109.824712][ T7077] EXT4-fs: Ignoring removed bh option
[  109.826628][ T7077] EXT4-fs: inline encryption not supported
[  109.831401][ T7077] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  109.845867][ T7077] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e018, mo2=0001]
[  109.849749][ T7077] EXT4-fs error (device loop1): ext4_ext_check_inode:523: inode #11: comm syz.1.390: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0)
[  109.864408][ T7077] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.390: couldn't read orphan inode 11 (err -117)
[  109.888180][ T7077] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  109.906598][ T7077] System zones: 0-1, 3-12
[  109.908229][ T7077] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  109.942706][ T5852] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  110.203341][ T7100] loop3: detected capacity change from 0 to 4096
[  110.247691][ T7100] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  110.291610][ T6134] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  110.329195][ T7106] loop0: detected capacity change from 0 to 16
[  110.333988][ T7106] erofs (device loop0): mounted with root inode @ nid 36.
[  110.528844][ T7112] loop0: detected capacity change from 0 to 4096
[  110.538564][ T7112] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512).
[  110.562513][ T7112] ntfs3(loop0): ino=1a, mi_enum_attr
[  110.564893][ T7112] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  110.572335][ T7112] ntfs3(loop0): ino=1a, mi_enum_attr
[  110.574618][ T7112] ntfs3(loop0): Failed to initialize $Extend/$Reparse.
[  110.595955][ T7108] loop3: detected capacity change from 0 to 32768
[  110.970805][ T7131] loop0: detected capacity change from 0 to 16
[  110.980842][ T7129] loop3: detected capacity change from 0 to 4096
[  110.983128][ T7131] erofs (device loop0): algorithm 1 isn't enabled on this kernel
[  111.055545][ T7132] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  111.072021][   T33] audit: type=1800 audit(1756720566.806:5): pid=7129 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.409" name="file1" dev="loop3" ino=15 res=0 errno=0
[  111.103621][ T7129] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  111.117281][ T7129] Remounting filesystem read-only
[  111.125296][ T7129] NILFS (loop3): DAT doesn't have a block to manage vblocknr = 524288
[  111.129166][ T7129] NILFS error (device loop3): nilfs_bmap_truncate: broken bmap (inode number=15)
[  111.135076][ T7129] NILFS (loop3): error -5 truncating bmap (ino=15)
[  111.140270][ T5914] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  111.167324][ T7138] loop0: detected capacity change from 0 to 256
[  111.182317][ T6134] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer
[  111.202005][ T7138] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  111.206282][ T7138] exFAT-fs (loop0): Medium has reported failures. Some data may be lost.
[  111.238392][ T7138] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  111.290165][ T5914] usb 2-1: Using ep0 maxpacket: 16
[  111.295572][ T5914] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  111.302599][ T5914] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  111.312123][ T5914] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  111.316230][ T5914] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  111.319676][ T5914] usb 2-1: Product: syz
[  111.324844][ T5914] usb 2-1: Manufacturer: syz
[  111.332103][ T5914] usb 2-1: SerialNumber: syz
[  111.351376][ T5914] usb 2-1: config 0 descriptor??
[  111.362315][ T5914] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  111.366324][ T5914] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class)
[  111.392629][ T7143] loop0: detected capacity change from 0 to 1024
[  111.403541][ T7143] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  111.429004][ T7143] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #3: block 1: comm syz.0.415: lblock 1 mapped to illegal pblock 1 (length 1)
[  111.435387][ T7143] Quota error (device loop0): write_blk: dquota write failed
[  111.438844][ T7143] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[  111.445616][ T7143] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.415: Failed to acquire dquot type 0
[  111.451026][ T7143] EXT4-fs error (device loop0): ext4_free_blocks:6696: comm syz.0.415: Freeing blocks not in datazone - block = 0, count = 4096
[  111.458081][ T7143] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.415: Invalid inode bitmap blk 0 in block_group 0
[  111.465330][ T7143] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem
[  111.468479][ T7143] EXT4-fs (loop0): 1 orphan inode deleted
[  111.474102][   T52] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 1: comm kworker/u9:2: lblock 1 mapped to illegal pblock 1 (length 1)
[  111.475075][ T7143] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  111.481896][   T52] Quota error (device loop0): remove_tree: Can't read quota data block 1
[  111.487368][   T52] EXT4-fs error (device loop0): ext4_release_dquot:6973: comm kworker/u9:2: Failed to release dquot type 0
[  111.500019][ T5900] usb 4-1: new full-speed USB device number 9 using dummy_hcd
[  111.514785][ T5857] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  111.653126][ T5900] usb 4-1: config 0 has no interfaces?
[  111.655690][ T5900] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  111.663650][ T5900] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  111.678090][ T5900] usb 4-1: config 0 descriptor??
[  111.829957][ T7148] loop0: detected capacity change from 0 to 32768
[  111.850273][ T7148] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  111.875697][ T7148] XFS (loop0): Ending clean mount
[  111.891658][ T5900] usb 4-1: USB disconnect, device number 9
[  111.968044][ T5914] em28xx 2-1:0.0: chip ID is em2874
[  111.995722][ T5857] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  112.174612][ T5900] usb 2-1: USB disconnect, device number 8
[  112.180064][ T5900] em28xx 2-1:0.0: Disconnecting em28xx
[  112.185420][ T5900] em28xx 2-1:0.0: Freeing device
[  113.504731][ T7164] delete_channel: no stack
[  113.702943][ T7185] loop3: detected capacity change from 0 to 4096
[  113.705990][ T7185] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512).
[  113.709426][ T7185] ntfs3(loop3): ino=3, mi_enum_attr
[  114.030106][   T24] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  114.190567][   T24] usb 1-1: Using ep0 maxpacket: 16
[  114.198222][   T24] usb 1-1: config 0 has an invalid interface number: 105 but max is 0
[  114.201958][   T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  114.206794][   T24] usb 1-1: config 0 has no interface number 0
[  114.212055][   T24] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[  114.216999][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  114.220652][   T24] usb 1-1: Product: syz
[  114.222397][   T24] usb 1-1: Manufacturer: syz
[  114.224313][   T24] usb 1-1: SerialNumber: syz
[  114.228213][   T24] usb 1-1: config 0 descriptor??
[  114.237911][   T24] usb 1-1: Found UVC 0.00 device syz (046d:08f3)
[  114.241020][   T24] usb 1-1: No valid video chain found.
[  114.266117][ T7195] loop1: detected capacity change from 0 to 32768
[  114.332273][ T7195] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  114.332292][ T7195]   allowing incompatible features above 0.0: (unknown version)
[  114.332300][ T7195]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  114.353479][ T7195] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0
[  114.356995][ T7195] bcachefs (loop1): initializing new filesystem
[  114.366312][ T7195] bcachefs (loop1): going read-write
[  114.373344][ T7195] bcachefs (loop1): marking superblocks
[  114.391249][ T7195] bcachefs (loop1): initializing freespace
[  114.399478][ T7195] bcachefs (loop1): done initializing freespace
[  114.410112][ T7195] bcachefs (loop1): reading snapshots table
[  114.412646][ T7195] bcachefs (loop1): reading snapshots done
[  114.435797][ T7195] bcachefs (loop1): done starting filesystem
[  114.473650][   T24] usb 1-1: USB disconnect, device number 9
[  114.524596][ T7195] bcachefs (loop1): requested incompat feature 1.27: fast_device_removal currently not enabled, allowed up to 1.27: fast_device_removal
[  114.524596][ T7195]   set version_upgrade=incompat to enable
[  114.531989][ T7195] bcachefs (loop1): Cannot remove without losing data
[  114.553241][ T5852] bcachefs (loop1): shutting down
[  114.555730][ T5852] bcachefs (loop1): going read-only
[  114.557817][ T5852] bcachefs (loop1): finished waiting for writes to stop
[  114.566424][ T5852] bcachefs (loop1): flushing journal and stopping allocators, journal seq 2
[  114.594310][ T5852] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 3
[  114.599051][ T5852] bcachefs (loop1): clean shutdown complete, journal seq 4
[  114.602820][ T5852] bcachefs (loop1): marking filesystem clean
[  114.633662][ T5852] bcachefs (loop1): shutdown complete
[  115.050177][ T7210] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  115.270724][ T7212] loop0: detected capacity change from 0 to 40427
[  115.277953][ T7212] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504)
[  115.285585][ T7212] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  115.288591][ T7212] F2FS-fs (loop0): build fault injection rate: 17008
[  115.291532][ T7212] F2FS-fs (loop0): build fault injection type: 0x6
[  115.294734][ T7212] F2FS-fs (loop0): invalid crc value
[  115.331379][ T7212] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  115.341642][ T7212] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  115.345061][ T7212] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  115.575045][ T7218] loop1: detected capacity change from 0 to 1024
[  115.606968][ T7218] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  115.633145][ T7218] EXT4-fs error (device loop1): ext4_generic_delete_entry:2668: inode #2: block 16: comm syz.1.434: bad entry in directory: inode out of bounds - offset=12, inode=1282, rec_len=12, size=1024 fake=1
[  115.642965][ T7218] EXT4-fs error (device loop1) in ext4_delete_entry:2739: Corrupt filesystem
[  115.646751][ T7218] EXT4-fs warning (device loop1): ext4_rename_delete:3731: inode #2: comm syz.1.434: Deleting old file: nlink 4, error=-117
[  115.670724][ T5852] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  115.812516][ T7233] loop0: detected capacity change from 0 to 128
[  115.817146][ T7233] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  115.825602][ T7233] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  116.001185][ T2304] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  116.160119][ T2304] usb 2-1: Using ep0 maxpacket: 8
[  116.185499][ T2304] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  116.190622][ T2304] usb 2-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e
[  116.194635][ T2304] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  116.221269][ T2304] usb 2-1: config 0 descriptor??
[  116.275713][ T2304] usb 2-1: bad CDC descriptors
[  116.466757][   T51] usb 2-1: USB disconnect, device number 9
[  117.086740][ T7238] evm: overlay not supported
[  117.108310][ T7238] overlayfs: upper fs does not support file handles, falling back to index=off.
[  117.182626][ T7246] loop0: detected capacity change from 0 to 256
[  117.191681][ T7246] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  117.202733][ T7246] exFAT-fs (loop0): Medium has reported failures. Some data may be lost.
[  117.223281][ T7246] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62dd34a, utbl_chksum : 0xe619d30d)
[  117.267195][ T7250] loop3: detected capacity change from 0 to 2048
[  117.277953][ T7250] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  117.291596][ T7246] exFAT-fs (loop0): abnormal access to deleted source dentry
[  117.295591][ T7250] overlayfs: upper fs needs to support d_type.
[  117.299738][ T7250] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  117.318246][ T7250] overlayfs: failed to set xattr on upper
[  117.322822][ T7250] overlayfs: ...falling back to redirect_dir=nofollow.
[  117.325919][ T7250] overlayfs: ...falling back to index=off.
[  117.329051][ T7250] overlayfs: ...falling back to uuid=null.
[  117.399792][ T6134] UDF-fs: error (device loop3): udf_read_inode: (ino 1317) failed !bh
[  117.408350][ T7258] loop1: detected capacity change from 0 to 512
[  117.416700][ T6134] UDF-fs: error (device loop3): udf_read_inode: (ino 1317) failed !bh
[  117.445989][ T7258] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  117.471137][ T7258] ext4 filesystem being mounted at /155/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  117.498483][ T7258] EXT4-fs: Ignoring removed nomblk_io_submit option
[  117.510944][ T7258] EXT4-fs: Cannot change journaled quota options when quota turned on
[  117.568611][ T5852] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  117.598559][ T5879] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  117.686879][ T5879] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  117.752089][ T5879] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  117.787742][ T7267] loop0: detected capacity change from 0 to 512
[  117.836367][ T5879] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  117.842125][ T7267] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  117.871051][ T7267] ext4 filesystem being mounted at /145/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  117.915913][ T5857] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  118.099675][ T5879] bridge_slave_1: left allmulticast mode
[  118.113880][ T5879] bridge_slave_1: left promiscuous mode
[  118.118453][ T5879] bridge0: port 2(bridge_slave_1) entered disabled state
[  118.163046][ T5879] bridge_slave_0: left allmulticast mode
[  118.165209][ T5879] bridge_slave_0: left promiscuous mode
[  118.167589][ T5879] bridge0: port 1(bridge_slave_0) entered disabled state
[  118.184617][ T5236] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  118.190455][ T5236] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  118.196093][ T5236] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  118.201356][ T5236] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  118.204636][ T5236] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  118.508498][ T7288] loop0: detected capacity change from 0 to 32768
[  118.524431][ T7288] BTRFS: device label  devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.467 (7288)
[  118.534963][ T7283] loop1: detected capacity change from 0 to 32768
[  118.537246][ T7288] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  118.538363][ T7283] XFS: noikeep mount option is deprecated.
[  118.545354][ T7288] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm
[  118.556754][ T7288] BTRFS error (device loop0): superblock checksum mismatch
[  118.562065][ T7288] BTRFS error (device loop0): open_ctree failed: -22
[  118.574236][ T7283] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  118.633960][ T7283] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  118.657918][ T7283] XFS (loop1): Starting recovery (logdev: internal)
[  118.693334][ T7283] XFS (loop1): Ending recovery (logdev: internal)
[  118.788856][ T5852] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  118.899237][ T5879] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  118.909560][ T7305] TCP: tcp_parse_options: Illegal window scaling value 236 > 14 received
[  118.932430][ T5879] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  118.942431][ T5879] bond0 (unregistering): Released all slaves
[  119.063970][ T5879] k*]: left promiscuous mode
[  119.596019][ T7284] chnl_net:caif_netlink_parms(): no params data found
[  119.694743][ T5879] hsr_slave_0: left promiscuous mode
[  119.702151][ T5879] hsr_slave_1: left promiscuous mode
[  119.706903][ T5879] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  119.715886][ T5879] batman_adv: batadv0: Removing interface: batadv_slave_0
[  119.727904][ T5879] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  119.736769][ T5879] batman_adv: batadv0: Removing interface: batadv_slave_1
[  119.752078][ T5879] veth1_macvtap: left promiscuous mode
[  119.754397][ T5879] veth0_macvtap: left promiscuous mode
[  119.756743][ T5879] veth1_vlan: left promiscuous mode
[  119.758958][ T5879] veth0_vlan: left promiscuous mode
[  120.184926][ T7330] loop1: detected capacity change from 0 to 32768
[  120.187623][ T7330] XFS: noattr2 mount option is deprecated.
[  120.200050][ T7330] XFS: attr2 mount option is deprecated.
[  120.207620][ T7330] XFS (loop1): attr2 and noattr2 cannot both be specified.
[  120.253579][ T5236] Bluetooth: hci2: command tx timeout
[  120.317923][ T5879] team0 (unregistering): Port device team_slave_1 removed
[  120.343943][ T5879] team0 (unregistering): Port device team_slave_0 removed
[  120.387488][ T7336] loop1: detected capacity change from 0 to 1024
[  120.456766][   T26] hfsplus: b-tree write err: -5, ino 4
[  120.710814][ T7347] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  120.717503][ T7347] iommufd_mock iommufd_mock1: Adding to iommu group 1
[  120.808902][ T7349] comedi comedi2: 8255: I/O port conflict (0x5,4)
[  120.815541][ T7349] comedi comedi2: 8255: I/O port conflict (0x2,4)
[  120.937286][ T7284] bridge0: port 1(bridge_slave_0) entered blocking state
[  120.955047][ T7284] bridge0: port 1(bridge_slave_0) entered disabled state
[  120.958084][ T7284] bridge_slave_0: entered allmulticast mode
[  120.974896][ T7284] bridge_slave_0: entered promiscuous mode
[  120.993364][ T7284] bridge0: port 2(bridge_slave_1) entered blocking state
[  120.996471][ T7284] bridge0: port 2(bridge_slave_1) entered disabled state
[  120.999372][ T7284] bridge_slave_1: entered allmulticast mode
[  121.015188][ T7284] bridge_slave_1: entered promiscuous mode
[  121.057219][ T7284] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  121.083601][ T7284] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  121.119158][ T7284] team0: Port device team_slave_0 added
[  121.125956][ T7284] team0: Port device team_slave_1 added
[  121.167744][ T7284] batman_adv: batadv0: Adding interface: batadv_slave_0
[  121.175326][ T7284] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  121.189231][ T7284] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  121.196735][ T7284] batman_adv: batadv0: Adding interface: batadv_slave_1
[  121.208075][ T7284] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  121.220272][ T7284] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  121.344471][ T7284] hsr_slave_0: entered promiscuous mode
[  121.347545][ T7284] hsr_slave_1: entered promiscuous mode
[  121.352198][ T7284] debugfs: 'hsr0' already exists in 'hsr'
[  121.354520][ T7284] Cannot create hsr debugfs directory
[  121.733265][ T7284] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  121.742331][ T7284] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  121.749386][ T7284] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  121.764870][ T7284] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  121.819960][ T7284] bridge0: port 2(bridge_slave_1) entered blocking state
[  121.823057][ T7284] bridge0: port 2(bridge_slave_1) entered forwarding state
[  121.826703][ T7284] bridge0: port 1(bridge_slave_0) entered blocking state
[  121.829816][ T7284] bridge0: port 1(bridge_slave_0) entered forwarding state
[  121.919548][ T7284] 8021q: adding VLAN 0 to HW filter on device bond0
[  121.928229][   T84] bridge0: port 1(bridge_slave_0) entered disabled state
[  121.945525][   T84] bridge0: port 2(bridge_slave_1) entered disabled state
[  121.977879][ T7284] 8021q: adding VLAN 0 to HW filter on device team0
[  121.988033][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[  121.990622][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[  122.000396][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[  122.003380][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[  122.189220][ T7415] loop1: detected capacity change from 0 to 2048
[  122.202227][ T7415] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[  122.218583][ T7416] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  122.238565][ T7284] 8021q: adding VLAN 0 to HW filter on device batadv0
[  122.320379][ T5236] Bluetooth: hci2: command tx timeout
[  122.415731][ T7284] veth0_vlan: entered promiscuous mode
[  122.427492][ T7284] veth1_vlan: entered promiscuous mode
[  122.477020][ T7420] loop1: detected capacity change from 0 to 32768
[  122.486324][ T7284] veth0_macvtap: entered promiscuous mode
[  122.500701][ T7284] veth1_macvtap: entered promiscuous mode
[  122.507022][ T7420] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  122.521171][ T7426] ip6erspan0: entered promiscuous mode
[  122.524639][ T7420] (syz.1.502,7420,0):ocfs2_find_entry:1094 ERROR: status = -117
[  122.529417][ T7420] (syz.1.502,7420,0):ocfs2_find_entry:1094 ERROR: status = -117
[  122.534331][ T7284] batman_adv: batadv0: Interface activated: batadv_slave_0
[  122.539523][ T7420] (syz.1.502,7420,0):ocfs2_mknod:505 ERROR: status = -117
[  122.543204][ T7420] (syz.1.502,7420,0):ocfs2_mkdir:661 ERROR: status = -117
[  122.544339][ T7284] batman_adv: batadv0: Interface activated: batadv_slave_1
[  122.581397][ T5852] (syz-executor,5852,1):ocfs2_inode_is_valid_to_delete:948 ERROR: Skipping delete of system file 76
[  122.586574][   T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  122.592506][ T5879] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  122.596821][ T5852] ocfs2: Unmounting device (7,1) on (node local)
[  122.644462][ T5879] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  122.647952][ T5879] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  122.733171][ T7436] netlink: 4 bytes leftover after parsing attributes in process `syz.0.508'.
[  122.738415][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  122.755457][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  122.777416][   T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  122.780904][   T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  123.736975][ T6014] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  123.776431][ T7487] loop4: detected capacity change from 0 to 2048
[  123.823176][ T7488] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  123.910844][   T33] audit: type=1800 audit(1756720579.646:6): pid=7487 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.528" name="file2" dev="loop4" ino=16 res=0 errno=0
[  124.150858][ T6014] usb 2-1: Using ep0 maxpacket: 8
[  124.155061][ T6014] usb 2-1: unable to get BOS descriptor or descriptor too short
[  124.158956][ T6014] usb 2-1: config 127 has an invalid interface number: 250 but max is 1
[  124.169896][ T6014] usb 2-1: config 127 has an invalid interface number: 129 but max is 1
[  124.172937][ T6014] usb 2-1: config 127 has no interface number 0
[  124.175431][ T6014] usb 2-1: config 127 has no interface number 1
[  124.177661][ T6014] usb 2-1: config 127 interface 250 altsetting 8 bulk endpoint 0xA has invalid maxpacket 64
[  124.189655][ T6014] usb 2-1: config 127 interface 250 has no altsetting 0
[  124.192173][ T6014] usb 2-1: config 127 interface 129 has no altsetting 0
[  124.196689][ T6014] usb 2-1: New USB device found, idVendor=0582, idProduct=04f4, bcdDevice=51.ac
[  124.202209][ T6014] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  124.204969][ T6014] usb 2-1: Product: syz
[  124.206677][ T6014] usb 2-1: Manufacturer: syz
[  124.208572][ T6014] usb 2-1: SerialNumber: syz
[  124.216335][ T7461] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  124.376966][ T7501] IPVS: length: 225 != 8
[  124.400048][ T5236] Bluetooth: hci2: command tx timeout
[  124.577101][ T6014] usb 2-1: USB disconnect, device number 10
[  124.656270][ T5855] udevd[5855]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:127.250/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  124.708375][ T7514] loop4: detected capacity change from 0 to 8
[  124.725142][ T7514] SQUASHFS error: lzo decompression failed, data probably corrupt
[  124.733863][ T7514] SQUASHFS error: Failed to read block 0x91: -5
[  124.736853][ T7514] SQUASHFS error: Unable to read metadata cache entry [8f]
[  124.740942][ T7516] bridge0: entered allmulticast mode
[  124.751620][ T7514] SQUASHFS error: Unable to read inode 0x11f
[  124.933407][ T7524] loop0: detected capacity change from 0 to 4096
[  124.962779][ T7524] ntfs3(loop0): Failed to initialize $Extend/$ObjId.
[  125.528097][ T7536] loop1: detected capacity change from 0 to 32768
[  125.589016][ T7536] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  125.824615][ T7536] XFS (loop1): Ending clean mount
[  125.857773][ T7550] mmap: syz.4.550 (7550) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  126.225299][ T7552] binder: 7551:7552 ioctl c0306201 200000000080 returned -14
[  126.257735][ T7554] loop4: detected capacity change from 0 to 64
[  126.292362][ T7554] Trying to free block not in datazone
[  126.471065][ T5852] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  126.500008][ T5236] Bluetooth: hci2: command tx timeout
[  126.865135][ T7562] loop0: detected capacity change from 0 to 1024
[  126.872159][ T7562] hfsplus: Unknown parameter '000000000000000000000000xffffffffffffffff'
[  126.924887][ T7566] netlink: 'syz.4.557': attribute type 1 has an invalid length.
[  126.928856][ T7566] netlink: 172 bytes leftover after parsing attributes in process `syz.4.557'.
[  126.939188][ T7566] netlink: 'syz.4.557': attribute type 1 has an invalid length.
[  127.092737][ T7570] loop1: detected capacity change from 0 to 512
[  127.119778][ T7570] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  127.125170][ T7570] ext4 filesystem being mounted at /195/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  127.169181][ T5852] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  127.237522][ T7575] loop1: detected capacity change from 0 to 1024
[  127.269975][ T5900] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  127.419974][ T5900] usb 5-1: Using ep0 maxpacket: 8
[  127.425231][ T5900] usb 5-1: unable to get BOS descriptor or descriptor too short
[  127.432808][ T5900] usb 5-1: config 0 has an invalid interface number: 88 but max is 0
[  127.442326][ T5900] usb 5-1: config 0 has no interface number 0
[  127.445069][ T5900] usb 5-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7
[  127.449083][ T5900] usb 5-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0
[  127.456967][ T5900] usb 5-1: config 0 interface 88 has no altsetting 0
[  127.471060][ T5900] usb 5-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31
[  127.474285][ T5900] usb 5-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3
[  127.477257][ T5900] usb 5-1: Product: syz
[  127.479688][ T5900] usb 5-1: Manufacturer: syz
[  127.481515][ T5900] usb 5-1: SerialNumber: syz
[  127.493182][ T5900] usb 5-1: config 0 descriptor??
[  127.518554][ T7587] netlink: 20 bytes leftover after parsing attributes in process `syz.1.565'.
[  127.681968][ T7592] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  127.685505][ T7592] IPv6: NLM_F_CREATE should be set when creating new route
[  127.688645][ T7592] IPv6: NLM_F_CREATE should be set when creating new route
[  127.801421][ T5900] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.88/input/input6
[  127.837987][ T5900] usb 5-1: USB disconnect, device number 2
[  127.892114][ T7599] loop1: detected capacity change from 0 to 1024
[  127.900481][ T7599] EXT4-fs: Ignoring removed orlov option
[  127.906984][ T7599] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869)
[  127.916615][ T7599] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  127.940082][ T7599] EXT4-fs (loop1): invalid journal inode
[  127.942076][ T7599] EXT4-fs (loop1): can't get journal size
[  127.956573][ T7599] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  128.873195][ T5852] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  128.951180][ T7619] loop0: detected capacity change from 0 to 1764
[  129.142353][ T7633] hub 8-0:1.0: USB hub found
[  129.145966][ T7633] hub 8-0:1.0: 1 port detected
[  129.230484][ T5900] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  129.405578][ T5900] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  129.415279][ T5900] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  129.442890][ T5900] usb 1-1: config 0 descriptor??
[  129.455167][ T5900] cp210x 1-1:0.0: cp210x converter detected
[  129.855865][ T5900] cp210x 1-1:0.0: failed to get vendor val 0x0010 size 3: -32
[  129.883764][ T5900] usb 1-1: cp210x converter now attached to ttyUSB0
[  130.070582][ T2304] usb 1-1: USB disconnect, device number 10
[  130.086131][ T2304] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  130.107623][ T2304] cp210x 1-1:0.0: device disconnected
[  130.348858][ T7638] netlink: 8 bytes leftover after parsing attributes in process `syz.4.582'.
[  130.717115][ T7654] loop0: detected capacity change from 0 to 128
[  130.952308][ T7667] loop0: detected capacity change from 0 to 64
[  130.981536][ T7652] loop4: detected capacity change from 0 to 32768
[  131.032148][ T7652] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  131.111037][ T7652] XFS (loop4): Ending clean mount
[  131.118693][ T7652] XFS (loop4): Quotacheck needed: Please wait.
[  131.151570][ T7678] loop0: detected capacity change from 0 to 4096
[  131.167054][ T7678] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512).
[  131.186556][ T7652] XFS (loop4): Quotacheck: Done.
[  131.190769][ T7678] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  131.257450][ T7684] random: crng reseeded on system resumption
[  131.533436][ T7678] ntfs3(loop0): volume is dirty and "force" flag is not set!
[  131.545410][ T7284] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  131.716206][ T7686] netlink: 24 bytes leftover after parsing attributes in process `syz.0.601'.
[  131.741163][ T7686] netlink: 24 bytes leftover after parsing attributes in process `syz.0.601'.
[  131.798200][ T7692] loop0: detected capacity change from 0 to 16
[  131.805962][ T7692] erofs (device loop0): mounted with root inode @ nid 36.
[  131.984324][ T5914] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  132.132571][ T5914] usb 5-1: config 0 has an invalid interface number: 102 but max is 0
[  132.135971][ T5914] usb 5-1: config 0 has no interface number 0
[  132.138517][ T5914] usb 5-1: New USB device found, idVendor=2001, idProduct=1a00, bcdDevice=38.f5
[  132.150099][ T6014] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  132.154796][ T5914] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  132.169426][ T5914] usb 5-1: config 0 descriptor??
[  132.300056][ T6014] usb 1-1: Using ep0 maxpacket: 8
[  132.305654][ T6014] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  132.308850][ T6014] usb 1-1: config 0 has no interface number 0
[  132.311482][ T6014] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  132.315749][ T6014] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  132.319703][ T6014] usb 1-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b
[  132.325065][ T6014] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  132.337871][ T6014] usb 1-1: config 0 descriptor??
[  132.345700][ T6014] hso 1-1:0.1: Failed to find BULK IN ep
[  132.400394][ T5900] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  132.492603][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[  132.495089][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[  132.554960][ T6014] usb 1-1: USB disconnect, device number 11
[  132.559251][ T5900] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  132.566960][ T5900] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  132.576036][ T5900] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  132.580242][ T5900] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  132.591182][ T7706] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  132.596810][ T5900] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  132.819181][ T6014] usb 2-1: USB disconnect, device number 11
[  133.187707][ T5914] asix 5-1:0.102 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  133.194755][ T5914] asix 5-1:0.102: probe with driver asix failed with error -71
[  133.203068][ T5914] usb 5-1: USB disconnect, device number 3
[  133.409951][ T5900] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  133.552059][ T7715] loop1: detected capacity change from 0 to 40427
[  133.560049][ T5900] usb 1-1: Using ep0 maxpacket: 8
[  133.573158][ T5900] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 201, changing to 11
[  133.578144][ T7715] F2FS-fs (loop1): Mismatch start address, segment0(0) cp_blkaddr(512)
[  133.581815][ T5900] usb 1-1: New USB device found, idVendor=28bd, idProduct=0055, bcdDevice= 0.00
[  133.585472][ T5900] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  133.588956][ T7715] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[  133.594597][ T7715] F2FS-fs (loop1): Ignore s_resuid=0, s_resgid=60929 w/o reserve_root
[  133.602142][ T5900] usb 1-1: config 0 descriptor??
[  133.684145][ T7715] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  133.692563][ T7715] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0
[  133.695569][ T7715] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  133.728390][ T7715] syz.1.611: attempt to access beyond end of device
[  133.728390][ T7715] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  133.737247][ T7715] CPU: 0 UID: 0 PID: 7715 Comm: syz.1.611 Not tainted syzkaller #0 PREEMPT(full) 
[  133.737268][ T7715] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  133.737275][ T7715] Call Trace:
[  133.737282][ T7715]  <TASK>
[  133.737288][ T7715]  dump_stack_lvl+0x189/0x250
[  133.737310][ T7715]  ? __pfx_dump_stack_lvl+0x10/0x10
[  133.737326][ T7715]  ? __pfx_queue_work_on+0x10/0x10
[  133.737338][ T7715]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  133.737355][ T7715]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  133.737383][ T7715]  f2fs_handle_critical_error+0x37c/0x540
[  133.737406][ T7715]  f2fs_write_end_io+0x886/0xb60
[  133.737437][ T7715]  __submit_merged_bio+0x27a/0x6a0
[  133.737460][ T7715]  __submit_merged_write_cond+0x255/0x530
[  133.737485][ T7715]  f2fs_write_data_pages+0x261d/0x3000
[  133.737533][ T7715]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  133.737590][ T7715]  ? __mod_zone_page_state+0xd7/0x140
[  133.737650][ T7715]  ? folios_put_refs+0x560/0x640
[  133.737677][ T7715]  ? __lock_acquire+0xab9/0xd20
[  133.737704][ T7715]  ? do_raw_spin_lock+0x121/0x290
[  133.737731][ T7715]  ? do_raw_spin_unlock+0x4d/0x240
[  133.737745][ T7715]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  133.737765][ T7715]  do_writepages+0x32e/0x550
[  133.737798][ T7715]  ? do_raw_spin_unlock+0x4d/0x240
[  133.737819][ T7715]  filemap_fdatawrite+0x199/0x240
[  133.737836][ T7715]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  133.737896][ T7715]  ? do_raw_spin_unlock+0x4d/0x240
[  133.737914][ T7715]  f2fs_sync_dirty_inodes+0x31f/0x830
[  133.737939][ T7715]  f2fs_write_checkpoint+0x95a/0x1df0
[  133.737973][ T7715]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  133.738019][ T7715]  ? down_write+0x162/0x1f0
[  133.738031][ T7715]  ? __pfx_down_write+0x10/0x10
[  133.738040][ T7715]  ? __x64_sys_mknodat+0xa7/0xc0
[  133.738054][ T7715]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  133.738075][ T7715]  f2fs_issue_checkpoint+0x3ac/0x570
[  133.738092][ T7715]  ? __pfx_f2fs_issue_checkpoint+0x10/0x10
[  133.738112][ T7715]  ? do_raw_spin_lock+0x121/0x290
[  133.738135][ T7715]  ? __pfx_wake_up_var+0x10/0x10
[  133.738161][ T7715]  ? f2fs_sync_fs+0x200/0x3d0
[  133.738179][ T7715]  f2fs_mknod+0x442/0x5d0
[  133.738199][ T7715]  ? bpf_lsm_inode_mknod+0x9/0x20
[  133.738216][ T7715]  vfs_mknod+0x37f/0x3c0
[  133.738237][ T7715]  do_mknodat+0x385/0x4d0
[  133.738256][ T7715]  ? __pfx_do_mknodat+0x10/0x10
[  133.738272][ T7715]  ? getname_flags+0x1e5/0x540
[  133.738287][ T7715]  __x64_sys_mknodat+0xa7/0xc0
[  133.738305][ T7715]  do_syscall_64+0xfa/0x3b0
[  133.738320][ T7715]  ? lockdep_hardirqs_on+0x9c/0x150
[  133.738335][ T7715]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  133.738346][ T7715]  ? exc_page_fault+0x9f/0xf0
[  133.738364][ T7715]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  133.738375][ T7715] RIP: 0033:0x7f625038ebe9
[  133.738387][ T7715] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  133.738397][ T7715] RSP: 002b:00007f6251248038 EFLAGS: 00000246 ORIG_RAX: 0000000000000103
[  133.738412][ T7715] RAX: ffffffffffffffda RBX: 00007f62505c5fa0 RCX: 00007f625038ebe9
[  133.738420][ T7715] RDX: 0000000000006000 RSI: 0000200000000180 RDI: ffffffffffffff9c
[  133.738429][ T7715] RBP: 00007f6250411e19 R08: 0000000000000000 R09: 0000000000000000
[  133.738436][ T7715] R10: 0000000000000702 R11: 0000000000000246 R12: 0000000000000000
[  133.738444][ T7715] R13: 00007f62505c6038 R14: 00007f62505c5fa0 R15: 00007fff2811c558
[  133.738469][ T7715]  </TASK>
[  133.738474][ T7715] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  134.039937][   T51] usb 5-1: new full-speed USB device number 4 using dummy_hcd
[  134.048532][ T5900] hid (null): bogus close delimiter
[  134.054717][ T5900] uclogic 0003:28BD:0055.0005: interface is invalid, ignoring
[  134.212692][   T51] usb 5-1: config 0 has an invalid interface number: 176 but max is 2
[  134.215923][   T51] usb 5-1: config 0 has an invalid interface number: 255 but max is 2
[  134.223075][   T51] usb 5-1: config 0 has no interface number 0
[  134.225344][   T51] usb 5-1: config 0 has no interface number 1
[  134.227468][   T51] usb 5-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30
[  134.232873][   T51] usb 5-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  134.239985][   T51] usb 5-1: config 0 interface 255 has no altsetting 0
[  134.248294][ T6014] usb 1-1: USB disconnect, device number 12
[  134.251063][   T51] usb 5-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac
[  134.254635][   T51] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  134.280945][   T51] usb 5-1: config 0 descriptor??
[  134.419970][   T10] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  134.489402][   T51] usb 5-1: Could not set interface, error -71
[  134.496216][   T51] usb 5-1: selecting invalid altsetting 0
[  134.498241][   T51] usb 5-1: Could not set interface, error -22
[  134.502340][   T51] usb 5-1: USB disconnect, device number 4
[  134.575054][   T10] usb 2-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=40.c1
[  134.578715][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  134.583398][   T10] usb 2-1: Product: syz
[  134.585108][   T10] usb 2-1: Manufacturer: syz
[  134.586947][   T10] usb 2-1: SerialNumber: syz
[  134.594991][   T10] usb 2-1: config 0 descriptor??
[  134.807528][   T10] int51x1 2-1:0.0: probe with driver int51x1 failed with error -22
[  135.014290][ T5914] usb 2-1: USB disconnect, device number 12
[  135.122801][ T7758] loop0: detected capacity change from 0 to 128
[  135.127999][ T7758] EXT4-fs: Ignoring removed nomblk_io_submit option
[  135.138982][ T7760] block nbd4: Attempted send on invalid socket
[  135.140192][ T7758] EXT4-fs: Ignoring removed nomblk_io_submit option
[  135.145006][ T7758] EXT4-fs (loop0): Test dummy encryption mode enabled
[  135.153070][ T7760] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  135.153813][ T7758] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  135.157025][ T7760] MINIX-fs: unable to read superblock
[  135.162123][ T7758] ext4 filesystem being mounted at /196/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  135.325225][ T7758] fscrypt: AES-256-XTS using implementation "xts(ecb(aes-fixed-time))"
[  135.363450][ T5857] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  135.457152][ T7781] loop0: detected capacity change from 0 to 256
[  135.460874][ T7781] exfat: Unknown parameter 'zero_sizeQir'
[  135.760500][ T7799] netlink: 4 bytes leftover after parsing attributes in process `syz.1.638'.
[  135.774633][ T7801] netlink: 'syz.4.639': attribute type 10 has an invalid length.
[  135.801225][ T7801] team0: Port device dummy0 added
[  135.813084][ T7801] netlink: 'syz.4.639': attribute type 10 has an invalid length.
[  135.816103][ T7801] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  135.825107][ T7801] team0: Failed to send options change via netlink (err -105)
[  135.828443][ T7801] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  135.832186][ T7801] team0: Port device dummy0 removed
[  135.838218][ T7801] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  135.871183][ T7793] loop0: detected capacity change from 0 to 32768
[  135.891939][   T33] audit: type=1800 audit(1756720591.636:7): pid=7793 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.635" name="file1" dev="loop0" ino=4 res=0 errno=0
[  135.975554][ T7807] libceph: resolve 'R' (ret=-3): failed
[  136.039981][ T5900] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  136.079387][ T7814] netlink: 'syz.0.646': attribute type 12 has an invalid length.
[  136.200228][ T5900] usb 2-1: Using ep0 maxpacket: 16
[  136.208707][ T5900] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[  136.213988][ T5900] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  136.217561][ T5900] usb 2-1: Product: syz
[  136.223450][ T5900] usb 2-1: Manufacturer: syz
[  136.225475][ T5900] usb 2-1: SerialNumber: syz
[  136.234548][ T5900] usb 2-1: config 0 descriptor??
[  136.440067][   T51] usb 5-1: new full-speed USB device number 5 using dummy_hcd
[  136.617604][   T51] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[  136.622372][   T51] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  136.627264][   T51] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64
[  136.638681][   T51] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  136.644656][   T51] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  136.648212][   T51] usb 5-1: Product: syz
[  136.651631][   T51] usb 5-1: Manufacturer: syz
[  136.651845][ T5900] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state.
[  136.657939][   T51] usb 5-1: SerialNumber: syz
[  136.662227][   T51] usb 5-1: config 0 descriptor??
[  136.665505][ T7821] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  136.668598][ T7821] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  136.684368][   T51] usb 5-1: ucan: probing device on interface #0
[  136.693100][ T5900] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  136.698421][ T5900] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T)
[  136.701921][ T7832] loop0: detected capacity change from 0 to 32768
[  136.702306][ T5900] usb 2-1: media controller created
[  136.733713][ T7832] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  136.752312][ T5900] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  136.764178][ T7832] XFS (loop0): Ending clean mount
[  136.769730][ T7832] XFS (loop0): Quotacheck needed: Please wait.
[  136.804201][ T7832] XFS (loop0): Quotacheck: Done.
[  136.840281][ T5857] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  136.858689][ T5900] zl10353_read_register: readreg error (reg=127, ret==0)
[  136.864037][ T5900] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T'
[  136.867471][ T5900] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected.
[  136.883454][ T5900] usb 2-1: USB disconnect, device number 13
[  136.987132][ T5900] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected.
[  137.305538][   T51] ucan 5-1:0.0: probe with driver ucan failed with error -71
[  137.321536][   T51] usb 5-1: USB disconnect, device number 5
[  137.860023][   T51] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  138.032092][   T51] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  138.035393][   T51] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  138.039153][   T51] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  138.042922][   T51] usb 2-1: config 1 has no interface number 1
[  138.045198][   T51] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  138.052528][   T51] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  138.084387][   T51] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  138.099955][   T51] usb 2-1: Product: syz
[  138.102201][   T51] usb 2-1: Manufacturer: syz
[  138.104471][   T51] usb 2-1: SerialNumber: syz
[  138.324796][   T51] usb 2-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0
[  138.337102][   T51] usb 2-1: MIDIStreaming interface descriptor not found
[  138.393260][   T51] usb 2-1: USB disconnect, device number 14
[  138.442450][ T7009] udevd[7009]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  138.612961][ T7892] loop4: detected capacity change from 0 to 1024
[  138.629736][ T7892] hfsplus: bad catalog entry type
[  138.665916][ T1151] hfsplus: b-tree write err: -5, ino 4
[  138.747627][ T7898] loop4: detected capacity change from 0 to 256
[  138.753274][ T7898] exfat: Deprecated parameter 'utf8'
[  138.755474][ T7898] exfat: Deprecated parameter 'utf8'
[  138.773859][ T7898] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x23a77120, utbl_chksum : 0xe619d30d)
[  139.070218][   T51] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  139.181669][ T7913] loop4: detected capacity change from 0 to 1024
[  139.202421][ T7913] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[  139.210757][ T7913] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (49802!=20869)
[  139.220982][ T7913] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  139.231062][ T7913] EXT4-fs error (device loop4): ext4_get_journal_inode:5800: inode #5: comm syz.4.685: unexpected bad inode w/o EXT4_IGET_BAD
[  139.238391][   T51] usb 1-1: Using ep0 maxpacket: 32
[  139.248423][   T51] usb 1-1: config 0 has an invalid interface number: 67 but max is 0
[  139.252389][   T51] usb 1-1: config 0 has no interface number 0
[  139.253642][ T7913] EXT4-fs (loop4): no journal found
[  139.264089][ T7913] EXT4-fs (loop4): can't get journal size
[  139.267474][   T51] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  139.274168][ T7913] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  139.277479][   T51] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  139.292075][   T51] usb 1-1: Product: syz
[  139.293923][   T51] usb 1-1: Manufacturer: syz
[  139.296453][   T51] usb 1-1: SerialNumber: syz
[  139.303914][   T51] usb 1-1: config 0 descriptor??
[  139.316306][   T51] smsc95xx v2.0.0
[  139.327933][ T7284] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  139.692759][ T7920] loop1: detected capacity change from 0 to 32768
[  139.697821][ T7920] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.688 (7920)
[  139.729206][   T51] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  139.744245][   T51] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  139.765841][ T7920] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  139.776311][ T7920] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm
[  139.870086][ T7920] BTRFS info (device loop1): rebuilding free space tree
[  139.898777][ T7920] BTRFS info (device loop1): setting nodatasum
[  139.905750][ T7920] BTRFS info (device loop1): enabling ssd optimizations
[  139.910900][ T7920] BTRFS info (device loop1): enabling free space tree
[  139.913742][ T7920] BTRFS info (device loop1): force clearing of disk cache
[  139.916665][ T7920] BTRFS info (device loop1): enabling auto defrag
[  139.930001][ T7920] BTRFS info (device loop1): force zlib compression, level 3
[  139.948988][   T33] audit: type=1800 audit(1756720595.686:8): pid=7920 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.688" name="bus" dev="loop1" ino=263 res=0 errno=0
[  140.064546][ T5852] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  140.680063][ T5914] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  140.690422][   T10] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  140.774541][   T51] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[  140.778164][   T51] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71
[  140.785927][   T51] usb 1-1: USB disconnect, device number 13
[  140.832135][ T5914] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  140.835813][ T5914] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  140.843950][ T5914] usb 2-1: config 0 descriptor??
[  140.851889][   T10] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  140.855808][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  140.859242][   T10] usb 5-1: Product: syz
[  140.861463][   T10] usb 5-1: Manufacturer: syz
[  140.863120][   T10] usb 5-1: SerialNumber: syz
[  140.867074][   T10] usb 5-1: config 0 descriptor??
[  140.873042][   T10] ch341 5-1:0.0: ch341-uart converter detected
[  141.054241][ T7952] netlink: 12 bytes leftover after parsing attributes in process `syz.1.695'.
[  141.061676][ T5914] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  141.264349][ T5914] [drm:udl_init] *ERROR* Selecting channel failed
[  141.285636][ T5914] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 3
[  141.288447][ T5914] [drm] Initialized udl on minor 3
[  141.295614][ T5914] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  141.302817][ T5914] udl 2-1:0.0: [drm] Cannot find any crtc or sizes
[  141.310232][ T2304] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  141.314305][ T2304] udl 2-1:0.0: [drm] Cannot find any crtc or sizes
[  141.322038][ T5914] usb 2-1: USB disconnect, device number 15
[  141.478964][   T10] usb 5-1: failed to send control message: -71
[  141.481350][   T10] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71
[  141.486382][   T10] usb 5-1: USB disconnect, device number 6
[  141.489431][   T10] ch341 5-1:0.0: device disconnected
[  141.525342][ T7962] loop0: detected capacity change from 0 to 4096
[  141.528926][ T7962] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512).
[  141.542770][ T7962] ntfs3(loop0): Failed to initialize $Extend/$Reparse.
[  141.593295][ T7964] loop0: detected capacity change from 0 to 164
[  141.602350][ T7964] Unsupported NM flag settings (240)
[  141.838363][ T7970] loop0: detected capacity change from 0 to 32768
[  141.848590][ T7970] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.704 (7970)
[  141.865911][ T7970] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  141.872378][ T7970] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm
[  142.017166][ T7970] BTRFS info (device loop0): enabling ssd optimizations
[  142.021213][ T7970] BTRFS info (device loop0): enabling free space tree
[  142.100726][ T5857] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  142.114438][ T7994] loop4: detected capacity change from 0 to 2048
[  142.190587][ T7994] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  142.236852][ T7999] netlink: 'syz.0.709': attribute type 1 has an invalid length.
[  142.421899][ T8008] loop0: detected capacity change from 0 to 64
[  142.450656][ T8008] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing
[  142.699181][ T8006] loop1: detected capacity change from 0 to 32768
[  142.711356][ T8006] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 0 transid 8 /dev/loop1 (7:1) scanned by syz.1.713 (8006)
[  142.714612][ T8018] loop4: detected capacity change from 0 to 4096
[  142.770048][ T8024] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  142.825009][ T8022] loop0: detected capacity change from 0 to 1024
[  144.580180][ T2304] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  144.583410][    C1] vcan0: j1939_tp_rxtimer: 0xffff88810eaea000: rx timeout, send abort
[  144.594363][ T8075] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  144.732255][ T2304] usb 1-1: Using ep0 maxpacket: 32
[  144.748763][ T2304] usb 1-1: config 0 interface 0 has no altsetting 0
[  144.757121][ T2304] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  144.766279][ T2304] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  144.769760][ T2304] usb 1-1: Product: syz
[  144.776753][ T8083] loop1: detected capacity change from 0 to 764
[  144.780524][ T2304] usb 1-1: Manufacturer: syz
[  144.782560][ T2304] usb 1-1: SerialNumber: syz
[  144.787199][ T2304] usb 1-1: config 0 descriptor??
[  144.931302][ T8098] sctp: [Deprecated]: syz.4.754 (pid 8098) Use of int in max_burst socket option.
[  144.931302][ T8098] Use struct sctp_assoc_value instead
[  144.997605][ T2304] gs_usb 1-1:0.0: Couldn't send data format (err=-71)
[  145.000519][ T2304] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -71
[  145.042412][ T2304] usb 1-1: USB disconnect, device number 14
[  145.084081][    C1] vcan0: j1939_tp_rxtimer: 0xffff88810eae8c00: rx timeout, send abort
[  145.087797][    C1] vcan0: j1939_tp_rxtimer: 0xffff88810eaea000: abort rx timeout. Force session deactivation
[  145.587707][    C1] vcan0: j1939_tp_rxtimer: 0xffff88810eae8c00: abort rx timeout. Force session deactivation
[  145.592414][ T8127] netlink: 32 bytes leftover after parsing attributes in process `syz.0.768'.
[  145.639386][ T8129] loop0: detected capacity change from 0 to 256
[  145.643573][ T8129] exfat: Deprecated parameter 'namecase'
[  145.656896][ T8129] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  145.760318][ T2304] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  145.806202][ T8123] loop1: detected capacity change from 0 to 40427
[  145.810686][ T8123] F2FS-fs (loop1): build fault injection rate: 14
[  145.813471][ T8123] F2FS-fs (loop1): build fault injection type: 0x3bfe8c
[  145.822496][ T8123] F2FS-fs (loop1): invalid crc value
[  145.827369][    C1] F2FS-fs (loop1): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  145.837297][    C1] F2FS-fs (loop1): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  145.886827][ T8123] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  145.890771][ T8123] F2FS-fs (loop1): inject page alloc in f2fs_grab_cache_folio of __get_meta_folio+0x157/0x4f0
[  145.896551][ T8123] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  145.910785][ T8123] F2FS-fs (loop1): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x1d9/0xa40
[  145.933117][ T5852] F2FS-fs (loop1): inject inconsistent footer in sanity_check_node_footer of f2fs_get_dnode_of_data+0xab1/0x1cf0
[  145.939479][ T5852] F2FS-fs (loop1): inconsistent node block, node_type:0, nid:13, node_footer[nid:13,ino:3,ofs:191623,cpver:0,blkaddr:0]
[  145.948840][ T2304] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  145.954506][    C1] F2FS-fs (loop1): inject write IO error in f2fs_write_end_io of blk_update_request+0x57e/0xe60
[  145.955781][ T2304] usb 5-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24
[  145.959098][    C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) 
[  145.959113][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  145.959120][    C1] Call Trace:
[  145.959126][    C1]  <TASK>
[  145.959131][    C1]  dump_stack_lvl+0x189/0x250
[  145.959150][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  145.959163][    C1]  ? __pfx_queue_work_on+0x10/0x10
[  145.959175][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  145.959191][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  145.959211][    C1]  f2fs_handle_critical_error+0x37c/0x540
[  145.959232][    C1]  f2fs_write_end_io+0x886/0xb60
[  145.959253][    C1]  blk_update_request+0x57e/0xe60
[  145.959276][    C1]  blk_mq_end_request+0x3e/0x70
[  145.959290][    C1]  blk_done_softirq+0x10a/0x160
[  145.959305][    C1]  handle_softirqs+0x286/0x870
[  145.959319][    C1]  ? run_ksoftirqd+0x9b/0x100
[  145.959335][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  145.959349][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[  145.959362][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[  145.959372][    C1]  run_ksoftirqd+0x9b/0x100
[  145.959384][    C1]  ? __pfx_run_ksoftirqd+0x10/0x10
[  145.959401][    C1]  smpboot_thread_fn+0x542/0xa60
[  145.959413][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[  145.959429][    C1]  kthread+0x711/0x8a0
[  145.959469][    C1]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  145.959482][    C1]  ? __pfx_kthread+0x10/0x10
[  145.959495][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  145.959509][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  145.959524][    C1]  ? __pfx_kthread+0x10/0x10
[  145.959538][    C1]  ret_from_fork+0x3fc/0x770
[  145.959553][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  145.959567][    C1]  ? __switch_to_asm+0x39/0x70
[  145.959580][    C1]  ? __switch_to_asm+0x33/0x70
[  145.959593][    C1]  ? __pfx_kthread+0x10/0x10
[  145.959607][    C1]  ret_from_fork_asm+0x1a/0x30
[  145.959630][    C1]  </TASK>
[  145.959635][    C1] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  145.964359][ T2304] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  145.966862][    C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) 
[  145.966877][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  145.966891][    C1] Call Trace:
[  145.966897][    C1]  <TASK>
[  145.966901][    C1]  dump_stack_lvl+0x189/0x250
[  145.966918][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  145.966932][    C1]  ? __pfx_queue_work_on+0x10/0x10
[  145.966944][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  145.966961][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  145.966981][    C1]  f2fs_handle_critical_error+0x37c/0x540
[  145.967001][    C1]  f2fs_write_end_io+0x886/0xb60
[  145.967022][    C1]  blk_update_request+0x57e/0xe60
[  145.967046][    C1]  blk_mq_end_request+0x3e/0x70
[  145.967061][    C1]  blk_done_softirq+0x10a/0x160
[  145.967074][    C1]  handle_softirqs+0x286/0x870
[  145.967088][    C1]  ? run_ksoftirqd+0x9b/0x100
[  145.967105][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  145.967118][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[  145.967131][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[  145.967141][    C1]  run_ksoftirqd+0x9b/0x100
[  145.967154][    C1]  ? __pfx_run_ksoftirqd+0x10/0x10
[  145.967171][    C1]  smpboot_thread_fn+0x542/0xa60
[  145.967184][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[  145.967200][    C1]  kthread+0x711/0x8a0
[  145.967216][    C1]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  145.967226][    C1]  ? __pfx_kthread+0x10/0x10
[  145.967241][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  145.967254][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  145.967268][    C1]  ? __pfx_kthread+0x10/0x10
[  145.967283][    C1]  ret_from_fork+0x3fc/0x770
[  145.967296][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  145.967312][    C1]  ? __switch_to_asm+0x39/0x70
[  145.967324][    C1]  ? __switch_to_asm+0x33/0x70
[  145.967336][    C1]  ? __pfx_kthread+0x10/0x10
[  145.967348][    C1]  ret_from_fork_asm+0x1a/0x30
[  145.967369][    C1]  </TASK>
[  145.967374][    C1] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  145.976092][ T2304] usb 5-1: Product: syz
[  145.978267][    C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) 
[  145.978283][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  145.978291][    C1] Call Trace:
[  145.978297][    C1]  <TASK>
[  145.978301][    C1]  dump_stack_lvl+0x189/0x250
[  145.978320][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  145.978333][    C1]  ? __pfx_queue_work_on+0x10/0x10
[  145.978345][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  145.978360][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  145.978381][    C1]  f2fs_handle_critical_error+0x37c/0x540
[  145.978401][    C1]  f2fs_write_end_io+0x886/0xb60
[  145.978423][    C1]  blk_update_request+0x57e/0xe60
[  145.978469][    C1]  blk_mq_end_request+0x3e/0x70
[  145.978484][    C1]  blk_done_softirq+0x10a/0x160
[  145.978498][    C1]  handle_softirqs+0x286/0x870
[  145.978512][    C1]  ? run_ksoftirqd+0x9b/0x100
[  145.978529][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  145.978543][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[  145.978556][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[  145.978566][    C1]  run_ksoftirqd+0x9b/0x100
[  145.978578][    C1]  ? __pfx_run_ksoftirqd+0x10/0x10
[  145.978595][    C1]  smpboot_thread_fn+0x542/0xa60
[  145.978607][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[  145.978624][    C1]  kthread+0x711/0x8a0
[  145.978640][    C1]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  145.978652][    C1]  ? __pfx_kthread+0x10/0x10
[  145.978666][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  145.978679][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  145.978693][    C1]  ? __pfx_kthread+0x10/0x10
[  145.978707][    C1]  ret_from_fork+0x3fc/0x770
[  145.978722][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  145.978738][    C1]  ? __switch_to_asm+0x39/0x70
[  145.978750][    C1]  ? __switch_to_asm+0x33/0x70
[  145.978763][    C1]  ? __pfx_kthread+0x10/0x10
[  145.978777][    C1]  ret_from_fork_asm+0x1a/0x30
[  145.978800][    C1]  </TASK>
[  145.978806][    C1] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  145.988470][ T2304] usb 5-1: Manufacturer: syz
[  145.988487][ T2304] usb 5-1: SerialNumber: syz
[  146.004812][ T2304] usb 5-1: config 0 descriptor??
[  146.005155][    C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) 
[  146.005170][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  146.005177][    C1] Call Trace:
[  146.005183][    C1]  <TASK>
[  146.005188][    C1]  dump_stack_lvl+0x189/0x250
[  146.005208][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  146.005220][    C1]  ? __pfx_queue_work_on+0x10/0x10
[  146.005233][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  146.005248][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  146.005268][    C1]  f2fs_handle_critical_error+0x37c/0x540
[  146.005288][    C1]  f2fs_write_end_io+0x886/0xb60
[  146.005311][    C1]  blk_update_request+0x57e/0xe60
[  146.005333][    C1]  blk_mq_end_request+0x3e/0x70
[  146.005346][    C1]  blk_done_softirq+0x10a/0x160
[  146.005361][    C1]  handle_softirqs+0x286/0x870
[  146.005377][    C1]  ? run_ksoftirqd+0x9b/0x100
[  146.005393][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  146.005406][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[  146.005420][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[  146.005429][    C1]  run_ksoftirqd+0x9b/0x100
[  146.005466][    C1]  ? __pfx_run_ksoftirqd+0x10/0x10
[  146.005483][    C1]  smpboot_thread_fn+0x542/0xa60
[  146.005496][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[  146.005512][    C1]  kthread+0x711/0x8a0
[  146.005527][    C1]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  146.005537][    C1]  ? __pfx_kthread+0x10/0x10
[  146.005551][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  146.005566][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  146.005579][    C1]  ? __pfx_kthread+0x10/0x10
[  146.005594][    C1]  ret_from_fork+0x3fc/0x770
[  146.005608][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  146.005623][    C1]  ? __switch_to_asm+0x39/0x70
[  146.005635][    C1]  ? __switch_to_asm+0x33/0x70
[  146.005647][    C1]  ? __pfx_kthread+0x10/0x10
[  146.005660][    C1]  ret_from_fork_asm+0x1a/0x30
[  146.005683][    C1]  </TASK>
[  146.005689][    C1] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  146.015278][ T2304] powermate 5-1:0.0: probe with driver powermate failed with error -22
[  146.015506][    C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) 
[  146.015522][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  146.015530][    C1] Call Trace:
[  146.015536][    C1]  <TASK>
[  146.015541][    C1]  dump_stack_lvl+0x189/0x250
[  146.015560][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  146.015574][    C1]  ? __pfx_queue_work_on+0x10/0x10
[  146.015585][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  146.015600][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  146.015621][    C1]  f2fs_handle_critical_error+0x37c/0x540
[  146.015641][    C1]  f2fs_write_end_io+0x886/0xb60
[  146.015663][    C1]  blk_update_request+0x57e/0xe60
[  146.015686][    C1]  blk_mq_end_request+0x3e/0x70
[  146.015700][    C1]  blk_done_softirq+0x10a/0x160
[  146.015715][    C1]  handle_softirqs+0x286/0x870
[  146.015728][    C1]  ? run_ksoftirqd+0x9b/0x100
[  146.015744][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  146.015759][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[  146.015772][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[  146.015782][    C1]  run_ksoftirqd+0x9b/0x100
[  146.015800][    C1]  ? __pfx_run_ksoftirqd+0x10/0x10
[  146.015817][    C1]  smpboot_thread_fn+0x542/0xa60
[  146.015830][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[  146.015846][    C1]  kthread+0x711/0x8a0
[  146.015860][    C1]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  146.015872][    C1]  ? __pfx_kthread+0x10/0x10
[  146.015892][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  146.015906][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  146.015919][    C1]  ? __pfx_kthread+0x10/0x10
[  146.015931][    C1]  ret_from_fork+0x3fc/0x770
[  146.015946][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  146.015962][    C1]  ? __switch_to_asm+0x39/0x70
[  146.015976][    C1]  ? __switch_to_asm+0x33/0x70
[  146.015989][    C1]  ? __pfx_kthread+0x10/0x10
[  146.016002][    C1]  ret_from_fork_asm+0x1a/0x30
[  146.016027][    C1]  </TASK>
[  146.016032][    C1] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  146.218468][ T2304] usb 5-1: USB disconnect, device number 7
[  146.231583][ T5852] F2FS-fs (loop1): do_checkpoint failed err:-5, stop checkpoint
[  146.863322][ T8150] capability: warning: `syz.0.776' uses 32-bit capabilities (legacy support in use)
[  147.543477][ T8161] loop1: detected capacity change from 0 to 8
[  147.554281][ T8161] SQUASHFS error: xz decompression failed, data probably corrupt
[  147.557653][ T8161] SQUASHFS error: Failed to read block 0x108: -5
[  147.564975][ T8161] SQUASHFS error: Unable to read metadata cache entry [106]
[  147.568208][ T8161] SQUASHFS error: Unable to read inode 0x11f
[  147.619080][ T8155] loop4: detected capacity change from 0 to 32768
[  147.702900][ T8155] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  147.702920][ T8155]   allowing incompatible features above 0.0: (unknown version)
[  147.702928][ T8155]   features: lz4
[  147.717556][ T8155] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0
[  147.721921][ T8155] bcachefs (loop4): initializing new filesystem
[  147.732078][ T8155] bcachefs (loop4): going read-write
[  147.745335][ T8155] bcachefs (loop4): marking superblocks
[  147.813999][ T8155] bcachefs (loop4): initializing freespace
[  147.830596][ T8155] bcachefs (loop4): done initializing freespace
[  147.843223][ T8155] bcachefs (loop4): reading snapshots table
[  147.845590][ T8155] bcachefs (loop4): reading snapshots done
[  147.876044][ T8155] bcachefs (loop4): done starting filesystem
[  147.961857][ T8171] loop1: detected capacity change from 0 to 40427
[  147.971113][ T8171] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  147.976806][ T8171] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  148.004383][ T8155] syz.4.778 (8155) used greatest stack depth: 15768 bytes left
[  148.008984][ T8171] F2FS-fs (loop1): invalid crc value
[  148.051733][ T7284] bcachefs (loop4): shutting down
[  148.054736][ T7284] bcachefs (loop4): going read-only
[  148.056649][ T7284] bcachefs (loop4): finished waiting for writes to stop
[  148.059780][ T7284] bcachefs (loop4): flushing journal and stopping allocators, journal seq 3
[  148.090855][ T7284] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 4
[  148.097937][ T7284] bcachefs (loop4): clean shutdown complete, journal seq 5
[  148.102953][ T7284] bcachefs (loop4): marking filesystem clean
[  148.116452][ T8171] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  148.123087][ T7284] bcachefs (loop4): shutdown complete
[  148.124575][ T8171] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  148.128357][ T8171] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  148.392896][ T8187] ALSA: mixer_oss: invalid OSS volume ''
[  148.431318][ T8189] batadv0: entered promiscuous mode
[  148.434281][ T8189] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  148.620924][ T8195] loop1: detected capacity change from 0 to 32768
[  148.638928][ T8195] JBD2: Ignoring recovery information on journal
[  148.687175][ T8195] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  148.773305][   T33] audit: type=1800 audit(1756720604.516:9): pid=8195 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.791" name="file1" dev="loop1" ino=17058 res=0 errno=0
[  148.809061][ T5852] ocfs2: Unmounting device (7,1) on (node local)
[  149.566439][ T8216] loop4: detected capacity change from 0 to 256
[  149.574715][ T8216] exfat: Deprecated parameter 'namecase'
[  149.615884][ T8216] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d)
[  150.598323][ T8235] netlink: 202368 bytes leftover after parsing attributes in process `syz.1.808'.
[  151.555692][ T8243] loop0: detected capacity change from 0 to 4096
[  151.627674][ T8246] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  151.678210][ T8248] loop1: detected capacity change from 0 to 128
[  151.714606][ T8248] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  151.723035][ T8248] ext4 filesystem being mounted at /290/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  151.990059][ T2304] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  152.250450][ T2304] usb 2-1: Using ep0 maxpacket: 32
[  152.277475][ T2304] usb 2-1: config 0 has an invalid interface number: 76 but max is 0
[  152.285822][ T2304] usb 2-1: config 0 has no interface number 0
[  152.288989][ T2304] usb 2-1: too many endpoints for config 0 interface 76 altsetting 134: 249, using maximum allowed: 30
[  152.323210][ T2304] usb 2-1: config 0 interface 76 altsetting 134 has 0 endpoint descriptors, different from the interface descriptor's value: 249
[  152.339335][ T2304] usb 2-1: config 0 interface 76 has no altsetting 0
[  152.350676][ T2304] usb 2-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice= 0.02
[  152.358706][ T2304] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  152.370463][ T2304] usb 2-1: Product: syz
[  152.373238][ T2304] usb 2-1: Manufacturer: syz
[  152.377419][ T2304] usb 2-1: SerialNumber: syz
[  152.385775][ T2304] usb 2-1: config 0 descriptor??
[  152.599186][ T2304] ftdi_sio 2-1:0.76: FTDI USB Serial Device converter detected
[  152.604576][ T2304] usb 2-1: Detected SIO
[  152.608091][ T2304] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  152.613384][ T2304] usb 2-1: USB disconnect, device number 16
[  152.618591][ T2304] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  152.623106][ T2304] ftdi_sio 2-1:0.76: device disconnected
[  152.649925][ T5900] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  152.721888][ T8262] comedi comedi3: pcmmio: I/O port conflict (0x4f27,32)
[  152.800092][ T5900] usb 5-1: Using ep0 maxpacket: 8
[  152.804294][ T5900] usb 5-1: config 0 has an invalid interface number: 52 but max is 0
[  152.813089][ T5900] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  152.817290][ T5900] usb 5-1: config 0 has no interface number 0
[  152.826272][ T5900] usb 5-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  152.832319][ T5900] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  152.839924][ T5900] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  152.843982][ T5900] usb 5-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  152.848870][ T5900] usb 5-1: config 0 interface 52 has no altsetting 0
[  152.857637][ T5900] usb 5-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00
[  152.861870][ T5900] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  152.876825][ T5900] usb 5-1: config 0 descriptor??
[  153.035477][ T8276] loop0: detected capacity change from 0 to 4096
[  153.085608][ T5900] input: USB Synaptics Device 06cb:0007 (Stick) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.52/input/input7
[  153.148735][ T5852] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  153.270066][ T8282] loop1: detected capacity change from 0 to 128
[  153.278873][ T8282] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  153.286773][ T8282] ext4 filesystem being mounted at /292/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  153.290588][ T5900] usb 5-1: USB disconnect, device number 8
[  153.323740][ T8282] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-fixed-time)))"
[  153.355249][ T8282] fscrypt: loop1: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12
[  153.379452][ T5852] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  153.464425][ T8294] sg_write: data in/out 97/10 bytes for SCSI command 0xfd-- guessing data in;
[  153.464425][ T8294]    program syz.0.832 not setting count and/or reply_len properly
[  153.768164][ T8300] loop0: detected capacity change from 0 to 32768
[  153.791095][ T8300] XFS (loop0): DAX unsupported by block device. Turning off DAX.
[  153.795018][ T8300] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  153.830536][ T8300] XFS (loop0): Ending clean mount
[  153.839586][ T8300] XFS (loop0): Quotacheck needed: Please wait.
[  153.868879][ T8300] XFS (loop0): Quotacheck: Done.
[  153.891695][   T33] audit: type=1800 audit(1756720609.636:10): pid=8300 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.836" name="file1" dev="loop0" ino=4422 res=0 errno=0
[  153.915712][ T8300] XFS (loop0): Metadata CRC error detected at xfs_refcountbt_read_verify+0x42/0xe0, xfs_refcountbt block 0x28 
[  153.941059][ T8300] XFS (loop0): Unmount and run xfs_repair
[  153.957464][ T8300] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  153.974733][ T8300] 00000000: 52 ff ff ff 7f 00 00 00 ff ff ff ff ff ff ff ff  R...............
[  153.979541][ T8300] 00000010: 00 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00  .......(........
[  153.994237][ T8300] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb  ...^T.Lr......N.
[  153.997971][ T8300] 00000030: 00 00 00 00 bd e7 de 5d 00 00 00 00 00 00 00 00  .......]........
[  154.003763][ T8300] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  154.007977][ T8300] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  154.014809][ T8300] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  154.018272][ T8300] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  154.023801][ T8300] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x290/0x470" at daddr 0x28 len 8 error 74
[  154.035045][ T8300] XFS (loop0): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x517/0x8e0 (fs/xfs/xfs_trans_buf.c:311).  Shutting down filesystem.
[  154.043148][ T8300] XFS (loop0): Please unmount the filesystem and rectify the problem(s)
[  154.118785][ T5857] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  154.829826][ T8325] loop1: detected capacity change from 0 to 256
[  154.836036][ T8325] exfat: Deprecated parameter 'utf8'
[  154.865756][ T8325] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d)
[  155.341330][   T10] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  155.503376][   T10] usb 2-1: config 3 has an invalid interface number: 71 but max is 0
[  155.507073][   T10] usb 2-1: config 3 has no interface number 0
[  155.516676][   T10] usb 2-1: config 3 interface 71 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  155.524613][   T10] usb 2-1: New USB device found, idVendor=0bc7, idProduct=0004, bcdDevice=a7.ac
[  155.528017][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  155.541222][   T10] ati_remote 2-1:3.71: ati_remote_probe: Unexpected endpoint_in
[  155.616516][ T8355] loop0: detected capacity change from 0 to 2048
[  155.622150][ T8343] loop4: detected capacity change from 0 to 32768
[  155.650423][ T8343] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode.
[  155.656704][ T8355] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  155.731841][ T7284] ocfs2: Unmounting device (7,4) on (node local)
[  155.760175][   T51] usb 2-1: USB disconnect, device number 17
[  156.035477][ T8375] loop4: detected capacity change from 0 to 1024
[  156.069521][ T8375] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  156.074801][ T8375] ext4 filesystem being mounted at /115/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  156.100679][ T7284] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  156.205990][ T8381] loop4: detected capacity change from 0 to 4096
[  156.212849][ T8381] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512).
[  156.229778][ T8381] ntfs3(loop4): Failed to initialize $Extend/$Reparse.
[  156.309280][ T8383] netlink: 16 bytes leftover after parsing attributes in process `syz.1.869'.
[  156.472679][ T8395] loop4: detected capacity change from 0 to 1024
[  156.501594][ T8395] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  156.506607][ T8395] ext4 filesystem being mounted at /120/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  156.522853][   T33] audit: type=1800 audit(1756720612.266:11): pid=8395 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.875" name="file1" dev="loop4" ino=15 res=0 errno=0
[  156.537154][ T8395] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: block 1: comm syz.4.875: lblock 1 mapped to illegal pblock 1 (length 15)
[  156.546620][ T8395] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117
[  156.552817][ T8395] EXT4-fs (loop4): This should not happen!! Data will be lost
[  156.552817][ T8395] 
[  156.557663][ T8393] loop1: detected capacity change from 0 to 32768
[  156.560769][ T8393] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.874 (8393)
[  156.571435][ T8393] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  156.580141][ T8393] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm
[  156.601042][ T7284] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  156.632559][ T8393] BTRFS info (device loop1): enabling ssd optimizations
[  156.635823][ T8393] BTRFS info (device loop1): enabling free space tree
[  156.665580][ T8416] netlink: 64985 bytes leftover after parsing attributes in process `syz.4.876'.
[  156.825333][ T8421] loop4: detected capacity change from 0 to 256
[  156.851585][ T5852] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  156.871515][ T8421] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  156.876009][ T8421] exFAT-fs (loop4): Medium has reported failures. Some data may be lost.
[  156.903220][ T8421] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  156.952786][   T33] audit: type=1800 audit(1756720612.696:12): pid=8421 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.878" name="file1" dev="loop4" ino=1048621 res=0 errno=0
[  157.258797][ T8436] loop4: detected capacity change from 0 to 512
[  157.267528][ T8436] EXT4-fs: Ignoring removed mblk_io_submit option
[  157.272150][ T8436] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  157.282524][ T8436] EXT4-fs (loop4): 1 truncate cleaned up
[  157.285707][ T8436] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  157.304363][   T33] audit: type=1804 audit(1756720613.046:13): pid=8436 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.886" name="/newroot/126/bus/bus" dev="loop4" ino=18 res=1 errno=0
[  157.432583][ T8449] loop0: detected capacity change from 0 to 2048
[  157.472464][ T5855] Alternate GPT is invalid, using primary GPT.
[  157.475635][ T5855]  loop0: p1 p2 p3
[  157.477144][ T5855] loop0: partition table partially beyond EOD, truncated
[  157.501520][ T8449] Alternate GPT is invalid, using primary GPT.
[  157.504208][ T8449]  loop0: p1 p2 p3
[  157.506036][ T8449] loop0: partition table partially beyond EOD, truncated
[  157.649044][ T6023] udevd[6023]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory
[  157.650751][ T5855] udevd[5855]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory
[  157.656894][ T7889] udevd[7889]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory
[  157.848928][ T8456] netlink: 4 bytes leftover after parsing attributes in process `syz.0.894'.
[  157.939058][ T8458] comedi comedi3: das16m1: I/O port conflict (0x4f27,16)
[  158.192238][ T7284] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  158.467201][ T8482] loop0: detected capacity change from 0 to 1024
[  158.479029][ T8482] EXT4-fs: Ignoring removed mblk_io_submit option
[  158.543428][ T8482] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  158.556419][ T8482] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[  158.626005][ T8491] loop4: detected capacity change from 0 to 128
[  158.630032][ T8491] qnx6: Unknown parameter 'mm'
[  158.708975][ T8482] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  158.774311][ T8482] EXT4-fs (loop0): This should not happen!! Data will be lost
[  158.774311][ T8482] 
[  158.865965][ T8482] EXT4-fs (loop0): Total free blocks count 0
[  158.882005][ T8482] EXT4-fs (loop0): Free/Dirty block details
[  158.895447][ T8482] EXT4-fs (loop0): free_blocks=68451041280
[  158.897932][ T8482] EXT4-fs (loop0): dirty_blocks=16
[  158.900315][ T8482] EXT4-fs (loop0): Block reservation details
[  158.902999][ T8482] EXT4-fs (loop0): i_reserved_data_blocks=1
[  158.935058][ T1090] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 3 with error 28
[  158.955173][ T8494] veth0_macvtap: left promiscuous mode
[  159.015803][ T8496] loop0: detected capacity change from 0 to 1024
[  159.042496][   T68] hfsplus: b-tree write err: -5, ino 4
[  159.078767][ T8498] loop0: detected capacity change from 0 to 764
[  159.091054][ T8498] rock: corrupted directory entry. extent=32, offset=2044, size=237
[  159.203882][ T8502] program syz.0.914 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  159.254860][ T8504] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  159.485987][ T8510] loop4: detected capacity change from 0 to 256
[  159.508437][ T8500] loop1: detected capacity change from 0 to 32768
[  159.517501][ T8510] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x467a0815, utbl_chksum : 0xe619d30d)
[  159.535379][ T8510] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 17179869186)
[  159.550117][ T8500] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  159.567885][ T8500] 
[  159.568991][ T8500] ======================================================
[  159.572028][ T8500] WARNING: possible circular locking dependency detected
[  159.575050][ T8500] syzkaller #0 Not tainted
[  159.577104][ T8500] ------------------------------------------------------
[  159.580766][ T8500] syz.1.913/8500 is trying to acquire lock:
[  159.583325][ T8500] ffff8881196760c0 (&ocfs2_sysfile_lock_key[EXTENT_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_reserve_suballoc_bits+0x15e/0x4640
[  159.588832][ T8500] 
[  159.588832][ T8500] but task is already holding lock:
[  159.591928][ T8500] ffff888119673278 (&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_xattr_set+0x40f/0x11f0
[  159.595856][ T8500] 
[  159.595856][ T8500] which lock already depends on the new lock.
[  159.595856][ T8500] 
[  159.600112][ T8500] 
[  159.600112][ T8500] the existing dependency chain (in reverse order) is:
[  159.603875][ T8500] 
[  159.603875][ T8500] -> #5 (&oi->ip_xattr_sem){++++}-{4:4}:
[  159.607154][ T8500]        lock_acquire+0x120/0x360
[  159.609323][ T8500]        down_read+0x46/0x2e0
[  159.611386][ T8500]        ocfs2_init_acl+0x2f9/0x720
[  159.613608][ T8500]        ocfs2_mknod+0x1321/0x2050
[  159.615737][ T8500]        ocfs2_create+0x1a5/0x440
[  159.617775][ T8500]        path_openat+0x14f4/0x3830
[  159.619879][ T8500]        do_filp_open+0x1fa/0x410
[  159.621898][ T8500]        do_sys_openat2+0x121/0x1c0
[  159.623894][ T8500]        __x64_sys_openat+0x138/0x170
[  159.625810][ T8500]        do_syscall_64+0xfa/0x3b0
[  159.627690][ T8500]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  159.630101][ T8500] 
[  159.630101][ T8500] -> #4 (jbd2_handle){++++}-{0:0}:
[  159.632850][ T8500]        lock_acquire+0x120/0x360
[  159.634736][ T8500]        start_this_handle+0x1fa7/0x21c0
[  159.636821][ T8500]        jbd2__journal_start+0x2c1/0x5b0
[  159.638841][ T8500]        jbd2_journal_start+0x2a/0x40
[  159.640862][ T8500]        ocfs2_start_trans+0x376/0x6d0
[  159.642904][ T8500]        ocfs2_reserve_suballoc_bits+0x711/0x4640
[  159.645300][ T8500]        ocfs2_reserve_new_metadata_blocks+0x403/0x940
[  159.647686][ T8500]        ocfs2_extend_dir+0xc76/0x4870
[  159.649626][ T8500]        ocfs2_prepare_dir_for_insert+0x2fe8/0x5450
[  159.651879][ T8500]        ocfs2_mknod+0x819/0x2050
[  159.653720][ T8500]        ocfs2_mkdir+0x191/0x440
[  159.655549][ T8500]        vfs_mkdir+0x306/0x510
[  159.657367][ T8500]        do_mkdirat+0x247/0x590
[  159.659189][ T8500]        __x64_sys_mkdirat+0x87/0xa0
[  159.661179][ T8500]        do_syscall_64+0xfa/0x3b0
[  159.663038][ T8500]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  159.665450][ T8500] 
[  159.665450][ T8500] -> #3 (&journal->j_trans_barrier){.+.+}-{4:4}:
[  159.668618][ T8500]        lock_acquire+0x120/0x360
[  159.670547][ T8500]        down_read+0x46/0x2e0
[  159.672317][ T8500]        ocfs2_start_trans+0x36a/0x6d0
[  159.674290][ T8500]        ocfs2_reserve_suballoc_bits+0x711/0x4640
[  159.676632][ T8500]        ocfs2_reserve_new_metadata_blocks+0x403/0x940
[  159.679067][ T8500]        ocfs2_extend_dir+0xc76/0x4870
[  159.681120][ T8500]        ocfs2_prepare_dir_for_insert+0x2fe8/0x5450
[  159.683565][ T8500]        ocfs2_mknod+0x819/0x2050
[  159.685466][ T8500]        ocfs2_mkdir+0x191/0x440
[  159.687337][ T8500]        vfs_mkdir+0x306/0x510
[  159.689123][ T8500]        do_mkdirat+0x247/0x590
[  159.690961][ T8500]        __x64_sys_mkdirat+0x87/0xa0
[  159.692918][ T8500]        do_syscall_64+0xfa/0x3b0
[  159.694839][ T8500]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  159.697137][ T8500] 
[  159.697137][ T8500] -> #2 (sb_internal#5){.+.+}-{0:0}:
[  159.699823][ T8500]        lock_acquire+0x120/0x360
[  159.701728][ T8500]        ocfs2_start_trans+0x26b/0x6d0
[  159.703754][ T8500]        ocfs2_reserve_suballoc_bits+0x711/0x4640
[  159.706066][ T8500]        ocfs2_reserve_new_metadata_blocks+0x403/0x940
[  159.708614][ T8500]        ocfs2_extend_dir+0xc76/0x4870
[  159.710658][ T8500]        ocfs2_prepare_dir_for_insert+0x2fe8/0x5450
[  159.713101][ T8500]        ocfs2_mknod+0x819/0x2050
[  159.715007][ T8500]        ocfs2_mkdir+0x191/0x440
[  159.716833][ T8500]        vfs_mkdir+0x306/0x510
[  159.718566][ T8500]        do_mkdirat+0x247/0x590
[  159.720358][ T8500]        __x64_sys_mkdirat+0x87/0xa0
[  159.722328][ T8500]        do_syscall_64+0xfa/0x3b0
[  159.724214][ T8500]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  159.726606][ T8500] 
[  159.726606][ T8500] -> #1 (&ocfs2_sysfile_lock_key[GLOBAL_BITMAP_SYSTEM_INODE]){+.+.}-{4:4}:
[  159.730389][ T8500]        lock_acquire+0x120/0x360
[  159.732289][ T8500]        down_write+0x96/0x1f0
[  159.734091][ T8500]        ocfs2_reserve_suballoc_bits+0x15e/0x4640
[  159.736492][ T8500]        ocfs2_reserve_clusters_with_limit+0x2fb/0xba0
[  159.738930][ T8500]        ocfs2_reserve_suballoc_bits+0x6eb/0x4640
[  159.741263][ T8500]        ocfs2_reserve_new_metadata_blocks+0x403/0x940
[  159.743684][ T8500]        ocfs2_extend_dir+0xc76/0x4870
[  159.745632][ T8500]        ocfs2_prepare_dir_for_insert+0x2fe8/0x5450
[  159.748029][ T8500]        ocfs2_mknod+0x819/0x2050
[  159.749844][ T8500]        ocfs2_mkdir+0x191/0x440
[  159.751624][ T8500]        vfs_mkdir+0x306/0x510
[  159.753437][ T8500]        do_mkdirat+0x247/0x590
[  159.755194][ T8500]        __x64_sys_mkdirat+0x87/0xa0
[  159.757058][ T8500]        do_syscall_64+0xfa/0x3b0
[  159.758880][ T8500]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  159.761262][ T8500] 
[  159.761262][ T8500] -> #0 (&ocfs2_sysfile_lock_key[EXTENT_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}:
[  159.765186][ T8500]        validate_chain+0xb9b/0x2140
[  159.767160][ T8500]        __lock_acquire+0xab9/0xd20
[  159.769119][ T8500]        lock_acquire+0x120/0x360
[  159.771057][ T8500]        down_write+0x96/0x1f0
[  159.772865][ T8500]        ocfs2_reserve_suballoc_bits+0x15e/0x4640
[  159.775285][ T8500]        ocfs2_reserve_new_metadata_blocks+0x403/0x940
[  159.777803][ T8500]        ocfs2_init_xattr_set_ctxt+0x307/0x700
[  159.780044][ T8500]        ocfs2_xattr_set+0xb70/0x11f0
[  159.782024][ T8500]        __vfs_setxattr+0x43c/0x480
[  159.783927][ T8500]        __vfs_setxattr_noperm+0x12d/0x660
[  159.786122][ T8500]        vfs_setxattr+0x16b/0x2f0
[  159.787997][ T8500]        filename_setxattr+0x274/0x600
[  159.790048][ T8500]        path_setxattrat+0x364/0x3a0
[  159.791972][ T8500]        __x64_sys_setxattr+0xbc/0xe0
[  159.793934][ T8500]        do_syscall_64+0xfa/0x3b0
[  159.795770][ T8500]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  159.798142][ T8500] 
[  159.798142][ T8500] other info that might help us debug this:
[  159.798142][ T8500] 
[  159.801946][ T8500] Chain exists of:
[  159.801946][ T8500]   &ocfs2_sysfile_lock_key[EXTENT_ALLOC_SYSTEM_INODE] --> jbd2_handle --> &oi->ip_xattr_sem
[  159.801946][ T8500] 
[  159.807751][ T8500]  Possible unsafe locking scenario:
[  159.807751][ T8500] 
[  159.810532][ T8500]        CPU0                    CPU1
[  159.812450][ T8500]        ----                    ----
[  159.814424][ T8500]   lock(&oi->ip_xattr_sem);
[  159.816159][ T8500]                                lock(jbd2_handle);
[  159.818567][ T8500]                                lock(&oi->ip_xattr_sem);
[  159.821191][ T8500]   lock(&ocfs2_sysfile_lock_key[EXTENT_ALLOC_SYSTEM_INODE]);
[  159.823897][ T8500] 
[  159.823897][ T8500]  *** DEADLOCK ***
[  159.823897][ T8500] 
[  159.826783][ T8500] 3 locks held by syz.1.913/8500:
[  159.828572][ T8500]  #0: ffff888117ec0428 (sb_writers#26){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[  159.831989][ T8500]  #1: ffff888119673540 (&type->i_mutex_dir_key#27){+.+.}-{4:4}, at: vfs_setxattr+0x144/0x2f0
[  159.835775][ T8500]  #2: ffff888119673278 (&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_xattr_set+0x40f/0x11f0
[  159.839224][ T8500] 
[  159.839224][ T8500] stack backtrace:
[  159.841332][ T8500] CPU: 1 UID: 0 PID: 8500 Comm: syz.1.913 Not tainted syzkaller #0 PREEMPT(full) 
[  159.841343][ T8500] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  159.841349][ T8500] Call Trace:
[  159.841355][ T8500]  <TASK>
[  159.841360][ T8500]  dump_stack_lvl+0x189/0x250
[  159.841374][ T8500]  ? __pfx_dump_stack_lvl+0x10/0x10
[  159.841385][ T8500]  ? __pfx__printk+0x10/0x10
[  159.841399][ T8500]  ? print_lock_name+0xde/0x100
[  159.841412][ T8500]  print_circular_bug+0x2ee/0x310
[  159.841424][ T8500]  check_noncircular+0x134/0x160
[  159.841441][ T8500]  validate_chain+0xb9b/0x2140
[  159.841451][ T8500]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  159.841465][ T8500]  ? look_up_lock_class+0x74/0x170
[  159.841478][ T8500]  ? register_lock_class+0x51/0x320
[  159.841490][ T8500]  __lock_acquire+0xab9/0xd20
[  159.841504][ T8500]  ? ocfs2_reserve_suballoc_bits+0x15e/0x4640
[  159.841515][ T8500]  lock_acquire+0x120/0x360
[  159.841528][ T8500]  ? ocfs2_reserve_suballoc_bits+0x15e/0x4640
[  159.841541][ T8500]  down_write+0x96/0x1f0
[  159.841550][ T8500]  ? ocfs2_reserve_suballoc_bits+0x15e/0x4640
[  159.841559][ T8500]  ? __pfx_down_write+0x10/0x10
[  159.841568][ T8500]  ocfs2_reserve_suballoc_bits+0x15e/0x4640
[  159.841581][ T8500]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  159.841592][ T8500]  ? lockdep_hardirqs_on+0x9c/0x150
[  159.841604][ T8500]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  159.841614][ T8500]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  159.841626][ T8500]  ? __pfx_ocfs2_reserve_suballoc_bits+0x10/0x10
[  159.841635][ T8500]  ? stack_depot_save_flags+0x41b/0x860
[  159.841648][ T8500]  ? kasan_save_track+0x4f/0x80
[  159.841659][ T8500]  ? kasan_save_track+0x3e/0x80
[  159.841668][ T8500]  ? __kasan_kmalloc+0x93/0xb0
[  159.841678][ T8500]  ? __kmalloc_cache_noprof+0x230/0x3d0
[  159.841690][ T8500]  ? ocfs2_reserve_new_metadata_blocks+0x113/0x940
[  159.841699][ T8500]  ? ocfs2_init_xattr_set_ctxt+0x307/0x700
[  159.841710][ T8500]  ? ocfs2_xattr_set+0xb70/0x11f0
[  159.841722][ T8500]  ? __vfs_setxattr+0x43c/0x480
[  159.841733][ T8500]  ? __vfs_setxattr_noperm+0x12d/0x660
[  159.841745][ T8500]  ? vfs_setxattr+0x16b/0x2f0
[  159.841755][ T8500]  ? filename_setxattr+0x274/0x600
[  159.841767][ T8500]  ? path_setxattrat+0x364/0x3a0
[  159.841776][ T8500]  ? __x64_sys_setxattr+0xbc/0xe0
[  159.841783][ T8500]  ? do_syscall_64+0xfa/0x3b0
[  159.841795][ T8500]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  159.841811][ T8500]  ? __kasan_kmalloc+0x93/0xb0
[  159.841822][ T8500]  ? ocfs2_reserve_new_metadata_blocks+0x113/0x940
[  159.841832][ T8500]  ocfs2_reserve_new_metadata_blocks+0x403/0x940
[  159.841843][ T8500]  ? __pfx_ocfs2_reserve_new_metadata_blocks+0x10/0x10
[  159.841852][ T8500]  ? __pfx_ocfs2_calc_xattr_set_need+0x10/0x10
[  159.841865][ T8500]  ? __lock_acquire+0xab9/0xd20
[  159.841878][ T8500]  ocfs2_init_xattr_set_ctxt+0x307/0x700
[  159.841890][ T8500]  ? __pfx_ocfs2_init_xattr_set_ctxt+0x10/0x10
[  159.841902][ T8500]  ? ocfs2_xattr_set+0xb36/0x11f0
[  159.841913][ T8500]  ? up_write+0x1c4/0x420
[  159.841921][ T8500]  ? ocfs2_xattr_set+0x334/0x11f0
[  159.841931][ T8500]  ocfs2_xattr_set+0xb70/0x11f0
[  159.841946][ T8500]  ? __pfx_ocfs2_xattr_set+0x10/0x10
[  159.841955][ T8500]  ? ocfs2_permission+0x107/0x1b0
[  159.841968][ T8500]  ? __pfx_ocfs2_permission+0x10/0x10
[  159.841983][ T8500]  ? inode_permission+0x149/0x470
[  159.841990][ T8500]  ? __pfx_ocfs2_permission+0x10/0x10
[  159.842003][ T8500]  ? look_up_lock_class+0x74/0x170
[  159.842014][ T8500]  ? register_lock_class+0x51/0x320
[  159.842027][ T8500]  ? posix_xattr_acl+0x93/0xc0
[  159.842038][ T8500]  ? evm_protect_xattr+0x4d4/0xa90
[  159.842048][ T8500]  ? __pfx_evm_protect_xattr+0x10/0x10
[  159.842058][ T8500]  ? __pfx_ocfs2_xattr_trusted_set+0x10/0x10
[  159.842069][ T8500]  __vfs_setxattr+0x43c/0x480
[  159.842083][ T8500]  __vfs_setxattr_noperm+0x12d/0x660
[  159.842097][ T8500]  vfs_setxattr+0x16b/0x2f0
[  159.842110][ T8500]  ? __pfx_vfs_setxattr+0x10/0x10
[  159.842121][ T8500]  ? mnt_get_write_access+0x223/0x2a0
[  159.842132][ T8500]  filename_setxattr+0x274/0x600
[  159.842146][ T8500]  ? __pfx_filename_setxattr+0x10/0x10
[  159.842159][ T8500]  ? getname_flags+0x1e5/0x540
[  159.842167][ T8500]  path_setxattrat+0x364/0x3a0
[  159.842178][ T8500]  ? __pfx_path_setxattrat+0x10/0x10
[  159.842187][ T8500]  ? do_futex+0x333/0x420
[  159.842203][ T8500]  ? rcu_is_watching+0x15/0xb0
[  159.842212][ T8500]  __x64_sys_setxattr+0xbc/0xe0
[  159.842220][ T8500]  do_syscall_64+0xfa/0x3b0
[  159.842232][ T8500]  ? lockdep_hardirqs_on+0x9c/0x150
[  159.842273][ T8500]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  159.842283][ T8500]  ? exc_page_fault+0x9f/0xf0
[  159.842295][ T8500]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  159.842305][ T8500] RIP: 0033:0x7f625038ebe9
[  159.842316][ T8500] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  159.842324][ T8500] RSP: 002b:00007f6251248038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc
[  159.842334][ T8500] RAX: ffffffffffffffda RBX: 00007f62505c5fa0 RCX: 00007f625038ebe9
[  159.842341][ T8500] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000200000000240
[  159.842347][ T8500] RBP: 00007f6250411e19 R08: 0000000000000000 R09: 0000000000000000
[  159.842353][ T8500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  159.842359][ T8500] R13: 00007f62505c6038 R14: 00007f62505c5fa0 R15: 00007fff2811c558
[  159.842368][ T8500]  </TASK>
[  160.133967][ T5852] ocfs2: Unmounting device (7,1) on (node local)

VM DIAGNOSIS:
09:56:55  Registers:
info registers vcpu 0

CPU#0
RAX=0000000009a485ac RBX=0000000000000d01 RCX=000000006cba5ec3 RDX=ffffc9000470f3b8
RSI=0000000000000016 RDI=00000000263aeee3 RBP=000000003263aeee RSP=ffffc9000470f338
R8 =0000000075c217b5 R9 =00000000a61997f3 R10=000000000000000e R11=ffffffff81ac3820
R12=0000000000000050 R13=0000000000000d40 R14=ffffc9000470f3a0 R15=ffffc9000470f3a0
RIP=ffffffff84feded0 RFL=00000a07 [-O---PC] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f7f6ac6b6c0 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007feeed1733e0 CR3=000000010641a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8
RSI=000000000000130d RDI=000000000000130e RBP=00000000000003f8 RSP=ffffc90004ade4b0
R8 =ffff888106d10237 R9 =1ffff11020da2046 R10=dffffc0000000000 R11=ffffffff854f3380
R12=dffffc0000000000 R13=ffffffff99afa8d0 R14=ffffffff99def420 R15=0000000000000000
RIP=ffffffff854f33fc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f62512486c0 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b32a23ffc CR3=000000003a390000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=006e696769726f2e 79616c7265766f2e
XMM02=00007f6250597498 00007f6250597470 XMM03=00007f62505974a8 00007f62505974a0
XMM04=00007f62510fd100 00007f6250597460 XMM05=00007f6250597478 00007f62505974c0
XMM06=00007f62505974b8 00007f62505974b0 XMM07=00007f62505974a8 00007f62505974a0
XMM08=0000000000000000 0000000000000dbe XMM09=0000000000000000 00007f6250412fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
