last executing test programs:

2.208340755s ago: executing program 1 (id=1101):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x64}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10)
munlock(&(0x7f0000001000/0x1000)=nil, 0x1000)

2.099130041s ago: executing program 1 (id=1102):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x38, 0x20, 0x1, 0x0, 0x0, {0xa, 0x0, 0x20, 0x40, 0x0, 0x0, 0x0, 0x7}, [@FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e1e, 0x4e24}}, @FRA_SRC={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x17}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040804}, 0x8800)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0)

2.039898668s ago: executing program 1 (id=1104):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f00000002c0)={0x20, 0x1410, 0x1, 0x70bd26, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x20010014)

2.039798558s ago: executing program 1 (id=1105):
syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1000000, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYRESHEX, @ANYRES8=0x0, @ANYRESOCT, @ANYBLOB="b6a3cde7e41dc14bad8796142759deebb7890087274a4f750356ab1b794545ab2852", @ANYRESDEC=0x0, @ANYBLOB="44bf90b1b2fbe866d03930"], 0x8, 0xa7, &(0x7f00000003c0)="$eJzszrFNw0AYBeBnWxhovAAFG3gHRkEuoaMCIXkiVmEEb0BBm+Yix0mkVCmiKFH0fdLdvdPdL73f1c9TuqSMSSmltEkes+SPz6+31/d5b7Jxl537cBPq7XpI8twt+e9lfmn3f6b/72GqMsznJbsCAACnqdMf3Kv0/dGhMUlzxlIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAV2QdAAD//0dpGb4=")
r0 = open(&(0x7f00000000c0)='.\x00', 0x10c80, 0x194)
getdents(r0, 0x0, 0x0)

2.037939166s ago: executing program 2 (id=1106):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@fwd={0x1}]}, {0x0, [0x61, 0x2e]}}, 0x0, 0x28}, 0x28)

2.001482913s ago: executing program 1 (id=1107):
pipe2$watch_queue(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
ioctl$IOC_WATCH_QUEUE_SET_FILTER(r1, 0x5761, &(0x7f0000000040)=ANY=[@ANYBLOB="01"])
close_range(r0, r1, 0x0)

1.948935068s ago: executing program 2 (id=1108):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
getpriority(0x1, 0x18)

1.948691348s ago: executing program 1 (id=1109):
r0 = syz_usb_connect$lan78xx(0x0, 0xa1, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001540)={0x34, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000540)={0x34, &(0x7f00000003c0)={0x20, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000380)={0x34, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})

1.818308613s ago: executing program 0 (id=1110):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00'})
ioctl(r0, 0x8b23, &(0x7f0000000040))

1.818028923s ago: executing program 0 (id=1111):
syz_mount_image$nilfs2(&(0x7f0000000180), &(0x7f0000000040)='./file2\x00', 0x2000c6, &(0x7f0000001340)=ANY=[], 0x1, 0xac5, &(0x7f00000001c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x80086e8a, 0x0)

1.685447425s ago: executing program 0 (id=1112):
syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000080)='./file0\x00', 0xa00004, &(0x7f00000000c0)={[{@adinicb}, {@iocharset={'iocharset', 0x3d, 'iso8859-7'}}, {@utf8}, {@uid}, {}, {@iocharset={'iocharset', 0x3d, 'cp950'}}, {@mode={'mode', 0x3d, 0x8}}, {@noadinicb}, {@longad}, {@gid_forget}, {@unhide}, {@gid_forget}, {@anchor={'anchor', 0x3d, 0x907}}]}, 0x1, 0xc4d, &(0x7f0000000f40)="$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")
mkdir(&(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x24)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)

1.685100701s ago: executing program 2 (id=1113):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r0, r1, 0x5}, 0x10)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000540)={@fallback=r0, 0x5, 0x0, 0x2, &(0x7f0000000440)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40)

1.684584207s ago: executing program 2 (id=1114):
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
syz_mount_image$xfs(&(0x7f0000000100), &(0x7f0000000000)='./file1\x00', 0x4004000, &(0x7f0000000140)={[{@qnoenforce}, {@nodiscard}, {@nouuid}, {@usrquota}, {@inode32}, {@gquota}, {@lazytime}, {@usrquota}, {@gqnoenforce}, {}]}, 0x1, 0x975c, &(0x7f000001c600)="$eJzs/QWcbXWhuP/PgUM3giBSUmKSEqJIhyJKihKCtKSACCgdSqigCCjd3d2d0t3d3R3/14EDKj5wvd/f/V+8Ps/zYmbPjlnz2Z/3Wou9Z83Ze6n5FptrYGDMgfd6//RvXbTbvcstPtpC6528y+Bb9t5x4SeGXjz8eydjzTH0dM6hp3MNDAwMGrqcQe9dNnj2k04eZmDwwJD//taoI408zKgDAyMPPTt0OQMzv3cyyiHv3+6dD8UDnXTIj9vhvY93G23IQoZ8sczyb609MDAw4t99/5BxTftPd1TaUnPOP9/frD5wG2bo1YP+dt27p4Pf+xjlgIGBUfYb+Oj1Y8hth/u77/3fbMjPHHPygSXu/QR+9v+5lppz/gU/5D9kWxx26GUzD9nGP7wNGvvwer7jYms8NnQKBw2duMF/t718Euv9/1NLzTnfQgMfvR0PLDzvpo++8+5+c/A8AwOD5x0YGDzfwMDg+T9pj/qf6RNd+aqqquoTac65ZhjynH2YDz0eGPH9x7X0uPCyN6d7cGBg8MLvPU8cvPz7zwWrqqqqqqqq6t+zOeeaYW54/j/mxz3/n/TMbcbq+X9VVVVVVVXV/50WnHOuGYY81//Q8//xP+75/7OPH33we3/7P8fM733X25/snaiqqqqqqqqqj22+BfH5/6Qf9/z/ipMmvbrn/1VVVVVVVVX/d1r0nXfe2fzvXmdv6MVTv389Pf8/+5G7l/3EBlxVVVVVVVVV/+3efuqMc/72mu8TD3zo9d7fbejvBQYdd961135iA/33aNA//z5ki096TP9fG+I84hGTDgysvcQnPZT6BPo/81r19f+X8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/cR9x/P+D1/8/+4QV338v+M9POcOtZ/ztO9997//BCy/41Jaf0NA/if5Tj/8PrD5oYGCo75irDwwMLDznootPPTAwcMatM0w5xcAH180y5LrZxh723TeIf/+ficw7Fi94i8neOx2yogyM88Eyjnt3+Qu+s/+wgz40iL9rrFMOPni1pV6Z8cOnU330/Rjmg69GO/nx9/8tyzAfutGIH/HN7y///fvyYeehY596yNin2WCtdadZf+NNvrL6WiusuvKqK6896/QzTTfjrLPONNM0q6y+5srTvvf5o+Zs0nc/z/2vzNmoH56zp+b8+zn78H37qDmb9OPn7N0l7nr5iN96f84G/zfnbO6Pn7NJVx/6g8aaY7iB5d+dm0EDA2PNM9zARkPOTDfCwMBY8w697fhDbvuNsYcZGNj5b3d0yFcjfLAODtpiyG2Wmm+xud7bTQ0M/O30b33E+9kPP3Tkcww9nXPo6Vzv/ZgxB/62Kg6e/aSThxkyF/8wHaOONPIwow4MjDz07NDlDMz63snIZ75/u494n/UPDfTdl1nZ4b2PdxttYGBglCFfTLzC2dsOmfr/hfdp/3/6//8/ec0y6IP1cdDQj6G3ec9rzvkX/NvPencahszdsEMvm3mIyf/wW9v/Q/803klHHJj0Y8b7Ma+L8260fq15xrhb/U+9Lg6Nd/yPGe/HvI7vR453yQf3eOy9Rf2PjfdD+7qF3v08x7+yrxv4+H3dsLSAla+a6MP7uu989BD/YXf5/hyN8KEbfdS+bvy9JtliyPLn+Ph93UJDxj7cP+zrhhkYGGvu9/d1Q3Z88w03sPOQM9MPOTP/cAOHDTkzw7tnRho4b8iZr664zporDblggX9eD6Ye9A9/oAnb2Xwf2s4G/d19H/Shv+8c/N7pKAe8/x5OH7HfHDT0bv2X+wpab8f8mPF+zPtP4TwPuWyl40cc93/q/adovCN+/Hg/6v2yP3K8O7189r3/w+P9YDsb7u+ma4F/ZTub9B+3syF3cdi/2zL+1cdhK8Ht3/t6/A+WtuFmj3/wmGK4Dy33v3pMscDHb2djrv6h79t+v4FBHzc38/8rczPhP+2Dtvz7uflXH29NPfl71w/7MXMzwqzLTfX+3Az/35yb+f+7czPHwLD/ODeDB+YdGBiYYuj+Yb5/ZW7G//i5+VfXm5Hh9u99vfIHF82z4xGXvD83H56L/2pu5vvvzs2kH6w3U7x73WTDDAw//MBGK2ywwXrTvff5/bPTv/f547fBef6VuRzzf2YuJxj8UXP5t1V11AevPuC/2Ab/aZ/+/vLn+e/O5cAHczmw+oc3lvp3rd//ucvfXf7u8neXv7v83eUv7iOO/3/w+v+7jznbLkN/uTHc1ZOMt90nPd5PuP/o4/9Dff/h+P92401y9TADH1z3scdn37vNv+Xx2ZnfOxnlkPdv9+HjgzzQjz4+u9+sM2/zv3R89v+p97fVf+H3cO3/3eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/uI+4vj/tO//HcAj0y3y/NADocM9sfXSi3zS4/2E+48+/j/U9x+O/y+y9NZPDDPwwXUfe/z/vds4jv/f/8Z8O/07H/9/f1vt+H/9F+XvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/uI+4vj/HO//HcDRR++xyft/D3DjWDuc8UmP9xPuP/X4f+//7639v7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y1/c0OP/Ax96e8vvt15gcPz//3Yf4b9I/pjFf9H8MYv/YvljFv/F88cs/kvkj1n8l8wfs/j/IH/M4r9U/pjF/4f5Yxb/H+WPWfyXzh+z+C+TP2bxXzZ/zOK/XP6Yxf/H+WMW/+Xzxyz+K+SPWfx/kj9m8V8xf8ziv1L+mMV/5fwxi/8q+WMW/1Xzxyz+q+WPWfxXzx+z+P80f8ziv0b+mMV/zfwxi/9a+WMW/7Xzxyz+6+SPWfzXzR+z+P8sf8ziv17+mMV//fwxi/8G+WMW/5/nj1n8N8wfs/j/In/M4r9R/pjFf+P8MYv/JvljFv9f5o9Z/H+VP2bx3zR/zOK/Wf6YxX/z/DGL/xb5Yxb/LfPHLP5b5Y9Z/LfOH7P4b5M/ZvHfNn/M4r9d/pjF/9f5Yxb/3+SPWfy3zx+z+O+QP2bx3zF/zOK/U/6Yxf+3+WMW/9/lj1n8f58/ZvHfOX/M4r9L/pjF/w/5Yxb/P+aPWfx3zR+z+P8pf8ziv1v+mMV/9/wxi/8e+WMW/z/nj1n8/5I/ZvHfM3/M4r9X/pjFf+/8MYv/PvljFv9988cs/vvlj1n8988fs/gfkD9m8T8wf8zif1D+mMX/4Pwxi/8h+WMW/0Pzxyz+h+WPWfwPzx+z+B+RP2bxPzJ/zOJ/VP6Yxf/o/DGL/zH5Yxb/Y/PHLP7H5Y9Z/I/PH7P4n5A/ZvE/MX/M4n9S/pjF/+T8MYv/KfljFv9T88cs/qflj1n8T88fs/ifkT9m8T8zf8zif1b+mMX/7Pwxi/85+WMW/3Pzxyz+5+WPWfzPzx+z+F+QP2bxvzB/zOJ/Uf6Yxf/i/DGL/yX5Yxb/S/PHLP6X5Y9Z/C/PH7P4X5E/ZvH/a/6Yxf/K/DGL/1X5Yxb/q/PHLP7X5I9Z/K/NH7P4X5c/ZvG/Pn/M4n9D/pjF/8b8MYv/TfljFv+b88cs/rfkj1n8b80fs/jflj9m8b89f8zif0f+mMX/zvwxi/9d+WMW/7vzxyz+9+SPWfzvzR+z+N+XP2bxvz9/zOL/QP6Yxf/B/DGL/0P5Yxb/h/PHLP6P5I9Z/B/NH7P4P5Y/ZvF/PH/M4v9E/pjF/8n8MYv/U/ljFv+n88cs/s/kj1n8n80fs/g/lz9m8X8+f8zi/0L+mMX/xfwxi/9L+WMW/5fzxyz+r+SPWfxfzR+z+L+WP2bxfz1/zOL/Rv6Yxf/N/DGL/1v5Yxb/t/PHLP7v5I9J/AcN5I9Z/Aflj1n8h8kfs/gPmz9m8R+cP2bxHy5/zOI/fP6YxX+E/DGL/4j5Yxb/kfLHLP4j549Z/EfJH7P4j5o/ZvEfLX/M4j96/pjFf4z8MYv/mPljFv+x8scs/mPnj1n8P5U/ZvEfJ3/M4j9u/pjF/9P5Yxb/8fLHLP7j549Z/D+TP2bxnyB/zOL/2fwxi/+E+WMW/4nyxyz+E+ePWfwnyR+z+E+aP2bx/1z+mMV/svf9R/yExvVvmsV/8rZ/zOI/Rf6YxX/K/DGL/1T5Yxb/z+ePWfynzh+z+H8hf8zi/8X8MYv/l/LHLP5fzh+z+H8lf8zi/9X8MYv/NPljFv9p88cs/tPlj1n8p88fs/jPkD9m8Z8xf8zi/7X8MYv/TPljFv+Z88cs/rPkj1n8Z80fs/h/PX/M4j9b/pjF/xv5Yxb/b+aPWfxnzx+z+H8rf8ziP0f+mMV/zvwxi/9c+WMW/7nzxyz+8+SPWfznzR+z+M+XP2bxnz9/zOK/QP6YxX/B/DGL/7fzxyz+38kfs/gvlD9m8f9u/pjFf+H8MYv/9/LHLP7fzx+z+C+SP2bxXzR/zOK/WP6YxX/x/DGL/xL5Yxb/JfPHLP4/yB+z+C+VP2bx/2H+mMX/R/ljFv+l88cs/svkj1n8l80fs/gvlz9m8f9x/pjFf/n8MYv/CvljFv+f5I9Z/FfMH7P4r5Q/ZvFfOX/M4r9K/pjFf9X8MYv/avljFv/V88cs/j/NH7P4r5E/ZvFfM3/M4r9W/pjFf+38MYv/OvljFv9188cs/j/LH7P4r5c/ZvFfP3/M4r9B/pjF/+f5Yxb/DfPHLP6/yB+z+G+UP2bx3zh/zOK/Sf6Yxf+X+WMW/1/lj1n8N80fs/hvlj9m8d88f8ziv0X+mMV/y/wxi/9W+WMW/63zxyz+2+SPWfy3zR+z+G+XP2bx/3X+mMX/N/ljFv/t88cs/jvkj1n8d8wfs/jvlD9m8f9t/pjF/3f5Yxb/3+ePWfx3zh+z+O+SP2bx/0P+mMX/j/ljFv9d88cs/n/KH7P475Y/ZvHfPX/M4r9H/pjF/8/5Yxb/v+SPWfz3zB+z+O+VP2bx3zt/zOK/T/6YxX/f/DGL/375Yxb//fPHLP4H5I9Z/A/MH7P4H5Q/ZvE/OH/M4n9I/pjF/9B/9H/4f31c/6ZZ/A9r+8cs/ofnj1n8j8gfs/gfmT9m8T8qf8zif3T+mMX/mPwxi/+x+WMW/+Pyxyz+x+ePWfxPyB+z+J+YP2bxPyl/zOJ/cv6Yxf+U/DGL/6n5Yxb/0/LHLP6n549Z/M/IH7P4n5k/ZvE/K3/M4n92/pjF/5z8MYv/ufljFv/z8scs/ufnj1n8L8gfs/hfmD9m8b8of8zif3H+mMX/kvwxi/+l+WMW/8vyxyz+l+ePWfyvyB+T+L9b/v+cxH/QlfljFv+r8scs/lfnj1n8r8kfs/hfmz9m8b8uf8zif33+mMX/hvwxi/+N+WMW/5vyxyz+N+ePWfxvyR+z+N+aP2bxvy1/zOJ/e/6Yxf+O/DGL/535Yxb/u/LHLP53549Z/O/JH7P435s/ZvG/L3/M4n9//pjF/4H8MYv/g/ljFv+H8scs/g/nj1n8H8kfs/g/mj9m8X8sf8zi/3j+mMX/ifwxi/+T+WMW/6fyxyz+T+ePWfyfyR+z+D+bP2bxfy5/zOL/fP6Yxf+F/DGL/4v5Yxb/l/LHLP4v549Z/F/JH7P4v5o/ZvF/Lf/h6UKL/+v5Yxb/N/LHLP5v5o9Z/N/KH7P4v50/ZvF/J39M4v/ul/n/cxb/QfljFv9h8scs/sPmj1n8B+ePWfyHyx+z+A+fP2bxHyF/zOI/Yv6YxX+k/DGL/8j5Yxb/UfLHLP6j5o9Z/EfLH7P4j54/ZvEfI3/M4j9m/pjFf6z8MYv/2PljFv9P5Y9Z/MfJH7P4j5s/ZvH/dP6YxX+8/DGL//j5Yxb/z+SPWfwnyB+z+H82f8ziP2H+mMV/ovwxi//E+WMW/0nyxyz+k+aPWfw/lz9m8Z8sf8ziP3n+mMV/ivwxi/+U+WMW/6nyxyz+n88fs/hPnT9m8f9C/pjF/4v5Yxb/L+WPWfy/nD9m8f9K/pjF/6v5Yxb/afLHLP7T5o8Numi34QYGBv7j/afLH7Ns/9Pnj1n8Z8gfs/jPmD9m8f9a/pjFf6b8MYv/zPljFv9Z8scs/rPmj1n8v54/ZvGfLX/M4v+N/DGL/zfzxyz+s+ePWfy/lT9m8Z8jf8ziP2f+mMV/rvwxi//c+WMW/3nyxyz+8+aPWfznyx+z+M+fP2bxXyB/zOK/YP6Yxf/b+WMW/+/kj1n8F8ofs/h/N3/M4r9w/pjF/3v5Yxb/7+ePWfwXyR+z+C+aP2bxXyx/zOK/eP6YxX+J/DGL/5L5Yxb/H+SPWfyXyh+z+P8wf8zi/6P8MYv/0vljFv9l8scs/svmj1n8l8sfs/j/OH/M4r98/pjFf4X8MYv/T/LHLP4r5o9Z/FfKH7P4r5w/ZvFfJX/M4r9q/pjFf7X8MYv/6vljFv+f5o9Z/NfIH7P4r5k/ZvFfK3/M4r92/pjFf538MYv/uvljFv+f5Y9Z/NfLH7P4r58/ZvHfIH/M4v/z/DGL/4b5Yxb/X+SPWfw3yh+z+G+cP2bx3yR/zOL/y/wxi/+v8scs/pvmj1n8N8sfs/hvnj9m8d8if8ziv2X+mMV/q/wxi//W+WMW/23yxyz+2+aPWfy3yx+z+P86f8zi/5v8MYv/9vljFv8d8scs/jvmj1n8d8ofs/j/Nn/M4v+7/DGL/+/zxyz+O+ePWfx3yR+z+P8hf8zi/8f8MYv/rvljFv8/5Y9Z/HfLH7P4754/ZvHfI3/M4v/n/DGL/1/yxyz+e+aPWfz3yh+z+O+dP2bx3yd/zOK/b/6YxX+//DGL//75Yxb/A/LHLP4H5o9Z/A/KH7P4H5w/ZvE/JH/M4n9o/pjF/7D8MYv/4fljFv8j8scs/kfmj1n8j8ofs/gfnT9m8T8mf8zif2z+mMX/uPwxi//x+WMW/xPyxyz+J+aPWfxPyh+z+J+cP2bxPyV/zOJ/av6Yxf+0/DGL/+n5Yxb/M/LHLP5n5o9Z/M/KH7P4n50/ZvE/J3/M4n9u/pjF/7z8MYv/+fljFv8L8scs/hfmj1n8L8ofs/hfnD9m8b8kf8zif2n+mMX/svwxi//l+WMW/yvyxyz+f80fs/hfmT9m8b8qf8zif3X+mMX/mvwxi/+1+WMW/+vyxyz+1+ePWfxvyB+z+N+YP2bxvyl/zOJ/c/6Yxf+W/DGL/635Yxb/2/LHLP63549Z/O/IH7P435k/ZvG/K3/M4n93/pjF/578MYv/vfljFv/78scs/vfnj1n8H8gfs/g/mD9m8X8of8zi/3D+mMX/kfwxi/+j+WMW/8fyxyz+j+ePWfyfyB+z+D+ZP2bxfyp/zOL/dP6Yxf+Z/DGL/7P5Yxb/5/LHLP7P549Z/F/IH7P4v5g/ZvF/KX/M4v9y/pjF/5X8MYv/q/ljFv/X8scs/q/nj1n838gfs/i/mT9m8X8rf8zi/3b+mMX/nfwxif+wA/ljFv9B+WMW/2Hyxyz+w+aPWfwH549Z/IfLH7P4D58/ZvEfIX/M4j9i/pjFf6T8MYv/yPljFv9R8scs/qPmj1n8R8sfs/iPnj9m8R8jf8ziP2b+mMV/rPwxi//Y+WMW/0/lj1n8x8kfs/iPmz9m8f90/pjFf7z8MYv/+PljFv/P5I9Z/CfIH7P4fzZ/zOI/Yf6YxX+i/DGL/8T5Yxb/SfLHLP6T5o9Z/D+XP2bxnyx/zOI/ef6YxX+K/DGL/5T5Yxb/qfLHLP6fzx+z+E+dP2bx/0L+mMX/i/ljFv8v5Y9Z/L+cP2bx/0r+mMX/q/ljFv9p8scs/tPmj1n8p8sfs/hPnz9m8Z8hf8ziP2P+mMX/a/ljFv+Z8scs/jPnj1n8Z8kfs/jPmj9m8f96/pjFf7b8MYv/N/LHLP7fzB+z+M+eP2bx/1b+mMV/jvwxi/+c+WMW/7nyxyz+c+ePWfznyR+z+M+bP2bxny9/zOI/f/6YxX+B/DGL/4L5Yxb/b+ePWfy/kz9m8V8of8zi/938MYv/wvljFv/v5Y9Z/L+fP2bxXyR/zOK/aP6YxX+x/DGL/+L5Yxb/JfLHLP5L5o9Z/H+QP2bxXyp/zOL/w/wxi/+P8scs/kvnj1n8l8kfs/gvmz9m8V8uf8zi/+P8MYv/8vljFv8V8scs/j/JH7P4r5g/ZvFfKX/M4r9y/pjFf5X8MYv/qvljFv/V8scs/qvnj1n8f5o/ZvFfI3/M4r9m/pjFf638MYv/2vljFv918scs/uvmj1n8f5Y/ZvFfL3/M4r9+/pjFf4P8MYv/z/PHLP4b5o9Z/H+RP2bx3yh/zOK/cf6YxX+T/DGL/y/zxyz+v8ofs/hvmj9m8d8sf8ziv3n+mMV/i/wxi/+W+WMW/63yxyz+W+ePWfy3yR+z+G+bP2bx3y5/zOL/6/wxi/9v8scs/tvnj1n8d8gfs/jvmD9m8d8pf8zi/9v8MYv/7/LHLP6/zx+z+O+cP2bx3yV/zOL/h/wxi/8f88cs/rvmj1n8/5Q/ZvHfLX/M4r97/pjFf4/8MYv/n/PHLP5/yR+z+O+ZP2bx3yt/zOK/d/6YxX+f/DGL/775Yxb//fLHLP77549Z/A/IH7P4H5g/ZvE/KH/M4n9w/pjF/5D8MYv/ofljFv/D8scs/ofnj1n8j8gfs/gfmT9m8T8qf8zif3T+mMX/mPwxi/+x+WMW/+Pyxyz+x+ePWfxPyB+z+J+YP2bxPyl/zOJ/cv6Yxf+U/DGL/6n5Yxb/0/LHLP6n549Z/M/IH7P4n5k/ZvE/K3/M4n92/pjF/5z8MYv/ufljFv/z8scs/ufnj1n8L8gfs/hfmD9m8b8of8zif3H+mMX/kvwxi/+l+WMW/8vyxyz+l+ePWfyvyB+z+P81f8zif2X+mMX/qvwxi//V+WMW/2vyxyz+1+aPWfyvyx+z+F+fP2bxvyF/zOJ/Y/6Yxf+m/DGL/835Yxb/W/LHLP635o9Z/G/LH7P4354/ZvG/I3/M4n9n/pjF/678MYv/3fljFv978scs/vfmj1n878sfs/jfnz9m8X8gf8zi/2D+mMX/ofwxi//D+WMW/0fyxyz+j+aPWfwfyx+z+D+eP2bxfyJ/zOL/ZP6Yxf+p/DGL/9P5Yxb/Z/LHLP7P5o9Z/J/LH7P4P58/ZvF/IX/M4v9i/pjF/6X8MYv/y/ljFv9X8scs/q/mj1n8X8sfs/i/nj9m8X8jf8zi/2b+mMX/rfwxi//b+WMW/3fyxyT+gwfyxyz+g/LHLP7D5I9Z/IfNH7P4D84fs/gPlz9m8R8+f8ziP0L+mMV/xPwxi/9I+WMW/5Hzxyz+o+SPWfxHzR+z+I+WP2bxHz1/zOI/Rv6YxX/M/DGL/1j5Yxb/sfPHLP6fyh+z+I+TP2bxHzd/zOL/6fwxi/94+WMW//Hzxyz+n8kfs/hPkD9m8f9s/pjFf8L8MYv/RPljFv+J88cs/pPkj1n8J80fs/h/Ln/M4j9Z/pjFf/L8MYv/FPljFv8p88cs/lPlj1n8P58/ZvGfOn/M4v+F/DGL/xfzxyz+X8ofs/h/OX/M4v+V/DGL/1fzxyz+0+SPWfynzR+z+E+XP2bxnz5/zOI/Q/6YxX/G/DGL/9fyxyz+M+WPWfxnzh+z+M+SP2bxnzV/zOL/9fwxi/9s+WMW/2/kj1n8v5k/ZvGfPX/M4v+t/DGL/xz5Yxb/OfPHLP5z5Y9Z/OfOH7P4z5M/ZvGfN3/M4j9f/pjFf/78MYv/AvljFv8F88cs/t/OH7P4fyd/zOK/UP6Yxf+7+WMW/4Xzxyz+38sfs/h/P3/M4r9I/pjFf9H8MYv/YvljFv/F88cs/kvkj1n8l8wfs/j/IH/M4r9U/pjF/4f5Yxb/H+WPWfyXzh+z+C+TP2bxXzZ/zOK/XP6Yxf/H+WMW/+Xzxyz+K+SPWfx/kj9m8V8xf8ziv1L+mMV/5fwxi/8q+WMW/1Xzxyz+q+WPWfxXzx+z+P80f8ziv0b+mMV/zfwxi/9a+WMW/7Xzxyz+6+SPWfzXzR+z+P8sf8ziv17+mMV//fwxi/8G+WMW/5/nj1n8N8wfs/j/In/M4r9R/pjFf+P8MYv/JvljFv9f5o9Z/H+VP2bx3zR/zOK/Wf6YxX/z/DGL/xb5Yxb/LfPHLP5b5Y9Z/LfOH7P4b5M/ZvHfNn/M4r9d/pjF/9f5Yxb/3+SPWfy3zx+z+O+QP2bx3zF/zOK/U/6Yxf+3+WMW/9/lj1n8f58/ZvHfOX/M4r9L/pjF/w/5Yxb/P+aPWfx3zR+z+P8pf8ziv1v+mMV/9/wxi/8e+WMW/z/nj1n8/5I/ZvHfM3/M4r9X/pjFf+/8MYv/PvljFv9988cs/vvlj1n8988fs/gfkD9m8T8wf8zif1D+mMX/4Pwxi/8h+WMW/0Pzxyz+h+WPWfwPzx+z+B+RP2bxPzJ/zOJ/VP6Yxf/o/DGL/zH5Yxb/Y/PHLP7H5Y9Z/I/PH7P4n5A/ZvE/MX/M4n9S/pjF/+T8MYv/KfljFv9T88cs/qflj1n8T88fs/ifkT9m8T8zf8zif1b+mMX/7Pwxi/85+WMW/3Pzxyz+5+WPWfzPzx+z+F+QP2bxvzB/zOJ/Uf6Yxf/i/DGL/yX5Yxb/S/PHLP6X5Y9Z/C/PH7P4X5E/ZvH/a/6Yxf/K/DGL/1X5Yxb/q/PHLP7X5I9Z/K/NH7P4X5c/ZvG/Pn/M4n9D/pjF/8b8MYv/TfljFv+b88cs/rfkj1n8b80fs/jflj9m8b89f8zif0f+mMX/zvwxi/9d+WMW/7vzxyz+9+SPWfzvzR+z+N+XP2bxvz9/zOL/QP6Yxf/B/DGL/0P5Yxb/h/PHLP6P5I9Z/B/NH7P4P5Y/ZvF/PH/M4v9E/pjF/8n8MYv/U/ljFv+n88cs/s/kj1n8n80fs/g/lz9m8X8+f8zi/0L+mMX/xfwxi/9L+WMW/5fzxyz+r+SPWfxfzR+z+L+WP2bxfz1/zOL/Rv6Yxf/N/DGL/1v5Yxb/t/PHLP7v5I9J/IcbyB+z+A/KH7P4D5M/ZvEfNn/M4j84f8ziP1z+mMV/+Pwxi/8I+WMW/xHzxyz+I+WPWfxHzh+z+I+SP2bxHzV/zOI/Wv6YxX/0/DGL/xj5Yxb/MfPHLP5j5Y9Z/MfOH7P4fyp/zOI/Tv6YxX/c/DGL/6fzxyz+4+WPWfzHzx+z+H8mf8ziP0H+mMX/s/ljFv8J88cs/hPlj1n8J84fs/hPkj9m8Z80f8zi/7n8MYv/ZPljFv/J88cs/lPkj1n8p8wfs/hPlT9m8f98/pjFf+r8MYv/F/LHLP5fzB+z+H8pf8zi/+X8MYv/V/LHLP5fzR+z+E+TP2bxnzZ/zOI/Xf6YxX/6/DGL/wz5Yxb/GfPHLP5fyx+z+M+UP2bxnzl/zOI/S/6YxX/W/DGL/9fzxyz+s+WPWfy/kT9m8f9m/pjFf/b8MYv/t/LHLP5z5I9Z/OfMH7P4z5U/ZvGfO3/M4j9P/pjFf978MYv/fPljFv/588cs/gvkj1n8F8wfs/h/O3/M4v+d/DGL/0L5Yxb/7+aPWfwXzh+z+H8vf8zi//38MYv/IvljFv9F88cs/ovlj1n8F88fs/gvkT9m8V8yf8zi/4P8MYv/UvljFv8f5o9Z/H+UP2bxXzp/zOK/TP6YxX/Z/DGL/3L5Yxb/H+ePWfyXzx+z+K+QP2bx/0n+mMV/xfwxi/9K+WMW/5Xzxyz+q+SPWfxXzR+z+K+WP2bxXz1/zOL/0/wxi/8a+WMW/zXzxyz+a+WPWfzXzh+z+K+TP2bxXzd/zOL/s/wxi/96+WMW//Xzxyz+G+SPWfx/nj9m8d8wf8zi/4v8MYv/RvljFv+N88cs/pvkj1n8f5k/ZvH/Vf6YxX/T/DGL/2b5Yxb/zfPHLP5b5I9Z/LfMH7P4b5U/ZvHfOn/M4r9N/pjFf9v8MYv/dvljFv9f549Z/H+TP2bx3z5/zOK/Q/6YxX/H/DGL/075Yxb/3+aPWfx/lz9m8f99/pjFf+f8MYv/LvljFv8/5I9Z/P+YP2bx3zV/zOL/p/wxi/9u+WMW/93zxyz+e+SPWfz/nD9m8f9L/pjFf8/8MYv/XvljFv+988cs/vvkj1n8980fs/jvlz9m8d8/f8zif0D+mMX/wPwxi/9B+WMW/4Pzxyz+h+SPWfwPzR+z+B+WP2bxPzx/zOJ/RP6Yxf/I/DGL/1H5Yxb/o/PHLP7H5I9Z/I/NH7P4H5c/ZvE/Pn/M4n9C/pjF/8T8MYv/SfljFv+T88cs/qfkj1n8T80fs/iflj9m8T89f8zif0b+mMX/zPwxi/9Z+WMW/7Pzxyz+5+SPWfzPzR+z+J+XP2bxPz9/zOJ/Qf6Yxf/C/DGL/0X5Yxb/i/PHLP6X5I9Z/C/NH7P4X5Y/ZvG/PH/M4n9F/pjF/6/5Yxb/K/PHLP5X5Y9Z/K/OH7P4X5M/ZvG/Nn/M4n9d/pjF//r8MYv/DfljFv8b88cs/jflj1n8b84fs/jfkj9m8b81f8zif1v+mMX/9vwxi/8d+WMW/zvzxyz+d+WPWfzvzh+z+N+TP2bxvzd/zOJ/X/6Yxf/+/DGL/wP5Yxb/B/PHLP4P5Y9Z/B/OH7P4P5I/ZvF/NH/M4v9Y/pjF//H8MYv/E/ljFv8n88cs/k/lj1n8n84fs/g/kz9m8X82f8zi/1z+mMX/+fwxi/8L+WMW/xfzxyz+L+WPWfxfzh+z+L+SP2bxfzV/zOL/Wv6Yxf/1/DGL/xv5Yxb/N/PHLP5v5Y9Z/N/OH7P4v5M/JvEffiB/zOI/KH/M4j9M/pjFf9j8MYv/4Pwxi/9w+WMW/+Hzxyz+I+SPWfxHzB+z+I+UP2bxHzl/zOI/Sv6YxX/U/DGL/2j5Yxb/0fPHLP5j5I9Z/MfMH7P4j5U/ZvEfO3/M4v+p/DGL/zj5Yxb/cfPHLP6fzh+z+I+XP2bxHz9/zOL/mfwxi/8E+WMW/8/mj1n8J8wfs/hPlD9m8Z84f8ziP0n+mMV/0vwxi//n8scs/pPlj1n8J88fs/hPkT9m8Z8yf8ziP1X+mMX/8/ljFv+p88cs/l/IH7P4fzF/zOL/pfwxi/+X88cs/l/JH7P4fzV/zOI/Tf6YxX/a/DGL/3T5Yxb/6fPHLP4z5I9Z/GfMH7P4fy1/zOI/U/6YxX/m/DGL/yz5Yxb/WfPHLP5fzx+z+M+WP2bx/0b+mMX/m/ljFv/Z88cs/t/KH7P4z5E/ZvGfM3/M4j9X/pjFf+78MYv/PPljFv9588cs/vPlj1n8588fs/gvkD9m8V8wf8zi/+38MYv/d/LHLP4L5Y9Z/L+bP2bxXzh/zOL/vfwxi//388cs/ovkj1n8F80fs/gvlj9m8V88f8ziv0T+mMV/yfwxi/8P8scs/kvlj1n8f5g/ZvH/Uf6YxX/p/LH/UP9BH7Iefpn8sf9Q/3f7++1/2fwxi/9y+WMW/x/nj1n8l88fs/ivkD9m8f9J/pjFf8X8sUEXDRo6M//Z/ivlj1m2/5Xzxyz+q+SPWfxXzR+z+K+WP2bxXz1/zOL/0/wxi/8a+WMW/zXzxyz+a+WPWfzXzh+z+K+TP2bxXzd/zOL/s/wxi/96+WMW//Xzxyz+G+SPWfx/nj9m8d8wf8zi/4v8MYv/RvljFv+N88cs/pvkj1n8f5k/ZvH/Vf6YxX/T/DGL/2b5Yxb/zfPHLP5b5I9Z/LfMH7P4b5U/ZvHfOn/M4r9N/pjFf9v8MYv/dvljFv9f549Z/H+TP2bx3z5/zOK/Q/6YxX/H/DGL/075Yxb/3+aPWfx/lz9m8f99/pjFf+f8MYv/LvljFv8/5I9Z/P+YP2bx3zV/zOL/p/wxi/9u+WMW/93zxyz+e+SPWfz/nD9m8f9L/pjFf8/8MYv/XvljFv+988cs/vvkj1n8980fs/jvlz9m8d8/f8zif0D+mMX/wPwxi/9B+WMW/4Pzxyz+h+SPWfwPzR+z+B+WP2bxPzx/zOJ/RP6Yxf/I/DGL/1H5Yxb/o/PHLP7H5I9Z/I/NH7P4H5c/ZvE/Pn/M4n9C/pjF/8T8MYv/SfljFv+T88cs/qfkj1n8T80fs/iflj9m8T89f8zif0b+mMX/zPwxi/9Z+WMW/7Pzxyz+5+SPWfzPzR+z+J+XP2bxPz9/zOJ/Qf6Yxf/C/DGL/0X5Yxb/i/PHLP6X5I9Z/C/NH7P4X5Y/ZvG/PH/M4n9F/pjF/6/5Yxb/K/PHLP5X5Y9Z/K/OH7P4X5M/ZvG/Nn/M4n9d/pjF//r8MYv/DfljFv8b88cs/jflj1n8b84fs/jfkj9m8b81f8zif1v+mMX/9vwxi/8d+WMW/zvzxyz+d+WPWfzvzh+z+N+TP2bxvzd/zOJ/X/6Yxf/+/DGL/wP5Yxb/B/PHLP4P5Y9Z/B/OH7P4P5I/ZvF/NH/M4v9Y/pjF//H8MYv/E/ljFv8n88cs/k/lj1n8n84fs/g/kz9m8X82f8zi/1z+mMX/+fwxi/8L+WMW/xfzHxgJLrP4v5Q/ZvF/OX/M4v9K/pjF/9X8MYv/a/ljFv/X88cs/m/kj1n838wfs/i/lT9m8X87f8zi/07+mMR/hIH8MYv/oPwxi/8w+WMW/2Hzxyz+g/PHLP7D5Y9Z/IfPH7P4j5A/ZvEfMX/M4j9S/pjFf+T8MYv/KPljFv9R88cs/qPlj1n8R88fs/iPkT9m8R8zf8ziP1b+QxvxH85Z/MfOH7P4fyp/zOI/Tv6YxX/c/DGL/6fzxyz+4+WPWfzHzx+z+H8mf8ziP0H+mMX/s/ljFv8J88cs/hPlj1n8J84fs/hPkj9m8Z80f8zi/7n8MYv/ZPljFv/J88cs/lPkj1n8p8wfs/hPlT9m8f98/pjFf+r8MYv/F/LHLP5fzB+z+H8pf8zi/+X8MYv/V/LHLP5fzR+z+E+TP2bxnzZ/zOI/Xf6YxX/6/DGL/wz5Yxb/GfPHLP5fyx+z+M+UP2bxnzl/zOI/S/6YxX/W/DGL/9fzxyz+s+WPWfy/kT9m8f9m/pjFf/b8MYv/t/LHLP5z5I9Z/OfMH7P4z5U/ZvGfO3/M4j9P/pjFf978MYv/fPljFv/588cs/gvkj1n8F8wfs/h/O3/M4v+d/DGL/0L5Yxb/7+aPWfwXzh+z+H8vf8zi//38MYv/IvljFv9F88cs/ovlj1n8F88fs/gvkT9m8V8yf8zi/4P8MYv/UvljFv8f5o9Z/H+UP2bxXzp/zOK/TP6YxX/Z/DGL/3L5Yxb/H+ePWfyXzx+z+K+QP2bx/0n+mMV/xfwxi/9K+WMW/5Xzxyz+q+SPWfxXzR+z+K+WP2bxXz1/zOL/0/wxi/8a+WMW/zXzxyz+a+WPWfzXzh+z+K+TP2bxXzd/zOL/s/wxi/96+WMW//Xzxyz+G+SPWfx/nj9m8d8wf8zi/4v8MYv/RvljFv+N88cs/pvkj1n8f5k/ZvH/Vf6YxX/T/DGL/2b5Yxb/zfPHLP5b5I9Z/LfMH7P4b5U/ZvHfOn/M4r9N/pjFf1v0b42w+G+XNmbx/3X+mMX/N/ljFv/t88cs/jvkj1n8d3zP/613Pqlx/Ztm8d+p7R+z+P82f8zi/7v8MYv/7/PHLP47549Z/HfJH7P4/yF/zOL/x/wxi/+u+WMW/z/lj1n8d8sfs/jvnj9m8d8jf8zi/+f8MYv/X/LHLP575o9Z/PfKH7P4750/ZvHfJ3/M4r9v/pjFf7/8MYv//vljFv8D8scs/gfmj1n8D8ofs/gfnD9m8T8kf8zif2j+mMX/sPwxi//h+WMW/yPyxyz+R+aPWfyPyh+z+B+dP2bxPyZ/zOJ/bP6Yxf+4/DGL//H5Yxb/E/LHLP4n5o9Z/E/KH7P4n5w/ZvE/JX/M4n9q/pjF/7T8MYv/6fljFv8z8scs/mfmj1n8z8ofs/ifnT9m8T8nf8zif27+mMX/vPwxi//5+WMW/wvyxyz+F+aPWfwvyh+z+F+cP2bxvyR/zOJ/af6Yxf+y/DGL/+X5Yxb/K/LHLP5/zR+z+F+ZP2bxvyp/zOJ/df6Yxf+a/DGL/7X5Yxb/6/LHLP7X549Z/G/IH7P435g/ZvG/KX/M4n9z/pjF/5b8MYv/rfljFv/b8scs/rfnj1n878gfs/jfmT9m8b8rf8zif3f+mMX/nvwxi/+9+WMW//vyxyz+9+ePWfwfyB+z+D+YP2bxfyh/zOL/cP6Yxf+R/DGL/6P5Yxb/x/LHLP6P549Z/J/IH7P4P5k/ZvF/Kn/M4v90/pjF/5n8MYv/s/ljFv/n8scs/s/nj1n8X8gfs/i/mD9m8X8pf8zi/3L+mMX/lfwxi/+r+WMW/9fyxyz+r+ePWfzfyB+z+L+ZP2bxfyt/zOL/dv6Yxf+d/DGJ/4gD+WMW/0H5Yxb/YfLHLP7D5o9Z/Afnj1n8h8sfs/gPnz9m8R8hf8ziP2L+mMV/pPwxi//I+WMW/1Hyxyz+o+aPWfxHyx+z+I+eP2bxHyN/zOI/Zv6YxX+s/DGL/9j5Yxb/T+WPWfzHyR+z+I+bP2bx/3T+mMV/vPwxi//4+WMW/8/kj1n8J8gfs/h/Nn/M4j9h/pjFf6L8MYv/xPljFv9J8scs/pPmj1n8P5c/ZvGfLH/M4j95/pjFf4r8MYv/lPljFv+p8scs/p/PH7P4T50/ZvH/Qv6Yxf+L+WMW/y/lj1n8v5w/ZvH/Sv6Yxf+r+WMW/2nyxyz+0+aPWfynyx+z+E+fP2bxnyF/zOI/Y/6Yxf9r+WMW/5nyxyz+M+ePWfxnyR+z+M+aP2bx/3r+mMV/tvwxi/838scs/t/MH7P4z54/ZvH/Vv6YxX+O/DGL/5z5Yxb/ufLHLP5z549Z/OfJH7P4z5s/ZvGfL3/M4j9//pjFf4H8MYv/gvljFv9v549Z/L+TP2bxXyh/zOL/3fwxi//C+WMW/+/lj1n8v58/ZvFfJH/M4r9o/pjFf7H8MYv/4vljFv8l8scs/kvmj1n8f5A/ZvFfKn/M4v/D/DGL/4/yxyz+S+ePWfyXyR+z+C+bP2bxXy5/zOL/4/wxi//y+WMW/xXyxyz+P8kfs/ivmD9m8V8pf8ziv3L+mMV/lfwxi/+q+WMW/9Xyxyz+q+ePWfx/mj9m8V8jf8ziv2b+mMV/rfwxi//a+WMW/3Xyxyz+6+aPWfx/lj9m8V8vf8ziv37+mMV/g/wxi//P88cs/hvmj1n8f5E/ZvHfKH/M4r9x/pjFf5P8MYv/L/PHLP6/yh+z+G+aP2bx3yx/zOK/ef6YxX+L/DGL/5b5Yxb/rfLHLP5b549Z/LfJH7P4b5s/ZvHfLn/M4v/r/DGL/2/yxyz+2+ePWfx3yB+z+O+YP2bx3yl/zOL/2/wxi//v8scs/r/PH7P475w/ZvHfJX/M4v+H/DGL/x/zxyz+u+aPWfz/lD9m8d8tf8ziv3v+mMV/j/wxi/+f88cs/n/JH7P475k/ZvHfK3/M4r93/pjFf5/8MYv/vvljFv/98scs/vvnj1n8D8gfs/gfmD9m8T8of8zif3D+mMX/kPwxi/+h+WMW/8Pyxyz+h+ePWfyPyB+z+B+ZP2bxPyp/zOJ/dP6Yxf+Y/DGL/7H5Yxb/4/LHLP7H549Z/E/IH7P4n5g/ZvE/KX/M4n9y/pjF/5T8MYv/qfljFv/T8scs/qfnj1n8z8gfs/ifmT9m8T8rf8zif3b+mMX/nPwxi/+5+WMW//Pyxyz+5+ePWfwvyB+z+F+YP2bxvyh/zOJ/cf6Yxf+S/DGL/6X5Yxb/y/LHLP6X549Z/K/IH7P4/zV/zOJ/Zf6Yxf+q/DGL/9X5Yxb/a/LHLP7X5o9Z/K/LH7P4X58/ZvG/IX/M4n9j/pjF/6b8MYv/zfljFv9b8scs/rfmj1n8b8sfs/jfnj9m8b8jf8zif2f+mMX/rvwxi//d+WMW/3vyxyz+9+aPWfzvyx+z+N+fP2bxfyB/zOL/YP6Yxf+h/DGL/8P5Yxb/R/LHLP6P5o9Z/B/LH7P4P54/ZvF/In/M4v9k/pjF/6n8MYP/oMEDIz6dP2bwH7L9P5M/ZvF/Nn/M4v9c/pjF//n8MYv/C/ljFv8X88cs/i/lj1n8X84fs/i/kj9m8X81f8zi/1r+mMX/9fwxi/8b+WMW/zfzxyz+b+WPWfzfzh+z+L+TPybxH2kgf8ziPyh/zOI/TP6YxX/Y/DGL/+D8MYv/cPljFv/h88cs/iPkj1n8R8wfs/iPlD9m8R85f8ziP0r+mMV/1Pwxi/9o+WMW/9Hzxyz+Y+SPWfzHzB+z+I+VP2bxHzt/zOL/qfwxi/84+WMW/3Hzxyz+n84fs/iPlz9m8R8/f8zi/5n8MYv/BPljFv/P5o9Z/CfMH7P4T5Q/ZvGfOH/M4j9J/pjFf9L8MYv/5/LHLP6T5Y9Z/CfPH7P4T5E/ZvGfMn/M4j9V/pjF//P5Yxb/qfPHLP5fyB+z+H8xf8zi/6X8MYv/l/PHLP5fyR+z+H81f8ziP03+mMV/2oGBzT+pIf07Z/Gfru0fs/hPnz9m8Z8hf8ziP2P+mMX/a/ljFv+Z8scs/jPnj1n8Z8kfs/jPmj9m8f96/pjFf7b8MYv/N/LHLP7fzB+z+M+eP2bx/1b+mMV/jvwxi/+c+WMW/7nyxyz+c+ePWfznyR+z+M+bP2bxny9/zOI/f/6YxX+B/DGL/4L5Yxb/b+ePWfy/kz9m8V8of8zi/938MYv/wvljFv/v5Y9Z/L+fP2bxXyR/zOK/aP6YxX+x/DGL/+L5Yxb/JfLHLP5L5o9Z/H+QP2bxXyp/zOL/w/wxi/+P8scs/kvnj1n8l8kfs/gvmz9m8V8uf8zi/+P8MYv/8vljFv8V8scs/j/JH7P4r5g/ZvFfKX/M4r9y/pjFf5X8MYv/qvljFv/V8scs/qvnj1n8f5o/ZvFfI3/M4r9m/pjFf638MYv/2vljFv918scs/uvmj1n8f5Y/ZvFfL3/M4r9+/pjFf4P8MYv/z/PHLP4b5o9Z/H+RP2bx3yh/zOK/cf6YxX+T/DGL/y/zxyz+v8ofs/hvmj9m8d8sf8ziv3n+mMV/i/wxi/+W+WMW/63yxyz+W+ePWfy3yR+z+G+bP2bx3y5/zOL/6/wxi/9v8scs/tvnj1n8d8gfs/jvmD9m8d8pf8zi/9v8MYv/7/LHLP6/zx+z+O+cP2bx3yV/zOL/h/wxi/8f88cs/rvmj1n8/5Q/ZvHfLX/M4r97/pjFf4/8MYv/n/PHLP5/yR+z+O+ZP2bx3yt/zOK/d/6YxX+f/DGL/775Yxb//fLHLP77549Z/A/IH7P4H5g/ZvE/KH/M4n9w/pjF/5D8MYv/ofljFv/D8scs/ofnj1n8j8gfs/gfmT9m8T8qf8zif3T+mMX/mPwxi/+x+WMW/+Pyxyz+x+ePWfxPyB+z+J+YP2bxPyl/zOJ/cv6Yxf+U/DGL/6n5Yxb/0/LHLP6n549Z/M/IH7P4n5k/ZvE/K3/M4n92/pjF/5z8MYv/ufljFv/z8scs/ufnj1n8L8gfs/hfmD9m8b8of8zif3H+mMX/kvwxi/+l+WMW/8vyxyz+l+ePWfyvyB+z+P81f8zif2X+mMX/qvwxi//V+WMW/2vyxyz+1+aPWfyvyx+z+F+fP2bxvyF/zOJ/Y/6Yxf+m/DGL/835Yxb/W/LHLP635o9Z/G/LH7P4354/ZvG/I3/M4n9n/pjF/678MYv/3fljFv978scs/vfmj1n878sfs/jfnz9m8X8gf8zi/2D+mMX/ofwxi//D+WMW/0fyxyz+j+aPWfwfyx+z+D+eP2bxfyJ/zOL/ZP6Yxf+p/DGL/9P5Yxb/Z/LHLP7P5o9Z/J/LH7P4P58/ZvF/IX/M4v9i/pjF/6X8MYv/y/ljFv9X8scs/q/mj1n8X8sfs/i/nj9m8X8jf8zi/2b+mMX/rfwxi//b+WMW/3fyxyT+Iw/kj1n8B+WPWfyHyR+z+A+bP2bxH5w/ZvEfLn/M4j98/pjFf4T8MYv/iPljFv+R8scs/iPnj1n8R8kfs/iPmj9m8R8tf8ziP3r+mMV/jPwxi/+Y+WMW/7Hyxyz+Y+ePWfw/lT9m8R8nf8ziP27+mMX/0/ljFv/x8scs/uPnj1n8P5M/ZvGfIH/M4v/Z/DGL/4T5Yxb/ifLHLP4T549Z/CfJH7P4T5o/ZvH/XP6YxX+y/DGL/+T5Yxb/KfLHLP5T5o9Z/KfKH7P4fz5/zOI/df6Yxf8L+WMW/y/mj1n8v5Q/ZvH/cv6Yxf8r+WMW/6/mj1n8p8kfs/hPmz9m8Z8uf8ziP33+mMV/hvwxi/+M+WMW/6/lj1n8Z8ofs/jPnD9m8Z8lf8ziP2v+mMX/6/ljFv/Z8scs/t/IH7P4fzN/zOI/e/6Yxf9b+WMW/znyxyz+c+aPWfznyh+z+M+dP2bxnyd/zOI/b/6YxX++/DGL//z5Yxb/BfLHLP4L5o9Z/L+dP2bx/07+mMV/ofwxi/9388cs/gvnj1n8v5c/ZvH/fv6YxX+R/DGL/6L5Yxb/xfLHLP6L549Z/JfIH7P4L5k/ZvH/Qf6YxX+p/DGL/w/zxyz+P8ofs/gvnT9m8V8mf8ziv2z+mMV/ufwxi/+P88cs/svnj1n8V8gfs/j/JH/M4r9i/pjFf6X8MYv/yvljFv9V8scs/qvmj1n8V8sfs/ivnj9m8f9p/pjFf438MYv/mvljFv+18scs/mvnj1n818kfs/ivmz9m8f9Z/pjFf738MYv/+vljFv8N8scs/j/PH7P4b5g/ZvH/Rf6YxX+j/DGL/8b5Yxb/TfLHLP6/zB+z+P8qf8ziv2n+mMV/s/wxi//m+WMW/y3yxyz+W+aPWfy3yh+z+G+dP2bx3yZ/zOK/bf6YxX+7/DGL/6/zxyz+v8kfs/hvnz9m8d8hf8ziv2P+mMV/p/wxi/9v88cs/r/LH7P4/z5/zOK/c/6YxX+X/DGL/x/yxyz+f8wfs/jvmj9m8f9T/pjFf7f8MYv/7vljFv898scs/n/OH7P4/yV/zOK/Z/6YxX+v/DGL/975Yxb/ffLHLP775o9Z/PfLH7P4758/ZvE/IH/M4n9g/pjF/6D8MYv/wfljFv9D8scs/ofmj1n8D8sfs/gfnj9m8T8if8zif2T+mMX/qPwxi//R+WMW/2Pyxyz+x+aPWfyPyx+z+B+fP2bxPyF/zOJ/Yv6Yxf+k/DGL/8n5Yxb/U/LHLP6n5o9Z/E/LH7P4n54/ZvE/I3/M4n9m/pjF/6z8MYv/2fljFv9z8scs/ufmj1n8z8sfs/ifnz9m8b8gf8zif2H+mMX/ovwxi//F+WMW/0vyxyz+l+aPWfwvyx+z+F+eP2bxvyJ/zOL/1/wxi/+V+WMW/6vyxyz+V+ePWfyvyR+z+F+bP2bxvy5/zOJ/ff6Yxf+G/DGL/435Yxb/m/LHLP43549Z/G/JH7P435o/ZvG/LX/M4n97/pjF/478MYv/nfljFv+78scs/nfnj1n878kfs/jfmz9m8b8vf8zif3/+mMX/gfwxi/+D+WMW/4fyxyz+D+ePWfwfyR+z+D+aP2bxfyx/zOL/eP6Yxf+J/DGL/5P5Yxb/p/LHLP5P549Z/J/JH7P4P5s/ZvF/Ln/M4v98/pjF/4X8MYv/i/ljFv+X8scs/i/nj1n8X8kfs/i/mj9m8X8tf8zi/3r+mMX/jfwxi/+b+WMW/7fyxyz+b+ePWfzfyR+T+I8ykD9m8R+UP2bxHyZ/zOI/bP6YxX9w/pjFf7j8MYv/8PljFv8R8scs/iPmj1n8R8ofs/iPnD9m8R8lf8ziP2r+mMV/tPwxi//o+WMW/zHyxyz+Y+aPWfzHyh+z+I+dP2bx/1T+mMV/nPwxi/+4+WMW/0/nj1n8x8sfs/iPnz9m8f9M/pjFf4L8MYv/Z/PHLP4T5o9Z/CfKH7P4T5w/ZvGfJH/M4j9p/pjF/3P5Yxb/yfLHLP6T549Z/KfIH7P4T5k/ZvGfKn/M4v/5/DGL/9T5Yxb/L+SPWfy/mD9m8f9S/pjF/8v5Yxb/r+SPWfy/mj9m8Z8mf8ziP23+mMV/uvwxi//0+WMW/xnyxyz+M+aPWfy/lj9m8Z8pf8ziP3P+mMV/lvwxi/+s+WMW/6/nj1n8Z8sfs/h/I3/M4v/N/DGL/+z5Yxb/b+WPWfznyB+z+M+ZP2bxnyt/zOI/d/6YxX+e/DGL/7z5Yxb/+fLHLP7z549Z/BfIH7P4L5g/ZvH/dv6Yxf87+WMW/4Xyxyz+380fs/gvnD9m8f9e/pjF//v5Yxb/RfLHLP6L5o9Z/BfLH7P4L54/ZvFfIn/M4r9k/pjF/wf5Yxb/pfLHLP4/zB+z+P8of8ziv3T+mMV/mfwxi/+y+WMW/+Xyxyz+P84fs/gvnz9m8V8hf8zi/5P8MYv/ivljFv+V8scs/ivnj1n8V8kfs/ivmj9m8V8tf8ziv3r+mMX/p/ljFv818scs/mvmj1n818ofs/ivnT9m8V8nf8ziv27+mMX/Z/ljFv/18scs/uvnj1n8N8gfs/j/PH/M4r9h/pjF/xf5Yxb/jfLHLP4b549Z/DfJH7P4/zJ/zOL/q/wxi/+m+WMW/83yxyz+m+ePWfy3yB+z+G+ZP2bx3yp/zOK/df6YxX+b/DGL/7b5Yxb/7fLHLP6/zh+z+P8mf8ziv33+mMV/h/wxi/+O+WMW/53yxyz+v80fs/j/Ln/M4v/7/DGL/875Yxb/XfLHLP5/yB+z+P8xf8ziv2v+mMX/T/ljFv/d8scs/rvnj1n898gfs/j/OX/M4v+X/DGL/575Yxb/vfLHLP57549Z/PfJH7P475s/ZvHfL3/M4r9//pjF/4D8MYv/gfljFv+D8scs/gfnj1n8D8kfs/gfmj9m8T8sf8zif3j+mMX/iPwxi/+R+WMW/6Pyxyz+R+ePWfyPyR+z+B+bP2bxPy5/zOJ/fP6Yxf+E/DGL/4n5Yxb/k/LHLP4n549Z/E/JH7P4n5o/ZvE/LX/M4n96/pjF/4z8MYv/mflj7/sPjDgw8J/sf1b+mGX7Pzt/zOJ/Tv6Yxf/c/DGL/3n5Yxb/8/PHLP4X5I9Z/C/MH7P4X5Q/ZvG/OH/M4n9J/pjF/9L8MYv/ZfljFv/L88cs/lfkj1n8/5o/ZvG/Mn/M4n9V/pjF/+r8MYv/NfljFv9r88cs/tflj1n8r88fs/jfkD9m8b8xf8zif1P+mMX/5vwxi/8t+WMW/1vzxyz+t+WPWfxvzx+z+N+RP2bxvzN/zOJ/V/6Yxf/u/DGL/z35Yxb/e/PHLP735Y9Z/O/PH7P4P5A/ZvF/MH/M4v9Q/pjF/+H8MYv/I/ljFv9H88cs/o/ljzn8k/+oHP4DozzRWoBZ/J/MH7P4P5U/ZvF/On/M4v9M/pjF/9n8MYv/c/ljFv/n88cs/i/kj1n8X8wfs/i/lD9m8X85f8zi/0r+mMX/1fwxi/9r+WMW/9fzxyz+b+SPWfzfzB+z+L+VP2bxfzt/zOL/Tv6YxH/Ugfwxi/+g/DGL/zD5Yxb/YfPHLP6D88cs/sPlj1n8h88fs/iPkD9m8R8xf8ziP1L+mMV/5Pwxi/8o+WMW/1Hzxyz+o+WPWfxHzx+z+I+RP2bxHzN/zOI/Vv6YxX/s/DGL/6fyxyz+4+SPWfzHzR+z+H86f8ziP17+mMV//Pwxi/9n8scs/hPkj1n8P5s/ZvGfMH/M4j9R/pjFf+L8MYv/JPljFv9J88cs/p/LH7P4T5Y/ZvGfPH/M4j9F/pjFf8r8MYv/VPljFv/P549Z/KfOH7P4fyF/zOL/xfwxi/+X8scs/l/OH7P4fyV/zOL/1fwxi/80+WMW/2nzxyz+0+WPWfynzx+z+M+QP2bxnzF/zOL/tfwxi/9M+WMW/5nzxyz+s+SPWfxnzR+z+H89f8ziP1v+mMX/G/ljFv9v5o9Z/GfPH7P4fyt/zOI/R/6YxX/O/DGL/1z5Yxb/ufPHLP7z5I9Z/OfNH7P4z5c/ZvGfP3/M4r9A/pjFf8H8MYv/t/PHLP7fyR+z+C+UP2bx/27+mMV/4fwxi//38scs/t/PH7P4L5I/ZvFfNH/M4r9Y/pjFf/H8MYv/EvljFv8l88cs/j/IH7P4L5U/ZvH/Yf6Yxf9H+WMW/6Xzxyz+y+SPWfyXzR+z+C+XP2bx/3H+mMV/+fwxi/8K+WMW/5/kj1n8V8wfs/ivZPT/F+6wxX9lo/+/kMV/lfwxi/+q+WMW/9Xyxyz+q+ePWfx/mj9m8V8jf8ziv2b+mMV/rfwxi//a+WMW/3Xyxyz+6+aPWfx/lj9m8V8vf8ziv37+mMV/g/wxi//P88cs/hvmj1n8f5E/ZvHfKH/M4r9x/pjFf5P8MYv/L/PHLP6/yh+z+G+aP2bx3yx/zOK/ef6YxX+L/DGL/5b5Yxb/rfLHLP5b549Z/LfJH7P4b5s/ZvHfLn/M4v/r/DGL/2/yxyz+2+ePWfx3yB+z+O+YP2bx3yl/zOL/2/wxi//v8scs/r/PH7P475w/ZvHfJX/M4v+H/DGL/x/zxyz+u+aPWfz/lD9m8d8tf8ziv3v+mMV/j/wxi/+f88cs/n/JH7P475k/ZvHfK3/M4r93/pjFf5/8MYv/vvljFv/98scs/vvnj1n8D8gfs/gfmD9m8T8of8zif3D+mMX/kPwxi/+h+WMW/8Pyxyz+h+ePWfyPyB+z+B+ZP2bxPyp/zOJ/dP6Yxf+Y/DGL/7H5Yxb/4/LHLP7H549Z/E/IH7P4n5g/ZvE/KX/M4n9y/pjF/5T8MYv/qfljFv/T8scs/qfnj1n8z8gfs/ifmT9m8T8rf8zif3b+mMX/nPwxi/+5+WMW//Pyxyz+5+ePWfwvyB+z+F+YP2bxvyh/zOJ/cf6Yxf+S/DGL/6X5Yxb/y/LHLP6X549Z/K/IH7P4/zV/zOJ/Zf6Yxf+q/DGL/9X5Yxb/a/LHLP7X5o9Z/K/LH7P4X58/ZvG/IX/M4n9j/pjF/6b8MYv/zfljFv9b8scs/rfmj1n8b8sfs/jfnj9m8b8jf8zif2f+mMX/rvwxi//d+WMW/3vyxyz+9+aPWfzvyx+z+N+fP2bxfyB/zOL/YP6Yxf+h/DGL/8P5Yxb/R/LHLP6P5o9Z/B/LH7P4P54/ZvF/In/M4v9k/pjF/6n8MYv/0/ljFv9n8scs/s/mj1n8n8sfs/g/nz9m8X8hf8zi/2L+mMX/pfwxi//L+WMW/1fyxyz+r+aPWfxfyx+z+L+eP2bxfyN/zOL/Zv6Yxf+t/DGL/9v5Yxb/d/LHJP6jDeSPWfwH5Y9Z/IfJH7P4D5s/ZvEfnD9m8R8uf8ziP3z+mMV/hPwxi/+I+WMW/5Hyxyz+I+ePWfxHyR+z+I+aP2bxHy1/zOI/ev6YxX+M/DGL/5j5Yxb/sfLHLP5j549Z/D+VP2bxHyd/zOI/bv6Yxf/T+WMW//Hyxyz+4+ePWfw/kz9m8Z8gf8zi/9n8MYv/hPljFv+J8scs/hPnj1n8J8kfs/hPmj9m8f9c/pjFf7L8MYv/5PljFv8p8scs/lPmj1n8p8ofs/h/Pn/M4j91/pjF/wv5Yxb/L+aPWfy/lD9m8f9y/pjF/yv5Yxb/r+aPWfynyR+z+E+bP2bxny5/zOI/ff6YxX+G/DGL/4z5Yxb/r+WPWfxnyh+z+M+cP2bxnyV/7B/8h1425ic8pv9PfYT/rPljlu3/6/ljFv/Z8scs/t/IH7P4fzN/zOI/e/6Yxf9b+WMW/znyxyz+c+aPWfznyh+z+M+dP2bxnyd/zOI/b/6YxX++/DGL//z5Yxb/BfLHLP4L5o9Z/L+dP2bx/07+mMV/ofwxi/9388cs/gvnj1n8v5c/ZvH/fv6YxX+R/DGL/6L5Yxb/xfLHLP6L549Z/JfIH7P4L5k/ZvH/Qf6YxX+p/DGL/w/zxyz+P8ofs/gvnT9m8V8mf8ziv2z+mMV/ufwxi/+P88cs/svnj1n8V8gfs/j/JH/M4r9i/pjFf6X8MYv/yvljFv9V8scs/qvmj1n8V8sfs/ivnj9m8f9p/pjFf438MYv/mvljFv+18scs/mvnj1n818kfs/ivmz9m8f9Z/pjFf738MYv/+vljFv8N8scs/j/PH7P4b5g/ZvH/Rf6YxX+j/DGL/8b5Yxb/TfLHLP6/zB+z+P8qf8ziv2n+mMV/s/wxi//m+WMW/y3yxyz+W+aPWfy3yh+z+G+dP2bx3yZ/zOK/bf6YxX+7/DGL/6/zxyz+v8kfs/hvnz9m8d8hf8ziv2P+mMV/p/wxi/9v88cs/r/LH7P4/z5/zOK/c/6YxX+X/LH/VP8RP+T/h/yx/1T/gQ/5/zF/zOK/a/6Yxf9P+WMW/93yxyz+u+ePWfz3yB+z+P85f8zi/5f8MYv/nvljFv+98scs/nvnj1n898kfs/jvmz9m8d8vf8ziv3/+mMX/gPwxi/+B+WMW/4Pyxyz+B+ePWfwPyR+z+B+aP2bxPyx/zOJ/eP6Yxf+I/DGL/5H5Yxb/o/LHLP5H549Z/I/JH7P4H5s/ZvE/Ln/M4n98/pjF/4T8MYv/ifljFv+T8scs/ifnj1n8T8kfs/ifmj9m8T8tf8zif3r+mMX/jPwxi/+Z+WMW/7Pyxyz+Z+ePWfzPyR+z+J+bP2bxPy9/zOJ/fv6Yxf+C/DGL/4X5Yxb/i/LHLP4X549Z/C/JH7P4X5o/ZvG/LH/M4n95/pjF/4r8MYv/X/PHLP5X5o9Z/K/KH7P4X50/ZvG/Jn/M4n9t/pjF/7r8MYv/9fljFv8b8scs/jfmj1n8b8ofs/jfnD9m8b8lf8zif2v+mMX/tvwxi//t+WMW/zvyxyz+d+aPWfzvyh+z+N+dP2bxvyd/zOJ/b/6Yxf++/DGL//35Yxb/B/LHLP4P5o9Z/B/KH7P4P5w/ZvF/5MP+W/wvj+vfNIv/o23/mMX/sfwxi//j+WMW/yfyxyz+T+aPWfyfyh+z+D+dP2bxfyZ/zOL/bP6Yxf+5/DGL//P5Yxb/F/LHLP4v5o9Z/F/KH7P4v5w/ZvF/JX/M4v9q/pjF/7X8MYv/6/ljFv838scs/m/mj1n838ofs/i/nT9m8X8nf0ziP/pA/pjFf1D+mMV/mPwxi/+w+WMW/8H5Yxb/4fLHLP7D549Z/EfIH7P4j5g/ZvEfKX/M4j9y/pjFf5T8MYv/qPljFv/R8scs/qPnj1n8x8gfs/iPmT9m8R8rf8ziP3b+mMX/U/ljFv9x8scs/uPmj1n8P50/ZvEfL3/M4j9+/pjF/zP5Yxb/CfLHLP6fzR+z+E+YP2bxnyh/zOI/cf6YxX+S/DGL/6T5Yxb/z+WPWfwnyx+z+E+eP2bxnyJ/zOI/Zf6YxX+q/DGL/+fzxyz+U+ePWfy/kD9m8f9i/pjF/0v5Yxb/L+ePWfy/kj9m8f9q/pjFf5r8MYv/tPljFv/p8scs/tPnj1n8Z8gfs/jPmD9m8f9a/pjFf6b8MYv/zPljFv9Z8scs/rPmj1n8v54/ZvGfLX/M4v+N/DGL/zfzxyz+s+ePWfy/lT9m8Z8jf8ziP2f+mMV/rvwxi//c+WMW/3nyxyz+8+aPWfznyx+z+M+fP2bxXyB/zOK/YP6Yxf/b+WMW/+/kj1n8F8ofs/h/N3/M4r9w/pjF/3v5Yxb/7+ePWfwXyR+z+C+aP2bxXyx/zOK/eP6YxX+J/DGL/5L5Yxb/H+SPWfyXyh+z+P8wf8zi/6P8MYv/0vljFv9l8scs/svmj1n8l8sfs/j/OH/M4r98/pjFf4X8MYv/T/LHLP4r5o9Z/FfKH7P4r5w/ZvFfJX/M4r9q/pjFf7X8MYv/6vljFv+f5o9Z/NfIH7P4r5k/ZvFfK3/M4r92/pjFf538MYv/uvljFv+f5Y9Z/NfLH7P4r58/ZvHfIH/M4v/z/DGL/4b5Yxb/X+SPWfw3yh+z+G+cP2bx3yR/zOL/y/wxi/+v8scs/pvmj1n8N8sfs/hvnj9m8d8if8ziv2X+mMV/q/wxi//W+WMW/23yxyz+2+aPWfy3yx+z+P86f8zi/5v8MYv/9vljFv8d8scs/jvmj1n8d8ofs/j/Nn/M4v+7/DGL/+/zxyz+O+ePWfx3yR+z+P8hf8zi/8f8MYv/rvljFv8/5Y9Z/HfLH7P4754/ZvHfI3/M4v/n/DGL/1/yxyz+e+aPWfz3yh+z+O+dP2bx3yd/zOK/b/6YxX+//DGL//75Yxb/A/LHLP4H5o9Z/A/KH7P4H5w/ZvE/JH/M4n9o/pjF/7D8MYv/4fljFv8j8scs/kfmj1n8j8ofs/gfnT9m8T8mf8zif2z+mMX/uPwxi//x+WMW/xPyxyz+J+aPWfxPyh+z+J+cP2bxPyV/zOJ/av6Yxf+0/DGL/+n5Yxb/M/LHLP5n5o9Z/M/KH7P4n50/ZvE/J3/M4n9u/pjF/7z8MYv/+fljFv8L8scs/hfmj1n8L8ofs/hfnD9m8b8kf8zif2n+mMX/svwxi//l+WMW/yvyxyz+f80fs/hfmT9m8b8qf8zif3X+mMX/mvwxi/+1+WMW/+vyxyz+1+ePWfxvyB+z+N+YP2bxvyl/zOJ/c/6Yxf+W/DGL/635Yxb/2/LHLP63549Z/O/IH7P435k/ZvG/K3/M4n93/pjF/578MYv/vfljFv/78scs/vfnj1n8H8gfs/g/mD9m8X8of8zi/3D+mMX/kfwxi/+j+WMW/8fyxyz+j+ePWfyfyB+z+D+ZP2bxfyp/zOL/dP6Yxf+Z/DGL/7P5Yxb/5/LHLP7P549Z/F/IH7P4v5g/ZvF/KX/M4v9y/pjF/5X8MYv/q/ljFv/X8scs/q/nj1n838gfs/i/mT9m8X8rf8zi/3b+mMX/nfwxif8YA/ljFv9B+WMW/2Hyxyz+w+aPWfwH549Z/IfLH7P4D58/ZvEfIX/M4j9i/pjFf6T8MYv/yPljFv9R8scs/qPmj1n8R8sfs/iPnj9m8R8jf8ziP2b+mMV/rPwxi//Y+WMW/0/lj1n8x8kfs/iPmz9m8f90/pjFf7z8MYv/+PljFv/P5I9Z/CfIH7P4fzZ/zOI/Yf6YxX+i/DGL/8T5Yxb/SfLHLP6T5o9Z/D+X//+PnbsP97qu7zj+454sZ592Xeo122UXGnNtRiKjUQtRUTzenDLRzHuEw01yIzcSYApstFLHpkvdLNjEwjFnq5Y43Fx3KxqWNVsjtlY5xbUwxhwsMmfsOnAOwdnbc+182ffr8v14/ME5v9/x/Ut5Xi9/Py+uq1CW/sP0D2Xpf5z+oSz9j9c/lKX/a/UPZek/XP9Qlv6/oH8oS/8T9A9l6f+L+oey9H+d/qEs/X9J/1CW/r+sfyhL/xP1D2Xp/3r9Q1n6j9A/lKX/G/QPZel/kv6hLP1H6h/K0v9k/UNZ+o/SP5Sl/6/oH8rSf7T+oSz936h/KEv/X9U/lKX/GP1DWfq/Sf9Qlv5v1j+Upf+v6R/K0v8t+oey9B+rfyhL/1P0D2XpP07/UJb+p+ofytL/NP1DWfqfrn8oS//x+oey9D9D/1CW/mfqH8rSf4L+oSz9z9I/lKV/m/6hLP3P1j+Upf85+oey9D9X/1CW/ufpH8rSv13/UJb+b9U/lKX/2/QPZel/vv6hLP3frn8oS/8L9A9l6T9R/1CW/hfqH8rS/yL9Q1n6v0P/UJb+F+sfytL/nfqHsvS/RP9Qlv6X6h/K0v8y/UNZ+l+ufyhL/yv0D2Xpf6X+oSz9r9I/lKX/JP1DWfpfrX8oS//J+oey9J+ifyhL/w79Q1n6T9U/lKX/NP1DWfpP1z+Upf8M/UNZ+r9L/1CW/tfoH8rSf6b+oSz9Z+kfytJ/tv6hLP3n6B/K0v9a/UNZ+s/VP5Sl/zz9Q1n6z9c/lKX/Av1DWfpfp38oS/+F+oey9H+3/qEs/RfpH8rSf7H+oSz9l+gfytL/ev1DWfq/R/9Qlv436B/K0v9G/UNZ+i/VP5Sl/zL9Q1n6L9c/lKX/r+sfytL/N/QPZem/Qv9Qlv7v1T+Upf9v6h/K0v99+oey9H+//qEs/W/SP5Sl/836h7L0v0X/UJb+v6V/KEv/lfqHsvT/bf1DWfr/jv6hLP1v1T+Upf9t+oey9P9d/UNZ+n9A/1CW/rfrH8rS/w79Q1n636l/KEv/39M/lKX/7+sfytL/Lv1DWfp/UP9Qlv4f0j+Upf8q/UNZ+q/WP5Sl/x/oH8rS/w/1D2Xpf7f+oSz91+gfytL/Hv1DWfp/WP9Qlv4f0T+Upf9a/UNZ+t+rfyhL/z/SP5Sl/zr9Q1n6/7H+oSz979M/lKX/n+gfytL/fv1DWfp/VP9Qlv5/qn8oS/+P6R/K0v/j+oey9P+E/qEs/f9M/1CW/p/UP5Sl/wP6h7L0X69/KEv/B/UPZen/5/qHsvTfoH8oS/+H9A9l6f8X+oey9P9L/UNZ+j+sfyhL/7/SP5Sl/6f0D2Xp/2n9Q1n6f0b/UJb+n9U/lKX/5/QPZen/1/qHsvT/vP6hLP2/oH8oS/+N+oey9P+i/qEs/f9G/1CW/pv0D2Xp/4j+oSz9v6R/KEv/L+sfytL/Uf1DWfp/Rf9Qlv5f1T+Upf/f6h/K0v8x/UNZ+n9N/1CW/n+nfyhL/6/rH8rS/+/1D2Xpv1n/UJb+39A/lKX/Fv1DWfr/g/6hLP3/Uf9Qlv7f1D+Upf8/6R/K0v9b+oey9P+2/qEs/b+jfyhL/8f1D2Xp/8/6h7L0f0L/UJb+T+ofytJ/q/6hLP2f0j+Upf+/6B/K0v+7+oey9P9X/UNZ+n9P/1CW/tv0D2Xp/7T+oSz9v69/KEv/7fqHsvT/N/1DWfrv0D+Upf+/6x/K0v8Z/UNZ+v+H/qEs/XfqH8rSf5f+oSz9/1P/UJb+P9A/lKX/bv1DWfr/UP9Qlv7P6h/K0v9H+oey9H9O/1CW/v+lfyhL/+f1D2Xp/2P9Q1n679E/lKT/K1v6h7L076d/KEv//vqHsvQfoH8oS/+B+oey9B+kfyhL/8H6h7L0H6J/KEv/ofqHsvR/mf6hLP0P0z+Upf/L9Q9l6f8K/UNZ+h+ufyhL/5/RP5Sl/xH6h15y/QEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP6/mb94yTWTZs7smOcb3/jGN/u/ebH/zQQAAPxf+8mH/hf77wQAAAAAAAAAAAAAAAAAAADyauL/TuzF/mcEAAAAAAAAAAAAAICfdm3tp24f0O+gpwYc+ODnH+3Y+3XU7ounr137YOn+2vXjc4KX7H/ggz179uxZ/czY8V0Ph7Rarc7/tVd2PR7a87jz9Zcdu+rofY/KuM/f+fgVEw8/d9762wZ+Y/Ut7U8P2vvsoNZVU2fM7HhD/1arnD6otajzwUn9Wq1y5qDWrZ0PRnY+mDCota7zwcl7H7ys9ZnOB6+fPGfmlM4nzqr8ewYvFW3ty1oDDlps66B/Gxy4/2XHPjG9+2svL9n9agNbXfsftv5LR/X4WbcX2H/365dTe+6/z/+AwAvq2/6f3dL9tZeX/B/v/x/etHtJ9LMX3n/365fT7B/qE3z+P2ijPT/39/j8/5rgJfffnzJ00+2d+2+78L5Xdz018H/z+f8nr19O77n//gd9/u/8HD+++/P/kFarnHGIvx2QSlv78u29vf/3vv+BP9fjpt+B+7/nK1tf0bn/e59rreh6alAf9z++t/f/m3r8vQJ909a+Zk+P9/8+7L81PHjJ/fvftv7wvZ//t94/+cgDftaX/Z/Rc/8jFsy6dsT8xUtOnDFr0rSOaR2zx4wcfdKoMWNGjx6x9xPBvl8P8TcFkji09//WYT1u+rVaHfvvN953y/jO/e94aMVHup4a2sf9n9nr+/9rvP9DaFj/1uDBrUWTFiyYd9K+X7sfjtz3676/LNh/H/77/7gTuv6y7j8z7NdqHb3/fvgVY4Z07v/6uWVD11OD+7j/Cb3uf9zBf1YJ9M0hvv9P6XFz0P5P2Xbjws79H/+DV23teqqv//1/Vq/7v9v7PxyKtvZWrW+infs/ecjys6tdlzZ//gf1aWL/x+68dVe163K2/UN9mtj/xJVvvrradTnH/qE+Tez/wVlXrqx2Xc61f6hPE/t//md3HVPtupxn/1CfJvb/2HefWlvturTbP9Snif1/8K72k6tdl7faP9Snif2feN0Px1a7Lm+zf6hPE/uf+vIL1lW7LufbP9Snif2fvee0I6tdl7fbP9Snif33W/69ZdWuywX2D/VpYv9PTlo5p9p1mWj/UJ8m9r/u2OHPVrsuF9o/1KeJ/a94+o0Tql2Xi+wf6tPE/r96x6rHql2Xd9g/1KeJ/X/isletqnZdLrZ/qE8T+//RsIcOq3Zd3mn/UJ8m9r9587oHql2XS+wf6tPE/levGzCs2nW51P6hPk3sf+lZ0x6tdl0us3+oTxP7HzX6y5dWuy6X2z/Up4n9H/25bz1V7bpcYf9Qnyb2f8HDC+dXuy5X2j/Up4n9Lzzm4z+udl2usn+oTxP7f0vHMdOrXZdJ9g/1aWL/5bbDNle7LlfbP9Snif1fsmPNuGrXZbL9Q32a2P+GI77wsWrXZYr9Q32a2P/OubPHVLsuHfYP9Wli/99579L3VbsuU+0f6tPE/m9/7uul2nWZZv9Qnyb2v23kJZdVuy7T7R/q08T+15z7zCPVrssM+4f6NLH/lRseX1DturzL/qE+Tex/48Zznqh2Xa6xf6hPE/s/fviIw6tdl5n2D/VpYv9zLl7xoWrXZZb9Q32a2P/p99/x2mrXZbb9Q32a2P/Qr439ZLXrMsf+oT5N7P/TY9//qWrX5Vr7h/o0sf9d4447odp1mWv/UJ8m9r/lgZF3Vrsu8+wf6tPE/j/wyF0Vr8t8+4f6NLH/ua97fke167LA/qE+Tez/TRMvWlztulxn/1CfJvZ/5N0Tvljtuiy0f6hPE/u//NvfP7/adXm3/UN9mtj/cUdd/epq12WR/UN9mtj/9Bmbbq52XRbbP9Snif2PX71lVLXrssT+oT5N7P+IJ+ffU+26XG//UJ8m9r99wFHnVbsu77F/qE8T+7/3hoe/We263GD/UJ8m9n/zTR/tqHZdbrR/qE8T+//s7sE7q12XpfYPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/zQ4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRV24EAAAAAAAMj/tRGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsAPHAgAAAADC/K2D6N0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICjAAAA//8mu+jL")
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
setfsuid(0xee00)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)

1.608824667s ago: executing program 0 (id=1115):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x2000035e, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000630120000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)

1.608588052s ago: executing program 0 (id=1116):
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180070001006374000014000280080002400000000f08000140000000020900010073797a30000000000900020073797a320000000014000000110001"], 0x78}}, 0x0)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1400000003010101"], 0x14}}, 0x0)
recvmmsg(r2, &(0x7f0000003e00)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)=""/23, 0x17}, {&(0x7f00000026c0)=""/4090, 0xffa}, {&(0x7f00000006c0)=""/130, 0x82}, {&(0x7f0000000780)=""/200, 0xc8}, {&(0x7f0000000500)=""/235, 0xeb}], 0x5}, 0x1bc}], 0x1, 0x40012100, 0x0)

1.33119816s ago: executing program 2 (id=1117):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x36, &(0x7f0000000440)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000004c00)=""/102392, 0x18ff8)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x2082)
r3 = openat$random(0xffffffffffffff9c, &(0x7f00000007c0), 0x8000, 0x0)
syz_open_dev$sndmidi(&(0x7f00000003c0), 0x4, 0x208202)
ioctl$int_in(r3, 0x5452, &(0x7f0000000140)=0x6)
openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x6200, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94)
r4 = openat$incfs(0xffffffffffffffff, &(0x7f0000000240)='.log\x00', 0x4c4200, 0x30)
bind$can_j1939(r4, &(0x7f0000000400)={0x1d, 0x0, 0x3, {0x2, 0x1, 0x6d80d9e8bf676460}, 0x2}, 0x18)
read(r2, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x5, @loopback}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000000580), 0x0, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5, 0x0, 0x2}, 0x18)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0)

678.727266ms ago: executing program 0 (id=1118):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xbd, 0x16, 0xf, 0x40, 0x8086, 0x110, 0xbfad, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa0, 0x12, 0x24}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000200)={0x20, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

0s ago: executing program 2 (id=1119):
syz_emit_ethernet(0x86, &(0x7f00000000c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x66, 0x0, 0x0, 0x11, 0x0, @private=0x800001c, @empty=0xe0000001}, {0xce22, 0x17c1, 0x64, 0x0, @wg=@response={0x2, 0x3, 0xffffffff, "bd16bc02419c391d6ab287b20de43a889cb2201758ce3ddb6979bc35c3a05a7e", "0b420afd6476b00af3a2efb3e97b4dfd", {"0871caba2330cd331aec94c863f7f7be", "70fc1a30bd72aa31362aa32faa719e73"}}}}}}}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x2, 0x4, &(0x7f0000000080)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xad}]}, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0)
r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f00000003c0)={'pcl818\x00', [0x4f23, 0x5, 0x8, 0x0, 0x1, 0x8000005, 0x8, 0x2, 0xa, 0x7fff, 0xfffffffa, 0x1, 0x1, 0x1, 0x6, 0x103, 0xf7fffffe, 0x7f, 0x0, 0x40000006, 0x8c, 0x80000001, 0x0, 0x20001e58, 0xb, 0x4, 0x7, 0x8, 0x4085, 0x679, 0xfbfffff8]})

kernel console output (not intermixed with test programs):

326 audit(1759350529.018:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5996 comm="syz.2.34" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6012b2ae09 code=0x7ffc0000
[   63.128591][ T5999] netlink: 156 bytes leftover after parsing attributes in process `syz.0.33'.
[   63.147738][   T33] audit: type=1326 audit(1759350529.018:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5996 comm="syz.2.34" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6012b2ae09 code=0x7ffc0000
[   63.181704][ T6001] loop0: detected capacity change from 0 to 1024
[   63.184165][   T33] audit: type=1326 audit(1759350529.018:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5996 comm="syz.2.34" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6012b2ae09 code=0x7ffc0000
[   63.203345][   T33] audit: type=1326 audit(1759350529.018:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5996 comm="syz.2.34" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6012b2ae09 code=0x7ffc0000
[   63.214145][   T33] audit: type=1326 audit(1759350529.018:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5996 comm="syz.2.34" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6012b2ae09 code=0x7ffc0000
[   63.214713][ T5876] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0
[   63.224117][   T33] audit: type=1326 audit(1759350529.018:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5996 comm="syz.2.34" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6012b2ae09 code=0x7ffc0000
[   63.236410][   T33] audit: type=1326 audit(1759350529.018:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5996 comm="syz.2.34" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6012b2ae09 code=0x7ffc0000
[   63.248531][ T6001] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   63.255061][   T33] audit: type=1326 audit(1759350529.018:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5996 comm="syz.2.34" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6012b2ae09 code=0x7ffc0000
[   63.273263][ T6001] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #11: comm syz.0.35: missing EA_INODE flag
[   63.279810][   T33] audit: type=1326 audit(1759350529.018:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5996 comm="syz.2.34" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6012b2ae09 code=0x7ffc0000
[   63.303497][ T6001] EXT4-fs (loop0): Remounting filesystem read-only
[   63.306155][ T6001] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   63.355819][ T5848] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   63.426107][ T5910] usb 2-1: USB disconnect, device number 2
[   63.449872][ T5910] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[   63.454272][ T5910] ftdi_sio 2-1:0.0: device disconnected
[   63.627492][ T6015] loop0: detected capacity change from 0 to 1024
[   63.633289][ T6015] EXT4-fs: Ignoring removed orlov option
[   63.660896][ T6015] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   63.788071][ T5848] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   63.826779][ T5986] usb 3-1: new low-speed USB device number 3 using dummy_hcd
[   63.896240][ T6024] loop0: detected capacity change from 0 to 256
[   64.000732][ T5986] usb 3-1: config 0 has no interfaces?
[   64.002902][ T5986] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[   64.011481][ T5986] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   64.017968][ T5986] usb 3-1: config 0 descriptor??
[   64.084973][ T6033] loop0: detected capacity change from 0 to 2048
[   64.099244][ T6033] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   64.224154][ T6042] syz.1.53 uses obsolete (PF_INET,SOCK_PACKET)
[   64.260779][ T5910] usb 3-1: USB disconnect, device number 3
[   64.319960][ T6045] sch_tbf: burst 0 is lower than device macvtap0 mtu (1514) !
[   64.384910][ T6049] loop0: detected capacity change from 0 to 1764
[   64.389203][ T6049] =======================================================
[   64.389203][ T6049] WARNING: The mand mount option has been deprecated and
[   64.389203][ T6049]          and is ignored by this kernel. Remove the mand
[   64.389203][ T6049]          option from the mount to silence this warning.
[   64.389203][ T6049] =======================================================
[   64.461727][ T6053] mmap: syz.0.58 (6053) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   64.553104][ T6055] loop1: detected capacity change from 0 to 4096
[   64.560137][ T6055] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512).
[   64.565143][ T6059] loop0: detected capacity change from 0 to 256
[   64.572394][ T6059] FAT-fs (loop0): bogus logical sector size 0
[   64.575386][ T6059] FAT-fs (loop0): Can't find a valid FAT filesystem
[   64.863721][ T6067] loop1: detected capacity change from 0 to 32768
[   64.881529][ T6067] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   64.905984][ T6067] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[   64.920716][ T6067] XFS (loop1): Starting recovery (logdev: internal)
[   64.933742][ T6067] XFS (loop1): Ending recovery (logdev: internal)
[   64.939065][ T6064] loop0: detected capacity change from 0 to 32768
[   64.941415][ T6067] XFS (loop1): Quotacheck needed: Please wait.
[   64.961640][ T6067] XFS (loop1): Quotacheck: Done.
[   64.967357][ T5847] Bluetooth: hci1: command tx timeout
[   64.972525][ T6064] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   64.992074][ T6064] XFS (loop0): Ending clean mount
[   64.999909][ T6064] XFS (loop0): Quotacheck needed: Please wait.
[   65.002642][ T6089] loop2: detected capacity change from 0 to 2048
[   65.009433][ T6089] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   65.029676][ T6064] XFS (loop0): Quotacheck: Done.
[   65.046698][ T5847] Bluetooth: hci0: command tx timeout
[   65.060867][ T5855] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   65.091123][ T5848] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   65.127000][ T5847] Bluetooth: hci2: command tx timeout
[   65.280371][ T6101] netlink: 'syz.0.71': attribute type 10 has an invalid length.
[   65.283203][ T6101] netlink: 2 bytes leftover after parsing attributes in process `syz.0.71'.
[   65.286086][ T6101] team0: entered promiscuous mode
[   65.287937][ T6101] team_slave_0: entered promiscuous mode
[   65.290310][ T6101] team_slave_1: entered promiscuous mode
[   65.292869][ T6101] bridge0: port 3(team0) entered blocking state
[   65.295642][ T6101] bridge0: port 3(team0) entered disabled state
[   65.298292][ T6101] team0: entered allmulticast mode
[   65.300118][ T6101] team_slave_0: entered allmulticast mode
[   65.301997][ T6101] team_slave_1: entered allmulticast mode
[   65.307070][ T6101] bridge0: port 3(team0) entered blocking state
[   65.309947][ T6101] bridge0: port 3(team0) entered forwarding state
[   65.986802][   T10] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   66.147716][   T10] usb 2-1: Using ep0 maxpacket: 8
[   66.152203][   T10] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[   66.157302][   T10] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84
[   66.169727][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 239, changing to 11
[   66.177996][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 9059, setting to 1024
[   66.186292][   T10] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[   66.196346][   T10] usb 2-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1
[   66.200376][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   66.203765][   T10] usb 2-1: Product: syz
[   66.205800][   T10] usb 2-1: Manufacturer: syz
[   66.208683][   T10] usb 2-1: SerialNumber: syz
[   66.213806][   T10] usb 2-1: config 0 descriptor??
[   66.256934][   T10] rc_core: IR keymap rc-imon-rsc not found
[   66.259325][   T10] Registered IR keymap rc-empty
[   66.264094][   T10] rc rc0: iMON Station as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[   66.272063][   T10] input: iMON Station as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input4
[   66.356811][ T5313] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   66.426753][ T5910] usb 3-1: new full-speed USB device number 4 using dummy_hcd
[   66.468159][ T5876] usb 2-1: USB disconnect, device number 3
[   66.506891][ T5313] usb 1-1: Using ep0 maxpacket: 8
[   66.511534][ T5313] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[   66.515973][ T5313] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   66.521253][ T5313] usb 1-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.00
[   66.524922][ T5313] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   66.530726][ T5313] usb 1-1: config 0 descriptor??
[   66.579959][ T5910] usb 3-1: config 0 has an invalid interface number: 6 but max is 0
[   66.583284][ T5910] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   66.587656][ T5910] usb 3-1: config 0 has no interface number 0
[   66.590321][ T5910] usb 3-1: config 0 interface 6 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64
[   66.597748][ T5910] usb 3-1: New USB device found, idVendor=10cf, idProduct=8061, bcdDevice=b7.12
[   66.601986][ T5910] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   66.605336][ T5910] usb 3-1: Product: syz
[   66.607343][ T5910] usb 3-1: Manufacturer: syz
[   66.609480][ T5910] usb 3-1: SerialNumber: syz
[   66.615358][ T5910] usb 3-1: config 0 descriptor??
[   66.618444][ T6125] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[   66.623912][ T6125] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[   66.635914][ T5910] comedi comedi5: driver 'vmk80xx' has successfully auto-configured 'K8061 (VM140)'.
[   66.837510][ T5876] usb 3-1: USB disconnect, device number 4
[   66.949026][ T5313] logitech 0003:046D:C298.0001: item fetching failed at offset 4/5
[   66.952984][ T5313] logitech 0003:046D:C298.0001: parse failed
[   66.955585][ T5313] logitech 0003:046D:C298.0001: probe with driver logitech failed with error -22
[   67.147964][ T5876] usb 1-1: USB disconnect, device number 2
[   67.148715][ T6129] loop1: detected capacity change from 0 to 32768
[   67.172676][ T6129] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[   67.485686][ T6136] overlay: ./file1 is not a directory
[   68.159185][ T5855] (syz-executor,5855,0):ocfs2_inode_is_valid_to_delete:948 ERROR: Skipping delete of system file 72
[   68.169716][ T5855] ocfs2: Unmounting device (7,1) on (node local)
[   68.320983][ T5910] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   68.412751][ T6149] netlink: 4 bytes leftover after parsing attributes in process `syz.2.91'.
[   68.417972][ T6149] warning: `syz.2.91' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   68.476658][ T5910] usb 1-1: Using ep0 maxpacket: 16
[   68.484454][ T5910] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   68.493164][ T5910] usb 1-1: config 0 interface 0 has no altsetting 0
[   68.499131][ T5910] usb 1-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00
[   68.502459][ T5910] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   68.645142][ T5910] usb 1-1: config 0 descriptor??
[   69.188360][ T5910] arvo 0003:1E7D:30D4.0002: unknown main item tag 0x0
[   69.191650][ T5910] arvo 0003:1E7D:30D4.0002: unknown main item tag 0x0
[   69.194237][ T5910] arvo 0003:1E7D:30D4.0002: unknown main item tag 0x0
[   69.198629][ T5910] arvo 0003:1E7D:30D4.0002: unknown main item tag 0x0
[   69.202198][ T5910] arvo 0003:1E7D:30D4.0002: unknown main item tag 0x0
[   69.211155][ T5910] arvo 0003:1E7D:30D4.0002: hidraw0: USB HID v0.05 Device [HID 1e7d:30d4] on usb-dummy_hcd.0-1/input0
[   69.396262][    T9] usb 1-1: USB disconnect, device number 3
[   69.574302][ T6196] netlink: 156 bytes leftover after parsing attributes in process `syz.1.114'.
[   69.579855][ T6196] netlink: 20 bytes leftover after parsing attributes in process `syz.1.114'.
[   69.632348][ T6192] loop2: detected capacity change from 0 to 8192
[   70.205652][ T6239] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   70.495308][ T6246] Zero length message leads to an empty skb
[   70.947148][ T6248] netlink: 64 bytes leftover after parsing attributes in process `syz.2.137'.
[   71.044982][ T6252] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   71.064447][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   71.068643][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   71.222863][ T6259] atomic_op ffff8880298e0998 conn xmit_atomic 0000000000000000
[   71.536265][ T2209] kernel read not supported for file /admmidi2 (pid: 2209 comm: kworker/1:2)
[   71.570607][ T6278] loop2: detected capacity change from 0 to 4096
[   71.606169][ T6282] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   71.633414][ T6278] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=12)
[   71.647973][ T6281] loop0: detected capacity change from 0 to 8192
[   71.658372][ T6278] Remounting filesystem read-only
[   71.720328][ T5844] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer
[   73.267759][ T6296] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[   73.272385][ T6296] VFS: Can't find a romfs filesystem on dev nullb0.
[   73.272385][ T6296] 
[   73.404737][ T6303] loop0: detected capacity change from 0 to 512
[   73.432970][ T6303] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[   73.457235][ T6303] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000001)
[   73.524869][ T6307] loop1: detected capacity change from 0 to 2048
[   73.541403][ T6307] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   73.675336][ T6312] sctp: [Deprecated]: syz.1.164 (pid 6312) Use of int in max_burst socket option.
[   73.675336][ T6312] Use struct sctp_assoc_value instead
[   73.797200][ T6318] loop0: detected capacity change from 0 to 2048
[   73.832294][ T6318] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   73.840541][ T6320] netlink: 'syz.1.169': attribute type 4 has an invalid length.
[   73.843816][ T6320] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.169'.
[   73.862607][ T6318] UDF-fs: error (device loop0): udf_fiiter_advance_blk: extent after position 232 not allocated in directory (ino 1376)
[   74.341410][ T6331] loop2: detected capacity change from 0 to 4096
[   74.344816][ T6331] ntfs3: Unknown parameter 'nohide_dot_files'
[   74.419628][ T6332] netlink: 'syz.1.170': attribute type 21 has an invalid length.
[   74.423889][ T6332] IPv6: NLM_F_CREATE should be specified when creating new route
[   74.608564][ T5910] IPVS: starting estimator thread 0...
[   74.706752][ T6333] IPVS: using max 77 ests per chain, 184800 per kthread
[   75.092195][ T6335] loop0: detected capacity change from 0 to 32768
[   75.195461][ T6335] ocfs2: Slot 0 on device (7,0) was already allocated to this node!
[   75.240515][ T6335] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[   75.527136][ T5848] ocfs2: Unmounting device (7,0) on (node local)
[   75.675132][ T6343] loop2: detected capacity change from 0 to 32768
[   75.802820][ T6351] loop0: detected capacity change from 0 to 16
[   75.823987][ T6351] erofs (device loop0): mounted with root inode @ nid 36.
[   75.957514][ T6355] netlink: 12 bytes leftover after parsing attributes in process `syz.0.181'.
[   75.966724][ T6355] netlink: 'syz.0.181': attribute type 15 has an invalid length.
[   76.011093][ T6355] netlink: 12 bytes leftover after parsing attributes in process `syz.0.181'.
[   76.011186][   T13] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0
[   76.014825][ T6355] netlink: 'syz.0.181': attribute type 15 has an invalid length.
[   76.019020][   T13] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0
[   76.025631][   T13] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0
[   76.029770][   T13] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0
[   76.224486][ T6367] netlink: 8 bytes leftover after parsing attributes in process `syz.1.186'.
[   76.235552][ T6367] netlink: 'syz.1.186': attribute type 5 has an invalid length.
[   76.239092][ T6367] netlink: 'syz.1.186': attribute type 8 has an invalid length.
[   76.242282][ T6367] netlink: 8 bytes leftover after parsing attributes in process `syz.1.186'.
[   76.258893][ T6353] loop2: detected capacity change from 0 to 40427
[   76.259141][ T6367] geneve2: entered promiscuous mode
[   76.262141][ T6353] F2FS-fs: heap/no_heap options were deprecated
[   76.263917][ T6367] geneve2: entered allmulticast mode
[   76.265398][   T13] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[   76.271638][ T6353] F2FS-fs (loop2): invalid crc value
[   76.299042][   T13] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[   76.302749][   T13] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[   76.306307][   T13] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[   76.342569][ T6353] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[   76.354527][ T6372] loop1: detected capacity change from 0 to 512
[   76.360617][ T6353] F2FS-fs (loop2): Start checkpoint disabled!
[   76.365628][ T6353] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0
[   76.370534][ T6353] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[   76.393769][ T6372] EXT4-fs (loop1): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   76.429577][ T6372] __quota_error: 268 callbacks suppressed
[   76.429587][ T6372] Quota error (device loop1): v2_read_file_info: Free block number 58381 out of range (1, 6).
[   76.435260][ T6372] EXT4-fs warning (device loop1): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   76.467370][ T5855] EXT4-fs (loop1): unmounting filesystem 00800000-0000-0000-0000-000000000000.
[   76.535341][ T6385] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma?
[   76.946624][ T5910] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   77.098740][ T5910] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   77.103075][ T5910] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   77.107647][ T5910] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[   77.111114][ T5910] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   77.124688][ T5910] usb 1-1: config 0 descriptor??
[   77.453737][ T6425] netlink: 'syz.1.208': attribute type 10 has an invalid length.
[   77.467701][ T6425] team0: Port device dummy0 added
[   77.475965][ T6425] netlink: 'syz.1.208': attribute type 10 has an invalid length.
[   77.480786][ T6425] team0: Failed to send port change of device dummy0 via netlink (err -105)
[   77.491620][ T6425] team0: Failed to send options change via netlink (err -105)
[   77.495096][ T6425] team0: Failed to send port change of device dummy0 via netlink (err -105)
[   77.500117][ T6425] team0: Port device dummy0 removed
[   77.510254][ T6425] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   77.702320][   T33] audit: type=1326 audit(1759350543.608:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6428 comm="syz.1.211" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f558b38ec29 code=0x0
[   77.759563][ T5910] usb 1-1: language id specifier not provided by device, defaulting to English
[   77.909073][ T6431] loop2: detected capacity change from 0 to 32768
[   77.923635][   T33] audit: type=1800 audit(1759350543.838:281): pid=6431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.210" name="file1" dev="loop2" ino=4 res=0 errno=0
[   77.960519][ T5910] uclogic 0003:256C:006D.0003: failed retrieving Huion firmware version: -71
[   77.964205][ T5910] uclogic 0003:256C:006D.0003: failed probing parameters: -71
[   77.973439][ T5910] uclogic 0003:256C:006D.0003: probe with driver uclogic failed with error -71
[   77.984110][ T5910] usb 1-1: USB disconnect, device number 4
[   78.087521][ T5313] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   78.256733][ T5313] usb 2-1: Using ep0 maxpacket: 32
[   78.262229][ T5313] usb 2-1: config index 0 descriptor too short (expected 35577, got 27)
[   78.266012][ T5313] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[   78.270154][ T5313] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92
[   78.274351][ T5313] usb 2-1: config 1 has no interface number 0
[   78.277726][ T5313] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   78.282576][ T5313] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[   78.288832][ T5313] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[   78.292712][ T5313] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   78.316245][ T5313] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found
[   78.518664][ T5313] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached
[   78.828660][ T6440] loop0: detected capacity change from 0 to 40427
[   78.885989][ T6440] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   78.898257][ T6440] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   78.946819][ T5313] usb 2-1: USB disconnect, device number 4
[   78.952631][ T5313] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected
[   79.241619][ T6448] syz.0.215: attempt to access beyond end of device
[   79.241619][ T6448] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   79.529224][ T5848] syz-executor: attempt to access beyond end of device
[   79.529224][ T5848] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[   79.538671][ T5848] CPU: 0 UID: 0 PID: 5848 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[   79.538693][ T5848] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   79.538701][ T5848] Call Trace:
[   79.538707][ T5848]  <TASK>
[   79.538714][ T5848]  dump_stack_lvl+0x189/0x250
[   79.538736][ T5848]  ? __pfx_dump_stack_lvl+0x10/0x10
[   79.538751][ T5848]  ? __pfx_queue_work_on+0x10/0x10
[   79.538762][ T5848]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   79.538777][ T5848]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   79.538802][ T5848]  f2fs_handle_critical_error+0x37c/0x540
[   79.538848][ T5848]  f2fs_write_end_io+0x886/0xb60
[   79.538887][ T5848]  __submit_merged_bio+0x27a/0x6a0
[   79.538907][ T5848]  __submit_merged_write_cond+0x255/0x530
[   79.538934][ T5848]  f2fs_write_data_pages+0x261d/0x3000
[   79.538948][ T5848]  ? __pfx_usage_match+0x10/0x10
[   79.538958][ T5848]  ? __bfs+0x154/0x2a0
[   79.539002][ T5848]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   79.539014][ T5848]  ? __switch_to+0xdc8/0x1690
[   79.539069][ T5848]  ? check_path+0x21/0x40
[   79.539080][ T5848]  ? check_noncircular+0xe0/0x160
[   79.539134][ T5848]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   79.539150][ T5848]  do_writepages+0x32e/0x550
[   79.539173][ T5848]  ? do_raw_spin_unlock+0x4d/0x240
[   79.539191][ T5848]  filemap_fdatawrite+0x199/0x240
[   79.539205][ T5848]  ? __pfx_filemap_fdatawrite+0x10/0x10
[   79.539259][ T5848]  ? do_raw_spin_unlock+0x4d/0x240
[   79.539277][ T5848]  f2fs_sync_dirty_inodes+0x31f/0x830
[   79.539306][ T5848]  f2fs_write_checkpoint+0x93e/0x2440
[   79.539322][ T5848]  ? __lock_acquire+0xab9/0xd20
[   79.539389][ T5848]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[   79.539456][ T5848]  kill_f2fs_super+0x2cc/0x6d0
[   79.539477][ T5848]  ? __pfx_kill_f2fs_super+0x10/0x10
[   79.539509][ T5848]  ? shrinker_free+0x2ce/0x3e0
[   79.539530][ T5848]  deactivate_locked_super+0xbc/0x130
[   79.539552][ T5848]  cleanup_mnt+0x425/0x4c0
[   79.539571][ T5848]  ? lockdep_hardirqs_on+0x9c/0x150
[   79.539589][ T5848]  task_work_run+0x1d4/0x260
[   79.539608][ T5848]  ? __pfx_task_work_run+0x10/0x10
[   79.539621][ T5848]  ? __x64_sys_umount+0x122/0x160
[   79.539637][ T5848]  ? exit_to_user_mode_loop+0x40/0x130
[   79.539658][ T5848]  exit_to_user_mode_loop+0xe9/0x130
[   79.539675][ T5848]  do_syscall_64+0x2bd/0xfa0
[   79.539690][ T5848]  ? lockdep_hardirqs_on+0x9c/0x150
[   79.539704][ T5848]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   79.539716][ T5848]  ? exc_page_fault+0xab/0x100
[   79.539733][ T5848]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   79.539745][ T5848] RIP: 0033:0x7fac3b38ff57
[   79.539757][ T5848] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[   79.539767][ T5848] RSP: 002b:00007fff8f41d9c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[   79.539781][ T5848] RAX: 0000000000000000 RBX: 00007fac3b411c2d RCX: 00007fac3b38ff57
[   79.539789][ T5848] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff8f41da80
[   79.539796][ T5848] RBP: 00007fff8f41da80 R08: 0000000000000000 R09: 0000000000000000
[   79.539803][ T5848] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff8f41eb10
[   79.539811][ T5848] R13: 00007fac3b411c2d R14: 00000000000135d8 R15: 00007fff8f41eb50
[   79.539836][ T5848]  </TASK>
[   79.542830][ T5848] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[   79.905654][ T6463] loop1: detected capacity change from 0 to 1024
[   79.926966][ T6463] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   79.988968][ T5855] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   80.159858][ T6478] binder: 6477:6478 ioctl c00c6211 0 returned -14
[   80.263362][ T6467] loop2: detected capacity change from 0 to 32768
[   80.309009][ T6467] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   80.343650][ T6467] XFS (loop2): Ending clean mount
[   80.353614][ T6467] XFS (loop2): Quotacheck needed: Please wait.
[   80.379696][ T6467] XFS (loop2): Quotacheck: Done.
[   80.441685][ T5844] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   80.738168][ T6503] netlink: 4 bytes leftover after parsing attributes in process `syz.1.235'.
[   80.749946][ T6503] netlink: 4 bytes leftover after parsing attributes in process `syz.1.235'.
[   81.099604][ T6509] netlink: 'syz.2.238': attribute type 3 has an invalid length.
[   81.315196][ T6519] loop0: detected capacity change from 0 to 512
[   81.336316][ T6519] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.242: casefold flag without casefold feature
[   81.362956][ T6519] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.242: couldn't read orphan inode 15 (err -117)
[   81.403969][ T6519] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   81.467753][ T6522] netlink: 20 bytes leftover after parsing attributes in process `syz.1.244'.
[   81.470653][ T6522] openvswitch: netlink: Message has 12 unknown bytes.
[   81.663920][ T6515] loop2: detected capacity change from 0 to 40427
[   81.693067][ T6515] F2FS-fs (loop2): invalid crc value
[   81.959775][ T6535] bond0: (slave dummy0): Releasing backup interface
[   81.966355][ T6535] batman_adv: batadv0: Adding interface: dummy0
[   81.968951][ T6535] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   81.977408][ T6535] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[   81.978644][ T6515] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[   81.984135][ T6515] F2FS-fs (loop2): Start checkpoint disabled!
[   81.984879][ T6535] netlink: 'syz.1.249': attribute type 10 has an invalid length.
[   81.987868][ T6515] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0
[   81.992560][ T6515] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[   81.994357][ T6535] 8021q: adding VLAN 0 to HW filter on device batadv0
[   82.002179][ T6535] bond0: (slave batadv0): Enslaving as an active interface with an up link
[   82.060512][ T6540] netlink: 'syz.1.251': attribute type 1 has an invalid length.
[   82.063835][ T6540] netlink: 228 bytes leftover after parsing attributes in process `syz.1.251'.
[   82.083572][   T36] kworker/u10:1: attempt to access beyond end of device
[   82.083572][   T36] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   82.099901][   T36] CPU: 1 UID: 0 PID: 36 Comm: kworker/u10:1 Not tainted syzkaller #0 PREEMPT(full) 
[   82.099914][   T36] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   82.099920][   T36] Workqueue: writeback wb_workfn (flush-7:2)
[   82.099937][   T36] Call Trace:
[   82.099941][   T36]  <TASK>
[   82.099945][   T36]  dump_stack_lvl+0x189/0x250
[   82.099957][   T36]  ? __pfx_dump_stack_lvl+0x10/0x10
[   82.099966][   T36]  ? __pfx_queue_work_on+0x10/0x10
[   82.099972][   T36]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   82.099982][   T36]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   82.099995][   T36]  f2fs_handle_critical_error+0x37c/0x540
[   82.100006][   T36]  f2fs_write_end_io+0x886/0xb60
[   82.100023][   T36]  __submit_merged_bio+0x27a/0x6a0
[   82.100033][   T36]  __submit_merged_write_cond+0x255/0x530
[   82.100048][   T36]  f2fs_write_data_pages+0x261d/0x3000
[   82.100071][   T36]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   82.100088][   T36]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[   82.100143][   T36]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[   82.100164][   T36]  ? trace_f2fs_writepages+0x7f/0x200
[   82.100177][   T36]  ? f2fs_write_node_pages+0x478/0x6e0
[   82.100188][   T36]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[   82.100197][   T36]  ? __lock_acquire+0xab9/0xd20
[   82.100210][   T36]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   82.100219][   T36]  do_writepages+0x32e/0x550
[   82.100229][   T36]  ? reacquire_held_locks+0x127/0x1d0
[   82.100236][   T36]  ? writeback_sb_inodes+0x384/0x1010
[   82.100248][   T36]  __writeback_single_inode+0x145/0xff0
[   82.100257][   T36]  ? do_raw_spin_unlock+0x4d/0x240
[   82.100267][   T36]  writeback_sb_inodes+0x6c7/0x1010
[   82.100287][   T36]  ? __pfx_writeback_sb_inodes+0x10/0x10
[   82.100344][   T36]  ? rcu_is_watching+0x15/0xb0
[   82.100358][   T36]  wb_writeback+0x43b/0xaf0
[   82.100370][   T36]  ? queue_io+0x331/0x590
[   82.100379][   T36]  ? __pfx_wb_writeback+0x10/0x10
[   82.100391][   T36]  ? _raw_spin_unlock_irq+0x23/0x50
[   82.100401][   T36]  wb_workfn+0x409/0xef0
[   82.100419][   T36]  ? __pfx_wb_workfn+0x10/0x10
[   82.100432][   T36]  ? __lock_acquire+0xab9/0xd20
[   82.100447][   T36]  ? process_scheduled_works+0x9ef/0x17b0
[   82.100461][   T36]  ? _raw_spin_unlock_irq+0x23/0x50
[   82.100468][   T36]  ? process_scheduled_works+0x9ef/0x17b0
[   82.100478][   T36]  ? process_scheduled_works+0x9ef/0x17b0
[   82.100490][   T36]  process_scheduled_works+0xae1/0x17b0
[   82.100514][   T36]  ? __pfx_process_scheduled_works+0x10/0x10
[   82.100533][   T36]  worker_thread+0x8a0/0xda0
[   82.100556][   T36]  kthread+0x711/0x8a0
[   82.100566][   T36]  ? __pfx_worker_thread+0x10/0x10
[   82.100577][   T36]  ? __pfx_kthread+0x10/0x10
[   82.100586][   T36]  ? _raw_spin_unlock_irq+0x23/0x50
[   82.100594][   T36]  ? lockdep_hardirqs_on+0x9c/0x150
[   82.100602][   T36]  ? __pfx_kthread+0x10/0x10
[   82.100610][   T36]  ret_from_fork+0x4bc/0x870
[   82.100622][   T36]  ? __pfx_ret_from_fork+0x10/0x10
[   82.100641][   T36]  ? __switch_to_asm+0x39/0x70
[   82.100654][   T36]  ? __switch_to_asm+0x33/0x70
[   82.100666][   T36]  ? __pfx_kthread+0x10/0x10
[   82.100676][   T36]  ret_from_fork_asm+0x1a/0x30
[   82.100694][   T36]  </TASK>
[   82.105443][   T36] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[   82.300218][ T6551] netlink: 8 bytes leftover after parsing attributes in process `syz.1.257'.
[   82.332040][ T5848] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   82.379670][ T6555] loop0: detected capacity change from 0 to 1024
[   82.403229][ T6555] hfsplus: request for non-existent node 134217728 in B*Tree
[   82.406721][ T6555] hfsplus: request for non-existent node 134217728 in B*Tree
[   82.698116][ T6571] loop1: detected capacity change from 0 to 128
[   82.702564][ T6571] befs: (loop1): No write support. Marking filesystem read-only
[   82.720561][ T6571] befs: (loop1): invalid blocksize: 2066842815
[   83.286601][ T6587] netlink: 'syz.0.273': attribute type 1 has an invalid length.
[   83.396607][ T5986] usb 2-1: new low-speed USB device number 5 using dummy_hcd
[   83.549067][ T5986] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   83.558021][ T5986] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32, setting to 8
[   83.562410][ T5986] usb 2-1: New USB device found, idVendor=05ac, idProduct=0240, bcdDevice= 0.00
[   83.566148][ T5986] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   83.586734][ T5986] usb 2-1: config 0 descriptor??
[   83.588837][ T6585] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   83.594484][ T5986] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input5
[   83.753149][ T6597] loop0: detected capacity change from 0 to 32768
[   83.833108][ T5313] usb 2-1: USB disconnect, device number 5
[   83.843076][ T5280] bcm5974 2-1:0.0: could not read from device
[   83.851647][ T5846] bcm5974 2-1:0.0: could not read from device
[   83.983509][ T6604] loop0: detected capacity change from 0 to 16
[   84.030717][ T6604] erofs (device loop0): DAX unsupported by block device. Turning off DAX.
[   84.042330][ T6604] erofs (device loop0): mounted with root inode @ nid 36.
[   84.475304][ T6617] loop0: detected capacity change from 0 to 256
[   84.498866][   T33] audit: type=1326 audit(1759350550.418:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6616 comm="syz.0.286" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac3b38ec29 code=0x7ffc0000
[   84.510041][   T33] audit: type=1326 audit(1759350550.418:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6616 comm="syz.0.286" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac3b38ec29 code=0x7ffc0000
[   84.519597][   T33] audit: type=1326 audit(1759350550.418:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6616 comm="syz.0.286" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fac3b38ec29 code=0x7ffc0000
[   84.530661][   T33] audit: type=1326 audit(1759350550.418:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6616 comm="syz.0.286" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac3b38ec29 code=0x7ffc0000
[   84.546434][   T33] audit: type=1326 audit(1759350550.418:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6616 comm="syz.0.286" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac3b38ec29 code=0x7ffc0000
[   84.560939][   T33] audit: type=1326 audit(1759350550.438:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6616 comm="syz.0.286" exe="/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fac3b38ec29 code=0x7ffc0000
[   84.571480][   T33] audit: type=1326 audit(1759350550.448:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6616 comm="syz.0.286" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac3b38ec29 code=0x7ffc0000
[   84.579424][   T33] audit: type=1326 audit(1759350550.448:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6616 comm="syz.0.286" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac3b38ec29 code=0x7ffc0000
[   84.587930][   T33] audit: type=1326 audit(1759350550.458:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6616 comm="syz.0.286" exe="/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fac3b38ec29 code=0x7ffc0000
[   84.596762][   T33] audit: type=1326 audit(1759350550.458:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6616 comm="syz.0.286" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac3b38ec29 code=0x7ffc0000
[   84.863584][ T6628] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   84.881212][ T5313] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   85.051526][ T5313] usb 1-1: Using ep0 maxpacket: 8
[   85.068855][ T5313] usb 1-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config
[   85.084601][ T5313] usb 1-1: too many endpoints for config 168 interface 0 altsetting 255: 255, using maximum allowed: 30
[   85.102643][ T5313] usb 1-1: config 168 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[   85.144732][ T5313] usb 1-1: config 168 interface 0 has no altsetting 0
[   85.155243][ T5313] usb 1-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config
[   85.167633][ T5313] usb 1-1: too many endpoints for config 168 interface 0 altsetting 255: 255, using maximum allowed: 30
[   85.187587][ T5313] usb 1-1: config 168 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[   85.193288][ T5313] usb 1-1: config 168 interface 0 has no altsetting 0
[   85.221470][ T5313] usb 1-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config
[   85.241670][ T5313] usb 1-1: too many endpoints for config 168 interface 0 altsetting 255: 255, using maximum allowed: 30
[   85.247484][ T5313] usb 1-1: config 168 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[   85.267416][ T6638] netlink: 128 bytes leftover after parsing attributes in process `syz.2.297'.
[   85.271655][ T6638] netlink: 20 bytes leftover after parsing attributes in process `syz.2.297'.
[   85.276337][ T5313] usb 1-1: config 168 interface 0 has no altsetting 0
[   85.291598][ T5313] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[   85.295695][ T5313] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   85.301336][ T5313] usb 1-1: Product: syz
[   85.303242][ T5313] usb 1-1: Manufacturer: syz
[   85.305301][ T5313] usb 1-1: SerialNumber: syz
[   85.407013][    T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[   85.584095][    T9] usb 2-1: Using ep0 maxpacket: 32
[   85.611597][    T9] usb 2-1: config 0 interface 0 has no altsetting 0
[   85.631727][    T9] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[   85.640827][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   85.644394][    T9] usb 2-1: Product: syz
[   85.646592][    T9] usb 2-1: Manufacturer: syz
[   85.649836][    T9] usb 2-1: SerialNumber: syz
[   85.664372][    T9] usb 2-1: config 0 descriptor??
[   85.672291][    T9] gs_usb 2-1:0.0: Required endpoints not found
[   86.149907][   T10] usb 2-1: USB disconnect, device number 6
[   86.425771][  T793] cfg80211: failed to load regulatory.db
[   86.540316][ T5295] udevd[5295]: worker [5846] terminated by signal 33 (Unknown signal 33)
[   86.612768][ T6659] loop2: detected capacity change from 0 to 16
[   86.618021][ T6659] erofs (device loop2): mounted with root inode @ nid 36.
[   86.677560][ T6661] netlink: 40 bytes leftover after parsing attributes in process `syz.2.308'.
[   86.702622][ T6661] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.704968][ T6661] bridge0: port 2(bridge_slave_1) entered forwarding state
[   86.717683][ T5313] adutux 1-1:168.0: interrupt endpoints not found
[   86.720960][ T5313] usb 1-1: USB disconnect, device number 5
[   86.731155][ T5853] udevd[5853]: failed to send result of seq 10955 to main daemon: Connection refused
[   87.235780][ T6666] loop0: detected capacity change from 0 to 32768
[   87.242409][ T6666] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.310 (6666)
[   87.258351][ T6666] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   87.263930][ T6666] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm
[   87.359942][ T6699] Driver unsupported XDP return value 0 on prog  (id 36) dev N/A, expect packet loss!
[   87.583417][ T6666] BTRFS info (device loop0): enabling ssd optimizations
[   87.585837][ T6666] BTRFS info (device loop0): enabling free space tree
[   87.625177][ T6711] netlink: 8 bytes leftover after parsing attributes in process `syz.2.323'.
[   87.649016][ T6666] syz.0.310 (6666) used greatest stack depth: 18984 bytes left
[   87.677500][ T5848] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   87.853083][ T6721] netlink: 140 bytes leftover after parsing attributes in process `syz.2.329'.
[   88.766597][   T47] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[   88.896696][    T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   88.920901][   T47] usb 2-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73
[   88.925124][   T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   88.933788][   T47] usb 2-1: Product: syz
[   88.935526][   T47] usb 2-1: Manufacturer: syz
[   88.938081][   T47] usb 2-1: SerialNumber: syz
[   88.940425][ T6758] netlink: 4 bytes leftover after parsing attributes in process `syz.0.345'.
[   88.944055][ T6758] netlink: 4 bytes leftover after parsing attributes in process `syz.0.345'.
[   88.949088][ T6758] netlink: 4 bytes leftover after parsing attributes in process `syz.0.345'.
[   88.953380][   T47] usb 2-1: config 0 descriptor??
[   89.046620][    T9] usb 3-1: Using ep0 maxpacket: 32
[   89.049873][    T9] usb 3-1: config 2 has an invalid interface number: 157 but max is 0
[   89.052637][    T9] usb 3-1: config 2 has no interface number 0
[   89.056835][    T9] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=a4.1b
[   89.060016][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   89.062756][    T9] usb 3-1: Product: syz
[   89.064173][    T9] usb 3-1: Manufacturer: syz
[   89.065918][    T9] usb 3-1: SerialNumber: syz
[   89.071496][    T9] imon 3-1:2.157: unable to register, err -19
[   89.276847][ T2209] usb 3-1: USB disconnect, device number 5
[   89.375378][ T6773] loop0: detected capacity change from 0 to 512
[   89.379952][ T6773] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   89.385636][ T6773] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   89.397733][ T6773] EXT4-fs (loop0): 1 truncate cleaned up
[   89.401447][ T6773] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   89.835829][   T47] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[   89.844934][   T47] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9
[   89.863769][   T47] asix 2-1:0.0: probe with driver asix failed with error -71
[   89.901544][   T47] usb 2-1: USB disconnect, device number 7
[   90.308251][ T5848] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   90.528204][ T6783] loop0: detected capacity change from 0 to 40427
[   90.535536][ T6783] F2FS-fs (loop0): invalid crc value
[   90.556264][ T6794] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   90.567340][ T6783] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[   90.572087][ T6783] F2FS-fs (loop0): Start checkpoint disabled!
[   90.577127][ T6783] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0
[   90.580932][ T6783] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[   91.086603][    T9] usb 2-1: new full-speed USB device number 8 using dummy_hcd
[   91.198458][ T1091] kworker/u9:5: attempt to access beyond end of device
[   91.198458][ T1091] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   91.205212][ T1091] CPU: 0 UID: 0 PID: 1091 Comm: kworker/u9:5 Not tainted syzkaller #0 PREEMPT(full) 
[   91.205231][ T1091] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   91.205239][ T1091] Workqueue: writeback wb_workfn (flush-7:0)
[   91.205264][ T1091] Call Trace:
[   91.205269][ T1091]  <TASK>
[   91.205275][ T1091]  dump_stack_lvl+0x189/0x250
[   91.205294][ T1091]  ? __pfx_dump_stack_lvl+0x10/0x10
[   91.205308][ T1091]  ? __pfx_queue_work_on+0x10/0x10
[   91.205319][ T1091]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   91.205334][ T1091]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   91.205358][ T1091]  f2fs_handle_critical_error+0x37c/0x540
[   91.205378][ T1091]  f2fs_write_end_io+0x886/0xb60
[   91.205409][ T1091]  __submit_merged_bio+0x27a/0x6a0
[   91.205427][ T1091]  __submit_merged_write_cond+0x255/0x530
[   91.205453][ T1091]  f2fs_write_data_pages+0x261d/0x3000
[   91.205497][ T1091]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   91.205578][ T1091]  ? f2fs_write_meta_pages+0x357/0x450
[   91.205601][ T1091]  ? __lock_acquire+0xab9/0xd20
[   91.205622][ T1091]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   91.205637][ T1091]  do_writepages+0x32e/0x550
[   91.205653][ T1091]  ? reacquire_held_locks+0x127/0x1d0
[   91.205665][ T1091]  ? writeback_sb_inodes+0x384/0x1010
[   91.205685][ T1091]  __writeback_single_inode+0x145/0xff0
[   91.205700][ T1091]  ? do_raw_spin_unlock+0x4d/0x240
[   91.205718][ T1091]  writeback_sb_inodes+0x6c7/0x1010
[   91.205755][ T1091]  ? __pfx_writeback_sb_inodes+0x10/0x10
[   91.205805][ T1091]  ? rcu_is_watching+0x15/0xb0
[   91.205826][ T1091]  wb_writeback+0x43b/0xaf0
[   91.205847][ T1091]  ? queue_io+0x331/0x590
[   91.205863][ T1091]  ? __pfx_wb_writeback+0x10/0x10
[   91.205884][ T1091]  ? _raw_spin_unlock_irq+0x23/0x50
[   91.205909][ T1091]  wb_workfn+0x409/0xef0
[   91.205939][ T1091]  ? __pfx_wb_workfn+0x10/0x10
[   91.205960][ T1091]  ? __lock_acquire+0xab9/0xd20
[   91.205985][ T1091]  ? process_scheduled_works+0x9ef/0x17b0
[   91.206006][ T1091]  ? _raw_spin_unlock_irq+0x23/0x50
[   91.206017][ T1091]  ? process_scheduled_works+0x9ef/0x17b0
[   91.206033][ T1091]  ? process_scheduled_works+0x9ef/0x17b0
[   91.206051][ T1091]  process_scheduled_works+0xae1/0x17b0
[   91.206092][ T1091]  ? __pfx_process_scheduled_works+0x10/0x10
[   91.206121][ T1091]  worker_thread+0x8a0/0xda0
[   91.206145][ T1091]  ? __kthread_parkme+0x7b/0x200
[   91.206187][ T1091]  kthread+0x711/0x8a0
[   91.206205][ T1091]  ? __pfx_worker_thread+0x10/0x10
[   91.206221][ T1091]  ? __pfx_kthread+0x10/0x10
[   91.206237][ T1091]  ? _raw_spin_unlock_irq+0x23/0x50
[   91.206249][ T1091]  ? lockdep_hardirqs_on+0x9c/0x150
[   91.206262][ T1091]  ? __pfx_kthread+0x10/0x10
[   91.206275][ T1091]  ret_from_fork+0x4bc/0x870
[   91.206294][ T1091]  ? __pfx_ret_from_fork+0x10/0x10
[   91.206318][ T1091]  ? __switch_to_asm+0x39/0x70
[   91.206331][ T1091]  ? __switch_to_asm+0x33/0x70
[   91.206344][ T1091]  ? __pfx_kthread+0x10/0x10
[   91.206358][ T1091]  ret_from_fork_asm+0x1a/0x30
[   91.206386][ T1091]  </TASK>
[   91.206392][ T1091] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[   91.333822][   T10] usb 3-1: new low-speed USB device number 6 using dummy_hcd
[   91.358686][    T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 15
[   91.362401][    T9] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   91.368521][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[   91.373124][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64
[   91.388329][    T9] usb 2-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8
[   91.392108][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   91.395486][    T9] usb 2-1: Product: syz
[   91.397556][    T9] usb 2-1: Manufacturer: syz
[   91.399561][    T9] usb 2-1: SerialNumber: syz
[   91.403483][    T9] usb 2-1: config 0 descriptor??
[   91.406292][ T6808] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   91.498872][   T10] usb 3-1: config 168 descriptor has 1 excess byte, ignoring
[   91.502062][   T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[   91.506838][   T10] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   91.511799][   T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[   91.516548][   T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[   91.522697][   T10] usb 3-1: config 168 descriptor has 1 excess byte, ignoring
[   91.525886][   T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[   91.535104][   T10] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   91.540035][   T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[   91.544614][   T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[   91.551129][   T10] usb 3-1: config 168 descriptor has 1 excess byte, ignoring
[   91.554291][   T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[   91.559103][   T10] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   91.565443][   T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[   91.570689][   T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[   91.580090][   T10] usb 3-1: string descriptor 0 read error: -22
[   91.582931][   T10] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[   91.587295][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   91.603563][   T10] adutux 3-1:168.0: ADU100  now attached to /dev/usb/adutux0
[   91.616782][    T9] powermate: Expected payload of 3--6 bytes, found 64 bytes!
[   91.624923][    T9] input: Griffin SoundKnob as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input7
[   91.632022][    C0] powermate: config urb returned -71
[   91.634700][    C0] powermate: config urb returned -71
[   91.637183][    C0] powermate: config urb returned -71
[   91.639541][    C0] powermate: config urb returned -71
[   91.645104][    T9] usb 2-1: USB disconnect, device number 8
[   91.647670][    C0] powermate 2-1:0.0: powermate_irq - usb_submit_urb failed with result: -19
[   91.708410][ T6822] loop0: detected capacity change from 0 to 4096
[   91.711566][ T6822] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512).
[   91.806687][  T793] usb 3-1: USB disconnect, device number 6
[   92.287024][ T6840] netlink: 8 bytes leftover after parsing attributes in process `syz.0.380'.
[   92.801300][ T6855] tracefs: Unknown parameter '0x0000000000000000'
[   92.938231][ T6868] NILFS (loop1): device size too small
[   93.095253][ T6885] loop0: detected capacity change from 0 to 1024
[   93.135914][ T6887] sp0: Synchronizing with TNC
[   93.285254][ T6898] Bluetooth: MGMT ver 1.23
[   93.551701][ T6903] loop2: detected capacity change from 0 to 8
[   93.561879][ T6903] SQUASHFS error: lzo decompression failed, data probably corrupt
[   93.565369][ T6903] SQUASHFS error: Failed to read block 0x91: -5
[   93.568262][ T6903] SQUASHFS error: Unable to read metadata cache entry [8f]
[   93.571440][ T6903] SQUASHFS error: Unable to read inode 0x11f
[   93.613993][ T6909] loop2: detected capacity change from 0 to 256
[   93.620940][ T6909] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   93.625938][ T6909] exFAT-fs (loop2): Medium has reported failures. Some data may be lost.
[   93.637346][ T6909] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d)
[   93.643499][ T6909] exFAT-fs (loop2): failed to load alloc-bitmap
[   93.646186][ T6909] exFAT-fs (loop2): failed to recognize exfat type
[   93.689047][ T6913] loop1: detected capacity change from 0 to 256
[   93.704340][ T6915] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[   93.714788][ T6915] CIFS mount error: No usable UNC path provided in device string!
[   93.714788][ T6915] 
[   93.718867][ T6915] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[   93.749024][ T6919] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[   94.094618][ T6946] loop2: detected capacity change from 0 to 4096
[   94.125062][ T6946] Cannot load nls cp12R
[   95.279853][ T6961] 9p: Unknown Cache mode or invalid value l
[   95.437213][ T6967] netlink: 'syz.2.437': attribute type 83 has an invalid length.
[   95.857485][ T2209] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[   96.246726][ T2209] usb 2-1: Using ep0 maxpacket: 16
[   96.251760][ T2209] usb 2-1: config 0 has no interfaces?
[   96.255899][ T2209] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   96.260057][ T2209] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[   96.263665][ T2209] usb 2-1: SerialNumber: syz
[   96.270796][ T2209] usb 2-1: config 0 descriptor??
[   96.273564][ T6987] loop0: detected capacity change from 0 to 32768
[   96.281326][ T6987] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   96.297438][ T6987] XFS (loop0): Ending clean mount
[   96.303683][ T6987] XFS (loop0): Quotacheck needed: Please wait.
[   96.319863][ T6987] XFS (loop0): Quotacheck: Done.
[   96.341636][ T5848] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   96.481010][  T793] usb 2-1: USB disconnect, device number 9
[   96.571137][ T7005] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.448'.
[   96.663661][ T7013] loop2: detected capacity change from 0 to 256
[   96.684833][ T7013] FAT-fs (loop2): Directory bread(block 64) failed
[   96.688752][ T7013] FAT-fs (loop2): Directory bread(block 65) failed
[   96.691827][ T7013] FAT-fs (loop2): Directory bread(block 66) failed
[   96.694710][ T7013] FAT-fs (loop2): Directory bread(block 67) failed
[   96.697859][ T7013] FAT-fs (loop2): Directory bread(block 68) failed
[   96.704884][ T7013] FAT-fs (loop2): Directory bread(block 69) failed
[   96.707895][ T7013] FAT-fs (loop2): Directory bread(block 70) failed
[   96.710725][ T7013] FAT-fs (loop2): Directory bread(block 71) failed
[   96.713590][ T7013] FAT-fs (loop2): Directory bread(block 72) failed
[   96.716779][ T7013] FAT-fs (loop2): Directory bread(block 73) failed
[   96.723255][ T7015] loop0: detected capacity change from 0 to 512
[   96.727502][ T7015] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   96.734256][ T7015] EXT4-fs (loop0): 1 truncate cleaned up
[   96.743124][ T7015] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   96.773286][ T5848] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   97.451979][ T7034] netlink: 'syz.1.459': attribute type 4 has an invalid length.
[   97.567044][ T7038] loop1: detected capacity change from 0 to 1764
[   97.741130][ T7050] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[   97.746743][ T7050] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[   97.811870][ T7057] nftables ruleset with unbound set
[   97.844521][ T7060] loop0: detected capacity change from 0 to 512
[   97.870220][ T7060] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002]
[   97.872928][ T7060] System zones: 0-2, 18-18, 34-35
[   97.885351][ T7060] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   97.893862][ T7060] ext4 filesystem being mounted at /141/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   97.902827][ T7068] netlink: 1180 bytes leftover after parsing attributes in process `syz.2.475'.
[   97.906172][ T7068] openvswitch: netlink: Message has 5 unknown bytes.
[   97.935688][ T7070] netlink: 8 bytes leftover after parsing attributes in process `syz.2.476'.
[   97.942391][ T5848] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   98.037187][  T793] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[   98.204628][  T793] usb 2-1: config 2 interface 0 has no altsetting 0
[   98.213716][  T793] usb 2-1: New USB device found, idVendor=07aa, idProduct=9601, bcdDevice= b.80
[   98.221102][  T793] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   98.224354][  T793] usb 2-1: Product: syz
[   98.225959][  T793] usb 2-1: Manufacturer: syz
[   98.227651][  T793] usb 2-1: SerialNumber: syz
[   98.306744][   T10] usb 3-1: new full-speed USB device number 7 using dummy_hcd
[   98.518937][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   98.523348][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   98.527722][   T10] usb 3-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00
[   98.531518][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   98.538542][   T10] usb 3-1: config 0 descriptor??
[   98.695827][  T793] Error reading MAC address
[   98.703226][  T793] usb 2-1: USB disconnect, device number 10
[   98.950951][   T10] bigben 0003:146B:0902.0004: unexpected rdesc, please submit for review
[   98.962109][   T10] bigben 0003:146B:0902.0004: item fetching failed at offset 0/5
[   98.965649][   T10] bigben 0003:146B:0902.0004: parse failed
[   98.970002][   T10] bigben 0003:146B:0902.0004: probe with driver bigben failed with error -22
[   98.972146][ T7083] loop0: detected capacity change from 0 to 1024
[   99.001739][  T269] hfsplus: b-tree write err: -5, ino 4
[   99.086923][ T7090] netlink: 36 bytes leftover after parsing attributes in process `syz.0.484'.
[   99.155007][   T47] usb 3-1: USB disconnect, device number 7
[   99.244221][ T7103] loop0: detected capacity change from 0 to 256
[   99.247767][ T7103] exfat: Deprecated parameter 'utf8'
[   99.250080][ T7103] exfat: Deprecated parameter 'namecase'
[   99.252533][ T7103] exfat: Deprecated parameter 'namecase'
[   99.258520][ T7103] exfat: Deprecated parameter 'utf8'
[   99.265473][ T7103] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012153, chksum : 0x5270ca8d, utbl_chksum : 0xe619d30d)
[   99.328441][ T7107] evm: overlay not supported
[   99.625459][ T7114] netlink: 4280 bytes leftover after parsing attributes in process `syz.1.491'.
[   99.629752][ T7114] netlink: 4280 bytes leftover after parsing attributes in process `syz.1.491'.
[   99.899917][ T7116] loop0: detected capacity change from 0 to 2048
[   99.904210][ T7116] NILFS (loop0): couldn't find nilfs on the device
[  100.008290][ T7125] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  100.008290][ T7125] The task syz.0.498 (7125) triggered the difference, watch for misbehavior.
[  100.316688][   T10] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  100.476603][   T10] usb 3-1: Using ep0 maxpacket: 16
[  100.480842][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  100.485517][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  100.489651][   T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  100.495106][   T10] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  100.499250][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  100.504765][   T10] usb 3-1: config 0 descriptor??
[  101.054208][ T7142] netlink: 40 bytes leftover after parsing attributes in process `syz.0.506'.
[  101.107703][   T10] microsoft 0003:045E:07DA.0005: collection stack underflow
[  101.112373][   T10] microsoft 0003:045E:07DA.0005: item 0 2 0 12 parsing failed
[  101.126806][   T10] microsoft 0003:045E:07DA.0005: parse failed
[  101.130496][   T10] microsoft 0003:045E:07DA.0005: probe with driver microsoft failed with error -22
[  102.165951][ T7156] bridge0: port 2(bridge_slave_1) entered disabled state
[  102.774866][ T7162] netlink: 16 bytes leftover after parsing attributes in process `syz.1.512'.
[  103.015542][ T7166] netlink: 11 bytes leftover after parsing attributes in process `syz.0.514'.
[  103.159467][   T47] usb 3-1: USB disconnect, device number 8
[  103.220343][  T793] usb 2-1: new full-speed USB device number 11 using dummy_hcd
[  103.378884][  T793] usb 2-1: config 162 has an invalid interface number: 35 but max is 0
[  103.383016][  T793] usb 2-1: config 162 has no interface number 0
[  103.386015][  T793] usb 2-1: config 162 interface 35 has no altsetting 0
[  103.389129][   T10] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  103.394792][  T793] usb 2-1: New USB device found, idVendor=05ac, idProduct=0254, bcdDevice=b9.11
[  103.399041][  T793] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  103.402255][  T793] usb 2-1: Product: syz
[  103.404077][  T793] usb 2-1: Manufacturer: syz
[  103.406038][  T793] usb 2-1: SerialNumber: syz
[  103.549528][   T10] usb 1-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36
[  103.554123][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  103.562755][   T10] usb 1-1: config 0 descriptor??
[  103.625313][  T793] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:162.35/input/input8
[  103.632316][ T5280] bcm5974 2-1:162.35: could not read from device
[  103.635167][ T5280] bcm5974 2-1:162.35: could not read from device
[  103.637978][  T793] usb 2-1: USB disconnect, device number 11
[  103.641319][ T5280] bcm5974 2-1:162.35: could not read from device
[  103.788083][ T7192] ceph: No mds server is up or the cluster is laggy
[  103.807673][   T47] libceph: connect (1)[c::]:6789 error -101
[  103.811069][   T47] libceph: mon0 (1)[c::]:6789 connect error
[  104.090997][   T10] kaweth 1-1:0.0: Firmware present in device.
[  104.095070][   T10] kaweth 1-1:0.0: Statistics collection: 0
[  104.097579][   T10] kaweth 1-1:0.0: Multicast filter limit: 0
[  104.099968][   T10] kaweth 1-1:0.0: MTU: 0
[  104.101677][   T10] kaweth 1-1:0.0: Read MAC address 00:00:00:00:00:00
[  104.426882][ T7199] loop2: detected capacity change from 0 to 4096
[  104.476082][ T7199] ntfs3(loop2): ino=1e, "file1" attr_set_size
[  104.479920][ T7199] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  104.499894][   T10] kaweth 1-1:0.0: Error setting SOFS wait
[  104.503341][   T10] kaweth 1-1:0.0: probe with driver kaweth failed with error -5
[  104.511201][   T10] usb 1-1: USB disconnect, device number 6
[  104.536656][  T793] usb 2-1: new full-speed USB device number 12 using dummy_hcd
[  104.689626][  T793] usb 2-1: config 28 has an invalid interface number: 36 but max is 0
[  104.692979][  T793] usb 2-1: config 28 has no interface number 0
[  104.697856][  T793] usb 2-1: New USB device found, idVendor=0b48, idProduct=300d, bcdDevice=4d.63
[  104.701434][  T793] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  104.704634][  T793] usb 2-1: Product: syz
[  104.706383][  T793] usb 2-1: Manufacturer: syz
[  104.710028][  T793] usb 2-1: SerialNumber: syz
[  104.816601][   T47] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  104.927310][  T793] dvb-usb: found a 'Technotrend TT-connect CT-3650' in warm state.
[  104.930774][  T793] dvb-usb: bulk message failed: -22 (4/0)
[  104.933257][  T793] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  104.937537][  T793] dvb-usb: bulk message failed: -22 (5/0)
[  104.940104][  T793] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  104.946441][  T793] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  104.952884][  T793] dvb-usb: Technotrend TT-connect CT-3650 error while loading driver (-19)
[  104.958022][  T793] usb 2-1: USB disconnect, device number 12
[  104.976751][   T47] usb 3-1: Using ep0 maxpacket: 8
[  104.980088][   T47] usb 3-1: unable to get BOS descriptor or descriptor too short
[  104.984228][   T47] usb 3-1: config 1 interface 0 has no altsetting 0
[  104.988914][   T47] usb 3-1: New USB device found, idVendor=056a, idProduct=0027, bcdDevice= 0.40
[  104.992158][   T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  104.995243][   T47] usb 3-1: Product: syz
[  104.996743][   T47] usb 3-1: Manufacturer: syz
[  104.998350][   T47] usb 3-1: SerialNumber: syz
[  105.121731][ T7209] loop0: detected capacity change from 0 to 256
[  105.135793][ T7209] FAT-fs (loop0): Directory bread(block 64) failed
[  105.141763][ T7209] FAT-fs (loop0): Directory bread(block 65) failed
[  105.144624][ T7209] FAT-fs (loop0): Directory bread(block 66) failed
[  105.147534][ T7209] FAT-fs (loop0): Directory bread(block 67) failed
[  105.150319][ T7209] FAT-fs (loop0): Directory bread(block 68) failed
[  105.152963][ T7209] FAT-fs (loop0): Directory bread(block 69) failed
[  105.155684][ T7209] FAT-fs (loop0): Directory bread(block 70) failed
[  105.158507][ T7209] FAT-fs (loop0): Directory bread(block 71) failed
[  105.161230][ T7209] FAT-fs (loop0): Directory bread(block 72) failed
[  105.163850][ T7209] FAT-fs (loop0): Directory bread(block 73) failed
[  105.210874][   T47] usbhid 3-1:1.0: can't add hid device: -71
[  105.213516][   T47] usbhid 3-1:1.0: probe with driver usbhid failed with error -71
[  105.218847][   T47] usb 3-1: USB disconnect, device number 9
[  105.261297][ T7211] capability: warning: `syz.0.532' uses deprecated v2 capabilities in a way that may be insecure
[  105.305466][ T7213] libceph: resolve '400' (ret=-3): failed
[  105.318526][ T7213] loop0: detected capacity change from 0 to 1024
[  105.875741][ T5986] IPVS: starting estimator thread 0...
[  105.967475][ T7228] IPVS: using max 45 ests per chain, 108000 per kthread
[  106.607329][   T36] hfsplus: b-tree write err: -5, ino 4
[  106.901833][ T7259] ieee802154 phy0 wpan0: encryption failed: -22
[  106.937348][ T7261] netlink: 28 bytes leftover after parsing attributes in process `syz.2.552'.
[  106.957073][ T7263] trusted_key: syz.1.553 sent an empty control message without MSG_MORE.
[  106.966124][ T7261] bridge0: port 2(bridge_slave_1) entered disabled state
[  106.970477][ T7261] bridge_slave_1: left allmulticast mode
[  106.972535][ T7261] bridge_slave_1: left promiscuous mode
[  106.975263][ T7261] bridge0: port 2(bridge_slave_1) entered disabled state
[  107.003044][ T7266] all (unregistering): Released all slaves
[  107.159561][ T7281] vcan0: tx drop: invalid da for name 0x0000000000000002
[  107.239738][ T7285] loop0: detected capacity change from 0 to 1024
[  107.296558][   T47] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  107.447104][   T47] usb 3-1: Using ep0 maxpacket: 16
[  107.453767][   T47] usb 3-1: config 5 has an invalid interface number: 168 but max is 0
[  107.458772][   T47] usb 3-1: config 5 has no interface number 0
[  107.460967][   T47] usb 3-1: config 5 interface 168 altsetting 7 bulk endpoint 0x4 has invalid maxpacket 1023
[  107.473489][   T47] usb 3-1: config 5 interface 168 has no altsetting 0
[  107.484081][   T47] usb 3-1: New USB device found, idVendor=04cc, idProduct=2533, bcdDevice=fc.58
[  107.489264][   T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  107.495150][   T47] usb 3-1: Product: syz
[  107.499207][   T47] usb 3-1: Manufacturer: syz
[  107.500929][   T47] usb 3-1: SerialNumber: syz
[  107.510958][ T7275] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  107.787689][   T47] pn533_usb 3-1:5.168: NFC: Could not find bulk-in or bulk-out endpoint
[  107.794000][   T47] usb 3-1: USB disconnect, device number 10
[  107.899468][ T7283] loop1: detected capacity change from 0 to 131072
[  107.910903][ T7283] F2FS-fs (loop1): invalid crc value
[  107.962253][ T7283] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  107.967758][ T7283] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  108.473316][ T7306] netlink: 16 bytes leftover after parsing attributes in process `syz.0.571'.
[  108.661380][ T7320] loop0: detected capacity change from 0 to 1024
[  108.697563][ T7320] hfsplus: unable to load nls mapping ""
[  109.001204][ T7341] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  109.006413][ T7341] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  109.101153][ T7341] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type
[  109.106209][ T7341] overlayfs: failed to look up (tracing) for ino (-66)
[  109.363025][ T7356] netlink: 36 bytes leftover after parsing attributes in process `syz.1.592'.
[  109.367445][ T7356] netlink: 16 bytes leftover after parsing attributes in process `syz.1.592'.
[  109.371125][ T7356] netlink: 36 bytes leftover after parsing attributes in process `syz.1.592'.
[  109.374795][ T7356] netlink: 36 bytes leftover after parsing attributes in process `syz.1.592'.
[  109.407116][ T7347] loop2: detected capacity change from 0 to 32768
[  109.417316][ T7347] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.588 (7347)
[  109.432454][ T7347] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  109.437904][ T7347] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  109.474775][ T7347] BTRFS info (device loop2): enabling ssd optimizations
[  109.475526][ T7373] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  109.477289][ T7347] BTRFS info (device loop2): enabling free space tree
[  109.553774][ T5844] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  109.816586][  T793] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  109.885476][ T7393] netlink: 'syz.2.603': attribute type 2 has an invalid length.
[  109.906429][ T7385] loop0: detected capacity change from 0 to 32768
[  109.909895][ T7385] btrfs: Deprecated parameter 'usebackuproot'
[  109.912670][ T7385] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  109.918278][ T7395] netlink: 'syz.2.604': attribute type 1 has an invalid length.
[  109.922316][ T7385] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.600 (7385)
[  109.929955][ T7385] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  109.934055][ T7385] BTRFS info (device loop0): using crc32c (crc32c-lib) checksum algorithm
[  109.938771][ T7385] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  109.957442][ T7385] BTRFS info (device loop0): rebuilding free space tree
[  109.974803][ T7385] BTRFS info (device loop0): disabling free space tree
[  109.977450][ T7385] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  109.982372][  T793] usb 2-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69
[  109.985333][  T793] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  109.985770][ T7385] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  109.988241][  T793] usb 2-1: Product: syz
[  109.988256][  T793] usb 2-1: Manufacturer: syz
[  109.988262][  T793] usb 2-1: SerialNumber: syz
[  109.989546][  T793] usb 2-1: config 0 descriptor??
[  109.999082][ T7385] BTRFS info (device loop0): enabling ssd optimizations
[  109.999100][ T7385] BTRFS info (device loop0): turning on flush-on-commit
[  110.004872][ T7385] BTRFS info (device loop0): enabling disk space caching
[  110.005384][  T793] hub 2-1:0.0: bad descriptor, ignoring hub
[  110.010389][  T793] hub 2-1:0.0: probe with driver hub failed with error -5
[  110.011435][ T7385] BTRFS info (device loop0): force clearing of disk cache
[  110.016033][ T7385] BTRFS info (device loop0): trying to use backup root at mount time
[  110.019183][ T7385] BTRFS info (device loop0): force zlib compression, level 3
[  110.054381][ T5848] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  110.214983][  T793] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state.
[  110.220532][  T793] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  110.225162][  T793] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo)
[  110.232143][  T793] usb 2-1: media controller created
[  110.262209][  T793] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  110.295193][  T793] DVB: Unable to find symbol dib7000p_attach()
[  110.297897][  T793] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo'
[  110.346643][  T793] rc_core: IR keymap rc-dib0700-rc5 not found
[  110.349224][  T793] Registered IR keymap rc-empty
[  110.351540][  T793] dvb-usb: could not initialize remote control.
[  110.354178][  T793] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected.
[  110.788293][  T793] usb 2-1: USB disconnect, device number 13
[  110.809423][  T793] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected.
[  111.071313][ T7438] __vm_enough_memory: pid: 7438, comm: syz.1.616, bytes: 21200244273152 not enough memory for the allocation
[  111.098042][ T7440] netlink: 'syz.2.617': attribute type 10 has an invalid length.
[  111.101250][ T7440] netlink: 40 bytes leftover after parsing attributes in process `syz.2.617'.
[  111.105061][ T7440] dummy0: entered promiscuous mode
[  111.108989][ T7440] bridge0: port 2(dummy0) entered blocking state
[  111.111283][ T7440] bridge0: port 2(dummy0) entered disabled state
[  111.113591][ T7440] dummy0: entered allmulticast mode
[  111.117350][ T7440] bridge0: port 2(dummy0) entered blocking state
[  111.120093][ T7440] bridge0: port 2(dummy0) entered forwarding state
[  111.234330][ T7449] loop2: detected capacity change from 0 to 256
[  111.241478][ T7449] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  111.245859][ T7449] exFAT-fs (loop2): Medium has reported failures. Some data may be lost.
[  111.254483][ T7449] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  111.259883][ T7449] exFAT-fs (loop2): failed to load alloc-bitmap
[  111.262505][ T7449] exFAT-fs (loop2): failed to recognize exfat type
[  112.031514][ T7480] loop1: detected capacity change from 0 to 64
[  112.040343][ T7479] netlink: 'syz.2.635': attribute type 18 has an invalid length.
[  112.046755][  T793] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  112.175692][ T7492] loop2: detected capacity change from 0 to 1024
[  112.193547][ T7492] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  112.196928][  T793] usb 1-1: Using ep0 maxpacket: 32
[  112.208717][  T793] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  112.209783][ T7492] EXT4-fs (loop2): shut down requested (2)
[  112.215679][  T793] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[  112.218677][  T793] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  112.221780][  T793] usb 1-1: Product: syz
[  112.223332][  T793] usb 1-1: Manufacturer: syz
[  112.231141][  T793] usb 1-1: SerialNumber: syz
[  112.234075][  T793] usb 1-1: config 0 descriptor??
[  112.237851][  T793] usb 1-1: bad CDC descriptors
[  112.238567][ T5844] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  112.240382][  T793] usb 1-1: unsupported MDLM descriptors
[  112.465630][ T2209] usb 1-1: USB disconnect, device number 7
[  113.406325][ T7526] loop0: detected capacity change from 0 to 40427
[  113.412270][ T7526] F2FS-fs (loop0): invalid crc value
[  113.471201][ T7526] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  113.475992][ T7526] F2FS-fs (loop0): Start checkpoint disabled!
[  113.480903][ T7526] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0
[  113.485740][ T7526] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  113.492048][   T33] kauditd_printk_skb: 15 callbacks suppressed
[  113.492056][   T33] audit: type=1800 audit(1759350579.408:307): pid=7526 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.654" name="file1" dev="loop0" ino=10 res=0 errno=0
[  113.641975][ T7540] loop1: detected capacity change from 0 to 32768
[  113.646723][ T7540] (syz.1.661,7540,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  113.651163][ T7540] (syz.1.661,7540,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  113.734947][ T7550] syz.0.654: attempt to access beyond end of device
[  113.734947][ T7550] loop0: rw=10241, sector=45096, nr_sectors = 8 limit=40427
[  113.746122][ T7550] syz.0.654: attempt to access beyond end of device
[  113.746122][ T7550] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  113.753392][ T7550] syz.0.654: attempt to access beyond end of device
[  113.753392][ T7550] loop0: rw=2049, sector=45112, nr_sectors = 8 limit=40427
[  113.760619][ T7550] syz.0.654: attempt to access beyond end of device
[  113.760619][ T7550] loop0: rw=2049, sector=45120, nr_sectors = 8 limit=40427
[  113.768744][ T7550] syz.0.654: attempt to access beyond end of device
[  113.768744][ T7550] loop0: rw=2049, sector=45128, nr_sectors = 8 limit=40427
[  113.776083][ T7550] syz.0.654: attempt to access beyond end of device
[  113.776083][ T7550] loop0: rw=2049, sector=45136, nr_sectors = 16 limit=40427
[  113.783888][ T7550] syz.0.654: attempt to access beyond end of device
[  113.783888][ T7550] loop0: rw=2049, sector=45152, nr_sectors = 8 limit=40427
[  113.791769][ T7550] syz.0.654: attempt to access beyond end of device
[  113.791769][ T7550] loop0: rw=2049, sector=45160, nr_sectors = 8 limit=40427
[  113.799378][ T7550] syz.0.654: attempt to access beyond end of device
[  113.799378][ T7550] loop0: rw=2049, sector=45168, nr_sectors = 8 limit=40427
[  113.808170][ T7550] syz.0.654: attempt to access beyond end of device
[  113.808170][ T7550] loop0: rw=2049, sector=45176, nr_sectors = 8 limit=40427
[  113.879089][ T7549] loop2: detected capacity change from 0 to 16
[  113.884673][ T7549] erofs (device loop2): mounted with root inode @ nid 36.
[  113.950167][ T7540] JBD2: Ignoring recovery information on journal
[  113.995287][ T7540] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  114.010067][ T7540] (syz.1.661,7540,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xe74db1cd. Applying ECC.
[  114.048172][ T5855] ocfs2: Unmounting device (7,1) on (node local)
[  114.165842][   T40] CPU: 1 UID: 0 PID: 40 Comm: kworker/u10:2 Not tainted syzkaller #0 PREEMPT(full) 
[  114.165881][   T40] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  114.165889][   T40] Workqueue: writeback wb_workfn (flush-7:0)
[  114.165914][   T40] Call Trace:
[  114.165920][   T40]  <TASK>
[  114.165925][   T40]  dump_stack_lvl+0x189/0x250
[  114.165944][   T40]  ? __pfx_dump_stack_lvl+0x10/0x10
[  114.165958][   T40]  ? __pfx_queue_work_on+0x10/0x10
[  114.165968][   T40]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  114.165984][   T40]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  114.166006][   T40]  f2fs_handle_critical_error+0x37c/0x540
[  114.166024][   T40]  f2fs_write_end_io+0x886/0xb60
[  114.166051][   T40]  __submit_merged_bio+0x27a/0x6a0
[  114.166069][   T40]  __submit_merged_write_cond+0x255/0x530
[  114.166093][   T40]  f2fs_write_data_pages+0x261d/0x3000
[  114.166131][   T40]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  114.166143][   T40]  ? __switch_to+0xdc8/0x1690
[  114.166188][   T40]  ? rcu_is_watching+0x15/0xb0
[  114.166200][   T40]  ? trace_sched_exit_tp+0x36/0x110
[  114.166215][   T40]  ? __schedule+0x17ae/0x4cc0
[  114.166240][   T40]  ? __pfx_rcu_read_lock_sched_held+0x10/0x10
[  114.166257][   T40]  ? __pfx___schedule+0x10/0x10
[  114.166292][   T40]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  114.166306][   T40]  do_writepages+0x32e/0x550
[  114.166320][   T40]  ? preempt_schedule+0xae/0xc0
[  114.166352][   T40]  ? __pfx_preempt_schedule+0x10/0x10
[  114.166365][   T40]  ? reacquire_held_locks+0x127/0x1d0
[  114.166377][   T40]  ? writeback_sb_inodes+0x384/0x1010
[  114.166396][   T40]  __writeback_single_inode+0x145/0xff0
[  114.166415][   T40]  writeback_sb_inodes+0x6c7/0x1010
[  114.166448][   T40]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  114.166489][   T40]  ? rcu_is_watching+0x15/0xb0
[  114.166508][   T40]  wb_writeback+0x43b/0xaf0
[  114.166525][   T40]  ? queue_io+0x331/0x590
[  114.166541][   T40]  ? __pfx_wb_writeback+0x10/0x10
[  114.166558][   T40]  ? _raw_spin_unlock_irq+0x23/0x50
[  114.166575][   T40]  wb_workfn+0x409/0xef0
[  114.166603][   T40]  ? __pfx_wb_workfn+0x10/0x10
[  114.166624][   T40]  ? __lock_acquire+0xab9/0xd20
[  114.166648][   T40]  ? process_scheduled_works+0x9ef/0x17b0
[  114.166670][   T40]  ? _raw_spin_unlock_irq+0x23/0x50
[  114.166682][   T40]  ? process_scheduled_works+0x9ef/0x17b0
[  114.166698][   T40]  ? process_scheduled_works+0x9ef/0x17b0
[  114.166716][   T40]  process_scheduled_works+0xae1/0x17b0
[  114.166754][   T40]  ? __pfx_process_scheduled_works+0x10/0x10
[  114.166809][   T40]  worker_thread+0x8a0/0xda0
[  114.166848][   T40]  kthread+0x711/0x8a0
[  114.166863][   T40]  ? __pfx_worker_thread+0x10/0x10
[  114.166880][   T40]  ? __pfx_kthread+0x10/0x10
[  114.166895][   T40]  ? _raw_spin_unlock_irq+0x23/0x50
[  114.166908][   T40]  ? lockdep_hardirqs_on+0x9c/0x150
[  114.166920][   T40]  ? __pfx_kthread+0x10/0x10
[  114.166934][   T40]  ret_from_fork+0x4bc/0x870
[  114.166953][   T40]  ? __pfx_ret_from_fork+0x10/0x10
[  114.166975][   T40]  ? __switch_to_asm+0x39/0x70
[  114.166989][   T40]  ? __switch_to_asm+0x33/0x70
[  114.167002][   T40]  ? __pfx_kthread+0x10/0x10
[  114.167016][   T40]  ret_from_fork_asm+0x1a/0x30
[  114.167043][   T40]  </TASK>
[  114.388865][   T40] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  114.656181][ T7558] loop1: detected capacity change from 0 to 32768
[  114.665892][ T7558] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  114.676818][ T7558] XFS (loop1): Ending clean mount
[  114.681729][ T7558] XFS (loop1): Quotacheck needed: Please wait.
[  114.702343][ T7558] XFS (loop1): Quotacheck: Done.
[  114.704186][ T7572] loop2: detected capacity change from 0 to 8
[  114.716088][ T7572] squashfs image failed sanity check
[  114.721578][ T5855] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  114.850455][ T7580] capability: warning: `syz.0.675' uses 32-bit capabilities (legacy support in use)
[  114.902875][ T7586] loop1: detected capacity change from 0 to 512
[  114.918740][ T7586] EXT4-fs (loop1): corrupt root inode, run e2fsck
[  114.921454][ T7586] EXT4-fs (loop1): mount failed
[  116.217391][  T793] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  116.366553][  T793] usb 2-1: Using ep0 maxpacket: 32
[  116.370664][  T793] usb 2-1: config 0 has an invalid interface number: 51 but max is 0
[  116.373482][  T793] usb 2-1: config 0 has no interface number 0
[  116.377963][  T793] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  116.380847][  T793] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  116.383254][  T793] usb 2-1: Product: syz
[  116.384552][  T793] usb 2-1: Manufacturer: syz
[  116.386022][  T793] usb 2-1: SerialNumber: syz
[  116.389060][  T793] usb 2-1: config 0 descriptor??
[  116.394130][  T793] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  116.398088][ T7609] comedi comedi2: reset error (fatal)
[  116.536688][ T5986] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  116.602097][  T793] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  116.609521][  T793] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  116.713483][ T5986] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  116.718275][ T5986] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0
[  116.722216][ T5986] usb 1-1: config 0 interface 0 has no altsetting 0
[  116.724901][ T5986] usb 1-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00
[  116.728569][ T5986] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  116.733812][ T5986] usb 1-1: config 0 descriptor??
[  116.796197][ T7627] netlink: 56 bytes leftover after parsing attributes in process `syz.2.691'.
[  117.007386][    C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71
[  117.011496][  T793] usb 2-1: USB disconnect, device number 14
[  117.016567][  T793] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  117.024211][  T793] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  117.029206][  T793] quatech2 2-1:0.51: device disconnected
[  117.462630][ T5986] input: HID 054c:03d5 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:054C:03D5.0006/input/input10
[  117.478538][ T5986] sony 0003:054C:03D5.0006: input,hidraw0: USB HID v1d.00 Joystick [HID 054c:03d5] on usb-dummy_hcd.0-1/input0
[  117.524376][ T5986] usb 1-1: USB disconnect, device number 8
[  117.763355][ T7635] loop1: detected capacity change from 0 to 32768
[  117.768608][ T7635] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.694 (7635)
[  117.777282][ T7635] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  117.780680][ T7635] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm
[  117.798797][ T7635] BTRFS info (device loop1): enabling ssd optimizations
[  117.801790][ T7635] BTRFS info (device loop1): enabling free space tree
[  117.820864][ T5855] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  118.360910][ T7683] tmpfs: Bad value for 'mpol'
[  118.780194][ T7688] loop2: detected capacity change from 0 to 2048
[  118.783904][ T7688] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=3932051, location=3932051
[  118.792910][ T7688] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  118.983868][   T33] audit: type=1326 audit(1759350584.898:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7706 comm="syz.0.717" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fac3b38ec29 code=0x0
[  119.006130][ T7710] tls_set_device_offload_rx: netdev not found
[  119.412848][ T7719] loop1: detected capacity change from 0 to 8
[  119.828529][    T9] kernel read not supported for file /dsp1 (pid: 9 comm: kworker/0:0)
[  119.901572][ T7723] loop2: detected capacity change from 0 to 7
[  119.904791][ T7723]  loop2:
[  119.906241][ T7723] loop2: partition table partially beyond EOD, truncated
[  120.079340][    T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  120.236799][    T9] usb 1-1: Using ep0 maxpacket: 32
[  120.242916][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  120.247299][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  120.251122][    T9] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  120.254175][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  120.262209][    T9] usb 1-1: config 0 descriptor??
[  120.704925][    T9] ft260 0003:0403:6030.0007: unknown main item tag 0x7
[  120.904595][    T9] ft260 0003:0403:6030.0007: chip code: 0000 0000
[  121.002875][ T7740] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  121.020183][ T7740] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  121.039301][ T7740] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  121.047921][ T7740] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  121.050905][ T7740] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  121.057062][ T7740] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  121.064115][ T7740] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  121.067923][ T7740] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  121.075082][ T7740] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  121.111762][    T9] ft260 0003:0403:6030.0007: failed to retrieve system status
[  121.126988][    T9] ft260 0003:0403:6030.0007: probe with driver ft260 failed with error -71
[  121.144926][    T9] usb 1-1: USB disconnect, device number 9
[  121.707577][ T7756] loop0: detected capacity change from 0 to 128
[  121.722570][ T7756] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  121.747175][ T7756] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  121.778046][ T7752] loop1: detected capacity change from 0 to 32768
[  121.783106][   T54] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  121.786964][ T7752] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  121.803630][ T7752] XFS (loop1): Ending clean mount
[  121.840877][ T5855] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  122.106973][ T7772] loop0: detected capacity change from 0 to 32768
[  122.111292][ T7772] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.743 (7772)
[  122.118217][ T7772] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  122.122256][ T7772] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm
[  122.199587][ T7772] BTRFS info (device loop0): enabling ssd optimizations
[  122.202509][ T7772] BTRFS info (device loop0): enabling free space tree
[  122.236025][ T7772] BTRFS error: failed to open device for path ̐xy:qd!ʜ4u`WLʁ΋&J>6;9O,qB0?_f;5i?$z9$ u^`i2qnܛ>yE^2&<}L]o* lf©dn!`B߱A+z[q@&LmY#U>y&*4&ȶ.|?Kos4CFS"CDSbTEAwt[ȎCp;iO with flags 0x1: -36
[  122.260831][ T5847] Bluetooth: hci0: command 0x0c1a tx timeout
[  122.282975][ T5848] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  122.375127][ T7810] loop1: detected capacity change from 0 to 16
[  122.514709][ T7810] erofs (device loop1): mounted with root inode @ nid 36.
[  122.690622][ T7829] loop1: detected capacity change from 0 to 128
[  122.714253][ T7829] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  122.719261][ T7829] ext4 filesystem being mounted at /261/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  122.793558][ T7836] netlink: 148 bytes leftover after parsing attributes in process `syz.1.759'.
[  122.797725][ T7836] netlink: 4 bytes leftover after parsing attributes in process `syz.1.759'.
[  123.127162][ T5847] Bluetooth: hci2: command 0x0c1a tx timeout
[  123.127579][   T56] Bluetooth: hci1: command 0x0c1a tx timeout
[  123.515497][ T7852] ubi31: attaching mtd0
[  123.527795][ T7852] ubi31: scanning is finished
[  123.529885][ T7852] ubi31: empty MTD device detected
[  124.056916][ T7852] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB)
[  124.059444][ T7852] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  124.061799][ T7852] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1
[  124.064093][ T7852] ubi31: VID header offset: 64 (aligned 64), data offset: 128
[  124.067167][ T7852] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  124.069993][ T7852] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23
[  124.072804][ T7852] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2799753228
[  124.076999][ T7852] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  124.081186][ T7856] ubi31: background thread "ubi_bgt31d" started, PID 7856
[  124.192526][ T7850] loop0: detected capacity change from 0 to 32768
[  124.344972][   T56] Bluetooth: hci0: command 0x0c1a tx timeout
[  124.560073][ T5855] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  124.598221][ T7862] loop0: detected capacity change from 0 to 128
[  124.608208][ T7862] Bluetooth: hci0: invalid length 0, exp 2 for type 17
[  124.704106][ T7871] loop0: detected capacity change from 0 to 512
[  124.721114][ T7871] Quota error (device loop0): v2_read_file_info: Free block number 1 out of range (1, 6).
[  124.725670][ T7871] EXT4-fs warning (device loop0): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  124.736394][ T7871] EXT4-fs (loop0): mount failed
[  125.226884][ T5847] Bluetooth: hci2: command 0x0c1a tx timeout
[  125.229753][   T56] Bluetooth: hci1: command 0x0c1a tx timeout
[  125.665645][ T7886] loop1: detected capacity change from 0 to 128
[  125.744379][ T7890] overlayfs: conflicting options: nfs_export=on,index=off
[  125.991341][ T7910] loop1: detected capacity change from 0 to 512
[  126.013680][ T7910] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  126.019000][ T7910] ext4 filesystem being mounted at /273/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  126.073881][ T5855] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  126.409410][   T56] Bluetooth: hci0: command 0x0c1a tx timeout
[  126.475348][ T7929] netlink: 8 bytes leftover after parsing attributes in process `syz.1.801'.
[  126.558258][ T7934] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  126.751854][ T7948] netlink: 'syz.0.810': attribute type 210 has an invalid length.
[  127.287043][ T5847] Bluetooth: hci2: command 0x0c1a tx timeout
[  127.288666][   T56] Bluetooth: hci1: command 0x0c1a tx timeout
[  127.652869][ T7967] loop1: detected capacity change from 0 to 256
[  127.659954][ T7968] netlink: 52 bytes leftover after parsing attributes in process `syz.2.820'.
[  127.676864][ T7968] (unnamed net_device) (uninitialized): option lacp_active: invalid value (7)
[  127.734487][ T7972] netlink: 12 bytes leftover after parsing attributes in process `syz.2.822'.
[  127.783241][ T7974] bond0: entered promiscuous mode
[  127.785320][ T7974] bond_slave_0: entered promiscuous mode
[  127.789092][ T7974] bond_slave_1: entered promiscuous mode
[  127.791390][ T7974] batadv0: entered promiscuous mode
[  127.800483][ T7964] loop0: detected capacity change from 0 to 32768
[  127.807523][ T7964] 
[  127.807523][ T7964]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  127.807523][ T7964] 
[  127.837335][ T7979] netdevsim netdevsim1 : renamed from netdevsim0 (while UP)
[  127.869937][ T5848] 
[  127.869937][ T5848]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  127.869937][ T5848] 
[  127.874276][ T5848] 
[  127.874276][ T5848]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  127.874276][ T5848] 
[  127.966044][ T7987] loop1: detected capacity change from 0 to 2048
[  127.991611][ T7987] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  127.999604][ T7987] ext4 filesystem being mounted at /292/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  128.375155][ T5855] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  128.698509][ T8001] netlink: 28 bytes leftover after parsing attributes in process `syz.2.833'.
[  128.730585][   T56] Bluetooth: hci0: Invalid handle: 0xe300 > 0x0eff
[  129.358864][ T8016] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  130.199655][ T8055] netlink: 'syz.1.853': attribute type 21 has an invalid length.
[  130.202757][ T8055] netlink: 128 bytes leftover after parsing attributes in process `syz.1.853'.
[  130.207416][ T8055] netlink: 3 bytes leftover after parsing attributes in process `syz.1.853'.
[  130.305627][ T8059] loop1: detected capacity change from 0 to 4096
[  130.311237][ T8059] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512).
[  130.336958][    T9] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  130.461119][ T8073] loop1: detected capacity change from 0 to 64
[  130.467345][ T8073] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing
[  130.498139][    T9] usb 1-1: Using ep0 maxpacket: 16
[  130.507079][    T9] usb 1-1: New USB device found, idVendor=258a, idProduct=0033, bcdDevice= 0.00
[  130.510015][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  130.521600][    T9] usb 1-1: config 0 descriptor??
[  130.575949][ T8078] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  130.687851][ T8080] netlink: 'syz.1.865': attribute type 1 has an invalid length.
[  130.833600][ T8086] loop2: detected capacity change from 0 to 4096
[  130.844758][ T8087] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  130.879305][ T5844] NILFS error (device loop2): nilfs_check_folio: bad entry in directory #2: rec_len is smaller than minimal - offset=4096, inode=0, rec_len=0, name_len=0
[  130.890705][ T5844] Remounting filesystem read-only
[  130.892426][ T5844] NILFS error (device loop2): nilfs_readdir: bad page in #2
[  130.908622][ T5844] NILFS error (device loop2): nilfs_check_folio: bad entry in directory #2: rec_len is smaller than minimal - offset=8192, inode=0, rec_len=0, name_len=0
[  130.916910][ T5844] NILFS error (device loop2): nilfs_readdir: bad page in #2
[  130.938587][    T9] glorious 0003:258A:0033.0008: unknown main item tag 0x2
[  130.945839][    T9] glorious 0003:258A:0033.0008: unknown main item tag 0x0
[  130.956839][    T9] glorious 0003:258A:0033.0008: hidraw0: USB HID v80.00 Device [Glorious Model D] on usb-dummy_hcd.0-1/input0
[  131.011375][ T8084] loop1: detected capacity change from 0 to 40427
[  131.015286][ T8084] F2FS-fs (loop1): build fault injection rate: 1
[  131.017957][ T8084] F2FS-fs (loop1): build fault injection type: 0x3bfe8c
[  131.026185][ T8084] F2FS-fs (loop1): inject slab alloc in f2fs_alloc_inode of alloc_inode+0x6a/0x1b0
[  131.030098][ T8084] F2FS-fs (loop1): Failed to read F2FS meta data inode
[  131.140122][ T5876] usb 1-1: USB disconnect, device number 10
[  131.645368][ T8105] loop1: detected capacity change from 0 to 47
[  131.833433][ T8122] loop1: detected capacity change from 0 to 4096
[  131.867768][ T8124] loop0: detected capacity change from 0 to 512
[  131.873291][ T8124] EXT4-fs (loop0): orphan cleanup on readonly fs
[  131.876228][ T8124] EXT4-fs error (device loop0): ext4_quota_enable:7136: comm syz.0.885: inode #218103808: comm syz.0.885: iget: illegal inode #
[  131.885285][ T8124] EXT4-fs error (device loop0): ext4_quota_enable:7139: comm syz.0.885: Bad quota inode: 218103808, type: 2
[  131.890382][ T8124] EXT4-fs warning (device loop0): ext4_enable_quotas:7180: Failed to enable quota tracking (type=2, err=-117, ino=218103808). Please run e2fsck to fix.
[  131.903785][ T8124] EXT4-fs (loop0): Cannot turn on quotas: error -117
[  131.912128][ T8124] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  131.933635][ T8124] EXT4-fs error (device loop0): ext4_lookup:1791: inode #2: comm syz.0.885: deleted inode referenced: 12
[  131.987511][ T5848] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  132.266676][    T9] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  132.416639][    T9] usb 2-1: Using ep0 maxpacket: 32
[  132.421002][    T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9
[  132.428606][    T9] usb 2-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c
[  132.432448][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  132.435626][    T9] usb 2-1: Product: syz
[  132.437536][    T9] usb 2-1: Manufacturer: syz
[  132.439470][    T9] usb 2-1: SerialNumber: syz
[  132.443358][    T9] usb 2-1: config 0 descriptor??
[  132.446013][ T8135] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  132.453786][    T9] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input11
[  132.491945][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  132.494762][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  132.665411][ T5986] usb 2-1: USB disconnect, device number 15
[  132.665570][    C0] usbtouchscreen 2-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19
[  132.868039][ T8139] netlink: 8 bytes leftover after parsing attributes in process `syz.2.892'.
[  132.871566][ T8139] netlink: 8 bytes leftover after parsing attributes in process `syz.2.892'.
[  133.030768][ T8146] netlink: 'syz.0.895': attribute type 5 has an invalid length.
[  133.033892][ T8146] netlink: 176 bytes leftover after parsing attributes in process `syz.0.895'.
[  133.106631][ T8141] loop2: detected capacity change from 0 to 32768
[  133.173063][ T8141] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  133.354410][ T8155] loop0: detected capacity change from 0 to 40427
[  133.363115][ T8155] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  133.366277][ T8155] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  133.373559][ T8155] F2FS-fs (loop0): invalid crc value
[  133.381428][ T8141] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50.
[  133.387999][ T8141] XFS (loop2): Tail block (0x29) overwrite detected. Updated to 0x30
[  133.395691][ T8141] XFS (loop2): Ending clean mount
[  133.408359][ T8141] XFS (loop2): Quotacheck needed: Please wait.
[  133.415686][ T1089] XFS (loop2): Metadata corruption detected at xfs_dinode_verify+0x1a6/0x1570, inode 0x1803 dinode
[  133.421534][ T1089] XFS (loop2): Unmount and run xfs_repair
[  133.424047][ T1089] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[  133.427188][ T1089] 00000000: 49 4e 41 ed 03 01 00 00 00 00 00 00 00 00 00 00  INA.............
[  133.430694][ T1089] 00000010: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  133.434279][ T1089] 00000020: 34 f7 58 68 a5 a5 b6 11 34 f7 58 68 a5 e2 bf 3d  4.Xh....4.Xh...=
[  133.438091][ T1089] 00000030: 34 f7 58 68 a5 e2 bf 3d 00 00 00 00 00 00 00 20  4.Xh...=....... 
[  133.441690][ T1089] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  133.445852][ T1089] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 ca e6 3d c1  ..............=.
[  133.497211][ T8155] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  133.501073][ T1089] 00000060: ff ff ff ff 6e d0 e3 2d 00 00 00 00 00 00 00 04  ....n..-........
[  133.509826][ T8155] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  133.512673][ T8155] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  133.699214][ T8161] loop1: detected capacity change from 0 to 131072
[  133.708245][ T8161] F2FS-fs (loop1): invalid crc value
[  133.716409][ T1089] 00000070: 00 00 00 03 00 00 00 10 00 00 00 00 00 00 00 06  ................
[  133.732515][ T8141] XFS (loop2): Quotacheck: Unsuccessful (Error -117): Disabling quotas.
[  133.740090][ T8141] XFS (loop2): Metadata corruption detected at xfs_dinode_verify+0x1a6/0x1570, inode 0x1803 dinode
[  133.741141][ T8161] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  133.744536][ T8141] XFS (loop2): Unmount and run xfs_repair
[  133.750004][ T8161] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  133.750500][ T8141] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[  133.756961][ T8141] 00000000: 49 4e 41 ed 03 01 00 00 00 00 00 00 00 00 00 00  INA.............
[  133.760505][ T8141] 00000010: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  133.764762][ T8141] 00000020: 34 f7 58 68 a5 a5 b6 11 34 f7 58 68 a5 e2 bf 3d  4.Xh....4.Xh...=
[  133.768702][ T8141] 00000030: 34 f7 58 68 a5 e2 bf 3d 00 00 00 00 00 00 00 20  4.Xh...=....... 
[  133.771643][ T8141] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  133.774730][ T8141] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 ca e6 3d c1  ..............=.
[  133.778174][ T8141] 00000060: ff ff ff ff 6e d0 e3 2d 00 00 00 00 00 00 00 04  ....n..-........
[  133.781149][ T8141] 00000070: 00 00 00 03 00 00 00 10 00 00 00 00 00 00 00 06  ................
[  134.191065][ T5844] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  134.200809][ T5844] XFS (loop2): Uncorrected metadata errors detected; please run xfs_repair.
[  134.387898][ T8175] IPVS: length: 187 != 24
[  134.674429][ T8188] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  134.841521][ T8198] loop2: detected capacity change from 0 to 64
[  135.013333][ T8205] netlink: 'syz.0.915': attribute type 83 has an invalid length.
[  135.638643][ T8220] netlink: 72 bytes leftover after parsing attributes in process `syz.1.920'.
[  135.735690][ T8220] hsr_slave_1 (unregistering): left promiscuous mode
[  136.436354][ T8243] loop1: detected capacity change from 0 to 1024
[  136.443783][ T8243] EXT4-fs (loop1): Cannot use DAX on a filesystem that may contain inline data
[  136.578229][ T8247] process 'syz.0.933' launched './file1' with NULL argv: empty string added
[  136.968328][ T8259] netlink: 340 bytes leftover after parsing attributes in process `syz.0.938'.
[  137.069192][ T8270] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[  137.110892][ T8272] loop0: detected capacity change from 0 to 256
[  137.114048][ T8272] exfat: Deprecated parameter 'utf8'
[  137.116706][ T8272] exfat: Deprecated parameter 'utf8'
[  137.118952][ T8272] exfat: Deprecated parameter 'utf8'
[  137.128544][ T8272] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d)
[  137.556768][ T8282] netlink: 20 bytes leftover after parsing attributes in process `syz.2.949'.
[  137.573431][ T8274] loop0: detected capacity change from 0 to 32768
[  137.579600][ T8274] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  137.642926][ T8294] netlink: 24 bytes leftover after parsing attributes in process `syz.2.952'.
[  137.647664][ T5847] Bluetooth: hci0: unexpected event for opcode 0x2029
[  137.670986][ T8296] netlink: 40 bytes leftover after parsing attributes in process `syz.2.953'.
[  137.788280][ T8300] loop2: detected capacity change from 0 to 128
[  137.790738][ T8300] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  137.796215][ T8300] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  137.826815][   T27] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  137.892987][ T8277] loop1: detected capacity change from 0 to 131072
[  137.900920][ T8274] XFS (loop0): Ending clean mount
[  137.903358][ T8277] F2FS-fs (loop1): invalid crc value
[  137.904424][ T8274] XFS (loop0): Quotacheck needed: Please wait.
[  137.924155][ T8274] XFS (loop0): Quotacheck: Done.
[  137.937874][ T8277] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  137.942331][ T8277] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  138.015474][ T5848] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  138.124107][ T8321] loop0: detected capacity change from 0 to 256
[  138.371197][ T8339] loop1: detected capacity change from 0 to 4096
[  138.401673][ T8339] ntfs3(loop1): ino=5, "/" mi_enum_attr
[  138.643016][ T8354] loop0: detected capacity change from 0 to 32768
[  138.649333][ T8354] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  138.664793][ T8354] XFS (loop0): Ending clean mount
[  138.703869][ T5848] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  138.791557][ T5876] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  138.959469][ T5876] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0
[  138.962850][ T5876] usb 2-1: config 0 interface 0 has no altsetting 0
[  138.965778][ T5876] usb 2-1: New USB device found, idVendor=056a, idProduct=00ba, bcdDevice= 0.00
[  138.970451][ T5876] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  138.980723][ T5876] usb 2-1: config 0 descriptor??
[  139.615186][ T5876] usb 2-1: USB disconnect, device number 16
[  140.689415][ T8396] loop2: detected capacity change from 0 to 32768
[  140.696444][ T8396] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  140.705835][ T8396] XFS (loop2): Ending clean mount
[  140.743561][ T5844] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  141.120689][ T8416] IPv6: sit1: Disabled Multicast RS
[  141.258814][ T8423] netlink: 'syz.1.997': attribute type 3 has an invalid length.
[  141.261855][ T8423] netlink: 'syz.1.997': attribute type 3 has an invalid length.
[  141.267998][ T8423] netlink: 16 bytes leftover after parsing attributes in process `syz.1.997'.
[  141.286686][    T9] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  141.506555][    T9] usb 3-1: Using ep0 maxpacket: 8
[  141.518020][    T9] usb 3-1: unable to get BOS descriptor or descriptor too short
[  141.531824][    T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E
[  141.538281][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7
[  141.542676][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  141.546846][    T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1
[  141.556394][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[  141.560703][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  141.564874][    T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[  141.578029][    T9] usb 3-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84
[  141.581777][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  141.585269][    T9] usb 3-1: Product: syz
[  141.587395][    T9] usb 3-1: Manufacturer: syz
[  141.589754][    T9] usb 3-1: SerialNumber: syz
[  141.611165][    T9] usb 3-1: config 0 descriptor??
[  141.622929][ T8414] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  141.659917][    T9] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  141.787775][ T5847] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  141.791409][ T5847] Bluetooth: hci0: Injecting HCI hardware error event
[  141.796288][ T5847] Bluetooth: hci0: hardware error 0x00
[  141.831186][    T9] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -12
[  141.840206][    T9] usb 3-1: USB disconnect, device number 11
[  142.304793][ T8448] loop1: detected capacity change from 0 to 4096
[  142.320204][ T8448] ntfs3(loop1): Failed to initialize $Extend/$ObjId.
[  142.386599][    T9] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  142.536710][    T9] usb 1-1: Using ep0 maxpacket: 16
[  142.547064][ T8474] IPv6: addrconf: prefix option has invalid lifetime
[  142.550501][    T9] usb 1-1: config 0 has an invalid interface number: 4 but max is 0
[  142.553957][    T9] usb 1-1: config 0 has no interface number 0
[  142.558023][ T8474] netlink: 'syz.2.1020': attribute type 4 has an invalid length.
[  142.566657][    T9] usb 1-1: config 0 interface 4 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16
[  142.571028][    T9] usb 1-1: config 0 interface 4 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  142.574476][ T8476] loop1: detected capacity change from 0 to 128
[  142.577557][    T9] usb 1-1: New USB device found, idVendor=0742, idProduct=200a, bcdDevice=7e.46
[  142.577577][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  142.577589][    T9] usb 1-1: Product: syz
[  142.577600][    T9] usb 1-1: Manufacturer: syz
[  142.577609][    T9] usb 1-1: SerialNumber: syz
[  142.579785][    T9] usb 1-1: config 0 descriptor??
[  142.589583][ T8476] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985
[  142.597672][ T8440] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  142.605555][ T8440] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  142.606584][ T8476] ; already mounted read-only
[  142.610816][ T8476] hpfs: filesystem error: improperly stopped
[  142.613750][    T9] HFC-S_USB 1-1:0.4: probe with driver HFC-S_USB failed with error -5
[  142.617976][ T8476] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  142.621824][ T8476] hpfs: You really don't want any checks? You are crazy...
[  142.624868][ T8476] hpfs: hpfs_map_sector(): read error
[  142.628669][ T8476] hpfs: code page support is disabled
[  142.632090][ T8476] hpfs: hpfs_map_4sectors(): unaligned read
[  142.634790][ T8476] hpfs: hpfs_map_4sectors(): unaligned read
[  142.637277][ T8476] hpfs: filesystem error: unable to find root dir
[  142.645913][ T8476] hpfs: filesystem error: invalid bitmap block pointer 00000000 -> 7b3184b5 at trim
[  142.827734][ T8493] loop1: detected capacity change from 0 to 1024
[  142.833833][    T9] usb 1-1: USB disconnect, device number 11
[  142.848371][ T8493] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback.
[  142.924349][ T5855] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-001000000000.
[  143.226566][ T5876] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  143.244067][ T8515] loop2: detected capacity change from 0 to 32768
[  143.376721][ T5876] usb 2-1: Using ep0 maxpacket: 8
[  143.380691][ T5876] usb 2-1: config 179 has an invalid interface number: 65 but max is 0
[  143.386698][ T5876] usb 2-1: config 179 has no interface number 0
[  143.389338][ T5876] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  143.393771][ T5876] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  143.398532][ T5876] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  143.403262][ T5876] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  143.515338][ T5876] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  143.520622][ T5876] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  143.523802][ T5876] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  143.537237][ T8509] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  143.542058][ T5876] xpad 2-1:179.65: probe with driver xpad failed with error -5
[  143.862643][ T5847] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  143.874212][    T9] usb 2-1: USB disconnect, device number 17
[  144.477318][ T8548] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1052'.
[  144.705759][ T5876] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  145.226727][ T5876] usb 1-1: Using ep0 maxpacket: 8
[  145.230988][ T5876] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  145.234801][ T5876] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  145.245654][ T5876] pvrusb2: Hardware description: Terratec Grabster AV400
[  145.248716][ T5876] pvrusb2: **********
[  145.250604][ T5876] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  145.254749][ T5876] pvrusb2: Important functionality might not be entirely working.
[  145.259591][ T5876] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  145.264525][ T5876] pvrusb2: **********
[  145.777557][ T2398] pvrusb2: Invalid write control endpoint
[  145.787296][ T8572] loop1: detected capacity change from 0 to 256
[  145.790099][ T8572] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  145.793346][ T8572] exFAT-fs (loop1): Medium has reported failures. Some data may be lost.
[  145.801094][ T8572] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x2d0d25cc, utbl_chksum : 0xe619d30d)
[  145.805767][ T8572] exFAT-fs (loop1): failed to load alloc-bitmap
[  145.807921][ T8572] exFAT-fs (loop1): failed to recognize exfat type
[  145.826075][ T2398] pvrusb2: Invalid write control endpoint
[  145.828477][ T2398] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  145.831808][ T2398] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  145.836078][ T2398] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  145.839467][ T2398] pvrusb2: Device being rendered inoperable
[  145.843689][ T2398] cx25840 2-0044: Unable to detect h/w, assuming cx23887
[  145.848666][ T2398] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  145.853152][ T2398] pvrusb2: Attached sub-driver cx25840
[  145.855127][ T2398] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  145.858633][ T2398] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  145.949866][  T793] usb 1-1: USB disconnect, device number 12
[  146.167496][ T5876] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  146.173135][ T8584] loop2: detected capacity change from 0 to 16
[  146.176871][ T8584] erofs (device loop2): mounted with root inode @ nid 36.
[  146.748163][ T5876] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  146.752323][ T5876] usb 2-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00
[  146.756680][ T5876] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  146.761981][ T5876] usb 2-1: config 0 descriptor??
[  146.947794][ T8592] loop0: detected capacity change from 0 to 32768
[  146.969220][ T8592] ocfs2: Slot 0 on device (7,0) was already allocated to this node!
[  146.979145][ T8592] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  147.052338][ T5848] ocfs2: Unmounting device (7,0) on (node local)
[  147.176790][ T5876] lenovo 0003:17EF:6047.000A: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.1-1/input0
[  147.206377][ T8598] loop0: detected capacity change from 0 to 4096
[  147.294769][ T8606] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  148.246424][ T8619] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 4, id = 0
[  148.254935][ T5876] lenovo 0003:17EF:6047.000A: Sensitivity setting failed: -71
[  148.259372][ T5876] usb 2-1: USB disconnect, device number 18
[  148.560672][ T8632] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1080'.
[  148.564842][ T8632] unsupported nlmsg_type 40
[  148.995722][ T8647] [U] 
[  149.077282][  T793] usb 1-1: new full-speed USB device number 13 using dummy_hcd
[  149.121877][ T8651] loop1: detected capacity change from 0 to 4096
[  149.125910][ T8651] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512).
[  149.135509][ T8651] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  149.151350][ T8651] ntfs3(loop1): Failed to load $Extend (-22).
[  149.153959][ T8651] ntfs3(loop1): Failed to initialize $Extend.
[  149.258580][ T8653] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1092'.
[  149.268955][ T8653] bridge0: port 2(dummy0) entered disabled state
[  149.283155][ T8653] dummy0 (unregistering): left allmulticast mode
[  149.286065][ T8653] bridge0: port 2(dummy0) entered disabled state
[  149.288687][ T8655] loop1: detected capacity change from 0 to 2048
[  149.295488][ T8655] UDF-fs: error (device loop1): udf_load_logicalvol: error loading logical volume descriptor: Partition table too long (2048 > 72)
[  149.301924][ T8655] UDF-fs: Scanning with blocksize 512 failed
[  149.312016][ T8655] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found
[  149.317852][ T8655] UDF-fs: Scanning with blocksize 1024 failed
[  149.321740][  T793] usb 1-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=c2.f4
[  149.328017][  T793] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  149.332565][ T8655] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512
[  149.335808][ T8655] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found
[  149.336880][  T793] usb 1-1: Product: syz
[  149.338493][ T8655] UDF-fs: Scanning with blocksize 2048 failed
[  149.340112][  T793] usb 1-1: Manufacturer: syz
[  149.342910][ T8655] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  149.344247][  T793] usb 1-1: SerialNumber: syz
[  149.347943][ T8655] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512
[  149.352383][ T8655] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found
[  149.354774][ T8655] UDF-fs: Scanning with blocksize 4096 failed
[  149.360139][  T793] usb 1-1: config 0 descriptor??
[  149.363776][ T8655] UDF-fs: warning (device loop1): udf_fill_super: No partition found (1)
[  149.577436][ T5986] usb 1-1: USB disconnect, device number 13
[  149.610158][ T8657] loop2: detected capacity change from 0 to 32768
[  149.622621][ T8657] JBD2: Ignoring recovery information on journal
[  149.660501][ T8657] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  149.671143][ T8670] loop1: detected capacity change from 0 to 4096
[  149.692561][ T8670] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  149.705222][ T5844] ocfs2: Unmounting device (7,2) on (node local)
[  149.706819][ T8670] EXT4-fs (loop1): shut down requested (0)
[  149.750297][ T5855] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  149.848423][ T8680] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1102'.
[  149.880480][ T8682] loop2: detected capacity change from 0 to 16
[  149.883749][ T8682] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  149.925008][ T8686] loop1: detected capacity change from 0 to 64
[  150.164231][ T8699] loop0: detected capacity change from 0 to 2048
[  150.173199][ T8699] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[  150.186445][ T8700] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  150.192600][ T8699] bio_check_eod: 176 callbacks suppressed
[  150.192614][ T8699] syz.0.1111: attempt to access beyond end of device
[  150.192614][ T8699] loop0: rw=524288, sector=33554430, nr_sectors = 2 limit=2048
[  150.236704][  T793] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  150.280748][ T8704] loop0: detected capacity change from 0 to 2048
[  150.285772][ T8704] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  150.390698][  T793] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  150.394490][  T793] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  150.398167][  T793] usb 2-1: Product: syz
[  150.399922][  T793] usb 2-1: Manufacturer: syz
[  150.401805][  T793] usb 2-1: SerialNumber: syz
[  150.524549][ T8706] loop2: detected capacity change from 0 to 32768
[  150.543965][ T8706] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  150.560868][ T8706] XFS (loop2): Ending clean mount
[  150.567118][ T8706] XFS (loop2): Quotacheck needed: Please wait.
[  150.590580][ T8706] XFS (loop2): Quotacheck: Done.
[  150.619644][ T5844] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  151.536689][    T9] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  151.741243][    T9] usb 1-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad
[  151.745473][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  151.766072][    T9] usb 1-1: config 0 descriptor??
[  151.806792][    T9] gspca_main: spca508-2.14.0 probing 8086:0110
[  151.991777][    T9] gspca_spca508: reg_read err -32
[  151.995089][    T9] gspca_spca508: reg_read err -32
[  152.004372][    T9] gspca_spca508: reg_read err -32
[  152.007559][    T9] gspca_spca508: reg_read err -32
[  152.086379][  T793] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPROTO
[  152.087610][ T8728] comedi comedi3: pcl818: I/O port conflict (0x4f23,16)
[  152.091749][  T793] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO
[  152.094370][ T8728] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000005: 0000 [#1] SMP KASAN PTI
[  152.099391][  T793] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO
[  152.102924][ T8728] KASAN: null-ptr-deref in range [0x0000000000000028-0x000000000000002f]
[  152.102937][ T8728] CPU: 1 UID: 0 PID: 8728 Comm: syz.2.1119 Not tainted syzkaller #0 PREEMPT(full) 
[  152.102947][ T8728] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  152.102953][ T8728] RIP: 0010:pcl818_ai_cancel+0x69/0x3f0
[  152.102965][ T8728] Code: 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 89 05 2f f9 48 8b 03 48 89 04 24 49 83 c4 28 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 68 05 2f f9 4d 8b 24 24 48 83 c3
[  152.102973][ T8728] RSP: 0018:ffffc9000ff8f9d8 EFLAGS: 00010206
[  152.102981][ T8728] RAX: 0000000000000005 RBX: ffff888109fd2480 RCX: 0000000000080000
[  152.102986][ T8728] RDX: ffffc90020402000 RSI: 0000000000021a4c RDI: 0000000000021a4d
[  152.102992][ T8728] RBP: 0000000000000001 R08: ffff88810781912f R09: 1ffff11020f03225
[  152.102998][ T8728] R10: dffffc0000000000 R11: ffffffff88f6d960 R12: 0000000000000028
[  152.103004][ T8728] R13: dffffc0000000000 R14: ffff888107819000 R15: dffffc0000000000
[  152.108832][  T793] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  152.111758][ T8728] FS:  00007f60139a66c0(0000) GS:ffff8881a39fc000(0000) knlGS:0000000000000000
[  152.111774][ T8728] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  152.111785][ T8728] CR2: 0000001b32519ff8 CR3: 000000003cea4000 CR4: 00000000000006f0
[  152.111819][ T8728] Call Trace:
[  152.111827][ T8728]  <TASK>
[  152.115527][  T793] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  152.118844][ T8728]  pcl818_detach+0x66/0xd0
[  152.118863][ T8728]  comedi_device_detach_locked+0x178/0x750
[  152.118883][ T8728]  comedi_device_attach+0x5d4/0x720
[  152.118900][ T8728]  comedi_unlocked_ioctl+0x5ff/0x1020
[  152.118916][ T8728]  ? kasan_quarantine_put+0xdd/0x220
[  152.118934][ T8728]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[  152.118961][ T8728]  ? __fget_files+0x2a/0x420
[  152.177218][ T8728]  ? __fget_files+0x3a0/0x420
[  152.179053][ T8728]  ? __fget_files+0x2a/0x420
[  152.180822][ T8728]  ? bpf_lsm_file_ioctl+0x9/0x20
[  152.182752][ T8728]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[  152.184925][ T8728]  __se_sys_ioctl+0xfc/0x170
[  152.186717][ T8728]  do_syscall_64+0xfa/0xfa0
[  152.188444][ T8728]  ? lockdep_hardirqs_on+0x9c/0x150
[  152.190454][ T8728]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  152.192693][ T8728]  ? exc_page_fault+0xab/0x100
[  152.194426][ T8728]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  152.196645][ T8728] RIP: 0033:0x7f6012b8ec29
[  152.198289][ T8728] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  152.205220][ T8728] RSP: 002b:00007f60139a6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  152.208310][ T8728] RAX: ffffffffffffffda RBX: 00007f6012dd6180 RCX: 00007f6012b8ec29
[  152.211194][ T8728] RDX: 00002000000003c0 RSI: 0000000040946400 RDI: 0000000000000009
[  152.214165][ T8728] RBP: 00007f6012c11e41 R08: 0000000000000000 R09: 0000000000000000
[  152.217096][ T8728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  152.219962][ T8728] R13: 00007f6012dd6218 R14: 00007f6012dd6180 R15: 00007fff529919b8
[  152.222838][ T8728]  </TASK>
[  152.223977][ T8728] Modules linked in:
[  152.225959][ T8728] ---[ end trace 0000000000000000 ]---
[  152.231984][ T8728] RIP: 0010:pcl818_ai_cancel+0x69/0x3f0
[  152.232248][  T793] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71
[  152.234125][ T8728] Code: 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 89 05 2f f9 48 8b 03 48 89 04 24 49 83 c4 28 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 68 05 2f f9 4d 8b 24 24 48 83 c3
[  152.237281][    T9] gspca_spca508: reg write: error -71
[  152.244218][ T8728] RSP: 0018:ffffc9000ff8f9d8 EFLAGS: 00010206
[  152.248413][    T9] spca508 1-1:0.0: probe with driver spca508 failed with error -71
[  152.248726][ T8728] RAX: 0000000000000005 RBX: ffff888109fd2480 RCX: 0000000000080000
[  152.253443][  T793] usb 2-1: USB disconnect, device number 19
[  152.254712][ T8728] RDX: ffffc90020402000 RSI: 0000000000021a4c RDI: 0000000000021a4d
[  152.258447][    T9] usb 1-1: USB disconnect, device number 14
[  152.260530][ T8728] RBP: 0000000000000001 R08: ffff88810781912f R09: 1ffff11020f03225
[  152.265986][ T8728] R10: dffffc0000000000 R11: ffffffff88f6d960 R12: 0000000000000028
[  152.269457][ T8728] R13: dffffc0000000000 R14: ffff888107819000 R15: dffffc0000000000
[  152.272190][ T8728] FS:  00007f60139a66c0(0000) GS:ffff8881a39fc000(0000) knlGS:0000000000000000
[  152.275236][ T8728] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  152.277904][ T8728] CR2: 0000001b3231dff8 CR3: 000000003cea4000 CR4: 00000000000006f0
[  152.280765][ T8728] Kernel panic - not syncing: Fatal exception
[  152.283946][ T8728] Kernel Offset: disabled
[  152.285606][ T8728] Rebooting in 86400 seconds..

VM DIAGNOSIS:
20:30:18  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000064 RBX=0000000000000064 RCX=0000000000000000 RDX=00000000000003f8
RSI=000000000004a683 RDI=000000000004a684 RBP=00000000000003f8 RSP=ffffc900046461f0
R8 =ffff888021448237 R9 =1ffff11004289046 R10=dffffc0000000000 R11=ffffffff8556dea0
R12=dffffc0000000000 R13=ffffffff99d1992a R14=ffffffff9a00f5a0 R15=0000000000000000
RIP=ffffffff8556df1c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b83fc000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b3241bff8 CR3=000000002922a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=6161616161616161 6161616161616161
XMM06=6161616161616161 6161616161616161 XMM07=6161616161616161 6161616161616161
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f6012c12fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff81a0bf6f RBX=ffffffff81a0bf2e RCX=0000000000080000 RDX=ffffc90020402000
RSI=000000000007ffff RDI=0000000000080000 RBP=ffffc9000ff8f690 RSP=ffffc9000ff8f580
R8 =0000000000000001 R9 =0000000000000000 R10=dffffc0000000000 R11=fffffbfff1c66251
R12=0000000000000000 R13=0000000000000041 R14=0000000000000000 R15=1ffff92001ff1eb4
RIP=ffffffff81a0bf6a RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f60139a66c0 ffffffff 00c00000
GS =0000 ffff8881a39fc000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b32519ff8 CR3=000000003cea4000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=6161616161616161 6161616161616161
XMM06=6161616161616161 6161616161616161 XMM07=6161616161616161 6161616161616161
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007fac3b412fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
