last executing test programs:

3m11.471736074s ago: executing program 0 (id=441):
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000711278000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94)

3m11.265680356s ago: executing program 0 (id=442):
r0 = socket$netlink(0x10, 0x3, 0x4)
writev(r0, &(0x7f0000000080)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a11820fffff5bab4e210000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000a0c100000000100224e0000", 0x58}], 0x1)

3m11.187723201s ago: executing program 0 (id=443):
r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000000)={0x2, 0xbb}, 0x2)

3m11.115204824s ago: executing program 0 (id=444):
r0 = socket$inet6(0x2d, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0xfd9, @local, 0xb4d0}, 0x1c)

3m11.025954177s ago: executing program 0 (id=446):
mkdir(&(0x7f0000000040)='./file1\x00', 0x160)
mount$fuse(0x0, 0x0, 0x0, 0x1a3089, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
setpgid(r0, 0x0)
setpgid(0x0, r0)
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
syz_mount_image$ufs(&(0x7f0000009e00), &(0x7f0000009ec0)='./file0\x00', 0x880b, &(0x7f0000009e80)=ANY=[], 0xfd, 0x9df0, &(0x7f0000000000)="$eJwk0wMX5gWjAPHNbrPdthmTbdu2bU/Y6vnbyLbdItu27dps3/OeO5/hNyMHOGqAowc4ZoB3DvCuAd49wHsGeO8A7xvg/QN8YIAPDvChAT48wEcG+OgAHxvg4wN8YoBPDvCpAT49wGcG+OwAnxvg8wN8YYAvDvClAb48wFcG+OoAXxvg6wN8Y4BvDvCtAb49wHcG+O4A3xvg+wP8YIAfDvCjAX48wE8G+OkAPxvg5wP8YoBfDvCrAX49wLED/GaA3w7wuwF+P8AfBvjjAH8a4M8D/GWAvw7wtwH+PsA/BvjnAP8a4N8D/GeA/w7wvwEOCXCcAMcNcLwAxw9wggAnDHCiACcOcJIAJw1wsgAnD3CKAKcMcGiAUwU4dYDTBDhtgNMFOH2AMwQ4Y4AzBThzgLMEOGuAswU4e4BzBDhngHMFOHeA8wQ4b4DDApwvwOEBzh/gAgEuGOBCAS4c4CIBLhrgYgEuHuASARLgkgEuFeDSAS4T4LIBLhfg8gGuEOCKAa4U4MoBrhLgqgGuFuDqAa4R4JoBrhXg2gGuE+C6Aa4X4PoBbhDghgFuFODGAW4S4KYBbhbg5gFuEeCWAW4V4NYBbhPgtgFuF+D2Ae4Q4I4B7hTgzgHuEuCuAe4W4O4B7hHgngHuFeDeAe4T4L4B7hfg/gEeEOCBAR4U4MEBHhLgoQEeFuDhAR4R4JEBHhXg0QEeE+CxAR4X4PEBnhDgiQEa4EkBnhzgKQGeGuCIAE8L8PQAzwhwEGAQYBhgFGAcYBJgGmAWYB5gEWAZYBVgHWATYBtgF2Af4JkBnhXg2QGeE+C5AZ4X4PkBXhDghQFeFODFAV4S4KUBXhbg5QFeEeCVAV4V4NUBXhPgtQFeF+D1Ad4Q4I0B3hTgzQHeEuCtAd4W4O0B3hHgyABHBTg6wDEB3hngXQHeHeA9Ad4b4H0B3h/gAwE+GOBDAT4c4CMBPhrgYwE+HuATAT4Z4FMBPh3gMwE+G+BzAT4f4AsBvhjgSwG+HOArAb4a4GsBvh7gGwG+GeBbAb4d4DsBvhvgewG+H+AHAX4Y4EcBfhzgJwF+GuBnAX4e4BcBfhngVwF+HeDYAL8J8NsAvwvw+wB/CPDHAH8K8OcAfwnw1wB/C/D3AP8I8M8A/wrw7wD/CfDfAP8LcEiI44Q4bojjhTh+iBOEOGGIE4U4cYiThDhpiJOFOHmIU4Q4ZYhDQ5wqxKlDnCbEaUOcLsTpQ5whxBlDnCnEmUOcJcRZQ5wtxNlDnCPEOUOcK8S5Q5wnxHlDHBbifCEOD3H+EBcIccEQFwpx4RAXCXHREBcLcfEQlwiREJcMcakQlw5xmRCXDXG5EJcPcYUQVwxxpRBXDnGVEFcNcbUQVw9xjRDXDHGtENcOcZ0Q1w1xvRDXD3GDEDcMcaMQNw5xkxA3DXGzEDcPcYsQtwxxqxC3DnGbELcNcbsQtw9xhxB3DHGnEHcOcZcQdw1xtxB3D3GPEPcMca8Q9w5xnxD3DXG/EPcP8YAQDwzxoBAPDvGQEA8N8bAQDw/xiBCPDPGoEI8O8ZgQjw3xuBCPD/GEEE8M0RBPCvHkEE8J8dQQR4R4Woinh3hGiIMQgxDDEKMQ4xCTENMQsxDzEIsQyxCrEOsQmxDbELsQ+xDPDPGsEM8O8ZwQzw3xvBDPD/GCEC8M8aIQLw7xkhAvDfGyEC8P8YoQrwzxqhCvDvGaEK8N8boQrw/xhhBvDPGmEG8O8ZYQbw3xthBvD/GOEEeGOCrE0SGOCfHOEO8K8e4Q7wnx3hDvC/H+EB8I8cEQHwrx4RAfCfHREB8L8fEQnwjxyRCfCvHpEJ8J8dkQnwvx+RBfCPHFEF8K8eUQXwnx1RBfC/H1EN8I8c0Q3wrx7RDfCfHdEN8L8f0QPwjxwxA/CvHjED8J8dMQPwvx8xC/CPHLEL8K8esQx4b4TYjfhvhdiN+H+EOIP4b4U4g/h/hLiL+G+FuIv4f4R4h/hvhXiH+H+E+I/4b4X4hDIhwnwnEjHC/C8SOcIMIJI5wowokjnCTCSSOcLMLJI5wiwikjHBrhVBFOHeE0EU4b4XQRTh/hDBHOGOFMEc4c4SwRzhrhbBHOHuEcEc4Z4VwRzh3hPBHOG+GwCOeLcHiE80e4QIQLRrhQhAtHuEiEi0a4WISLR7hEhES4ZIRLRbh0hMtEuGyEy0W4fIQrRLhihCtFuHKEq0S4aoSrRbh6hGtEuGaEa0W4doTrRLhuhOtFuH6EG0S4YYQbRbhxhJtEuGmEm0W4eYRbRLhlhFtFuHWE20S4bYTbRbh9hDtEuGOEO0W4c4S7RLhrhLtFuHuEe0S4Z4R7Rbh3hPtEuG+E+0W4f4QHRHhghAdFeHCEh0R4aISHRXh4hEdEeGSER0V4dITHRHhshMdFeHyEJ0R4YoRGeFKEJ0d4SoSnRjgiwtMiPD3CMyIcRBhEGEYYRRhHmESYRphFmEdYRFhGWEVYR9hE2EbYRdhHeGaEZ0V4doTnRHhuhOdFeH6EF0R4YYQXRXhxhJdEeGmEl0V4eYRXRHhlhFdFeHWE10R4bYTXRXh9hDdEeGOEN0V4c4S3RHhrhLdFeHuEd0Q4MsJREY6OcEyEd0Z4V4R3R3hPhPdGeF+E90f4QIQPRvhQhA9H+EiEj0b4WISPR/hEhE9G+FSET0f4TITPRvhchM9H+EKEL0b4UoQvR/hKhK9G+FqEr0f4RoRvRvhWhG9H+E6E70b4XoTvR/hBhB9G+FGEH0f4SYSfRvhZhJ9H+EWEX0b4VYRfRzg2wm8i/DbC7yL8PsIfIvwxwp8i/DnCXyL8NcLfIvw9wj8i/DPCvyL8O8J/Ivw3wv8iHBLjODGOG+N4MY4f4wQxThjjRDFOHOMkMU4a42QxTh7jFDFOGePQGKeKceoYp4lx2hini3H6GGeIccYYZ4px5hhniXHWGGeLcfYY54hxzhjninHuGOeJcd4Yh8U4X4zDY5w/xgViXDDGhWJcOMZFYlw0xsViXDzGJWIkxiVjXCrGpWNcJsZlY1wuxuVjXCHGFWNcKcaVY1wlxlVjXC3G1WNcI8Y1Y1wrxrVjXCfGdWNcL8b1Y9wgxg1j3CjGjWPcJMZNY9wsxs1j3CLGLWPcKsatY9wmxm1j3C7G7WPcIcYdY9wpxp1j3CXGXWPcLcbdY9wjxj1j3CvGvWPcJ8Z9Y9wvxv1jPCDGA2M8KMaDYzwkxkNjPCzGw2M8IsYjYzwqxqNjPCbGY2M8LsbjYzwhxhNjNMaTYjw5xlNiPDXGETGeFuPpMZ4R4yDGIMYwxijGOMYkxjTGLMY8xiLGMsYqxjrGJsY2xi7GPsYzYzwrxrNjPCfGc2M8L8bzY7wgxgtjvCjGi2O8JMZLY7wsxstjvCLGK2O8KsarY7wmxmtjvC7G62O8IcYbY7wpxptjvCXGW2O8LcbbY7wjxpExjopxdIxjYrwzxrtivDvGe2K8N8b7Yrw/xgdifDDGh2J8OMZHYnw0xsdifDzGJ2J8MsanYnw6xmdifDbG52J8PsYXYnwxxpdifDnGV2J8NcbXYnw9xjdifDPGt2J8O8Z3Ynw3xvdifD/GD2L8MMaPYvw4xk9i/DTGz2L8PMYvYvwyxq9i/DrGsTF+E+O3MX4X4/cx/hDjjzH+FOPPMf4S468x/hbj7zH+EeOfMf4V498x/hPjvzH+F+OQBMdJcNwEx0tw/AQnSHDCBCdKcOIEJ0lw0gQnS3DyBKdIcMoEhyY4VYJTJzhNgtMmOF2C0yc4Q4IzJjhTgjMnOEuCsyY4W4KzJzhHgnMmOFeCcyc4T4LzJjgswfkSHJ7g/AkukOCCCS6U4MIJLpLgogkuluDiCS6RIAkumeBSCS6d4DIJLpvgcgkun+AKCa6Y4EoJrpzgKgmumuBqCa6e4BoJrpngWgmuneA6Ca6b4HoJrp/gBglumOBGCW6c4CYJbprgZglunuAWCW6Z4FYJbp3gNglum+B2CW6f4A4J7pjgTgnunOAuCe6a4G4J7p7gHgnumeBeCe6d4D4J7pvgfgnun+ABCR6Y4EEJHpzgIQkemuBhCR6e4BEJHpngUQkeneAxCR6b4HEJHp/gCQmemKAJnpTgyQmekuCpCY5I8LQET0/wjAQHCQYJhglGCcYJJgmmCWYJ5gkWCZYJVgnWCTYJtgl2CfYJnpngWQmeneA5CZ6b4HkJnp/gBQlemOBFCV6c4CUJXprgZQlenuAVCV6Z4FUJXp3gNQlem+B1CV6f4A0J3pjgTQnenOAtCd6a4G0J3p7gHQmOTHBUgqMTHJPgnQneleDdCd6T4L0J3pfg/Qk+kOCDCT6U4MMJPpLgowk+luDjCT6R4JMJPpXg0wk+k+CzCT6X4PMJvpDgiwm+lODLCb6S4KsJvpbg6wm+keCbCb6V4NsJvpPguwm+l+D7CX6Q4IcJfpTgxwl+kuCnCX6W4OcJfpHglwl+leDXCY5N8JsEv03wuwS/T/CHBH9M8KcEf07wlwR/TfC3BH9P8I8E/0zwrwT/TvCfBP9N8L8Eh6Q4TorjpjheiuOnOEGKE6Y4UYoTpzhJipOmOFmKk6c4RYpTpjg0xalSnDrFaVKcNsXpUpw+xRlSnDHFmVKcOcVZUpw1xdlSnD3FOVKcM8W5Upw7xXlSnDfFYSnOl+LwFOdPcYEUF0xxoRQXTnGRFBdNcbEUF09xiRRJcckUl0px6RSXSXHZFJdLcfkUV0hxxRRXSnHlFFdJcdUUV0tx9RTXSHHNFNdKce0U10lx3RTXS3H9FDdIccMUN0px4xQ3SXHTFDdLcfMUt0hxyxS3SnHrFLdJcdsUt0tx+xR3SHHHFHdKcecUd0lx1xR3S3H3FPdIcc8U90px7xT3SXHfFPdLcf8UD0jxwBQPSvHgFA9J8dAUD0vx8BSPSPHIFI9K8egUj0nx2BSPS/H4FE9I8cQUTfGkFE9O8ZQUT01xRIqnpXh6imekOEgxSDFMMUoxTjFJMU0xSzFPsUixTLFKsU6xSbFNsUuxT/HMFM9K8ewUz0nx3BTPS/H8FC9I8cIUL0rx4hQvSfHSFC9L8fIUr0jxyhSvSvHqFK9J8doUr0vx+hRvSPHGFG9K8eYUb0nx1hRvS/H2FO9IcWSKo1IcneKYFO9M8a4U707xnhTvTfG+FO9P8YEUH0zxoRQfTvGRFB9N8bEUH0/xiRSfTPGpFJ9O8ZkUn03xuRSfT/GFFF9M8aUUX07xlRRfTfG1FF9P8Y0U30zxrRTfTvGdFN9N8b0U30/xgxQ/TPGjFD9O8ZMUP03xsxQ/T/GLFL9M8asUv05xbIrfpPhtit+l+H2KP6T4Y4o/pfhzir+k+GuKv6X4e4p/pPhnin+l+HeK/6T4b4r/pTgkw3EyHDfD8TIcP8MJMpwww4kynDjDSTKcNMPJMpw8wykynDLDoRlOleHUGU6T4bQZTpfh9BnOkOGMGc6U4cwZzpLhrBnOluHsGc6R4ZwZzpXh3BnOk+G8GQ7LcL4Mh2c4f4YLZLhghgtluHCGi2S4aIaLZbh4hktkSIZLZrhUhktnuEyGy2a4XIbLZ7hChitmuFKGK2e4SoarZrhahqtnuEaGa2a4VoZrZ7hOhutmuF6G62e4QYYbZrhRhhtnuEmGm2a4WYabZ7hFhltmuFWGW2e4TYbbZrhdhttnuEOGO2a4U4Y7Z7hLhrtmuFuGu2e4R4Z7ZrhXhntnuE+G+2a4X4b7Z3hAhgdmeFCGB2d4SIaHZnhYhodneESGR2Z4VIZHZ3hMhsdmeFyGx2d4QoYnZmiGJ2V4coanZHhqhiMyPC3D0zM8I8NBhkGGYYZRhnGGSYZphlmGeYZFhmWGVYZ1hk2GbYZdhn2GZ2Z4VoZnZ3hOhudmeF6G52d4QYYXZnhRhhdneEmGl2Z4WYaXZ3hFhldmeFWGV2d4TYbXZnhdhtdneEOGN2Z4U4Y3Z3hLhrdmeFuGt2d4R4YjMxyV4egMx2R4Z4Z3ZXh3hvdkeG+G92V4f4YPZPhghg9l+HCGj2T4aIaPZfh4hk9k+GSGT2X4dIbPZPhshs9l+HyGL2T4YoYvZfhyhq9k+GqGr2X4eoZvZPhmhm9l+HaG72T4bobvZfh+hh9k+GGGH2X4cYafZPhphp9l+HmGX2T4ZYZfZfh1hmMz/CbDbzP8LsPvM/whwx8z/CnDnzP8JcNfM/wtw98z/CPDPzP8K8O/M/wnw38z/C/DITmOk+O4OY6X4/g5TpDjhDlOlOPEOU6S46Q5Tpbj5DlOkeOUOQ7Ncaocp85xmhynzXG6HKfPcYYcZ8xxphxnznGWHGfNcbYcZ89xjhznzHGuHOfOcZ4c581xWI7z5Tg8x/lzXCDHBXNcKMeFc1wkx0VzXCzHxXNcIkdyXDLHpXJcOsdlclw2x+VyXD7HFXJcMceVclw5x1VyXDXH1XJcPcc1clwzx7VyXDvHdXJcN8f1clw/xw1y3DDHjXLcOMdNctw0x81y3DzHLXLcMsetctw6x21y3DbH7XLcPscdctwxx51y3DnHXXLcNcfdctw9xz1y3DPHvXLcO8d9ctw3x/1y3D/HA3I8MMeDcjw4x0NyPDTHw3I8PMcjcjwyx6NyPDrHY3I8Nsfjcjw+xxNyPDFHczwpx5NzPCXHU3MckeNpOZ6e4xk5DnIMcgxzjHKMc0xyTHPMcsxzLCbGMscqxzrHJsc2xy7HPsczczwrx7NzPCfHc3M8L8fzc7wgxwtzvCjHi3O8JMdLc7wsx8tzvCLHK3O8Kserc7wmx2tzvC7H63O8Iccbc7wpx5tzvCXHW3O8Lcfbc7wjx5E5jspxdI5jcrwzx7tyvDvHe3K8N8f7crw/xwdyfDDHh3J8OMdHcnw0x8dyfDzHJ3J8Msencnw6x2dyfDbH53J8PscXcnwxx5dyfDnHV3J8NcfXcnw9xzdyfDPHt3J8O8d3cnw3x/dyfD/HD3L8MMePcvw4x09y/DTHz3L8PMcvcvwyx69y/DrHsTl+k+O3OX6X4/c5/pDjjzn+lOPPOf6S4685/pbj7zn+keOfOf6V4985/pPjvzn+l+OQAscpcNwCxytw/AInKHDCAicqcOICJylw0gInK3DyAqcocMoChxY4VYFTFzhNgdMWOF2B0xc4Q4EzFjhTgTMXOEuBsxY4W4GzFzhHgXMWOFeBcxc4T4HzFjiswPkKHF7g/AUuUOCCBS5U4MIFLlLgogUuVuDiBS5RIAUuWeBSBS5d4DIFLlvgcgUuX+AKBa5Y4EoFrlzgKgWuWuBqBa5e4BoFrlngWgWuXeA6Ba5b4HoFrl/gBgVuWOBGBW5c4CYFblrgZgVuXuAWBW5Z4FYFbl3gNgVuW+B2BW5f4A4F7ljgTgXuXOAuBe5a4G4F7l7gHgXuWeBeBe5d4D4F7lvgfgXuX+ABBR5Y4EEFHlzgIQUeWuBhBR5e4BEFHlngUQUeXeAxBR5b4HEFHl/gCQWeWKAFnlTgyQWeUuCpBY4o8LQCTy/wjAIHBQYFhgVGBcYFJgWmBWYF5gUWBZYFVgXWBTYFtgV2BfYFnlngWQWeXeA5BZ5b4HkFnl/gBQVeWOBFBV5c4CUFXlrgZQVeXuAVBV5Z4FUFXl3gNQVeW+B1BV5f4A0F3ljgTQXeXOAtBd5a4G0F3l7gHQWOLHBUgaMLHFPgnQXeVeDdBd5T4L0F3lfg/QU+UOCDBT5U4MMFPlLgowU+VuDjBT5R4JMFPlXg0wU+U+CzBT5X4PMFvlDgiwW+VODLBb5S4KsFvlbg6wW+UeCbBb5V4NsFvlPguwW+V+D7BX5Q4IcFflTgxwV+UuCnBX5W4OcFflHglwV+VeDXBY4t8JsCvy3wuwK/L/CHAn8s8KcCfy7wlwJ/LfC3An8v8I8C/yzwrwL/LvCfAv8t8L8Ch5Q4TonjljheieOXOEGJE5Y4UYkTlzhJiZOWOFmJZw8fNnSKEqcscWiJU5U4dYnTlDhtidOVOH2JM5Q4Y4kzlThzibOUOGuJs5U4e4lzlDhniXOVOHeJ85Q4b4nDSpyvxOElzl/iAiUuWOJCJS5c4iIlLlriYiUuXuISJVLikiUuVeLSJS5T4rIlLlfi8iWuUOKKJa5U4solrlLiqiWuVuLqJa5R4polrlXi2iWuU+K6Ja5X4volblDihiVuVOLGJW5S4qYlblbi5iVuUeKWJW5V4tYlblPitiVuV+L2Je5Q4o4l7lTiziXuUuKuJe5W4u4l7lHiniXuVeLeJe5T4r4l7lfi/iUeUOKBJR5U4sElHlLioSUeVuLhJR5R4pElHlXi0SUeU+KxJR5X4vElnlDiiSVa4kklnlziKSWeWuKIEk8r8fQSzyhxUGJQYlhiVGJcYlJiWmJWYl5iUWJZYlViXWJTYltiV2Jf4pklnvU/KyWeU+K5JZ5X4vklXlDihSVeVOLFJV5S4qUlXlbi5SVeUeKVJV5V4tUlXlPitSVeV+L1Jd5Q4o0l3lTizSXeUuKtJd5W4u0l3lHiyBJHlTi6xDEl3lniXSXeXeI9Jd5b4n0l3l/iAyU+WOJDJT5c4iMlPlriYyU+XuITJT5Z4lMlPl3iMyU+W+JzJT5f4gslvljiSyW+XOIrJb5a4mslvl7iGyW+WeJbJb5d4jslvlvieyW+X+IHJX5Y4kclflziJyV+WuJnJX5e4hclflniVyV+XeLYEr8p8dsSvyvx+xJ/KPHHEn8q8ecSfynx1xJ/K/H3Ev8o8c8S/yrx7xL/KfHfEv8rcUiF41Q4boXjVTh+hRNUOGGFE1U4cYWTVDhphZNVOHmFU1Q4ZYVDK5yqwqkrnKbCaSucrsLpK5yhwhkrnKnCmSucpcJZK5ytwtkrnKPCOSucq8K5K5ynwnkrHFbhfBUOr3D+CheocMEKF6pw4QoXqXDRChercPEKl6iQCpescKkKl65wmQqXrXC5CpevcIUKV6xwpQpXrnCVCletcLUKV69wjQrXrHCtCteucJ0K161wvQrXr3CDCjescKMKN65wkwo3rXCzCjevcIsKt6xwqwq3rnCbCretcLsKt69whwp3rHCnCneucJcKd61wtwp3r3CPCvescK8K965wnwr3rXC/Cvev8IAKD6zwoAoPrvCQCg+t8LAKD6/wiAqPrPCoCo+u8JgKj63wuAqPr/CECk+s0ApPqvDkCk+p8NQKR1R4WoWnV3hGhYMKgwrDCqMK4wqTCtMKswrzCosKywqrCusKmwrbCrsK+wrPrPCsCs+u8JwKz63wvArPr/CCCi+s8KIKL67wkgovrfCyCi+v8IoKr6zwqgqvrvCaCq+t8LoKr6/whgpvrPCmCm+u8JYKb63wtgpvr/COCkdWOKrC0RWOqfDOCu+q8O4K76nw3grvq/D+Ch+o8MEKH6rw4QofqfDRCh+r8PEKn6jwyQqfqvDpCp+p8NkKn6vw+QpfqPDFCl+q8OUKX6nw1Qpfq/D1Ct+o8M0K36rw7QrfqfDdCt+r8P0KP6jwwwo/qvDjCj+p8NMKP6vw8wq/qPDLCr+q8OsKx1b4TYXfVvhdhd9X+EOFP1b4U4U/V/hLhb9W+FuFv1f4R4V/VvhXhX9X+E+F/1b4X4VDahynxnFrHK/G8WucoMYJa5yoxolrnKTGSWucrMbJa5yixilrHFrjVDVOXeM0NU5b43Q1Tl/jDDXOWONMNc5c4yw1zlrjbDXOXuMcNc5Z41w1zl3jPDXOW+OwGuercXiN89e4QI0L1rhQjQvXuEiNi9a4WI2L17hEjdS4ZI1L1bh0jcvUuGyNy9W4fI0r1LhijSvVuHKNq9S4ao2r1bh6jWvUuGaNa9W4do3r1LhujevVuH6NG9S4YY0b1bhxjZvUuGmNm9W4eY1b1LhljVvVuHWN29S4bY3b1bh9jTvUuGONO9W4c4271LhrjbvVuHuNe9S4Z4171bh3jfvUuG+N+9W4f40H1HhgjQfVeHCNh9R4aI2H1Xh4jUfUeGSNR9V4dI3H1HhsjcfVeHyNJ9R4Yo3WeFKNJ9d4So2n1jiixtNqPL3GM2oc1BjUGNYY1RjXmNSY1pjVmNdY1FjWWNVY19jU2NbY1djXeGaNZ9V4do3n1HhujefVeH6NF9R4YY0X1XhxjZfUeGmNl9V4eY1X1HhljVfVeHWN19R4bY3X1Xh9jTfUeGONN9V4c4231HhrjbfVeHuNd9Q4ssZRNY6ucUyNd9Z4V41313hPjffWeF+N99f4QI0P1vhQjQ/X+EiNj9b4WI2P1/hEjU/W+FSNT9f4TI3P1vhcjc/X+EKNL9b4Uo0v1/hKja/W+FqNr9f4Ro1v1vhWjW/X+E6N79b4Xo3v1/hBjR/W+FGNH9f4SY2f1vhZjZ/X+EWNX9b4VY1f1zi2xm9q/LbG72r8vsYfhowY8r+Pf6rx5xp/qfHXGn+r8fca/6jxzxr/qvHvGv+p8d8a/6txSIPjNDhug+M1OH6DEzQ4YYMTNThxg5M0OGmDkzU4eYNTNDhlg0MbnKrBqRucpsFpG5yuwekbnKHBGRucqcGZG5ylwVkbnK3B2Ruco8E5G5yrwbkbnKfBeRsc1uB8DQ5vcP4GF2hwwQYXanDhBhdpcNEGF2tw8QaXaJAGl2xwqQaXbnCZBpdtcLkGl29whQZXbHClBlducJUGV21wtQZXb3CNBtdscK0G125wnQbXbXC9BtdvcIMGN2xwowY3bnCTBjdtcLMGN29wiwa3bHCrBrducJsGt21wuwa3b3CHBndscKcGd25wlwZ3bXC3BndvcI8G92xwrwb3bnCfBvdtcL8G92/wgAYPbPCgBg9u8JAGD23wsAYPb/CIBo9s8KgGj27wmAaPbfC4Bo9v8IQGT2zQBk9q8OQGT2nw1AZHNHhag6c3eEaDgwaDBsMGowbjBpMG0wazBvMGiwbLBqsG6wabBtsGuwb7Bs9s8KwGz27wnAbPbfC8Bs9v8IIGL2zwogYvbvCSBi9t8LIGL2/wigavbPCqBq9u8JoGr23wugavb/CGBm9s8KYGb27wlgZvbfC2Bm9v8I4GRzY4qsHRDY5p8M4G72rw7gbvafDeBu9r8P4GH2jwwQYfavDhBh9p8NEGH2vw8QafaPDJBp9q8OkGn2nw2Qafa/D5Bl9o8MUGX2rw5QZfafDVBl9r8PUG32jwzQbfavDtBt9p8N0G32vw/QY/aPDDBj9q8OMGP2nw0wY/a/DzBr9o8MsGv2rw6wbHNvhNg982+F2D3zf4Q4M/NvhTgz83+EuDvzb4W4O/N/hHg382+FeDfzf4T4P/Nvhfg0NaHKfFcVscr8XxW5ygxQlbnKjFiVucpMVJW5ysxclbnKLFKVsc2uJULU7d4jQtTtvidC1O3+IMLc7Y4kwtztziLC3O2uJsLc7e4hwtztniXC3O3eI8Lc7b4rAW52txeIvzt7hAiwu2uFCLC7e4SIuLtrhYi4u3uESLtLhki0u1uHSLy7S4bIvLtbh8iyu0uGKLK7W4courtLhqi6u1uHqLa7S4Zotrtbh2i+u0uG6L67W4fosbtLhhixu1uHGLm7S4aYubtbh5i1u0uGWLW7W4dYvbtLhti9u1uH2LO7S4Y4s7tbhzi7u0uGuLu7W4e4t7tLhni3u1uHeL+7S4b4v7tbh/iwe0eGCLB7V4cIuHtHhoi4e1eHiLR7R4ZItHtXh0i8e0eGyLx7V4fIsntHhii7Z4Uosnt3hKi6e2OKLF01o8vcUzWhy0GLQYthi1GLeYtJi2mLWYt1i0WLZYtVi32LTYtti12Ld4ZotntXh2i+e0eG6L57V4fosXtHhhixe1eHGLl7R4aYuXtXh5i1e0eGWLV7V4dYvXtHhti9e1eH2LN7R4Y4s3tXhzi7e0eGuLt7V4e4t3tDiyxVEtjm5xTIt3tnhXi3e3eE+L97Z4X4v3t/hAiw+2+FCLD7f4SIuPtvhYi4+3+ESLT7b4VItPt/hMi8+2+FyLz7f4QosvtvhSiy+3+EqLr7b4Wouvt/hGi2+2+FaLb7f4Tovvtvhei++3+EGLH7b4UYsft/hJi5+2+FmLn7f4RYtftvhVi1+3OLbFb1r8tsXvWvy+xR9a/LHFn1r8ucVfWvy1xd9a/L3FP1r8s8W/Wvy7xX9a/LfF/1oc0uE4HY7b4Xgdjt/hBB1O2OFEHU7c4SQdTtrhZB1O3uEUHU7Z4dAOp+pw6g6n6XDaDqfrcPoOZ+hwxg5n6nDmDmfpcNYOZ+tw9g7n6HDODufqcO4O5+lw3g6HdThfh8M7nL/DBTpcsMOFOly4w0U6XLTDxTpcvMMlOqTDJTtcqsOlO1ymw2U7XK7D5TtcocMVO1ypw5U7XKXDVTtcrcPVO1yjwzU7XKvDtTtcp8N1O1yvw/U73KDDDTvcqMONO9ykw0073KzDzTvcosMtO9yqw6073KbDbTvcrsPtO9yhwx073KnDnTvcpcNdO9ytw9073KPDPTvcq8O9O9ynw3073K/D/Ts8oMMDOzyow4M7PKTDQzs8rMPDOzyiwyM7PKrDozs8psNjOzyuw+M7PKHDEzu0w5M6PLnDUzo8tcMRHZ7W4ekdntHhoMOgw7DDqMO4w6TDtMOsw7zDosOyw6rDusOmw7bDrsO+wzM7PKvDszs8p8NzOzyvw/M7vKDDCzu8qMOLO7ykw0s7vKzDyzu8osMrO7yqw6s7vKbDazu8rsPrO7yhwxs7vKnDmzu8pcNbO7ytw9s7vKPDkR2O6nB0h2M6vLPDuzq8u8N7Ory3w/s6vL/DBzp8sMOHOny4w0c6fLTDxzp8vMMnOnyyw6c6fLrDZzp8tsPnOny+wxc6fLHDlzp8ucNXOny1w9c6fL3DNzp8s8O3Ony7w3c6fLfD9zp8v8MPOvyww486/LjDTzr8tMPPOvy8wy86/LLDrzr8usOxHX7T4bcdftfh9x1Dfujwxw5/6vDnDn/p8NcOf+vw9w7/6PDPDv/q8O8O/+nw3w7/63BIj+P0OG6P4/U4fo8T9DhhjxP1OHGPk/Q4aY+T9Th5j1P0OGWPQ3ucqsepe5ymx2l7nK7H6XucoccZe5ypx5l7nKXHWXucrcfZe5yjxzl7nKvHuXucp8d5exzW43w9Du9x/h4X6HHBHhfqceEeF+lx0R4X63HxHpfokR6X7HGpHpfucZkel+1xuR6X73GFHlfscaUeV+5xlR5X7XG1HlfvcY0e1+xxrR7X7nGdHtftcb0e1+/HDvn/cKMeN+5xkx437XGzHjfvcYset+xxqx637nGbHrftcbset+9xhx537HGnHnfucZced+1xtx5373GPHvfsca8e9+5xnx737XG/Hvfv8YAeD+zxoB4P7vGQHg/t8bAeD+/xiB6P7PGoHo/u8Zgej+3xuB6P7/GEHk/s0R5P6vHkHk/p8dQeR/R4Wo+n93hGj4Megx7DHqMe4x6THtMesx7zHoseyx6rHusemx7bHrse+x7P7PGsHs/u8Zwez+3xvB7P7/GCHi/s8aIeL+7xkh4v7fGyHi/v8Yoer+zxqh6v7vGaHq/9n8khQ4Zc3+MNPd7Y40093tzjLT3e2uNtPd7e4x09juxxVI+jexzT/x8B8ABAZwEAQHhh2bbty7Zt27Yv23y/jWzbtm3bmteHDwzwwQE+NMCHB/jIAB8d4GMDfHyATwzwyQE+NcCnB/jMAJ8d4HMDfH6ALwzwxQG+NMCXB/jKAF8d4GsDfH2AbwzwzQG+NcC3B/jOAN8d4HsDfH+AHwzwwwF+NMCPB/jJAD8d4GcD/HyAXwzwywF+NcCvB/jNAL8d4HcD/H6APwzwxwH+NMCfB/jLAH8d4G8D/H2AfwzwzwH+NcC/B/jPAP8d4H8DHDbA4QMcMcCRAxw1wNEDHDPAsQMcEuA4AY4b4HgBjh/g0AAnCHDCACcKcOIAJwlw0gAnC3DyAKcIcMoApwpw6gCnCXDaAKcLcPoAZwhwxgBnCnDmAGcJcNYAZwtw9gDnCHDOAOcKcO4A5wlw3gDnC3D+ABcIcMEAFwpw4QAXCXDRABcLcPEAlwhwyQCXCpAAlw5wmQCXDXC5AJcPcIUAVwxwpQBXDnCVAFcNcLUAVw9wjQDXDHCtANcOcJ0A1w1wvQDXD3CDADcMcKMANw5wkwA3DXCzADcPcIsAtwxwqwC3DnCbALcNcLsAtw9whwB3DHCnAHcOcJcAdw1wtwB3D3CPAPcMcK8A9w5wnwD3DXC/APcP8IAADwzwoAAPDvCQAA8N8LAADw/wiACPDPCoAI8O8JgAjw3wuACPD/CEAE8M8KQATw7QAE8J8NQATwvw9ADPCPDMAM8K8OwAzwnw3ADPC/D8AC8I8MIALwrw4gAvCfDSAC8L8PIArwjwygCvCvDqAAcBBgGGAUYBxgEmAaYBZgHmARYBlgFWAdYBNgG2AXYB9gFeE+C1AV4X4PUB3hDgjQHeFODNAd4S4K0B3hbg7QHeEeCdAd4V4N0B3hPgvQHeF+D9AT4Q4IMBPhTgwwE+EuCjAT4W4OMBPhHgkwE+FeDTAT4T4LMBPhfg8wG+EOCLAb4U4MsBvhLgqwG+FuDrAb4R4JsBvhXg2wG+E+C7Ab4X4PsBfhDghwF+FODHAX4S4KcBfhbg5wF+EeCXAX4V4NcBfhPgtwF+F+D3Af4Q4I8B/hTgzwH+EuCvAf4W4O8B/hHgnwH+FeDfAf4T4L8B/hfgsACHBzgiwJEBjgpwdIBjAhwb4JAQxwlx3BDHC3H8EIeGOEGIE4Y4UYgThzhJiJOGOFmIk4c4RYhThjhViFOHOE2I04Y4XYjThzhDiDOGOFOIM4c4S4izhjhbiLOHOEeIc4Y4V4hzhzhPiPOGOF+I84e4QIgLhrhQiAuHuEiIi4a4WIiLh7hEiEuGuFSIhLh0iMuEuGyIy4W4fIgrhLhiiCuFuHKIq4S4aoirhbh6iGuEuGaIa4W4dojrhLhuiOuFuH6IG4S4YYgbhbhxiJuEuGmIm4W4eYhbhLhliFuFuHWI24S4bYjbhbh9iDuEuGOIO4W4c4i7hLhriLuFuHuIe4S4Z4h7hbh3iPuEuG+I+4W4f4gHhHhgiAeFeHCIh4R4aIiHhXh4iEeEeGSIR4V4dIjHhHhsiMeFeHyIJ4R4YognhXhyiIZ4SoinhnhaiKeHeEaIZ4Z4Vohnh3hOiOeGeF6I54d4QYgXhnhRiBeHeEmIl4Z4WYiXh3hFiFeGeFWIV4c4CDEIMQwxCjEOMQkxDTELMQ+xCLEMsQqxDrEJsQ2xC7EP8ZoQrw3xuhCvD/GGEG8M8aYQbw7xlhBvDfG2EG8P8Y4Q7wzxrhDvDvGeEO8N8b4Q7w/xgRAfDPGhEB8O8ZEQHw3xsRAfD/GJEJ8M8akQnw7xmRCfDfG5EJ8P8YUQXwzxpRBfDvGVEF8N8bUQXw/xjRDfDPGtEN8O8Z0Q3w3xvRDfD/GDED8M8aMQPw7xkxA/DfGzED8P8YsQvwzxqxC/DvGbEL8N8bsQvw/xhxB/DPGnEH8O8ZcQfw3xtxB/D/GPEP8M8a8Q/w7xnxD/DfG/EIeFODzEESGODHFUiKNDHBPi2BCHRDhOhONGOF6E40c4NMIJIpwwwokinDjCSSKcNMLJIpw8wikinDLCqSKcOsJpIpw2wukinD7CGSKcMcKZIpw5wlkinDXC2SKcPcI5IpwzwrkinDvCeSKcN8L5Ipw/wgUiXDDChSJcOMJFIlw0wsUiXDzCJSJcMsKlIiTCpSNcJsJlI1wuwuUjXCHCFSNcKcKVI1wlwlUjXC3C1SNcI8I1I1wrwrUjXCfCdSNcL8L1I9wgwg0j3CjCjSPcJMJNI9wsws0j3CLCLSPcKsKtI9wmwm0j3C7C7SPcIcIdI9wpwp0j3CXCXSPcLcLdI9wjwj0j3CvCvSPcJ8J9I9wvwv0jPCDCAyM8KMKDIzwkwkMjPCzCwyM8IsIjIzwqwqMjPCbCYyM8LsLjIzwhwhMjPCnCkyM0wlMiPDXC0yI8PcIzIjwzwrMiPDvCcyI8N8LzIjw/wgsivDDCiyK8OMJLIrw0wssivDzCKyK8MsKrIrw6wkGEQYRhhFGEcYRJhGmEWYR5hEWEZYRVhHWETYRthF2EfYTXRHhthNdFeH2EN0R4Y4Q3RXhzhLdEeGuEt0V4e4R3RHhnhHdFeHeE90R4b4T3RXh/hA9E+GCED0X4cISPRPhohI9F+HiET0T4ZIRPRfh0hM9E+GyEz0X4fIQvRPhihC9F+HKEr0T4aoSvRfh6hG9E+GaEb0X4doTvRPhuhO9F+H6EH0T4YYQfRfhxhJ9E+GmEn0X4eYRfRPhlhF9F+HWE30T4bYTfRfh9hD9E+GOEP0X4c4S/RPhrhL9F+HuEf0T4Z4R/Rfh3hP9E+G+E/0U4LMLhEY6IcGSEoyIcHeGYCMdGOCTGcWIcN8bxYhw/xqExThDjhDFOFOPEMU4S46QxThbj5DFOEeOUMU4V49QxThPjtDFOF+P0Mc4Q44wxzhTjzDHOEuOsMc4W4+wxzhHjnDHOFePcMc4T47wxzhfj/DEuEOOCMS4U48IxLhLjojEuFuPiMS4R45IxLhUjMS4d4zIxLhvjcjEuH+MKMa4Y40oxrhzjKjGuGuNqMa4e4xoxrhnjWjGuHeM6Ma4b43oxrh/jBjFuGONGMW4c4yYxbhrjZjFuHuMWMW4Z41Yxbh3jNjFuG+N2MW4f4w4x7hjjTjHuHOMuMe4a424x7h7jHjHuGeNeMe4d4z4x7hvjfjHuH+MBMR4Y40ExHhzjITEeGuNhMR4e4xExHhnjUTEeHeMxMR4b43ExHh/jCTGeGONJ8dAhJ8dojKfEeGqMp8V4eoxnxHhmjGfFeHaM58R4boznxXh+jBfEeGGMF8V4cYyXxHhpjJfFeHmMV8R4ZYxXxXh1jIMYgxjDGKMY4xiTGNMYsxjzGIsYyxirGOsYmxjbGLsY+xivifHaGK+L8foYb4jxxhhvivHmGG+J8dYYb4vx9hjviPHOGO+K8e4Y74nx3hjvi/H+GB+I8cEYH4rx4RgfifHRGB+L8fEYn4jxyRifivHpGJ+J8dkYn4vx+RhfiPHFGF+K8eUYX4nx1Rhfi/H1GN+I8c0Y34rx7RjfifHdGN+L8f0YP4jxwxg/ivHjGD+J8dMYP4vx8xi/iPHLGL+K8esYv4nx2xi/i/H7GH+I8ccYf4rx5xh/ifHXGH+L8fcY/4jxzxj/ivHvGP+J8d8Y/4txWIzDYxwR48gYR8U4OsYxMY6NcUiC4yQ4boLjJTh+gkMTnCDBCROcKMGJE5wkwUkTnCzByROcIsEpE5wqwakTnCbBaROcLsHpE5whwRkTnCnBmROcJcFZE5wtwdkTnCPBOROcK8G5E5wnwXkTnC/B+RNcIMEFE1wowYUTXCTBRRNcLMHFE1wiwSUTXCpBElw6wWUSXDbB5RJcPsEVElwxwZUSXDnBVRJcNcHVElw9wTUSXDPBtRJcO8F1Elw3wfUSXD/BDRLcMMGNEtw4wU0S3DTBzRLcPMEtEtwywa0S3DrBbRLcNsHtEtw+wR0S3DHBnRLcOcFdEtw1wd0S3D3BPRLcM8G9Etw7wX0S3DfB/RLcP8EDEjwwwYMSPDjBQxI8NMHDEjw8wSMSPDLBoxI8OsFjEjw2weMSPD7BExI8McGTEjw5QRM8JcFTEzwtwdMTPCPBMxM8K8GzEzwnwXMTPC/B8xO8IMELE7wowYsTvCTBSxO8LMHLE7wiwSsTvCrBqxMcJBgkGCYYJRgnmCSYJpglmCdYJFgmWCVYJ9gk2CbYJdgneE2C1yZ4XYLXJ3hDgjcmeFOCNyd4S4K3JnhbgrcneEeCdyZ4V4J3J3hPgvcmeF+C9yf4QIIPJvhQgg8n+EiCjyb4WIKPJ/hEgk8m+FSCTyf4TILPJvhcgs8n+EKCLyb4UoIvJ/hKgq8m+FqCryf4RoJvJvhWgm8n+E6C7yb4XoLvJ/hBgh8m+FGCHyf4SYKfJvhZgp8n+EWCXyb4VYJfJ/hNgt8m+F2C3yf4Q4I/JvhTgj8n+EuCvyb4W4K/J/hHgn8m+FeCfyf4T4L/JvhfgsMSHJ7giARHJjgqwdEJjklwbIJDUhwnxXFTHC/F8VMcmuIEKU6Y4kQpTpziJClOmuJkKU6e4hQpTpniVClOneI0KU6b4nQpTp/iDCnOmOJMKc6c4iwpzpribCnOnuIcKc6Z4lwpzp3iPCnOm+J8Kc6f4gIpLpjiQikunOIiKS6a4mIpLp7iEikumeJSKZLi0ikuk+KyKS6X4vIprpDiiimulOLKKa6S4qoprpbi6imukeKaKa6V4toprpPiuimul+L6KW6Q4oYpbpTixilukuKmKW6W4uYpbpHililuleLWKW6T4rYpbpfi9inukOKOKe6U4s4p7pLirinuluLuKe6R4p4p7pXi3inuk+K+Ke6X4v4pHpDigSkelOLBKR6S4qEpHpbi4SkekeKRKR6V4tEpHpPisSkel+LxKZ6Q4okpnpTiySma4ikpnpriaSmenuIZKZ6Z4lkpnp3iOSmem+J5KZ6f4gUpXpjiRSlenOIlKV6a4mUpXp7iFSlemeJVKV6d4iDFIMUwxSjFOMUkxTTFLMU8xSLFMsUqxTrFJsU2xS7FPsVrUrw2xetSvD7FG1K8McWbUrw5xVtSvDXF21K8PcU7UrwzxbtSvDvFe1K8N8X7Urw/xQdSfDDFh1J8OMVHUnw0xcdSfDzFJ1J8MsWnUnw6xWdSfDbF51J8PsUXUnwxxZdSfDnFV1J8NcXXUnw9xTdSfDPFt1J8O8V3Unw3xfdSfD/FD1L8MMWPUvw4xU9S/DTFz1L8PMUvUvwyxa9S/DrFb1L8NsXvUvw+xR9S/DHFn1L8OcVfUvw1xd9S/D3FP1L8M8W/Uvw7xX9S/DfF/1IcluLwFEekODLFUSmOTnFMimNTHJLhOBmOm+F4GY6f4dAMJ8hwwgwnynDiDCfJcNIMJ8tw8gynyHDKDKfKcOoMp8lw2gyny3D6DGfIcMYMZ8pw5gxnyXDWDGfLcPYM58hwzgznynDuDOfJcN4M58tw/gwXyHDBDBfKcOEMF8lw0QwXy3DxDJfIcMkMl8qQDJfOcJkMl81wuQyXz3CFDFfMcKUMV85wlQxXzXC1DFfPcI0M18xwrQzXznCdDNfNcL0M189wgww3zHCjDDfOcJMMN81wsww3z3CLDLfMcKsMt85wmwy3zXC7DLfPcIcMd8xwpwx3znCXDHfNcLcMd89wjwz3zHCvDPfOcJ8M981wvwz3z/CADA/M8KAMD87wkAwPzfCwDA/P8IgMj8zwqAyPzvCYDI/N8LgMj8/whAxPzPCkDE/O0AxPyfDUDE/L8PQMz8jwzAzPyvDsDM/J8NwMz8vw/AwvyPDCDC/K8OIML8nw0gwvy/DyDK/I8MoMr8rw6gwHGQYZhhlGGcYZJhmmGWYZ5hkWGZYZVhnWGTYZthl2GfYZXpPhtRlel+H1Gd6Q4Y0Z3pThzRnekuGtGd6W4e0Z3pHhnRneleHdGd6T4b0Z3pfh/Rk+kOGDGT6U4cMZPpLhoxk+luHjGT6R4ZMZPpXh0xk+k+GzGT6X4fMZvpDhixm+lOHLGb6S4asZvpbh6xm+keGbGb6V4dsZvpPhuxm+l+H7GX6Q4YcZfpThxxl+kuGnGX6W4ecZfpHhlxl+leHXGX6T4bcZfpfh9xn+kOGPGf6U4c8Z/pLhrxn+luHvGf6R4Z8Z/pXh3xn+k+G/Gf6X4bAMh2c4IsORGY7KcHSGYzIcm+GQHMfJcdwcx8tx/ByH5jhBjhPmOFGOE+c4SY6T5jhZjpPnOEWOU+Y4VY5T5zhNjtPmOF2O0+c4Q44z5jhTjjPnOEuOs+Y4W46z5zhHjnPmOFeOc+c4T47z5jhfjvPnuECOC+a4UI4L57hIjovmuFiOi+e4RI5L5rhUjuS4dI7L5LhsjsvluHyOK+S4Yo4r5bhyjqvkuGqOq+W4eo5r5LhmjmvluHaO6+S4bo7r5bh+jhvkuGGOG+W4cY6b5LhpjpvluHmOW+S4ZY5b5bh1jtvkuG2O2+W4fY475LhjjjvluHOOu+S4a4675bh7jnvkuGeOe+W4d4775LhvjvvluH+OB+R4YI4H5XhwjofkeGiOh+V4eI5H5HhkjkfleHSOx+R4bI7H5Xh8jifkeGKOJ+V4co7meEqOp+Z4Wo6n53hGjmfmeFaOZ+d4To7n5nhejufneEGOF+Z4UY4X53hJjpfmeFmOl+d4RY5X5nhVjlfnOMgxyDHMMcoxzjHJMc0xyzHPscixzLHKsc6xybHNscuxz/GaHK/N8bocr8/xhhxvzPGmHG/O8ZYcb83xthxvz/GOHO/M8a4c787xnhzvzfG+HO/P8YEcH8zxoRwfzvGRHB/N8bEcH8/xiRyfzPGpHJ/O8Zkcn83xuRyfz/GFHF/M8aUcX87xlRxfzfG1HF/P8Y0c38zxrRzfzvGdHN/N8b0c38/xgxw/zPGjHD/O8ZMcP83xsxw/z/GLHL/M8ascv87xmxy/zfG7HL/P8Yccf8zxpxx/zvGXHH/N8bccf8/xjxz/zPGvHP/O8Z8c/83xvxyH5Tg8xxE5jsxxVI6jcxyT49gchxQ4ToHjFjhegeMXOLTACQqcsMCJCpy4wEkKnLTAyQqcvMApCpyywKkKnLrAaQqctsDpCpy+wBkKnLHAmQqcucBZCpy1wNkKnL3AOQqcs8C5Cpy7wHkKnLfA+Qqcv8AFClywwIUKXLjARQpctMDFCly8wCUKXLLApQqkwKULXKbAZQtcrsDlC1yhwBULXKnAlQtcpcBVC1ytwNULXKPANQtcq8C1C1ynwHULXK/A9QvcoMANC9yowI0L3KTATQvcrMDNC9yiwC0L3KrArQvcpsBtC9yuwO0L3KHAHQvcqcCdC9ylwF0L3K3A3Qvco8A9C9yrwL0L3KfAfQvcr8D9CzygwAMLPKjAgws8pMBDCzyswMMLPKLAIws8qsCjCzymwGMLPK7A4ws8ocATCzypwJMLtMBTCjy1wNMKPL3AMwo8s8CzCjy7wHMKPLfA8wo8v8ALCrywwIsKvLjASwq8tMDLCry8wCsKvLLAqwq8usBBgUGBYYFRgXGBSYFpgVmBeYFFgWWBVYF1gU2BbYFdgX2B1xR4bYHXFXh9gTcUeGOBNxV4c4G3FHhrgbcVeHuBdxR4Z4F3FXh3gfcUeG+B9xV4f4EPFPhggQ8V+HCBjxT4aIGPFfh4gU8U+GSBTxX4dIHPFPhsgc8V+HyBLxT4YoEvFfhyga8U+GqBrxX4eoFvFPhmgW8V+HaB7xT4boHvFfh+gR8U+GGBHxX4cYGfFPhpgZ8V+HmBXxT4ZYFfFfh1gd8U+G2B3xX4fYE/FPhjgT8V+HOBvxT4a4G/Ffh7gX8U+GeBfxX4d4H/FPhvgf8VOKzA4QWOKHBkgaMKHF3gmALHFjikxHFKHLfE8Uocv8ShJU5Q4oQlTlTixCVOUuKkJU5W4uQlTlHilCVOVeLUJU5T4rQlTlfi9CXOUOKMJc5U4swlzlLirCXOVuLsJc5R4pwlzlXi3CXOU+K8Jc5X4vwlLlDigiUuVOLCJS5S4qIlLlbi4iUuUeKSJS5VIiUuXeIyJS5b4nIlLl/iCiWuWOJKJa5c4iolrlriaiWuXuIaJa5Z4lolrl3iOiWuW+J6Ja5f4gYlbljiRiVuXOImJW5a4mYlbl7iFiVuWeJWJW5d4jYlblvidiVuX+IOJe5Y4k4l7lziLiXuWuJuJe5e4h4l7lniXiXuXeI+Je5b4n4l7l/iASUeWOJBJR5c4iElHlriYSUeXuIRJR5Z4lElHl3iMSUeW+JxJR5f4gklnljiSSWeXKIlnlLiqSWeVuLpJZ5R4pklnlXi2SWeU+K5JZ5X4vklXlDihSVeVOLFJV5S4qUlXlbi5SVeUeKVJV5V4tUlDkoMSgxLjEqMS0xKTEvMSsxLLEosS6xKrEtsSmxL7ErsS7ymxGtLvK7E60u8ocQbS7ypxJtLvKXEW0u8rcTbS7yjxDtLvKvEu0u8p8R7S7yvxPtLfKDEB0t8qMSHS3ykxEdLfKzEx0t8osQnS3yqxKdLfKbEZ0t8rsTnS3yhxBdLfKnEl0t8pcRXS3ytxNdLfKPEN0t8q8S3S3ynxHdLfK/E90v8oMQPS/yoxI9L/KTET0v8rMTPS/yixC9L/KrEr0v8psRvS/yuxO9L/KHEH0v8qcSfS/ylxF9L/K3E30v8o8Q/S/yrxL9L/KfEf0v8r8RhJQ4vcUSJI0scVeLoEseUOLbEIRWOU+G4FY5X4fgVDq1wggonrHCiCieucJIKJ61wsgonr3CKCqescKoKp65wmgqnrXC6CqevcIYKZ6xwpgpnrnCWCmetcLYKZ69wjgrnrHCuCueucJ4K561wvgrnr3CBChescKEKF65wkQoXrXCxChevcIkKl6xwqQqpcOkKl6lw2QqXq3D5CleocMUKV6pw5QpXqXDVClercPUK16hwzQrXqnDtCtepcN0K16tw/Qo3qHDDCjeqcOMKN6lw0wo3q3DzCreocMsKt6pw6wq3qXDbCrercPsKd6hwxwp3qnDnCnepcNcKd6tw9wr3qHDPCveqcO8K96lw3wr3q3D/Cg+o8MAKD6rw4AoPqfDQCg+r8PAKj6jwyAqPqvDoCo+p8NgKj6vw+ApPqPDECk+q8OQKrfCUCk+t8LQKT6/wjArPrPCsCs+u8JwKz63wvArPr/CCCi+s8KIKL67wkgovrfCyCi+v8IoKr6zwqgqvrnBQYVBhWGFUYVxhUmFaYVZhXmFRYVlhVWFdYVNhW2FXYV/hNRVeW+F1FV5f4Q0V3ljhTRXeXOEtFd5a4W0V3l7hHRXeWeFdFd5d4T0V3lvhfRXeX+EDFT5Y4UMVPlzhIxU+WuFjFT5e4RMVPlnhUxU+XeEzFT5b4XMVPl/hCxW+WOFLFb5c4SsVvlrhaxW+XuEbFb5Z4VsVvl3hOxW+W+F7Fb5f4QcVfljhRxV+XOEnFX5a4WcVfl7hFxV+WeFXFX5d4TcVflvhdxV+X+EPFf5Y4U8V/lzhLxX+WuFvFf5e4R8V/lnhXxX+XeE/Ff5b4X8VDqtweIUjKhxZ4agKR1c4psKxFQ6pcZwax61xvBrHr3FojRPUOGGNE9U4cY2T1DhpjZPVOHmNU9Q4ZY1T1Th1jdPUOG2N09U4fY0z1DhjjTPVOHONs9Q4a42z1Th7jXPUOGeNc9U4d43z1DhvjfPVOH+NC9S4YI0L1bhwjYvUuGiNi9W4eI1L1LhkjUvVSI1L17hMjcvWuFyNy9e4Qo0r1rhSjSvXuEqNq9a4Wo2r17hGjWvWuFaNa9e4To3r1rhejevXuEGNG9a4UY0b17hJjZvWuFmNm9e4RY1b1rhVjVvXuE2N29a4XY3b17hDjTvWuFONO9e4S4271rhbjbvXuEeNe9a4V41717hPjfvWuF+N+9d4QI0H1nhQjQfXeEiNh9Z4WI2H13hEjUfWeFSNR9d4TI3H1nhcjcfXeEKNJ9Z4Uo0n12iNp9R4ao2n1Xh6jWfUeGaNZ9V4do3n1HhujefVeH6NF9R4YY0X1XhxjZfUeGmNl9V4eY1X1HhljVfVeHWNgxqDGsMaoxrjGpMa0xqzGvMaixrLGqsa6xqbGtsauxr7Gq+p8doar6vx+hpvqPHGGm+q8eYab6nx1hpvq/H2Gu+o8c4a76rx7hrvqfHeGu+r8f4aH6jxwRofqvHhGh+p8dEaH6vx8RqfqPHJGp+q8ekan6nx2Rqfq/H5Gl+o8cUaX6rx5RpfqfHVGl+r8fUa36jxzRrfqvHtGt+p8d0a36vx/Ro/qPHDGj+q8eMaP6nx0xo/q/HzGr+o8csav6rx6xq/qfHbGr+r8fsaf6jxxxp/qvHnGn+p8dcaf6vx9xr/qPHPGv+q8e8a/6nx3xr/q3FYjcNrHFHjyBpH1Ti6xjE1jq1xSIPjNDhug+M1OH6DQxucoMEJG5yowYkbnKTBSRucrMHJG5yiwSkbnKrBqRucpsFpG5yuwekbnKHBGRucqcGZG5ylwVkbnK3B2Ruco8E5G5yrwbkbnKfBeRucr8H5G1ygwQUbXKjBhRtcpMFFG1yswcUbXKLBJRtcqkEaXLrBZRpctsHlGly+wRUaXLHBlRpcucFVGly1wdUaXL3BNRpcs8G1Gly7wXUaXLfB9Rpcv8ENGtywwY0a3LjBTRrctMHNGty8wS0a3LLBrRrcusFtGty2we0a3L7BHRrcscGdGty5wV0a3LXB3RrcvcE9Gtyzwb0a3LvBfRrct8H9Gty/wQMaPLDBgxo8uMFDGjy0wcMaPLzBIxo8ssGjGjy6wWMaPLbB4xo8vsETGjyxwZMaPLlBGzylwVMbPK3B0xs8o8EzGzyrwbMbPKfBcxs8r8HzG7ygwQsbvKjBixu8pMFLG7yswcsbvKLBKxu8qsGrGxw0GDQYNhg1GDeYNJg2mDWYN1g0WDZYNVg32DTYNtg12Dd4TYPXNnhdg9c3eEODNzZ4U4M3N3hLg7c2eFuDtzd4R4N3NnhXg3c3eE+D9zZ4X4P3N/hAgw82+FCDDzf4SIOPNvhYg483+ESDTzb4VINPN/hMg882+FyDzzf4QoMvNvhSgy83+EqDrzb4WoOvN/hGg282+FaDbzf4ToPvNvheg+83+EGDHzb4UYMfN/hJg582+FmDnzf4RYNfNvhVg183+E2D3zb4XYPfN/hDgz82+FODPzf4S4O/Nvhbg783+EeDfzb4V4N/N/hPg/82+F+Dwxoc3uCIBkc2OKrB0Q2OaXBsg0NaHKfFcVscr8XxWxza4gQtTtjiRC1O3OIkLU7a4mQtTt7iFC1O2eJULU7d4jQtTtvidC1O3+IMLc7Y4kwtztziLC3O2uJsLc7e4hwtztniXC3O3eI8Lc7b4nwtzt/iAi0u2OJCLS7c4iItLtriYi0u3uISLS7Z4lIt0uLSLS7T4rItLtfi8i2u0OKKLa7U4sotrtLiqi2u1uLqLa7R4potrtXi2i2u0+K6La7X4votbtDihi1u1OLGLW7S4qYtbtbi5i1u0eKWLW7V4tYtbtPiti1u1+L2Le7Q4o4t7tTizi3u0uKuLe7W4u4t7tHini3u1eLeLe7T4r4t7tfi/i0e0OKBLR7U4sEtHtLioS0e1uLhLR7R4pEtHtXi0S0e0+KxLR7X4vEtntDiiS2e1OLJLdriKS2e2uJpLZ7e4hktntniWS2e3eI5LZ7b4nktnt/iBS1e2OJFLV7c4iUtXtriZS1e3uIVLV7Z4lUtXt3ioMWgxbDFqMW4xaTFtMWsxbzFosWyxarFusWmxbbFrsW+xWtavLbF61q8vsUbWryxxZtavLnFW1q8tcXbWry9xTtavLPFu1q8u8V7Wry3xftavL/FB1p8sMWHWny4xUdafLTFx1p8vMUnWnyyxadafLrFZ1p8tsXnWny+xRdafLHFl1p8ucVXWny1xddafL3FN1p8s8W3Wny7xXdafLfF91p8v8UPWvywxY9a/LjFT1r8tMXPWvy8xS9a/LLFr1r8usVvWvy2xe9a/L7FH1r8scWfWvy5xV9a/LXF31r8vcU/Wvyzxb9a/LvFf1r8t8X/WhzW4vAWR7Q4ssVRLY5ucUyLY1sc0uE4HY7b4Xgdjt/h0A4n6HDCDifqcOIOJ+lw0g4n63DyDqfocMoOp+pw6g6n6XDaDqfrcPoOZ+hwxg5n6nDmDmfpcNYOZ+tw9g7n6HDODufqcO4O5+lw3g7n63D+DhfocMEOF+pw4Q4X6XDRDhfrcPEOl+hwyQ6X6pAOl+5wmQ6X7XC5DpfvcIUOV+xwpQ5X7nCVDlftcLUOV+9wjQ7X7HCtDtfucJ0O1+1wvQ7X73CDDjfscKMON+5wkw437XCzDjfvcIsOt+xwqw637nCbDrftcLsOt+9whw537HCnDnfucJcOd+1wtw5373CPDvfscK8O9+5wnw737XC/Dvfv8IAOD+zwoA4P7vCQDg/t8LAOD+/wiA6P7PCoDo/u8JgOj+3wuA6P7/CEDk/s8KQOT+7QDk/p8NQOT+vw9A7P6PDMDs/q8OwOz+nw3A7P6/D8Di/o8MIOL+rw4g4v6fDSDi/r8PIOr+jwyg6v6vDqDgcdBh2GHUYdxh0mHaYdZh3mHRYdlh1WHdYdNh22HXYd9h1e0+G1HV7X4fUd3tDhjR3e1OHNHd7S4a0d3tbh7R3e0eGdHd7V4d0d3tPhvR3e1+H9HT7Q4YMdPtThwx0+0uGjHT7W4eMdPtHhkx0+1eHTHT7T4bMdPtfh8x2+0OGLHb7U4csdvtLhqx2+1uHrHb7R4ZsdvtXh2x2+0+G7Hb7X4fsdftDhhx1+1OHHHX7S4acdftbh5x1+0eGXHX7V4dcdftPhtx1+1+H3Hf7Q4Y8d/tThzx3+0uGvHf7W4e8d/tHhnx3+1eHfHf7T4b8d/tfhsA6Hdziiw5EdjupwdIdjOhzb4ZAex+lx3B7H63H8Hof2OEGPE/Y4UY8T9zhJj5P2OFmPk/c4RY9T9jhVj1P3OE2P0/Y4XY/T9zhDjzP2OFOPM/c4S4+z9jhbj7P3OEePc/Y4V49z9zhPj/P2OF+P8/e4QI8L9rhQjwv3uEiPi/a4WI+L97hEj0v2uFSP9Lh0j8v0uGyPy/W4fI8r9Lhijyv1uHKPq/S4ao+r9bh6j2v0uGaPa/W4do/r9Lhuj+v1uH6PG/S4YY8b9bhxj5v0uGmPm/W4eY9b9Lhlj1v1uHWP2/S4bY/b9bh9jzv0uGOPO/W4c4+79Lhrj7v1uHuPe/S4Z4979bh3j/v0uG+P+/W4f48H9Hhgjwf1eHCPh/R4aI+H9Xh4j0f0eGSPR/V4dI/H9Hhsj8f1eHyPJ/R4Yo8n9Xhyj/Z4So+n9nhaj6f3eEaPZ/Z4Vo9n93hOj+f2eF6P5/d4QY8X9nhRjxf3eEmPl/Z4WY+X93hFj1f2eFWPV/c46DHoMewx6jHuMekx7THrMe+x6LHsseqx7rHpse2x67Hv8Zoer+3xuh6v7/GGHm/s8aYeb+7xlh5v7fG2Hm/v8Y4e7+zxrh7v7vGeHu/t8b4e7+//p+GeFug8EAAIp6lt28bUtm3btqe2beP8Noqktm3bdhvu1b7Ih8MGOHyADwzwwQE+NMCHB/jIAB8d4GMDfHyATwzwyQE+NcCnB/jMAJ8d4HMDfH6ALwzwxQG+NMCXB/jKAF8d4GsDfH2AbwzwzQG+NcC3B/jOAN8d4HsDfH+AHwzwwwF+NMCPB/jJAD8d4GcD/HyAXwzwywF+NcCvB/jNAL8d4HcD/H6APwzwxwH+NMCfB/jLAH8d4G8D/H2AfwzwzwH+NcC/B/jPAP8d4H8DHDHAkQMcNcDRAxwzwLEDHBLgOAEODXDcAMcLcPwAJwhwwgAnCnDiACcJcNIAJwtw8gCnCHDKAKcKcOoApwlw2gCnC3D6AGcIcMYAZwpw5gBnCXDWAGcLcPYA5whwzgDnCnDuAOcJcN4A5wtw/gAXCHDBABcKcOEAFwlw0QAXC3DxAJcIcMkAlwqQAJcOcJkAlw1wuQCXD3CFAFcMcKUAVw5wlQBXDXC1AFcPcI0A1wxwrQDXDnCdANcNcL0A1w9wgwA3DHCjADcOcJMANw1wswA3D3CLALcMcKsAtw5wmwC3DXC7ALcPcIcAdwxwpwB3DnCXAHcNcLcAdw9wjwD3DHCvAPcOcJ8A9w1wvwD3D/CAAA8M8KAADw7wkAAPDfCwAA8P8IgAjwzwqACPDvCYAI8N8LgAjw/whABPDPCkAE8O0ABPCfDUAE8L8PQAzwjwzADPCvDsAM8J8NwAzwvw/AAvCPDCAC8K8OIALwnw0gAvC/DyAK8I8MoArwrw6gCvCfDaAK8L8PoAbwjwxgBvCvDmAG8J8NYAbwvw9gDvCPDOAO8K8O4ABwEGAYYBRgHGASYBpgFmAeYBFgGWAVYB1gE2AbYBdgH2Ad4T4L0B3hfg/QEOC3B4gA8E+GCADwX4cICPBPhogI8F+HiATwT4ZIBPBfh0gM8E+GyAzwX4fIAvBPhigC8F+HKArwT4aoCvBfh6gG8E+GaAbwX4doDvBPhugO8F+H6AHwT4YYAfBfhxgJ8E+GmAnwX4eYBfBPhlgF8F+HWA3wT4bYDfBfh9gD8E+GOAPwX4c4C/BPhrgL8F+HuAfwT4Z4B/Bfh3gP8E+G+A/wU4IsCRAY4KcHSAYwIcG+CQEMcJcWiI44Y4XojjhzhBiBOGOFGIE4c4SYiThjhZiJOHOEWIU4Y4VYhThzhNiNOGOF2I04c4Q4gzhjhTiDOHOEuIs4Y4W4izhzhHiHOGOFeIc4c4T4jzhjhfiPOHuECIC4a4UIgLh7hIiIuGuFiIi4e4RIhLhrhUiIS4dIjLhLhsiMuFuHyIK4S4YogrhbhyiKuEuGqIq4W4eohrhLhmiGuFuHaI64S4bojrhbh+iBuEuGGIG4W4cYibhLhpiJuFuHmIW4S4ZYhbhbh1iNuEuG2I24W4fYg7hLhjiDuFuHOIu4S4a4i7hbh7iHuEuGeIe4W4d4j7hLhviPuFuH+IB4R4YIgHhXhwiIeEeGiIh4V4eIhHhHhkiEeFeHSIx4R4bIjHhXh8iCeEeGKIJ4V4coiGeEqIp4Z4Woinh3hGiGeGeFaIZ4d4TojnhnheiOeHeEGIF4Z4UYgXh3hJiJeGeFmIl4d4RYhXhnhViFeHeE2I14Z4XYjXh3hDiDeGeFOIN4d4S4i3hnhbiLeHeEeId4Z4V4h3hzgIMQgxDDEKMQ4xCTENMQsxD7EIsQyxCrEOsQmxDbELsQ/xnhDvDfG+EO8PcViIw0N8IMQHQ3woxIdDfCTER0N8LMTHQ3wixCdDfCrEp0N8JsRnQ3wuxOdDfCHEF0N8KcSXQ3wlxFdDfC3E10N8I8Q3Q3wrxLdDfCfEd0N8L8T3Q/wgxA9D/CjEj0P8JMRPQ/wsxM9D/CLEL0P8KsSvQ/wmxG9D/C7E70P8IcQfQ/wpxJ9D/CXEX0P8LcTfQ/wjxD9D/CvEv0P8J8R/Q/wvxBEhjgxxVIijQxwT4tgQh0Q4ToRDIxw3wvEiHD/CCSKcMMKJIpw4wkkinDTCySKcPMIpIpwywqkinDrCaSKcNsLpIpw+whkinDHCmSKcOcJZIpw1wtkinD3COSKcM8K5Ipw7wnkinDfC+SKcP8IFIlwwwoUiXDjCRSJcNMLFIlw8wiUiXDLCpSIkwqUjXCbCZSNcLsLlI1whwhUjXCnClSNcJcJVI1wtwtUjXCPCNSNcK8K1I1wnwnUjXC/C9SPcIMINI9wowo0j3CTCTSPcLMLNI9wiwi0j3CrCrSPcJsJtI9wuwu0j3CHCHSPcKcKdI9wlwl0j3C3C3SPcI8I9I9wrwr0j3CfCfSPcL8L9IzwgwgMjPCjCgyM8JMJDIzwswsMjPCLCIyM8KsKjIzwmwmMjPC7C4yM8IcITIzwpwpMjNMJTIjw1wtMiPD3CMyI8M8KzIjw7wnMiPDfC8yI8P8ILIrwwwosivDjCSyK8NMLLIrw8wisivDLCqyK8OsJrIrw2wusivD7CGyK8McKbIrw5wlsivDXC2yK8PcI7IrwzwrsivDvCQYRBhGGEUYRxhEmEaYRZhHk0ZOj/PbYqwjrCJsI2wi7CPsJ7Irw3wvsivD/CYREOj/CBCB+M8KEIH47wkQgfjfCxCB+P8IkIn4zwqQifjvCZCJ+N8LkIn4/whQhfjPClCF+O8JUIX43wtQhfj/CNCN+M8K0I347wnQjfjfC9CN+P8IMIP4zwowg/jvCTCD+N8LMIP4/wiwi/jPCrCL+O8JsIv43wuwi/j/CHCH+M8KcIf47wlwh/jfC3CH+P8I8I/4zwrwj/jvCfCP+N8L8IR0Q4MsJREY6OcEyEYyMcEuM4MQ6NcdwYx4tx/BgniHHCGCeKceIYJ4lx0hgni3HyGKeIccoYp4px6hiniXHaGKeLcfoYZ4hxxhhninHmGGeJcdYYZ4tx9hjniHHOGOeKce4Y54lx3hjni3H+GBeIccEYF4px4RgXiXHRGBeLcfEYl4hxyRiXipEYl45xmRiXjXG5GJePcYUYV4xxpRhXjnGVGFeNcbUYV49xjRjXjHGtGNeOcZ0Y141xvRjXj3GDGDeMcaMYN45xkxg3jXGzGDePcYsYt4xxqxi3jnGbGLeNcbsYt49xhxh3jHGnGHeOcZcYd41xtxh3j3GPGPeMca8Y945xnxj3jXG/GPeP8YAYD4zxoBgPjvGQGA+N8bAYD4/xiBiPjPGoGI+O8ZgYj43xuBiPj/GEGE+M8aQYT47RGE+J8dQYT4vx9BjPiPHMGM+K8ewYz4nx3BjPi/H8GC+I8cIYL4rx4hgvifHSGC+L8fIYr4jxyhivivHqGK+J8doYr4vx+hhviPHGGG+K8eYYb4nx1hhvi/H2GO+I8c4Y74rx7hgHMQYxhjFGMcYxJjGmMWYx5jEWMZYxVjHWMTYxtjF2MfYx3hPjvTHeF+P9MQ6LcXiMD8T4YIwPxfhwjI/E+GiMj8X4eIxPxPhkjE/F+HSMz8T4bIzPxfh8jC/E+GKML8X4coyvxPhqjK/F+HqMb8T4Zoxvxfh2jO/E+G6M78X4fowfxPhhjB/F+HGMn8T4aYyfxfh5jF/E+GWMX8X4dYzfxPhtjN/F+H2MP8T4Y4w/xfhzjL/E+GuMv8X4e4x/xPhnjH/F+HeM/8T4b4z/xTgixpExjopxdIxjYhwb45AEx0lwaILjJjheguMnOEGCEyY4UYITJzhJgpMmOFmCkyc4RYJTJjhVglMnOE2C0yY4XYLTJzhDgjMmOFOCMyc4S4KzJjhbgrMnOEeCcyY4V4JzJzhPgvMmOF+C8ye4QIILJrhQggsnuEiCiya4WIKLJ7hEgksmuFSCJLh0gsskuGyCyyW4fIIrJLhigisluHKCqyS4aoKrJbh6gmskuGaCayW4doLrJLhugusluH6CGyS4YYIbJbhxgpskuGmCmyW4eYJbJLhlglsluHWC2yS4bYLbJbh9gjskuGOCOyW4c4K7JLhrgrsluHuCeyS4Z4J7Jbh3gvskuG+C+yW4f4IHJHhgggcleHCChyR4aIKHJXh4gkckeGSCRyV4dILHJHhsgscleHyCJyR4YoInJXhygiZ4SoKnJnhagqcneEaCZyZ4VoJnJ3hOgucmeF6C5yd4QYIXJnhRghcneEmClyZ4WYKXJ3hFglcmeFWCVyd4TYLXJnhdgtcneEOCNyZ4U4I3J3hLgrcmeFuCtyd4R4J3JnhXgncnOEgwSDBMMEowTjBJME0wSzBPsEiwTLBKsE6wSbBNsEuwT/CeBO9N8L4E709wWILDE3wgwQcTfCjBhxN8JMFHE3wswccTfCLBJxN8KsGnE3wmwWcTfC7B5xN8IcEXE3wpwZcTfCXBVxN8LcHXE3wjwTcTfCvBtxN8J8F3E3wvwfcT/CDBDxP8KMGPE/wkwU8T/CzBzxP8IsEvE/wqwa8T/CbBbxP8LsHvE/whwR8T/CnBnxP8JcFfE/wtwd8T/CPBPxP8K8G/E/wnwX8T/C/BEQmOTHBUgqMTHJPg2ASHpDhOikNTHDfF8VIcP8UJUpwwxYlSnDjFSVKcNMXJUpw8xSlSnDLFqVKcOsVpUpw2xelSnD7FGVKcMcWZUpw5xVlSnDXF2VKcPcU5UpwzxblSnDvFeVKcN8X5Upw/xQVSXDDFhVJcOMVFUlw0xcVSXDzFJVJcMsWlUiTFpVNcJsVlU1wuxeVTXCHFFVNcKcWVU1wlxVVTXC3F1VNcI8U1U1wrxbVTXCfFdVNcL8X1U9wgxQ1T3CjFjVPcJMVNU9wsxc1T3CLFLVPcKsWtU9wmxW1T3C7F7VPcIcUdU9wpxZ1T3CXFXVPcLcXdU9wjxT1T3CvFvVPcJ8V9U9wvxf1TPCDFA1M8KMWDUzwkxUNTPCzFw1M8IsUjUzwqxaNTPCbFY1M8LsXjUzwhxRNTPCnFk1M0xVNSPDXF01I8PcUzUjwzxbNSPDvFc1I8N8XzUjw/xQtSvDDFi1K8OMVLUrw0xctSvDzFK1K8MsWrUrw6xWtSvDbF61K8PsUbUrwxxZtSvDnFW1K8NcXbUrw9xTtSvDPFu1K8O8VBikGKYYpRinGKSYppilmKeYpFimWKVYp1ik2KbYpdin2K96R4b4r3pXh/isNSHJ7iAyk+mOJDKT6c4iMpPpriYyk+nuITKT6Z4lMpPp3iMyk+m+JzKT6f4gspvpjiSym+nOIrKb6a4mspvp7iGym+meJbKb6d4jspvpvieym+n+IHKX6Y4kcpfpziJyl+muJnKX6e4hcpfpniVyl+neI3KX6b4ncpfp/iDyn+mOJPKf6c4i8p/pribyn+nuIfKf6Z4l8p/p3iPyn+m+J/KY5IcWSKo1IcneKYFMemOCTDcTIcmuG4GY6X4fgZTpDhhBlOlOHEGU6S4aQZTpbh5BlOkeGUGU6V4dQZTpPhtBlOl+H0Gc6Q4YwZzpThzBnOkuGsGc6W4ewZzpHhnBnOleHcGc6T4bwZzpfh/BkukOGCGS6U4cIZLpLhohkuluHiGS6R4ZIZLpUhGS6d4TIZLpvhchkun+EKGa6Y4UoZrpzhKhmumuFqGa6e4RoZrpnhWhmuneE6Ga6b4XoZrp/hBhlumOFGGW6c4SYZbprhZhlunuEWGW6Z4VYZbp3hNhlum+F2GW6f4Q4Z7pjhThnunOEuGe6a4W4Z7p7hHhnumeFeGe6d4T4Z7pvhfhnun+EBGR6Y4UEZHpzhIRkemuFhGR6e4REZHpnhURkeneExGR6b4XEZHp/hCRmemOFJGZ6coRmekuGpGZ6W4ekZnpHhmRmeleHZGZ6T4bkZnpfh+RlekOGFGV6U4cUZXpLhpRleluHlGV6R4ZUZXpXh1Rlek+G1GV6X4fUZ3pDhjRnelOHNGd6S4a0Z3pbh7RnekeGdGd6V4d0ZDjIMMgwzjDKMM0wyTDPMMswzLDIsM6wyrDNsMmwz7DLsM7wnw3szvC/D+zMcluHwDB/I8MEMH8rw4QwfyfDRDB/L8PEMn8jwyQyfyvDpDJ/J8NkMn8vw+QxfyPDFDF/K8OUMX8nw1Qxfy/D1DN/I8M0M38rw7QzfyfDdDN/L8P0MP8jwwww/yvDjDD/J8NMMP8vw8wy/yPDLDL/K8OsMv8nw2wy/y/D7DH/I8McMf8rw5wx/yfDXDH/L8PcM/8jwzwz/yvDvDP/J8N8M/8twRIYjMxyV4egMx2Q4NsMhOY6T49Acx81xvBzHz3GCHCfMcaIcJ85xkhwnzXGyHCfPcYocp8xxqhynznGaHKfNcbocp89xhhxnzHGmHGfOcZYcZ81xthxnz3GOHOfMca4c585xnhznzXG+HOfPcYEcF8xxoRwXznGRHBfNcbEcF89xiRyXzHGpHMlx6RyXyXHZHJfLcfkcV8hxxRxXynHlHFfJcdUcV8tx9RzXyHHNHNfKce0c18lx3RzXy3H9HDfIccMcN8px4xw3yXHTHDfLcfMct8hxyxy3ynHrHLfJcdsct8tx+xx3yHHHHHfKceccd8lx1xx3y3H3HPfIcc8c98px7xz3yXHfHPfLcf8cD8jxwBwPyvHgHA/J8dAcD8vx8ByPyPHIHI/K8egcj8nx2ByPy/H4HE/I8cQcT8rx5BzN8ZQcT83xtBxPz/GMHM/M8awcz87xnBzPzfG8HM/P8YIcL8zxohwvzvGSHC/N8bIcL8/xihyvzPGqHK/O8Zocr83xuhyvz/GGHG/M8aYcb87xlhxvzfG2HG/P8Y4c78zxrhzvznGQY5BjmGOUY5xjkmOaY5ZjnmORY5ljlWOdY5Njm2OXY5/jPTnem+N9Od6f47Ach+f4QI4P5vhQjg/n+EiOj+b4WI6P5/hEjk/m+FSOT+f4TI7P5vhcjs/n+EKOL+b4Uo4v5/hKjq/m+FqOr+f4Ro5v5vhWjm/n+E6O7+b4Xo7v5/hBjh/m+FGOH+f4SY6f5vhZjp/n+EWOX+b4VY5f5/hNjt/m+F2O3+f4Q44/5vhTjj/n+EuOv+b4W46/5/hHjn/m+FeOf+f4T47/5vhfjiNyHJnjqBxH5zgmx7E5DilwnAKHFjhugeMVOH6BExQ4YYETFThxgZMUOGmBkxU4eYFTFDhlgVMVOHWB0xQ4bYHTFTh9gTMUOGOBMxU4c4GzFDhrgbMVOHuBcxQ4Z4FzFTh3gfMUOG+B8xU4f4ELFLhggQsVuHCBixS4aIGLFbh4gUsUuGSBSxVIgUsXuEyByxa4XIHLF7hCgSsWuFKBKxe4SoGrFrhagasXuEaBaxa4VoFrF7hOgesWuF6B6xe4QYEbFrhRgRsXuEmBmxa4WYGbF7hFgVsWuFWBWxe4TYHbFrhdgdsXuEOBOxa4U4E7F7hLgbsWuFuBuxe4R4F7FrhXgXsXuE+B+xa4X4H7F3hAgQcWeFCBBxd4SIGHFnhYgYcXeESBRxZ4VIFHF3hMgccWeFyBxxd4QoEnFnhSgScXaIGnFHhqgacVeHqBZxR4ZoFnFXh2gecUeG6B5xV4foEXFHhhgRcVeHGBlxR4aYGXFXh5gVcUeGWBVxV4dYHXFHhtgdcVeH2BNxR4Y4E3FXhzgbcUeGuBtxV4e4F3FHhngXcVeHeBgwKDAsMCowLjApMC0wKzAvMCiwLLAqsC6wKbAtsCuwL7Au8p8N4C7yvw/gKHFTi8wAcKfLDAhwp8uMBHCny0wMcKfLzAJwp8ssCnCny6wGcKfLbA5wp8vsAXCnyxwJcKfLnAVwp8tcDXCny9wDcKfLPAtwp8u8B3Cny3wPcKfL/ADwr8sMCPCvy4wE8K/LTAzwr8vMAvCvyywK8K/LrAbwr8tsDvCvy+wB8K/LHAnwr8ucBfCvy1wN8K/L3APwr8s8C/Cvy7wH8K/LfA/wocUeDIAkcVOLrAMQWOLXBIieOUOLTEcUscr8TxS5ygxAlLnKjEiUucpMRJS5ysxMlLnKLEKUucqsSpS5ymxGlLnK7E6UucocQZS5ypxJlLnKXEWUucrcTZS5yjxDlLnKvEuUucp8R5S5yvxPlLXKDEBUtcqMSFS1ykxEVLXKzExUtcosQlS1yqREpcusRlSly2xOVKXL7EFUpcscSVSly5xFVKXLXE1UpcvcQ1SlyzxLVKXLvEdUpct8T1Sly/xA1K3LDEjUrcuMRNSty0xM1K3LzELUrcssStSty6xG1K3LbE7UrcvsQdStyxxJ1K3LnEXUrctcTdSty9xD1K3LPEvUrcu8R9Sty3xP1K3L/EA0o8sMSDSjy4xENKPLTEw0o8vMQjSjyyxKNKPLrEY0o8tsTjSjy+xBNKPLHEk0o8uURLPKXEU0s8rcTTSzyjxDNLPKvEs0s8p8RzSzyvxPNLvKDEC0u8qMSLS7ykxEtLvKzEy0u8osQrS7yqxKtLvKbEa0u8rsTrS7yhxBtLvKnEm0u8pcRbS7ytxNtLvKPEO0u8q8S7SxyUGJQYlhiVGJeYlJiWmJWYl1iUWJZYlViX2JTYltiV2Jd4T4n3lnhfifeXOKzE4SU+UOKDJT5U4sMlPlLioyU+VuLjJT5R4pMlPlXi0yU+U+KzJT5X4vMlvlDiiyW+VOLLJb5S4qslvlbi6yW+UeKbJb5V4tslvlPiuyW+V+L7JX5Q4oclflTixyV+UuKnJX5W4uclflHilyV+VeLXJX5T4rclflfi9yX+UOKPJf5U4s8l/lLiryX+VuLvJf5R4p8l/lXi3yX+U+K/Jf5X4ogSR5Y4qsTRJY4pcWyJQyocp8KhFY5b4XgVjl/hBBVOWOFEFU5c4SQVTlrhZBVOXuEUFU5Z4VQVTl3hNBVOW+F0FU5f4QwVzljhTBXOXOEsFc5a4WwVzl7hHBXOWeFcFc5d4TwVzlvhfBXOX+ECFS5Y4UIVLlzhIhUuWuFiFS5e4RIVLlnhUhVS4dIVLlPhshUuV+HyFa5Q4YoVrlThyhWuUuGqFa5W4eoVrlHhmhWuVeHaFa5T4boVrlfh+hVuUOGGFW5U4cYVblLhphVuVuHmFW5R4ZYVblXh1hVuU+G2FW5X4fYV7lDhjhXuVOHOFe5S4a4V7lbh7hXuUeGeFe5V4d4V7lPhvhXuV+H+FR5Q4YEVHlThwRUeUuGhFR5W4eEVHlHhkRUeVeHRFR5T4bEVHlfh8RWeUOGJFZ5U4ckVWuEpFZ5a4WkVnl7hGRWeWeFZFZ5d4TkVnlvheRWeX+EFFV5Y4UUVXlzhJRVeWuFlFV5e4RUVXlnhVRVeXeE1FV5b4XUVXl/hDRXeWOFNFd5c4S0V3lrhbRXeXuEdFd5Z4V0V3l3hoMKgwrDCqMK4wqTCtMKswrzCosKywqrCusKmwrbCrsK+wnsqvLfC+yq8v8JhFQ6v8IEKH6zwoQofrvCRCh+t8LEKH6/wiQqfrPCpCp+u8JkKn63wuQqfr/CFCl+s8KUKX67wlQpfrfC1Cl+v8I0K36zwrQrfrvCdCt+t8L0K36/wgwo/rPCjCj+u8JMKP63wswo/r/CLCr+s8KsKv67wmwq/rfC7Cr+v8IcKf6zwpwp/rvCXCn+t8LcKf6/wjwr/rPCvCv+u8J8K/63wvwpHVDiywlEVjq5wTIVjKxxS4zg1Dq1x3BrHq3H8GieoccIaJ6px4honqXHSGiercfIap6hxyhqnqnHqGqepcdoap6tx+hpnqHHGGmeqceYaZ6lx1hpnq3H2Gueocc4a56px7hrnqXHeGuercf4aF6hxwRoXqnHhGhepcdEaF6tx8RqXqHHJGpeqkRqXrnGZGpetcbkal69xhRpXrHGlGleucZUaV61xtRpXr3GNGtesca0a165xnRrXrXG9GtevcYMaN6xxoxo3rnGTGjetcbMaN69xixq3rHGrGreucZsat61xuxq3r3GHGnescacad65xlxp3rXG3GnevcY8a96xxrxr3rnGfGvetcb8a96/xgBoPrPGgGg+u8ZAaD63xsBoPr/GIGo+s8agaj67xmBqPrfG4Go+v8YQaT6zxpBpPrtEaT6nx1BpPq/H0Gs+o8cwaz6rx7BrPqfHcGs+r8fwaL6jxwhovqvHiGi+p8dIaL6vx8hqvqPHKGq+q8eoar6nx2hqvq/H6Gm+o8cYab6rx5hpvqfHWGm+r8fYa76jxzhrvqvHuGgc1BjWGNUY1xjUmNaY1ZjXmNRY1ljVWNdY1NjW2NXY19jXeU+O9Nd5X4/01DqtxeI0P1PhgjQ/V+HCNj9T4aI2P1fh4jU/U+GSNT9X4dI3P1Phsjc/V+HyNL9T4Yo0v1fhyja/U+GqNr9X4eo1v1PhmjW/V+HaN79T4bo3v1fh+jR/U+GGNH9X4cY2f1PhpjZ/V+HmNX9T4ZY1f1fh1jd/U+G2N39X4fY0/1PhjjT/V+HONv9T4a42/1fh7jX/U+GeNf9X4d43/1Phvjf/VOKLGkTWOqnF0jWNqHFvjkAbHaXBog+M2OF6D4zc4QYMTNjhRgxM3OEmDkzY4WYOTNzhFg1M2OFWDUzc4TYPTNjhdg9M3OEODMzY4U4MzNzhLg7M2OFuDszc4R4NzNjhXg3M3OE+D8zY4X4PzN7hAgws2uFCDCze4SIOLNrhYg4s3uESDSza4VIM0uHSDyzS4bIPLNbh8gys0uGKDKzW4coOrNLhqg6s1uHqDazS4ZoNrNbh2g+s0uG6D6zW4foMbNLhhgxs1uHGDmzS4aYObNbh5g1s0uGWDWzW4dYPbNLhtg9s1uH2DOzS4Y4M7Nbhzg7s0uGuDuzW4e4N7NLhng3s1uHeD+zS4b4P7Nbh/gwc0eGCDBzV4cIOHNHhog4c1eHiDRzR4ZINHNXh0g8c0eGyDxzV4fIMnNHhigyc1eHKDNnhKg6c2eFqDpzd4RoNnNnhWg2c3eE6D5zZ4XoPnN3hBgxc2eFGDFzd4SYOXNnhZg5c3eEWDVzZ4VYNXN3hNg9c2eF2D1zd4Q4M3NnhTgzc3eEuDtzZ4W4O3N3hHg3c2eFeDdzc4aDBoMGwwajBuMGkwbTBrMG+waLBssGqwbrBpsG2wa7Bv8J4G723wvgbvb3BYg8MbfKDBBxt8qMGHG3ykwUcbfKzBxxt8osEnG3yqwacbfKbBZxt8rsHnG3yhwRcbfKnBlxt8pcFXG3ytwdcbfKPBNxt8q8G3G3ynwXcbfK/B9xv8oMEPG/yowY8b/KTBTxv8rMHPG/yiwS8b/KrBrxv8psFvG/yuwe8b/KHBHxv8qcGfG/ylwV8b/K3B3xv8o8E/G/yrwb8b/KfBfxv8r8ERDY5scFSDoxsc0+DYBoe0OE6LQ1sct8XxWhy/xQlanLDFiVqcuMVJWpy0xclanLzFKVqcssWpWpy6xWlanLbF6VqcvsUZWpyxxZlanLnFWVqctcXZWpy9xTlanLPFuVqcu8V5Wpy3xflanL/FBVpcsMWFWly4xUVaXLTFxVpcvMUlWlyyxaVapMWlW1ymxWVbXK7F5VtcocUVW1ypxZVbXKXFVVtcrcXVW1yjxTVbXKvFtVtcp8V1W1yvxfVb3KDFDVvcqMWNW9ykxU1b3KzFzVvcosUtW9yqxa1b3KbFbVvcrsXtW9yhxR1b3KnFnVvcpcVdW9ytxd1b3KPFPVvcq8W9W9ynxX1b3K/F/Vs8oMUDWzyoxYNbPKTFQ1s8rMXDWzyixSNbPKrFo1s8psVjWzyuxeNbPKHFE1s8qcWTW7TFU1o8tcXTWjy9xTNaPLPFs1o8u8VzWjy3xfNaPL/FC1q8sMWLWry4xUtavLTFy1q8vMUrWryyxatavLrFa1q8tsXrWry+xRtavLHFm1q8ucVbWry1xdtavL3FO1q8s8W7Wry7xUGLQYthi1GLcYtJi2mLWYt5i0WLZYtVi3WLTYtti12LfYv3tHhvi/e1eH+Lw1oc3uIDLT7Y4kMtPtziIy0+2uJjLT7e4hMtPtniUy0+3eIzLT7b4nMtPt/iCy2+2OJLLb7c4istvtriay2+3uIbLb7Z4lstvt3iOy2+2+J7Lb7f4gctftjiRy1+3OInLX7a4mctft7iFy1+2eJXLX7d4jctftvidy1+3+IPLf7Y4k8t/tziLy3+2uJvLf7e4h8t/tniXy3+3eI/Lf7b4n8tjmhxZIujWhzd4pgWx7Y4pMNxOhza4bgdjtfh+B1O0OGEHU7U4cQdTtLhpB1O1uHkHU7R4ZQdTtXh1B1O0+G0HU7X4fQdztDhjB3O1OHMHc7S4awdztbh7B3O0eGcHc7V4dwdztPhvB3O1+H8HS7Q4YIdLtThwh0u0uGiHS7W4eIdLtHhkh0u1SEdLt3hMh0u2+FyHS7f4QodrtjhSh2u3OEqHa7a4Wodrt7hGh2u2eFaHa7d4Todrtvheh2u3+EGHW7Y4UYdbtzhJh1u2uFmHW7e4RYdbtnhVh1u3eE2HW7b4XYdbt/hDh3u2OFOHe7c4S4d7trhbh3u3uEeHe7Z4V4d7t3hPh3u2+F+He7f4QEdHtjhQR0e3OEhHR7a4WEdHt7hER0e2eFRHR7d4TEdHtvhcR0e3+EJHZ7Y4UkdntyhHZ7S4akdntbh6R2e0eGZHZ7V4dkdntPhuR2e1+H5HV7Q4YUdXtThxR1e0uGlHV7W4eUdXtHhlR1e1eHVHV7T4bUdXtfh9R3e0OGNHd7U4c0d3tLhrR3e1uHtHd7R4Z0d3tXh3R0OOgw6DDuMOow7TDpMO8w6zDssOiw7rDqsO2w6bDvsOuw7vKfDezu8r8P7OxzW4fAOH+jwwQ4f6vDhDh/p8NEOH+vw8Q6f6PDJDp/q8OkOn+nw2Q6f6/D5Dl/o8MUOX+rw5Q5f6fDVDl/r8PUO3+jwzQ7f6vDtDt/p8N0O3+vw/Q4/6PDDDj/q8OMOP+nw0w4/6/DzDr/o8MsOv+rw6w6/6fDbDr/r8PsOf+jwxw5/6vDnDn/p8NcOf+vw9w7/6PDPDv/q8O8O/+nw3w7/63BEhyM7HNXh6A7HdDi2wyE9jtPj0B7H7XG8HsfvcYIeJ+xxoh4n7nGSHiftcbIeJ+9xih6n7HGqHqfucZoep+1xuh6n73GGHmfscaYeZ+5xlh5n7XG2HmfvcY4e5+xxrh7n7nGeHuftcb4e5+9xgR4X7HGhHhfucZEeF+1xsR4X73GJHpfscake6XHpHpfpcdkel+tx+R5X6HHFHlfqceUeV+lx1R5X63H1Htfocc0e1+px7R7X6XHdHtfrcf0eN+hxwx436nHjHjfpcdMeN+tx8x636HHLHrfqceset+lx2x6363H7Hnfoccced+px5x536XHXHnfrcfce9+hxzx736nHvHvfpcd8e9+tx/x4P6PHAHg/q8eAeD+nx0B4P6/HwHo/o8cgej+rx6B6P6fHYHo/r8fgeT+jxxB5P6vHkHu3xlB5P7fG0Hk/v8Ywez+zxrB7P7vGcHs/t8bwez+/xgh4v7PGiHi/u8ZIeL+3xsh4v7/GKHq/s8aoer+7xmh6v7fG6Hq/v8YYeb+zxph5v7vGWHm/t8bYeb+/xjh7v7PGuHu/ucdBj0GPYY9Rj3GPSY9pj1mPeY9Fj2WPVY91j02PbY9dj3+M9Pd7b43093t/jsB6H/49ke9rC82AUIJwytW1bUzu1bdu2prZt2+732qht2zbivf6172AO5vQZYDbAfIDFAMsBVgOsB9gMsB1gN8B+gE8P8JkBPjvA5wb4/ABfGOCLA3xpgC8P8JUBvjrA1wb4+gDfGOCbA3xrgG8P8J0BvjvA9wb4/gA/GOCHA/xogB8P8JMBfjrAzwb4+QC/GOCXA/xqgF8P8JsBfjvA7wb4/QB/GOCPA/xpgD8P8JcB/jrA3wb4+wD/GOCfA/xrgH8P8J8B/jvA/wY4fIAjBjhygKMGOHqAYwY4doBDAhwnwHEDHC/A8QOcIMAJAxwa4EQBThzgJAFOGuBkAU4e4BQBThngVAFOHeA0AU4b4HQBTh/gDAHOGOBMAc4c4CwBzhrgbAHOHuAcAc4Z4FwBzh3gPAHOG+B8Ac4f4AIBLhjgQgEuHOAiAS4a4GIBLh7gEgEuGeBSARLg0gEuE+CyAS4X4PIBrhDgigGuFODKAa4S4KoBrhbg6gEOC3CNANcMcK0A1w5wnQDXDXC9ANcPcIMANwxwowA3DnCTADcNcLMANw9wiwC3DHCrALcOcJsAtw1wuwC3D3CHAHcMcKcAdw5wlwB3DXC3AHcPcI8A9wxwrwD3DnCfAPcNcL8A9w/wgAAPDPCgAA8O8JAADw3wsAAPD/CIAI8M8KgAjw7wmACPDfC4AI8P8IQATwzwpAAN8OQATwnw1ABPC/D0AM8I8MwAzwrw7ADPCfDcAM8L8PwALwjwwgAvCvDiAC8J8NIALwvw8gCvCPDKAK8K8OoArwnw2gCvC/D6AG8I8MYAbwrw5gBvCfDWAG8L8PYA7wjwzgDvCvDuAO8J8N4A7wvw/gAfCPDBAB8K8OEAHwnw0QAfC/DxAJ8I8MkAnwpwEGAw9P+F4P/ejgNMAkwDzALMAywCLAOsAqwDbAJsA+wC7AN8OsBnAnw2wOcCfD7AFwJ8McCXAnw5wFcCfDXA1wJ8PcA3AnwzwLcCfDvAdwJ8N8D3Anw/wA8C/DDAjwL8OMBPAvw0wM8C/DzALwL8MsCvAvw6wG8C/DbA7wL8PsAfAvwxwJ8C/DnAXwL8NcDfAvw9wD8C/DPAvwL8O8B/Avw3wP8CHB7giABHBjgqwNEBjglwbIBDQhwnxHFDHC/E8UOcIMQJQxwa4kQhThziJCFOGuJkIU4e4hQhThniVCFOHeI0IU4b4nQhTh/iDCHOGOJMIc4c4iwhzhribCHOHuIcIc4Z4lwhzh3iPCHOG+J8Ic4f4gIhLhjiQiEuHOIiIS4a4mIhLh7iEiEuGeJSIRLi0iEuE+KyIS4X4vIhrhDiiiGuFOLKIa4S4qohrhbi6iEOC3GNENcMca0Q1w5xnRDXDXG9ENcPcYMQNwxxoxA3DnGTEDcNcbMQNw9xixC3DHGrELcOcZsQtw1xuxC3D3GHEHcMcacQdw5xlxB3DXG3EHcPcY8Q9wxxrxD3DnGfEPcNcb8Q9w/xgBAPDPGgEA8O8ZAQDw3xsBAPD/GIEI8M8agQjw7xmBCPDfG4EI8P8YQQTwzxpBAN8eQQTwnx1BBPC/H0EM8I8cwQzwrx7BDPCfHcEM8L8fwQLwjxwhAvCvHiEC8J8dIQLwvx8hCvCPHKEK8K8eoQrwnx2hCvC/H6EG8I8cYQbwrx5hBvCfHWEG8L8fYQ7wjxzhDvCvHuEO8J8d4Q7wvx/hAfCPHBEB8K8eEQHwnx0RAfC/HxEJ8I8ckQnwpxEGIQYhhiFGIcYhJiGmIWYh5iEWIZYhViHWITYhtiF2If4tMhPhPisyE+F+LzIb4Q4oshvhTiyyG+EuKrIb4W4ushvhHimyG+FeLbIb4T4rshvhfi+yF+EOKHIX4U4schfhLipyF+FuLnIX4R4pchfhXi1yF+E+K3IX4X4vch/hDijyH+FOLPIf4S4q8h/hbi7yH+EeKfIf4V4t8h/hPivyH+F+LwEEeEODLEUSGODnFMiGNDHBLhOBGOG+F4EY4f4QQRThjh0AgninDiCCeJcNIIJ4tw8giniHDKCKeKcOoIp4lw2gini3D6CGeIcMYIZ4pw5ghniXDWCGeLcPYI54hwzgjninDuCOeJcN4I54tw/ggXiHDBCBeKcOEIF4lw0QgXi3DxCJeIcMkIl4qQCJeOcJkIl41wuQiXj3CFCFeMcKUIV45wlQhXjXC1CFePcFiEa0S4ZoRrRbh2hOtEuG6E60W4foQbRLhhhBtFuHGEm0S4aYSbRbh5hFtEuGWEW0W4dYTbRLhthNtFuH2EO0S4Y4Q7RbhzhLtEuGuEu0W4e4R7RLhnhHtFuHeE+0S4b4T7Rbh/hAdEeGCEB0V4cISHRHhohIdFeHiER0R4ZIRHRXh0hMdEeGyEx0V4fIQnRHhihCdFaIQnR3hKhKdGeFqEp0d4RoRnRnhWhGdHeE6E50Z4XoTnR3hBhBdGeFGEF0d4SYSXRnhZhJdHeEWEV0Z4VYRXR3hNhNdGeF2E10d4Q4Q3RnhThDdHeEuEt0Z4W4S3R3hHhHdGeFeEd0d4T4T3RnhfhPdH+ECED0b4UIQPR/hIhI9G+FiEj0f4RIRPRvhUhIMIgwjDCKMI4wiTCNMIswjzCIsIywirCOsImwjbCLsI+wifjvCZCJ+N8LkIn4/whQhfjPClCF+O8JUIX43wtQhfj/CNCN+M8K0I347wnQjfjfC9CN+P8IMIP4zwowg/jvCTCD+N8LMIP4/wiwi/jPCrCL+O8JsIv43wuwi/j/CHCH+M8KcIf47wlwh/jfC3CH+P8I8I/4zwrwj/jvCfCP+N8L8Ih0c4IsKREY6KcHSEYyIcG+GQGMeJcdwYx4tx/BgniHHCGIfGOFGME8c4SYyTxjhZjJPHOEWMU8Y4VYxTxzhNjNPGOF2M08c4Q4wzxjhTjDPHOEuMs8Y4W4yzxzhHjHPGOFeMc8c4T4zzxjhfjPPHuECMC8a4UIwLx7hIjIvGuFiMi8e4RIxLxrhUjMS4dIzLxLhsjMvFuHyMK8S4YowrxbhyjKvEuGqMq8W4eozDYlwjxjVjXCvGtWNcJ8Z1Y1wvxvVj3CDGDWPcKMaNY9wkxk1j3CzGzWPcIsYtY9wqxq1j3CbGbWPcLsbtY9whxh1j3CnGnWPcJcZdY9wtxt1j3CPGPWPcK8a9Y9wnxn1j3C/G/WM8IMYDYzwoxoNjPCTGQ2M8LMbDYzwixiNjPCrGo2M8JsZjYzwuxuNjPCHGE2M8KUZjPDnGU2I8NcbTYjw9xjNiPDPGs2I8O8ZzYjw3xvNiPD/GC2K8MMaLYrw4xktivDTGy2K8PMYrYrwyxqtivDrGa2K8NsbrYrw+xhtivDHGm2K8OcZbYrw1xttivD3GO2K8M8a7Yrw7xntivDfG+2K8P8YHYnwwxodifDjGR2J8NMbHYnw8xidifDLGp2IcxBjEGMYYxRjHmMSYxpjFmMdYxFjGWMVYx9jE2MbYxdjH+HSMz8T4bIzPxfh8jC/E+GKML8X4coyvxPhqjK/F+HqMb8T4Zoxvxfh2jO/E+G6M78X4fowfxPhhjB/F+HGMn8T4aYyfxfh5jF/E+GWMX8X4dYzfxPhtjN/F+H2MP8T4Y4w/xfhzjL/E+GuMv8X4e4x/xPhnjH/F+HeM/8T4b4z/xTg8xhExjoxxVIyjYxwT49gYhyQ4ToLjJjheguMnOEGCEyY4NMGJEpw4wUkSnDTByRKcPMEpEpwywakSnDrBaRKcNsHpEpw+wRkSnDHBmRKcOcFZEpw1wdkSnD3BORKcM8G5Epw7wXkSnDfB+RKcP8EFElwwwYUSXDjBRRJcNMHFElw8wSUSXDLBpRIkwaUTXCbBZRNcLsHlE1whwRUTXCnBlRNcJcFVE1wtwdUTHJbgGgmumeBaCa6d4DoJrpvgegmun+AGCW6Y4EYJbpzgJglumuBmCW6e4BYJbpngVgluneA2CW6b4HYJbp/gDgnumOBOCe6c4C4J7prgbgnunuAeCe6Z4F4J7p3gPgnum+B+Ce6f4AEJHpjgQQkenOAhCR6a4GEJHp7gEQkemeBRCR6d4DEJHpvgcQken+AJCZ6Y4EkJmuDJCZ6S4KkJnpbg6QmekeCZCZ6V4NkJnpPguQmel+D5CV6Q4IUJXpTgxQlekuClCV6W4OUJXpHglQleleDVCV6T4LUJXpfg9QnekOCNCd6U4M0J3pLgrQneluDtCd6R4J0J3pXg3Qnek+C9Cd6X4P0JPpDggwk+lODDCT6S4KMJPpbg4wk+keCTCT6V4CDBIMEwwSjBOMEkwTTBLME8wSLBMsEqwTrBJsE2wS7BPsGnE3wmwWcTfC7B5xN8IcEXE3wpwZcTfCXBVxN8LcHXE3wjwTcTfCvBtxN8J8F3E3wvwfcT/CDBDxP8KMGPE/wkwU8T/CzBzxP8IsEvE/wqwa8T/CbBbxP8LsHvE/whwR8T/CnBnxP8JcFfE/wtwd8T/CPBPxP8K8G/E/wnwX8T/C/B4QmOSHBkgqMSHJ3gmATHJjgkxXFSHDfF8VIcP8UJUpwwxaEpTpTixClOkuKkKU6W4uQpTpHilClOleLUKU6T4rQpTpfi9CnOkOKMKc6U4swpzpLirCnOluLsKc6R4pwpzpXi3CnOk+K8Kc6X4vwpLpDigikulOLCKS6S4qIpLpbi4ikukeKSKS6VIikuneIyKS6b4nIpLp/iCimumOJKKa6c4ioprpriaimunuKwFNdIcc0U10px7RTXSXHdFNdLcf0UN0hxwxQ3SnHjFDdJcdMUN0tx8xS3SHHLFLdKcesUt0lx2xS3S3H7FHdIcccUd0px5xR3SXHXFHdLcfcU90hxzxT3SnHvFPdJcd8U90tx/xQPSPHAFA9K8eAUD0nx0BQPS/HwFI9I8cgUj0rx6BSPSfHYFI9L8fgUT0jxxBRPStEUT07xlBRPTfG0FE9P8YwUz0zxrBTPTvGcFM9N8bwUz0/xghQvTPGiFC9O8ZIUL03xshQvT/GKFK9M8aoUr07xmhSvTfG6FK9P8YYUb0zxphRvTvGWFG9N8bYUb0/xjhTvTPGuFO9O8Z4U703xvhTvT/GBFB9M8aEUH07xkRQfTfGxFB9P8YkUn0zxqRQHKQYphilGKcYpJimmKWYp5ikWKZYpVinWKTYptil2KfYpPp3iMyk+m+JzKT6f4gspvpjiSym+nOIrKb6a4mspvp7iGym+meJbKb6d4jspvpvieym+n+IHKX6Y4kcpfpziJyl+muJnKX6e4hcpfpniVyl+neI3KX6b4ncpfp/iDyn+mOJPKf6c4i8p/pribyn+nuIfKf6Z4l8p/p3iPyn+m+J/KQ5PcUSKI1McleLoFMekODbFIRmOk+G4GY6X4fgZTpDhhBkOzXCiDCfOcJIMJ81wsgwnz3CKDKfMcKoMp85wmgynzXC6DKfPcIYMZ8xwpgxnznCWDGfNcLYMZ89wjgznzHCuDOfOcJ4M581wvgznz3CBDBfMcKEMF85wkQwXzXCxDBfPcIkMl8xwqQzJcOkMl8lw2QyXy3D5DFfIcMUMV8pw5QxXyXDVDFfLcPUMh2W4RoZrZrhWhmtnuE6G62a4XobrZ7hBhhtmuFGGG2e4SYabZrhZhptnuEWGW2a4VYZbZ7hNhttmuF2G22e4Q4Y7ZrhThjtnuEuGu2a4W4a7Z7hHhntmuFeGe2e4T4b7ZrhfhvtneECGB2Z4UIYHZ3hIhodmeFiGh2d4RIZHZnhUhkdneEyGx2Z4XIbHZ3hChidmeFKGZnhyhqdkeGqGp2V4eoZnZHhmhmdleHaG52R4bobnZXh+hhdkeGGGF2V4cYaXZHhphpdleHmGV2R4ZYZXZXh1htdkeG2G12V4fYY3ZHhjhjdleHOGt2R4a4a3ZXh7hndkeGeGd2V4d4b3ZHhvhvdleH+GD2T4YIYPZfhwho9k+GiGj2X4eIZPZPhkhk9lOMgwyDDMMMowzjDJMM0wyzDPsMiwzLDKsM6wybDNsMuwz/DpDJ/J8NkMn8vw+QxfyPDFDF/K8OUMX8nw1Qxfy/D1DN/I8M0M38rw7QzfyfDdDN/L8P0MP8jwwww/yvDjDD/J8NMMP8vw8wy/yPDLDL/K8OsMv8nw2wy/y/D7DH/I8McMf8rw5wx/yfDXDH/L8PcM/8jwzwz/yvDvDP/J8N8M/8tweIYjMhyZ4agMR2c4JsOxGQ7JcZwcx81xvBzHz3GCHCfMcWiOE+U4cY6T5DhpjpPlOHmOU+Q4ZY5T5Th1jtPkOG2O0+U4fY4z5DhjjjPlOHOOs+Q4a46z5Th7jnPkOGeOc+U4d47z5DhvjvPlOH+OC+S4YI4L5bhwjovkuGiOi+W4eI5L5LhkjkvlSI5L57hMjsvmuFyOy+e4Qo4r5rhSjivnuEqOq+a4Wo6r5zgsxzVyXDPHtXJcO8d1clw3x/VyXD/HDXLcMMeNctw4x01y3DTHzXLcPMctctwyx61y3DrHbXLcNsftctw+xx1y3DHHnXLcOcddctw1x91y3D3HPXLcM8e9ctw7x31y3DfH/XLcP8cDcjwwx4NyPDjHQ3I8NMfDcjw8xyNyPDLHo3I8Osdjcjw2x+NyPD7HE3I8MceTcjTHk3M8JcdTczwtx9NzPCPHM3M8K8ezczwnx3NzPC/H83O8IMcLc7wox4tzvCTHS3O8LMfLc7wixytzvCrHq3O8Jsdrc7wux+tzvCHHG3O8Kcebc7wlx1tzvC3H23O8I8c7c7wrx7tzvCfHe3O8L8f7c3wgxwdzfCjHh3N8JMdHc3wsx8dzfCLHJ3N8KsdBjkGOYY5RjnGOSY5pjlmOeY5FjmWOVY51jk2ObY5djn2OT+f4TI7P5vhcjs/n+EKOL+b4Uo4v5/hKjq/m+FqOr+f4Ro5v5vhWjm/n+E6O7+b4Xo7v5/hBjh/m+FGOH+f4SY6f5vhZjp/n+EWOX+b4VY5f5/hNjt/m+F2O3+f4Q44/5vhTjj/n+EuOv+b4W46/5/hHjn/m+FeOf+f4T47/5vhfjsNzHJHjyBxH5Tg6xzE5js1xSIHjFDhugeMVOH6BExQ4YYFDC5yowIkLnKTASQucrMDJC5yiwCkLnKrAqQucpsBpC5yuwOkLnKHAGQucqcCZC5ylwFkLnK3A2Quco8A5C5yrwLkLnKfAeQucr8D5C1ygwAULXKjAhQtcpMBFC1yswMULXKLAJQtcqkAKXLrAZQpctsDlCly+wBUKXLHAlQpcucBVCly1wNUKXL3AYQWuUeCaBa5V4NoFrlPgugWuV+D6BW5Q4IYFblTgxgVuUuCmBW5W4OYFblHglgVuVeDWBW5T4LYFblfg9gXuUOCOBe5U4M4F7lLgrgXuVuDuBe5R4J4F7lXg3gXuU+C+Be5X4P4FHlDggQUeVODBBR5S4KEFHlbg4QUeUeCRBR5V4NEFHlPgsQUeV+DxBZ5Q4IkFnlSgBZ5c4CkFnlrgaQWeXuAZBZ5Z4FkFnl3gOQWeW+B5BZ5f4AUFXljgRQVeXOAlBV5a4GUFXl7gFQVeWeBVBV5d4DUFXlvgdQVeX+ANBd5Y4E0F3lzgLQXeWuBtBd5e4B0F3lngXQXeXeA9Bd5b4H0F3l/gAwU+WOBDBT5c4CMFPlrgYwU+XuATBT5Z4FMFDgoMCgwLjAqMC0wKTAvMCswLLAosC6wKrAtsCmwL7ArsC3y6wGcKfLbA5wp8vsAXCnyxwJcKfLnAVwp8tcDXCny9wDcKfLPAtwp8u8B3Cny3wPcKfL/ADwr8sMCPCvy4wE8K/LTAzwr8vMAvCvyywK8K/LrAbwr8tsDvCvy+wB8K/LHAnwr8ucBfCvy1wN8K/L3APwr8s8C/Cvy7wH8K/LfA/wocXuCIAkcWOKrA0QWOKXBsgUNKHKfEcUscr8TxS5ygxAlLHFriRCVOXOIkJU5a4mQlTl7iFCVOWeJUJU5d4jQlTlvidCVOX+IMJc5Y4kwlzlziLCXOWuJsJc5e4hwlzlniXCXOXeI8Jc5b4nwlzl/iAiUuWOJCJS5c4iIlLlriYiUuXuISJS5Z4lIlUuLSJS5T4rIlLlfi8iWuUOKKJa5U4solrlLiqiWuVuLqJQ4rcY0S1yxxrRLXLnGdEtctcb0S1y9xgxI3LHGjEjcucZMSNy1xsxI3L3GLErcscasSty5xmxK3LXG7ErcvcYcSdyxxpxJ3LnGXEnctcbcSdy9xjxL3LHGvEvcucZ8S9y1xvxL3L/GAEg8s8aASDy7xkBIPLfGwEg8v8YgSjyzxqBKPLvGYEo8t8bgSjy/xhBJPLPGkEi3x5BJPKfHUEk8r8fQSzyjxzBLPKvHsEs8p8dwSzyvx/BIvKPHCEi8q8eISLynx0hIvK/HyEq8o8coSryrx6hKvKfHaEq8r8foSbyjxxhJvKvHmEm8p8dYSbyvx9hLvKPHOEu8q8e4S7ynx3hLvK/H+Eh8o8cESHyrx4RIfKfHREh8r8fESnyjxyRKfKnFQYlBiWGJUYlxiUmJaYlZiXmJRYlliVWJdYlNiW2JXYl/i0yU+U+KzJT5X4vMlvlDiiyW+VOLLJb5S4qslvlbi6yW+UeKbJb5V4tslvlPiuyW+V+L7JX5Q4oclflTixyV+UuKnJX5W4uclflHilyV+VeLXJX5T4rclflfi9yX+UOKPJf5U4s8l/lLiryX+VuLvJf5R4p8l/lXi3yX+U+K/Jf5X4vASR5Q4ssRRJY4ucUyJY0scUuE4FY5b4XgVjl/hBBVOWOHQCieqcOIKJ6lw0gonq3DyCqeocMoKp6pw6gqnqXDaCqercPoKZ6hwxgpnqnDmCmepcNYKZ6tw9grnqHDOCueqcO4K56lw3grnq3D+CheocMEKF6pw4QoXqXDRChercPEKl6hwyQqXqpAKl65wmQqXrXC5CpevcIUKV6xwpQpXrnCVCletcLUKV69wWIVrVLhmhWtVuHaF61S4boXrVbh+hRtUuGGFG1W4cYWbVLhphZtVuHmFW1S4ZYVbVbh1hdtUuG2F21W4fYU7VLhjhTtVuHOFu1S4a4W7Vbh7hXtUuGeFe1W4d4X7VLhvhftVuH+FB1R4YIUHVXhwhYdUeGiFh1V4eIVHVHhkhUdVeHSFx1R4bIXHVXh8hSdUeGKFJ1VohSdXeEqFp1Z4WoWnV3hGhWdWeFaFZ1d4ToXnVnhehedXeEGFF1Z4UYUXV3hJhZdWeFmFl1d4RYVXVnhVhVdXeE2F11Z4XYXXV3hDhTdWeFOFN1d4S4W3VnhbhbdXeEeFd1Z4V4V3V3hPhfdWeF+F91f4QIUPVvhQhQ9X+EiFj1b4WIWPV/hEhU9W+FSFgwqDCsMKowrjCpMK0wqzCvMKiwrLCqsK6wqbCtsKuwr7Cp+u8JkKn63wuQqfr/CFCl+s8KUKX67wlQpfrfC1Cl+vcMiQIUPerPCtCt+u8J0K363wvQrfr/CDCj+s8KMKP67wkwo/rfCzCj+v8IsKv6zwqwq/rvCbCr+t8LsKv6/whwp/rPCnCn+u8JcKf63wtwp/r/CPCv+s8K8K/67wnwr/rfC/CodXOKLCkRWOqnB0hWMqHPu/7hrHqXHcGsercfwaJ6hxwhqH1jhRjRPXOEmNk9Y4WY2T1zhFjVPWOFWNU9c4TY3T1jhdjdPXOEONM9Y4U40z1zhLjbPWOFuNs9c4R41z1jhXjXPXOE+N89Y4X43z17hAjQvWuFCNC9e4SI2L1rhYjYvXuESNS9a4VI3UuHSNy9S4bI3L1bh8jSvUuGKNK9W4co2r1LhqjavVuHqNw2pco8Y1a1yrxrVrXKfGdWtcr8b1a9ygxg1r3KjGjWvcpMZNa9ysxs1r3KLGLWvcqsata9ymxm1r3K7G7WvcocYda9ypxp1r3KXGXWvcrcbda9yjxj1r3KvGvWvcp8Z9a9yvxv1rPKDGA2s8qMaDazykxkNrPKzGw2s8osYjazyqxqNrPKbGY2s8rsbjazyhxhNrPKlGazy5xlNqPLXG02o8vcYzajyzxrNqPLvGc2o8t8bzajy/xgtqvLDGi2q8uMZLary0xstqvLzGK2q8ssarary6xmtqvLbG62q8vsYbaryxxptqvLnGW2q8tcbbary9xjtqvLPGu2q8u8Z7ary3xvtqvL/GB2p8sMaHany4xkdqfLTGx2p8vMYnanyyxqdqHNQY1BjWGNUY15jUmNaY1ZjXWNRY1ljVWNfY1NjW2NXY1/h0jc/U+GyNz9X4fI0v1PhijS/V+HKNr9T4ao2v1fh6jW/U+GaNb9X4do3v1Phuje/V+H6NH9T4YY0f1fhxjZ/U+GmNn9X4eY1f1PhljV/V+HWN39T4bY3f1fh9jT/U+GONP9X4c42/1Phrjb/V+HuNf9T4Z41/1fh3jf/U+G+N/9U4vMYRNY6scVSNo2scU+PYGoc0OE6D4zY4XoPjNzhBgxM2OLTBiRqcuMFJGpy0wckanLzBKRqcssGpGpy6wWkanLbB6RqcvsEZGpyxwZkanLnBWRqctcHZGpy9wTkanLPBuRqcu8F5Gpy3wfkanL/BBRpcsMGFGly4wUUaXLTBxRpcvMElGlyywaUapMGlG1ymwWUbXK7B5RtcocEVG1ypwZUbXKXBVRtcrcHVGxzW4BoNrtngWg2u3eA6Da7b4HoNrt/gBg1u2OBGDW7c4CYNbtrgZg1u3uAWDW7Z4FYNbt3gNg1u2+B2DW7f4A4N7tjgTg3u3OAuDe7a4G4N7t7gHg3u2eBeDe7d4D4N7tvgfg3u3+ABDR7Y4EENHtzgIQ0e2uBhDR7e4BENHtngUQ0e3eAxDR7b4HENHt/gCQ2e2OBJDdrgyQ2e0uCpDZ7W4OkNntHgmQ2e1eDZDZ7T4LkNntfg+Q1e0OCFDV7U4MUNXtLgpQ1e1uDlDV7R4JUNXtXg1Q1e0+C1DV7X4PUN3tDgjQ3e1ODNDd7S4K0N3tbg7Q3e0eCdDd7V4N0N3tPgvQ3e1+D9DT7Q4IMNPtTgww0+0uCjDT7W4OMNPtHgkw0+1eCgwaDBsMGowbjBpMG0wazBvMGiwbLBqsG6wabBtsGuwb7Bpxt8psFnG3yuwecbfKHBFxt8qcGXG3ylwVcbfK3B1xt8o8E3G3yrwbcbfKfBdxt8r8H3G/ygwQ8b/KjBjxv8pMFPG/yswc8b/KLBLxv8qsGvG/ymwW8b/K7B7xv8ocEfG/ypwZ8b/KXBXxv8rcHfG/yjwT8b/KvBvxv8p8F/G/yvweENjmhwZIOjGhzd4JgGxzY4pMVxWhy3xfFaHL/FCVqcsMWhLU7U4sQtTtLipC1O1uLkLU7R4pQtTtXi1C1O0+K0LU7X4vQtztDijC3O1OLMLc7S4qwtztbi7C3O0eKcLc7V4twtztPivC3O1+L8LS7Q4oItLtTiwi0u0uKiLS7W4uItLtHiki0u1SItLt3iMi0u2+JyLS7f4gotrtjiSi2u3OIqLa7a4motrt7isBbXaHHNFtdqce0W12lx3RbXa3H9FjdoccMWN2px4xY3aXHTFjdrcfMWt2hxyxa3anHrFrdpcdsWt2tx+xZ3aHHHFndqcecWd2lx1xZ3a3H3Fvdocc8W92px7xb3aXHfFvdrcf8WD2jxwBYPavHgFg9p8dAWD2vx8BaPaPHIFo9q8egWj2nx2BaPa/H4Fk9o8cQWT2rRFk9u8ZQWT23xtBZPb/GMFs9s8awWz27xnBbPbfG8Fs9v8YIWL2zxohYvbvGSFi9t8bIWL2/xihavbPGqFq9u8ZoWr23xuhavb/GGFm9s8aYWb27xlhZvbfG2Fm9v8Y4W72zxrhbvbvGeFu9t8b4W72/xgRYfbPGhFh9u8ZEWH23xsRYfb/GJFp9s8akWBy0GLYYtRi3GLSYtpi1mLeYtFi2WLVYt1i02LbYtdi32LT7d4jMtPtvicy0+3+ILLb7Y4kstvtziKy2+2uJrLb7e4hstvtniWy2+3eI7Lb7b4nstvt/iBy1+2OJHLX7c4ictftriZy1+3uIXLX7Z4lctft3iNy1+2+J3LX7f4g8t/tjiTy3+3OIvLf7a4m8t/t7iHy3+2eJfLf7d4j8t/tvify0Ob3FEiyNbHNXi6BbHtDi2xSEdjtPhuB2O1+H4HU7Q4YQdDu1wog4n7nCSDiftcLIOJ+9wig6n7HCqDqfucJoOp+1wug6n73CGDmfscKYOZ+5wlg5n7XC2DmfvcI4O5+xwrg7n7nCeDuftcL4O5+9wgQ4X7HChDhfucJEOF+1wsQ4X73CJDpfscKkO6XDpDpfpcNkOl+tw+Q5X6HDFDlfqcOUOV+lw1Q5X63D1Dod1uEaHa3a4Vodrd7hOh+t2uF6H63e4QYcbdrhRhxt3uEmHm3a4WYebd7hFh1t2uFWHW3e4TYfbdrhdh9t3uEOHO3a4U4c7d7hLh7t2uFuHu3e4R4d7drhXh3t3uE+H+3a4X4f7d3hAhwd2eFCHB3d4SIeHdnhYh4d3eESHR3Z4VIdHd3hMh8d2eFyHx3d4QocndnhSh3Z4coendHhqh6d1eHqHZ3R4ZodndXh2h+d0eG6H53V4focXdHhhhxd1eHGHl3R4aYeXdXh5h1d0eGWHV3V4dYfXdHhth9d1eH2HN3R4Y4c3dXhzh7d0eGuHt3V4e4d3dHhnh3d1eHeH93R4b4f3dXh/hw90+GCHD3X4cIePdPhoh491+HiHT3T4ZIdPdTjoMOgw7DDqMO4w6TDtMOsw77DosOyw6rDusOmw7bDrsO/w6Q6f6fDZDp/r8PkOX+jwxQ5f6vDlDl/p8NUOX+vw9Q7f6PDNDt/q8O0O3+nw3Q7f6/D9Dj/o8MMOP+rw4w4/6fDTDj/r8PMOv+jwyw6/6vDrDr/p8NsOv+vw+w5/6PDHDn/q8OcOf+nw1w5/6/D3Dv/o8M8O/+rw7w7/6fDfDv/rcHiHIzoc2eGoDkd3OKbDsR0O6XGcHsftcbwex+9xgh4n7HFojxP1OHGPk/Q4aY+T9Th5j1P0OGWPU/U4dY/T9Dhtj9P1OH2PM/Q4Y48z9Thzj7P0OGuPs/U4e49z9Dhnj3P1OHeP8/Q4b4/z9Th/jwv0uGCPC/W4cI+L9Lhoj4v1uHiPS/S4ZI9L9UiPS/e4TI/L9rhcj8v3uEKPK/a4Uo8r97hKj6v2uFqPq/c4rMc1elyzx7V6XLvHdXpct8f1ely/xw163LDHjXrcuMdNety0x8163LzHLXrcssetety6x2163LbH7Xrcvscdetyxx5163LnHXXrctcfdety9xz163LPHvXrcu8d9ety3x/163L/HA3o8sMeDejy4x0N6PLTHw3o8vMcjejyyx6N6PLrHY3o8tsfjejy+xxN6PLHHk3q0x5N7PKXHU3s8rcfTezyjxzN7PKvHs3s8p8dzezyvx/N7vKDHC3u8qMeLe7ykx0t7vKzHy3uGXdHjlT1e1ePVPV7T47U9Xtfj9T3e0OONPd7U48093tLjrT3e1uPtPd7R45093tXj3T3e0+O9Pd7X4/09PtDjgz0+1OPDPT7S46M9Ptbj4z0+0eOTPT7V46DH/wsAAP//75LhqA==")

3m10.869271471s ago: executing program 0 (id=450):
r0 = timerfd_create(0x9, 0x800)
timerfd_settime(r0, 0x3, &(0x7f00000006c0)={{}, {0x0, 0x989680}}, 0x0)
timerfd_gettime(r0, &(0x7f0000000000))

2m55.713381788s ago: executing program 32 (id=450):
r0 = timerfd_create(0x9, 0x800)
timerfd_settime(r0, 0x3, &(0x7f00000006c0)={{}, {0x0, 0x989680}}, 0x0)
timerfd_gettime(r0, &(0x7f0000000000))

40.505239283s ago: executing program 2 (id=1946):
r0 = socket(0xa, 0x3, 0x3a)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000500)={&(0x7f0000000080), 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r1, 0x125, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x28040}, 0x1)
r3 = io_uring_setup(0x7882, &(0x7f0000000a40)={0x0, 0x17fe, 0x2, 0xfffffffe, 0x3bd})
r4 = socket$rxrpc(0x21, 0x2, 0xa)
listen(r4, 0x4)
close_range(r3, r4, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)='devtmpfs\x00', 0x4000, 0x0)
msgsnd(0x0, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], 0xc56, 0x0)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000002880)={{0x2, 0x0, 0x0, 0x0, 0x0, 0x1a, 0x7}, 0x0, 0x0, 0x1, 0x1414, 0x10001, 0x4e, 0xffffffffffffffca, 0x8, 0x8580, 0x3})

40.053381859s ago: executing program 2 (id=1947):
syz_usb_connect(0x5, 0x51, &(0x7f0000000b80)={{0x12, 0x1, 0x0, 0xb, 0xe9, 0x9c, 0x10, 0x499, 0x1018, 0xb2da, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3f, 0x1, 0x2, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x4, 0x0, 0x2, 0x2c, 0xb3, 0xd8, 0x0, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x7ff}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x1, 0x3, 0x80}, [@acm={0x4, 0x24, 0x2, 0x9}]}], [{{0x9, 0x5, 0x1, 0x2, 0x200, 0x1, 0x5, 0x5}}, {{0x9, 0x5, 0xc, 0x3, 0x200, 0x6, 0xd, 0x4}}]}}]}}]}}, 0x0)

38.444184627s ago: executing program 2 (id=1953):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x1c, 0x44, 0x107, 0xfffffffc, 0x25dfdbfd, {0x1, 0x7c}, [@nested={0x8, 0x3, 0x0, 0x1, [@generic="9e717292"]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)

38.387246224s ago: executing program 2 (id=1954):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x804810, &(0x7f0000000a40), 0x26, 0x75e, &(0x7f0000001280)="$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")
chdir(&(0x7f0000000240)='./file0\x00')
open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]})
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4fe, &(0x7f0000000a40)="$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")
mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, 0x0)
close(0xffffffffffffffff)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)

37.972709367s ago: executing program 2 (id=1957):
r0 = socket(0x40000000015, 0x5, 0x0)
setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4)

36.938193604s ago: executing program 2 (id=1959):
syslog(0x2, &(0x7f0000001740), 0x0)

35.717699643s ago: executing program 33 (id=1959):
syslog(0x2, &(0x7f0000001740), 0x0)

1.681213916s ago: executing program 3 (id=2295):
prctl$PR_GET_SPECULATION_CTRL(0x23, 0x4, 0x4)

1.632715806s ago: executing program 3 (id=2296):
r0 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x8, 0x2c}, 0x80, &(0x7f0000000400)=[{&(0x7f00000002c0)="ff", 0x14}], 0x1}, 0x480c0)

1.632479734s ago: executing program 3 (id=2297):
syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003d37d840890457e00000000000010902240003000000000904"], 0x0)

429.825864ms ago: executing program 3 (id=2302):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000140)={0x42, r1, 0x1, 0x80000000, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x82}}]}, 0x58}}, 0x0)

348.402142ms ago: executing program 3 (id=2304):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000340)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

252.669327ms ago: executing program 1 (id=2307):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
write$UHID_INPUT(r0, &(0x7f0000010140)={0x8, {"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", 0x1000}}, 0x1006)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x5, 0x10012, r0, 0x0)
fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1)

252.350295ms ago: executing program 3 (id=2308):
syz_open_procfs(0x0, 0x0)
mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0)
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe4, 0xc5, 0xad, 0x10, 0x61d, 0xc020, 0x9c15, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x10, 0x2d, 0xb0}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000040)={0x44, &(0x7f00000000c0)=ANY=[@ANYRES16=r0, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)

252.241117ms ago: executing program 1 (id=2309):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r0, 0x11, 0x12, &(0x7f0000000180)=0x80000001, 0x4)

251.97016ms ago: executing program 4 (id=2310):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0)
sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x40000)

182.393364ms ago: executing program 1 (id=2311):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x6c, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x80ffffff}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0)

182.075089ms ago: executing program 4 (id=2312):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x24, 0xf, 0x6, 0x301, 0x0, 0x0, {0x5}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x2404c890}, 0x40000000)

181.881546ms ago: executing program 1 (id=2313):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, <r1=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, <r2=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, &(0x7f0000000280)={0x48, 0x12, r2})

122.725424ms ago: executing program 4 (id=2314):
r0 = fanotify_init(0x20, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = dup(r1)
fanotify_mark(r0, 0x201, 0x20, r2, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

69.13826ms ago: executing program 4 (id=2315):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70)

68.72935ms ago: executing program 1 (id=2316):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000340)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r1, 0x0, 0x0, 0x0, <r2=>0x0})
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc, 0x0, <r3=>0x0})
ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f00000002c0)={0x18, 0x3, r2, r3, <r4=>0x0, 0x0, 0xdead, 0x4, &(0x7f0000000280)})
ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r0, 0x3b8c, &(0x7f0000000100)={0x30, r4, 0x1, 0x0, 0x0, 0x0, 0x1000, 0x0})

68.287851ms ago: executing program 4 (id=2317):
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8000}, 0x8)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000080)='name', 0x0, 0x0)
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r0, &(0x7f0000001400)=[{{&(0x7f0000001080)={0xa, 0x4e22, 0x1, @private2={0xfc, 0x2, '\x00', 0x20}, 0x10001}, 0x1c, &(0x7f00000010c0)=[{&(0x7f0000001480)="0e", 0x1}], 0x1}}], 0x1, 0x20000011)
shutdown(r0, 0x1)
getsockopt$bt_hci(r0, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9)

203.73µs ago: executing program 1 (id=2318):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb8af}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000600)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18)
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmmsg$unix(r1, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)

0s ago: executing program 4 (id=2319):
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x12, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000025c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0xff7fffff)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x39383ddd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x12}, 0x94)

kernel console output (not intermixed with test programs):

  221.303737][ T5862] usb 2-1: Manufacturer: syz
[  221.305624][ T5862] usb 2-1: SerialNumber: syz
[  221.375443][   T33] audit: type=1326 audit(1752296724.055:9444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10037 comm="syz.2.1605" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f220d38e929 code=0x0
[  221.521162][ T5862] kvaser_usb 2-1:16.229: error -ENODEV: Cannot get usb endpoint(s)
[  221.533699][ T5862] usb 2-1: USB disconnect, device number 26
[  221.675436][T10045] loop3: detected capacity change from 0 to 4096
[  221.678549][T10047] loop2: detected capacity change from 0 to 512
[  221.692978][T10047] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  221.697068][T10047] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[  221.697558][T10045] ntfs3(loop3): ino=19, mi_enum_attr
[  221.702261][T10045] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  221.712245][T10045] ntfs3(loop3): try to read out of volume at offset 0x3fffffc7000
[  221.715212][T10045] ntfs3(loop3): ino=21, The size of extended attributes must not exceed 64KiB
[  221.715570][T10047] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended
[  221.725203][T10047] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  221.728385][T10047] System zones: 0-2, 18-18, 34-35
[  221.743934][T10047] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  221.797054][ T5840] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  221.808897][T10053] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  222.148175][T10070] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  222.152418][T10070] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  222.156076][T10070] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  222.159886][T10070] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  222.163293][T10070] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  222.166956][T10070] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  222.170829][T10070] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  222.174163][T10070] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  222.177201][T10070] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  222.180315][T10070] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  222.462058][T10080] loop3: detected capacity change from 0 to 256
[  222.490705][T10080] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  222.592944][T10084] loop2: detected capacity change from 0 to 512
[  222.636488][T10084] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  222.650885][T10084] ext4 filesystem being mounted at /571/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  222.765570][ T5840] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  223.383295][T10092] loop3: detected capacity change from 0 to 32768
[  223.387992][T10092] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1629 (10092)
[  223.402181][T10092] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  223.407037][T10092] BTRFS info (device loop3): using sha256 (sha256-x86_64) checksum algorithm
[  223.412117][T10092] BTRFS info (device loop3): using free-space-tree
[  223.495539][ T7324] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  223.961898][T10128] loop3: detected capacity change from 0 to 16
[  223.979271][T10128] erofs (device loop3): mounted with root inode @ nid 36.
[  224.070927][T10132] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1641'.
[  224.091795][T10133] netlink: 'syz.2.1640': attribute type 1 has an invalid length.
[  224.157075][T10121] loop1: detected capacity change from 0 to 32768
[  224.163413][T10133] bond4: entered promiscuous mode
[  224.165431][T10133] bond4: entered allmulticast mode
[  224.170742][T10121] XFS (loop1): DAX unsupported by block device. Turning off DAX.
[  224.175118][T10133] 8021q: adding VLAN 0 to HW filter on device bond4
[  224.178950][T10121] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  224.197852][T10133] bridge1: entered promiscuous mode
[  224.213684][T10133] bridge1: entered allmulticast mode
[  224.219146][T10133] bond4: (slave bridge1): Enslaving as a backup interface with an up link
[  224.228661][T10121] XFS (loop1): Ending clean mount
[  224.249383][T10121] XFS (loop1): Quotacheck needed: Please wait.
[  224.293262][T10121] XFS (loop1): Quotacheck: Done.
[  224.333509][T10149] syz.3.1644: attempt to access beyond end of device
[  224.333509][T10149] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0
[  224.339918][T10149] efs: cannot read volume header
[  224.359042][   T33] audit: type=1804 audit(1752296727.035:9445): pid=10121 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1636" name="/newroot/574/file0/file1" dev="loop1" ino=4422 res=1 errno=0
[  224.397689][ T5833] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  224.570257][ T5862] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  224.744515][ T5862] usb 3-1: Using ep0 maxpacket: 16
[  224.748141][ T5862] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0
[  224.757082][ T5862] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0
[  224.772937][ T5862] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  224.777041][ T5862] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  224.791732][ T5862] usb 3-1: New USB device found, idVendor=1608, idProduct=0303, bcdDevice=a1.cb
[  224.803496][ T5862] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  224.806887][ T5862] usb 3-1: Product: syz
[  224.808983][ T5862] usb 3-1: Manufacturer: syz
[  224.811885][ T5862] usb 3-1: SerialNumber: syz
[  224.828678][ T5862] usb 3-1: config 0 descriptor??
[  224.832742][ T5862] io_ti 3-1:0.0: required endpoints missing
[  224.964451][T10177] loop3: detected capacity change from 0 to 1764
[  225.035348][ T5862] usb 3-1: USB disconnect, device number 25
[  225.107231][T10184] loop3: detected capacity change from 0 to 128
[  225.123288][T10184] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  225.128491][T10184] ext4 filesystem being mounted at /345/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  225.153453][T10178] loop1: detected capacity change from 0 to 32768
[  225.158059][T10178] XFS: attr2 mount option is deprecated.
[  225.158437][ T7324] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  225.183644][T10178] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  225.213417][T10178] XFS (loop1): Ending clean mount
[  225.220289][T10178] XFS (loop1): Quotacheck needed: Please wait.
[  225.257039][T10178] XFS (loop1): Quotacheck: Done.
[  225.315910][ T5833] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  225.754530][T10206] loop3: detected capacity change from 0 to 8
[  225.762221][T10206] unable to read xattr id index table
[  226.683504][T10227] loop1: detected capacity change from 0 to 64
[  226.770839][   T54] Bluetooth: hci3: command tx timeout
[  227.097074][T10252] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1685'.
[  227.137801][T10254] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  227.216732][T10258] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1687'.
[  227.748694][T10295] loop2: detected capacity change from 0 to 1024
[  227.754545][T10295] EXT4-fs: Ignoring removed orlov option
[  227.834442][T10295] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  227.905503][   T33] audit: type=1326 audit(1752296986.577:9446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10290 comm="syz.2.1704" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f220d38e929 code=0x7ffc0000
[  227.919646][   T33] audit: type=1326 audit(1752296986.577:9447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10290 comm="syz.2.1704" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f220d38e929 code=0x7ffc0000
[  227.928788][   T33] audit: type=1326 audit(1752296986.577:9448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10290 comm="syz.2.1704" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f220d38e929 code=0x7ffc0000
[  227.939968][   T33] audit: type=1326 audit(1752296986.577:9449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10290 comm="syz.2.1704" exe="/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f220d38e929 code=0x7ffc0000
[  227.948547][   T33] audit: type=1326 audit(1752296986.577:9450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10290 comm="syz.2.1704" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f220d38e929 code=0x7ffc0000
[  227.957461][   T33] audit: type=1326 audit(1752296986.607:9451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10290 comm="syz.2.1704" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f220d38e929 code=0x7ffc0000
[  227.969635][   T33] audit: type=1326 audit(1752296986.607:9452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10290 comm="syz.2.1704" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f220d38e929 code=0x7ffc0000
[  227.978440][   T33] audit: type=1326 audit(1752296986.607:9453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10290 comm="syz.2.1704" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f220d38e929 code=0x7ffc0000
[  227.987702][   T33] audit: type=1326 audit(1752296986.607:9454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10290 comm="syz.2.1704" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f220d38e929 code=0x7ffc0000
[  227.996794][   T33] audit: type=1326 audit(1752296986.607:9455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10290 comm="syz.2.1704" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f220d38e929 code=0x7ffc0000
[  228.285955][ T5840] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  228.705171][ T5218] Bluetooth: hci2: unexpected event 0x2f length: 763 > 260
[  229.037643][T10328] loop3: detected capacity change from 0 to 32768
[  229.056312][T10328] JBD2: Ignoring recovery information on journal
[  229.065114][T10328] jbd2_journal_bmap: journal block not found at offset 32 on loop3-75
[  229.068770][T10328] JBD2: bad block at offset 32
[  229.074117][T10328] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  229.079667][ T5882] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  229.126037][ T7324] ocfs2: Unmounting device (7,3) on (node local)
[  229.299598][ T5882] usb 2-1: Using ep0 maxpacket: 8
[  229.326974][ T5882] usb 2-1: config 162 has an invalid interface number: 45 but max is 1
[  229.375207][ T5882] usb 2-1: config 162 has an invalid interface number: 87 but max is 1
[  229.379005][ T5882] usb 2-1: config 162 has no interface number 0
[  229.388650][ T5882] usb 2-1: config 162 has no interface number 1
[  229.467744][ T5882] usb 2-1: config 162 interface 45 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  229.500272][ T5882] usb 2-1: config 162 interface 87 altsetting 1 has an invalid descriptor for endpoint zero, skipping
[  229.518562][ T5882] usb 2-1: config 162 interface 87 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86
[  229.535780][ T5882] usb 2-1: config 162 interface 87 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024
[  229.554933][ T5882] usb 2-1: config 162 interface 87 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024
[  229.576751][ T5882] usb 2-1: config 162 interface 87 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  229.582806][T10346] loop3: detected capacity change from 0 to 4096
[  229.586313][ T5882] usb 2-1: config 162 interface 45 has no altsetting 0
[  229.589211][ T5882] usb 2-1: config 162 interface 87 has no altsetting 0
[  229.595864][ T5882] usb 2-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice=32.4e
[  229.601859][ T5882] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  229.605179][ T5882] usb 2-1: Product: syz
[  229.606643][ T5882] usb 2-1: Manufacturer: syz
[  229.608205][ T5882] usb 2-1: SerialNumber: syz
[  229.694730][T10350] geneve2: entered promiscuous mode
[  229.697000][T10350] geneve2: entered allmulticast mode
[  229.827739][ T5882] pl2303 2-1:162.45: required endpoints missing
[  229.832032][ T5882] pl2303 2-1:162.87: required interrupt-in endpoint missing
[  229.840474][ T5882] usb 2-1: USB disconnect, device number 27
[  230.265046][T10362] loop3: detected capacity change from 0 to 128
[  230.286066][T10358] loop2: detected capacity change from 0 to 32768
[  230.313784][T10358] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  230.331272][T10358] XFS (loop2): Ending clean mount
[  230.337335][T10358] XFS (loop2): Quotacheck needed: Please wait.
[  230.337894][T10372] loop3: detected capacity change from 0 to 1024
[  230.389446][T10358] XFS (loop2): Quotacheck: Done.
[  230.489285][T10374] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1734'.
[  230.517557][ T5840] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  230.521401][   T54] Bluetooth: hci0: Opcode 0x206a failed: -110
[  230.531001][   T54] Bluetooth: hci0: command 0x0406 tx timeout
[  230.779841][T10384] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false
[  230.868163][T10386] loop3: detected capacity change from 0 to 512
[  230.876707][T10386] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
[  230.892544][T10386] EXT4-fs (loop3): orphan cleanup on readonly fs
[  230.908744][T10386] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt.
[  230.944356][T10386] EXT4-fs (loop3): Remounting filesystem read-only
[  230.948010][T10386] EXT4-fs (loop3): 1 truncate cleaned up
[  230.956657][T10386] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  230.996771][ T7324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  231.135503][T10402] CIFS mount error: No usable UNC path provided in device string!
[  231.135503][T10402] 
[  231.139932][T10402] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  231.299684][ T5882] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  231.424674][T10404] loop2: detected capacity change from 0 to 32768
[  231.434905][T10404] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  231.454512][ T5882] usb 4-1: config 102 has an invalid interface number: 120 but max is 0
[  231.458124][ T5882] usb 4-1: config 102 has no interface number 0
[  231.463709][T10404] XFS (loop2): Ending clean mount
[  231.467429][ T5882] usb 4-1: config 102 interface 120 has no altsetting 0
[  231.474257][ T5882] usb 4-1: New USB device found, idVendor=10fd, idProduct=de00, bcdDevice= 0.01
[  231.478136][ T5882] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  231.483136][ T5882] usb 4-1: Product: syz
[  231.485420][ T5882] usb 4-1: Manufacturer: syz
[  231.489256][ T5882] usb 4-1: SerialNumber: syz
[  231.523849][ T5840] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  231.715753][ T5882] go7007 4-1:102.120: The Lifeview TV Walker Ultra is not supported. Sorry!
[  231.741580][ T5882] usb 4-1: USB disconnect, device number 19
[  232.048251][T10434] loop2: detected capacity change from 0 to 1024
[  232.051957][T10434] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  232.056380][T10434] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  232.059156][T10434] EXT4-fs (loop2): orphan cleanup on readonly fs
[  232.065967][T10434] EXT4-fs error (device loop2): __ext4_get_inode_loc:4792: comm syz.2.1757: Invalid inode table block 0 in block_group 0
[  232.073834][T10434] EXT4-fs (loop2): Remounting filesystem read-only
[  232.076793][T10434] EXT4-fs (loop2): 1 truncate cleaned up
[  232.082846][T10434] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  232.094318][T10434] EXT4-fs (loop2): shut down requested (1)
[  232.114209][ T5840] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  232.487829][T10457] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1768'.
[  233.120298][   T33] kauditd_printk_skb: 29 callbacks suppressed
[  233.120309][   T33] audit: type=1326 audit(1752296991.807:9483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10474 comm="syz.1.1774" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9ce378e929 code=0x0
[  233.423000][ T5882] usb 3-1: new full-speed USB device number 26 using dummy_hcd
[  233.621591][ T5882] usb 3-1: config 0 has an invalid interface number: 230 but max is 0
[  233.625626][ T5882] usb 3-1: config 0 has no interface number 0
[  233.628207][ T5882] usb 3-1: config 0 interface 230 has no altsetting 0
[  233.639114][ T5882] usb 3-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05
[  233.644241][ T5882] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  233.647723][ T5882] usb 3-1: Product: syz
[  233.649687][ T5882] usb 3-1: Manufacturer: syz
[  233.651645][ T5882] usb 3-1: SerialNumber: syz
[  233.671771][ T5882] usb 3-1: config 0 descriptor??
[  233.681516][ T5882] ums-usbat 3-1:0.230: USB Mass Storage device detected
[  233.707741][ T5882] ums-usbat 3-1:0.230: Quirks match for vid 0781 pid 0005: 1
[  233.933075][ T5883] usb 3-1: USB disconnect, device number 26
[  234.124127][T10491] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  235.122907][T10500] loop2: detected capacity change from 0 to 32768
[  235.137949][T10504] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1784'.
[  235.225613][T10500] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,erasure_code,recovery_pass_last=initialize_subvolumes,nojournal_transaction_names,read_only,reconstruct_alloc
[  235.225642][T10500]   allowing incompatible features above 0.0: (unknown version)
[  235.225652][T10500]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  235.248321][T10500] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0
[  235.269126][T10500] bcachefs (loop2): recovering from clean shutdown, journal seq 10
[  235.272419][T10500] bcachefs (loop2): Version upgrade required:
[  235.272419][T10500] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[  235.272419][T10500] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive
[  235.272419][T10500]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance
[  235.302292][T10500] bcachefs (loop2): dropping and reconstructing all alloc info
[  235.333404][T10500] bcachefs (loop2): accounting_read... done
[  235.346118][T10500] bcachefs (loop2): alloc_read... done
[  235.350832][T10500] bcachefs (loop2): done starting filesystem
[  235.562057][ T5840] bcachefs (loop2): shutting down
[  235.627316][ T5840] bcachefs (loop2): shutdown complete
[  237.343235][T10519] loop2: detected capacity change from 0 to 32768
[  237.346975][T10519] XFS: noikeep mount option is deprecated.
[  237.392701][T10519] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  237.432435][T10519] XFS (loop2): Ending clean mount
[  237.457259][T10519] XFS (loop2): Quotacheck needed: Please wait.
[  237.597816][T10519] XFS (loop2): Quotacheck: Done.
[  237.666599][ T5840] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  238.228707][T10529] loop2: detected capacity change from 0 to 40427
[  238.235868][T10529] F2FS-fs (loop2): Invalid segment/section count (31 != 24 * 1)
[  238.239120][T10529] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  238.242904][T10529] F2FS-fs (loop2): heap/no_heap options were deprecated
[  238.247666][T10529] F2FS-fs (loop2): invalid crc value
[  238.335209][T10529] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  238.338093][T10529] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  238.454797][ T5840] syz-executor: attempt to access beyond end of device
[  238.454797][ T5840] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  238.467705][ T5840] CPU: 1 UID: 0 PID: 5840 Comm: syz-executor Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa-dirty #0 PREEMPT(full) 
[  238.467724][ T5840] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  238.467730][ T5840] Call Trace:
[  238.467735][ T5840]  <TASK>
[  238.467740][ T5840]  dump_stack_lvl+0x189/0x250
[  238.467759][ T5840]  ? __pfx_dump_stack_lvl+0x10/0x10
[  238.467768][ T5840]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  238.467781][ T5840]  ? __pfx_queue_work_on+0x10/0x10
[  238.467793][ T5840]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  238.467803][ T5840]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  238.467815][ T5840]  ? f2fs_hw_is_readonly+0x39b/0x470
[  238.467832][ T5840]  f2fs_handle_critical_error+0x37c/0x540
[  238.467846][ T5840]  f2fs_write_end_io+0x495/0x810
[  238.467853][ T5840]  ? blkg_put+0x22/0x240
[  238.467871][ T5840]  __submit_merged_bio+0x27a/0x6a0
[  238.467886][ T5840]  __submit_merged_write_cond+0x255/0x530
[  238.467900][ T5840]  f2fs_write_data_pages+0x261d/0x3000
[  238.467927][ T5840]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  238.467938][ T5840]  ? is_bpf_text_address+0x26/0x2b0
[  238.467953][ T5840]  ? arch_stack_walk+0xfc/0x150
[  238.467993][ T5840]  ? __lock_acquire+0xab9/0xd20
[  238.468009][ T5840]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  238.468021][ T5840]  do_writepages+0x32e/0x550
[  238.468036][ T5840]  ? do_raw_spin_unlock+0x4d/0x240
[  238.468049][ T5840]  filemap_fdatawrite+0x191/0x230
[  238.468059][ T5840]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  238.468089][ T5840]  ? do_raw_spin_unlock+0x4d/0x240
[  238.468101][ T5840]  f2fs_sync_dirty_inodes+0x31f/0x830
[  238.468116][ T5840]  f2fs_write_checkpoint+0x94a/0x1de0
[  238.468135][ T5840]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  238.468162][ T5840]  ? call_rcu+0x6ff/0x9c0
[  238.468174][ T5840]  ? lockdep_hardirqs_on+0x9c/0x150
[  238.468187][ T5840]  ? kill_f2fs_super+0x298/0x6c0
[  238.468197][ T5840]  kill_f2fs_super+0x2c3/0x6c0
[  238.468208][ T5840]  ? __pfx_kill_f2fs_super+0x10/0x10
[  238.468215][ T5840]  ? radix_tree_delete_item+0x2b6/0x400
[  238.468231][ T5840]  ? shrinker_free+0x2ce/0x3e0
[  238.468244][ T5840]  deactivate_locked_super+0xbc/0x130
[  238.468254][ T5840]  cleanup_mnt+0x425/0x4c0
[  238.468262][ T5840]  ? lockdep_hardirqs_on+0x9c/0x150
[  238.468275][ T5840]  task_work_run+0x1d4/0x260
[  238.468288][ T5840]  ? __pfx_task_work_run+0x10/0x10
[  238.468298][ T5840]  ? __x64_sys_umount+0x122/0x160
[  238.468310][ T5840]  ? exit_to_user_mode_loop+0x40/0x110
[  238.468320][ T5840]  exit_to_user_mode_loop+0xec/0x110
[  238.468329][ T5840]  do_syscall_64+0x2bd/0x3b0
[  238.468337][ T5840]  ? lockdep_hardirqs_on+0x9c/0x150
[  238.468348][ T5840]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  238.468355][ T5840]  ? exc_page_fault+0x9f/0xf0
[  238.468367][ T5840]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  238.468375][ T5840] RIP: 0033:0x7f220d38fc57
[  238.468386][ T5840] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  238.468393][ T5840] RSP: 002b:00007ffe1e93d5c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  238.468403][ T5840] RAX: 0000000000000000 RBX: 00007f220d410925 RCX: 00007f220d38fc57
[  238.468409][ T5840] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe1e93d680
[  238.468420][ T5840] RBP: 00007ffe1e93d680 R08: 0000000000000000 R09: 0000000000000000
[  238.468425][ T5840] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe1e93e710
[  238.468430][ T5840] R13: 00007f220d410925 R14: 000000000003a2ec R15: 00007ffe1e93e750
[  238.468444][ T5840]  </TASK>
[  238.468447][ T5840] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  239.088406][T10503] bond0: (slave bridge0): Releasing backup interface
[  239.091657][T10503] bridge0: port 2(bridge_slave_1) entered disabled state
[  239.094426][T10503] bridge0: port 1(bridge_slave_0) entered disabled state
[  239.137898][T10503] bridge_slave_0: left allmulticast mode
[  239.140461][T10503] bridge_slave_0: left promiscuous mode
[  239.142473][T10503] bridge0: port 1(bridge_slave_0) entered disabled state
[  239.148701][T10503] bridge_slave_1: left allmulticast mode
[  239.152700][T10503] bridge_slave_1: left promiscuous mode
[  239.154756][T10503] bridge0: port 2(bridge_slave_1) entered disabled state
[  239.168870][T10503] bond0: (slave bond_slave_0): Releasing backup interface
[  239.184610][T10503] bond0: (slave bond_slave_1): Releasing backup interface
[  239.220953][T10503] team0: Port device team_slave_0 removed
[  239.235765][T10503] team0: Port device team_slave_1 removed
[  239.238888][T10503] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  239.244580][T10503] batman_adv: batadv0: Removing interface: batadv_slave_0
[  239.250191][T10503] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  239.253061][T10503] batman_adv: batadv0: Removing interface: batadv_slave_1
[  239.279903][T10504] team0: Mode changed to "loadbalance"
[  239.338625][T10544] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1798'.
[  239.707684][T10559] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1805'.
[  239.780049][T10561] loop1: detected capacity change from 0 to 256
[  239.787450][T10561] exfat: Deprecated parameter 'utf8'
[  239.789725][T10561] exfat: Deprecated parameter 'utf8'
[  239.827707][T10561] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011ded, chksum : 0x9858084d, utbl_chksum : 0xe619d30d)
[  240.967581][T10579] serio: Serial port ptm0
[  242.108592][T10610] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1831'.
[  242.194843][T10602] loop1: detected capacity change from 0 to 32768
[  242.200360][T10602] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1825 (10602)
[  242.215527][T10602] BTRFS info (device loop1): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885
[  242.218978][T10602] BTRFS info (device loop1): using crc32c (crc32c-generic) checksum algorithm
[  242.228469][T10602] BTRFS info (device loop1): using free-space-tree
[  242.463664][ T5833] BTRFS info (device loop1): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885
[  242.467940][T10643] loop3: detected capacity change from 0 to 8
[  242.494607][T10643] SQUASHFS error: xz decompression failed, data probably corrupt
[  242.497838][T10643] SQUASHFS error: Failed to read block 0x108: -5
[  242.500461][T10643] SQUASHFS error: Unable to read metadata cache entry [106]
[  242.503308][T10643] SQUASHFS error: Unable to read inode 0x11f
[  242.624792][   T33] audit: type=1326 audit(1752297001.307:9484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10646 comm="syz.2.1842" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f220d38e929 code=0x7ffc0000
[  242.658686][   T33] audit: type=1326 audit(1752297001.307:9485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10646 comm="syz.2.1842" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f220d38e929 code=0x7ffc0000
[  242.682515][   T33] audit: type=1326 audit(1752297001.317:9486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10646 comm="syz.2.1842" exe="/syz-executor" sig=0 arch=c000003e syscall=460 compat=0 ip=0x7f220d38e929 code=0x7ffc0000
[  242.709661][   T33] audit: type=1326 audit(1752297001.317:9487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10646 comm="syz.2.1842" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f220d38e929 code=0x7ffc0000
[  242.717009][   T33] audit: type=1326 audit(1752297001.317:9488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10646 comm="syz.2.1842" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f220d38e929 code=0x7ffc0000
[  242.826328][T10649] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1843'.
[  243.093577][T10643] loop3: detected capacity change from 0 to 32768
[  243.121226][T10643] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  243.162959][T10643] XFS (loop3): Ending clean mount
[  243.214530][ T7324] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  243.403418][T10659] loop1: detected capacity change from 0 to 32768
[  243.431612][T10659] bcachefs (/dev/loop1): error validating superblock: Invalid superblock section clean: entry type (unknown jset_entry_type 38) overruns end of section
[  243.431612][T10659] clean (size 2912):
[  243.431612][T10659] flags:          0
[  243.431612][T10659] journal_seq:    8
[  243.431612][T10659]                            log: 
[  243.431612][T10659] usage: type=key_version v=0
[  243.431612][T10659] usage: type=reserved v=0
[  243.431612][T10659] usage: type=reserved v=0
[  243.431612][T10659] usage: type=reserved v=0
[  243.431612][T10659] usage: type=reserved v=0
[  243.431612][T10659] data_usage: btree: 1/1 [0]=2816
[  243.431612][T10659] data_usage: journal: 1/1 [0]=0
[  243.431612][T10659] 
[  243.460504][T10659] bcachefs: bch2_fs_get_tree() error: invalid_sb_clean
[  243.584930][T10679] loop3: detected capacity change from 0 to 512
[  243.591957][T10672] loop2: detected capacity change from 0 to 32768
[  243.597142][T10679] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  243.603577][T10672] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  243.616273][T10679] EXT4-fs (loop3): 1 truncate cleaned up
[  243.635647][T10672] XFS (loop2): Ending clean mount
[  243.645464][T10679] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  243.656264][T10672] XFS (loop2): Quotacheck needed: Please wait.
[  243.700793][T10672] XFS (loop2): Quotacheck: Done.
[  243.761264][ T7324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  243.761849][T10693] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1854'.
[  243.816617][ T5840] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  243.832818][T10695] netlink: 312 bytes leftover after parsing attributes in process `syz.3.1855'.
[  244.332051][T10711] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  244.750724][T10717] serio: Serial port ptm0
[  246.936242][T10754] loop1: detected capacity change from 0 to 32768
[  247.210119][T10783] loop2: detected capacity change from 0 to 16
[  247.221302][T10783] erofs (device loop2): blkszbits 0 isn't supported
[  247.291694][T10785] loop3: detected capacity change from 0 to 4096
[  247.296091][T10785] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512).
[  247.357634][T10785] ntfs3(loop3): ino=1e, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" ni_find_attr
[  247.378575][T10785] ntfs3(loop3): ino=1e, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" ni_find_attr
[  247.400154][T10785] ntfs3(loop3): ino=1e, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" ni_find_attr
[  247.413897][T10785] ntfs3(loop3): ino=1e, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" ni_find_attr
[  247.425605][T10775] loop1: detected capacity change from 0 to 32768
[  247.427881][T10785] ntfs3(loop3): ino=1e, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" ntfs_rename
[  247.429711][T10775] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1888 (10775)
[  247.446614][T10775] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  247.451101][T10775] BTRFS info (device loop1): using sha256 (sha256-x86_64) checksum algorithm
[  247.455401][T10775] BTRFS info (device loop1): using free-space-tree
[  247.501988][T10775] BTRFS info (device loop1): rebuilding free space tree
[  247.539897][   T47] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  247.645245][ T5730] BTRFS info (device loop1): qgroup scan completed (inconsistency flag cleared)
[  247.682510][ T5833] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  247.709640][   T47] usb 3-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=40.c1
[  247.713138][   T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  247.716257][   T47] usb 3-1: Product: syz
[  247.717847][   T47] usb 3-1: Manufacturer: syz
[  247.726342][   T47] usb 3-1: SerialNumber: syz
[  247.733011][   T47] usb 3-1: config 0 descriptor??
[  247.759389][T10810] loop3: detected capacity change from 0 to 512
[  247.793405][T10810] EXT4-fs (loop3): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  248.338815][   T47] int51x1 3-1:0.0: probe with driver int51x1 failed with error -71
[  248.479928][    T9] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  248.630789][   T47] usb 3-1: USB disconnect, device number 27
[  248.641487][    T9] usb 2-1: Using ep0 maxpacket: 16
[  248.650808][    T9] usb 2-1: config 0 has an invalid interface number: 8 but max is 0
[  248.655429][    T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  248.661145][ T7324] EXT4-fs (loop3): unmounting filesystem 00800000-0000-0000-0000-000000000000.
[  248.664896][    T9] usb 2-1: config 0 has no interface number 0
[  248.667426][    T9] usb 2-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  248.682054][    T9] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  248.685746][    T9] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  248.689045][    T9] usb 2-1: Product: syz
[  248.696973][    T9] usb 2-1: SerialNumber: syz
[  248.704252][    T9] usb 2-1: config 0 descriptor??
[  248.713443][    T9] usbhid 2-1:0.8: couldn't find an input interrupt endpoint
[  248.953135][   T47] usb 2-1: USB disconnect, device number 28
[  249.122246][  T792] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  249.279734][  T792] usb 4-1: Using ep0 maxpacket: 16
[  249.286717][  T792] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  249.290400][  T792] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  249.294186][  T792] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  249.298640][  T792] usb 4-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00
[  249.303691][  T792] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  249.309132][  T792] usb 4-1: config 0 descriptor??
[  249.537109][T10836] loop1: detected capacity change from 0 to 1024
[  249.541326][T10836] EXT4-fs: Ignoring removed oldalloc option
[  249.543359][T10836] EXT4-fs: Ignoring removed orlov option
[  249.545814][T10836] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  249.555022][T10836] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  249.714057][ T5833] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  249.772238][  T792] hid-multitouch 0003:0457:07DA.0010: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.3-1/input0
[  249.935377][ T5862] usb 4-1: USB disconnect, device number 20
[  250.564529][ T5861] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  250.685083][ T5861] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  250.774515][ T5861] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  250.788739][T10887] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1933'.
[  250.793093][T10887] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1933'.
[  250.854848][ T5861] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  250.957153][ T5861] bridge_slave_1: left allmulticast mode
[  250.959286][ T5861] bridge_slave_1: left promiscuous mode
[  250.967192][ T5861] bridge0: port 2(bridge_slave_1) entered disabled state
[  250.977881][ T5861] bridge_slave_0: left allmulticast mode
[  250.983739][ T5861] bridge_slave_0: left promiscuous mode
[  250.985941][ T5861] bridge0: port 1(bridge_slave_0) entered disabled state
[  251.020926][T10889] loop2: detected capacity change from 0 to 32768
[  251.026479][T10889] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1934 (10889)
[  251.035254][T10889] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  251.039551][T10889] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm
[  251.043468][T10889] BTRFS info (device loop2): using free-space-tree
[  251.181963][T10889] BTRFS info (device loop2): rebuilding free space tree
[  251.271312][T10889] BTRFS info (device loop2): balance: start -susage=34359738368,drange=7..526332,limit=0..6
[  251.278214][T10889] BTRFS info (device loop2): balance: ended with status: 0
[  251.336877][ T5840] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  251.547411][T10905] loop1: detected capacity change from 0 to 32768
[  251.552696][T10905] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1935 (10905)
[  251.575239][T10905] BTRFS info (device loop1): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  251.579269][T10905] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[  251.599590][T10905] BTRFS info (device loop1): using free-space-tree
[  251.884643][ T5833] BTRFS info (device loop1): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  252.241848][ T5861] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  252.314758][ T5861] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  252.410797][ T5861] bond0 (unregistering): Released all slaves
[  252.766595][T10941] loop1: detected capacity change from 0 to 2048
[  252.881718][T10941] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  252.988241][T10941] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  253.024047][T10941] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 28
[  253.035086][T10941] EXT4-fs (loop1): This should not happen!! Data will be lost
[  253.035086][T10941] 
[  253.047682][T10941] EXT4-fs (loop1): Total free blocks count 0
[  253.051150][T10941] EXT4-fs (loop1): Free/Dirty block details
[  253.053983][T10941] EXT4-fs (loop1): free_blocks=2415919104
[  253.056638][T10941] EXT4-fs (loop1): dirty_blocks=16
[  253.059069][T10941] EXT4-fs (loop1): Block reservation details
[  253.066211][T10949] loop2: detected capacity change from 0 to 2048
[  253.068476][T10941] EXT4-fs (loop1): i_reserved_data_blocks=1
[  253.106421][T10949] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  253.268475][ T5833] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  253.275412][ T5840] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  253.382809][ T5861] hsr_slave_0: left promiscuous mode
[  253.389013][ T5861] hsr_slave_1: left promiscuous mode
[  253.420400][ T5861] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  253.423612][ T5861] batman_adv: batadv0: Removing interface: batadv_slave_0
[  253.429113][ T5861] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  253.437715][ T5861] batman_adv: batadv0: Removing interface: batadv_slave_1
[  253.507919][ T5861] veth1_macvtap: left promiscuous mode
[  253.513849][   T33] audit: type=1326 audit(1752297012.197:9489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10952 comm="syz.2.1946" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f220d38e929 code=0x7ffc0000
[  253.516335][ T5861] veth0_macvtap: left promiscuous mode
[  253.525256][ T5861] veth1_vlan: left promiscuous mode
[  253.530548][ T5861] veth0_vlan: left promiscuous mode
[  253.534334][   T33] audit: type=1326 audit(1752297012.197:9490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10952 comm="syz.2.1946" exe="/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f220d38e929 code=0x7ffc0000
[  253.580709][   T33] audit: type=1326 audit(1752297012.197:9491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10952 comm="syz.2.1946" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f220d38e929 code=0x7ffc0000
[  253.648054][   T33] audit: type=1326 audit(1752297012.197:9492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10952 comm="syz.2.1946" exe="/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7f220d38e929 code=0x7ffc0000
[  253.695908][   T33] audit: type=1326 audit(1752297012.197:9493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10952 comm="syz.2.1946" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f220d38e929 code=0x7ffc0000
[  253.744548][   T33] audit: type=1326 audit(1752297012.197:9494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10952 comm="syz.2.1946" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f220d38e929 code=0x7ffc0000
[  253.776154][   T33] audit: type=1326 audit(1752297012.197:9495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10952 comm="syz.2.1946" exe="/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7f220d38e929 code=0x7ffc0000
[  253.809387][   T33] audit: type=1326 audit(1752297012.197:9496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10952 comm="syz.2.1946" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f220d38e929 code=0x7ffc0000
[  253.826600][   T33] audit: type=1326 audit(1752297012.197:9497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10952 comm="syz.2.1946" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f220d38e929 code=0x7ffc0000
[  254.034602][T10956] loop1: detected capacity change from 0 to 32768
[  254.038546][T10956] (syz.1.1945,10956,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  254.044695][T10956] (syz.1.1945,10956,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  254.059947][  T792] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  254.091927][T10956] JBD2: Ignoring recovery information on journal
[  254.151865][T10956] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  254.241999][  T792] usb 3-1: Using ep0 maxpacket: 16
[  254.252487][  T792] usb 3-1: config 2 has an invalid interface number: 4 but max is 0
[  254.268669][  T792] usb 3-1: config 2 has no interface number 0
[  254.290701][  T792] usb 3-1: New USB device found, idVendor=0499, idProduct=1018, bcdDevice=b2.da
[  254.293914][  T792] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  254.296539][  T792] usb 3-1: Product: syz
[  254.297902][  T792] usb 3-1: Manufacturer: syz
[  254.304821][  T792] usb 3-1: SerialNumber: syz
[  254.308039][ T5833] ocfs2: Unmounting device (7,1) on (node local)
[  254.344299][  T792] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  254.347467][  T792] usb 3-1: invalid MIDI in EP 0
[  254.401444][T10967] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1951'.
[  254.406509][  T792] snd-usb-audio 3-1:2.4: probe with driver snd-usb-audio failed with error -22
[  254.549704][ T5882] usb 3-1: USB disconnect, device number 28
[  254.707306][ T5861] team0 (unregistering): Port device team_slave_1 removed
[  254.795372][ T5861] team0 (unregistering): Port device team_slave_0 removed
[  255.157668][ T5882] libceph: connect (1)[c::]:6789 error -101
[  255.169157][ T5882] libceph: mon0 (1)[c::]:6789 connect error
[  255.384870][T10984] loop2: detected capacity change from 0 to 2048
[  255.408504][T10984] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  255.413693][T10984] ext4 filesystem being mounted at /703/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  255.445068][ T5882] libceph: connect (1)[c::]:6789 error -101
[  255.447880][ T5882] libceph: mon0 (1)[c::]:6789 connect error
[  255.488183][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  255.493829][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  255.497949][T10975] ceph: No mds server is up or the cluster is laggy
[  255.759649][T10987] loop2: detected capacity change from 2048 to 64
[  255.950946][ T7131] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  256.061841][T10985] kmmpd-loop2: attempt to access beyond end of device
[  256.061841][T10985] loop2: rw=14337, sector=512, nr_sectors = 8 limit=64
[  256.086409][T10985] Buffer I/O error on dev loop2, logical block 64, lost sync page write
[  256.759144][T10990] delete_channel: no stack
[  257.079922][ T5218] Bluetooth: hci3: command 0x0405 tx timeout
[  257.994628][T10994] loop1: detected capacity change from 0 to 131072
[  258.004871][T10994] F2FS-fs (loop1): invalid crc value
[  258.113373][T10994] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  258.121713][ T5861] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  258.126238][ T5861] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  258.293984][ T5861] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  258.298237][ T5861] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  258.484993][ T5861] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  258.489298][ T5861] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  258.508086][T11007] loop3: detected capacity change from 0 to 256
[  258.518067][T11007] exfat: Deprecated parameter 'utf8'
[  258.520723][T11007] exfat: Deprecated parameter 'utf8'
[  258.522985][T11007] exfat: Deprecated parameter 'utf8'
[  258.525498][T11007] exfat: Bad value for 'gid'
[  258.526843][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  258.527417][T11007] exfat: Bad value for 'gid'
[  258.536929][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  258.544305][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  258.547147][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  258.550341][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  258.660780][ T5861] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  258.665036][ T5861] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  259.297140][ T5861] bridge_slave_1: left allmulticast mode
[  259.309561][ T5861] bridge_slave_1: left promiscuous mode
[  259.312420][ T5861] bridge0: port 2(bridge_slave_1) entered disabled state
[  259.330121][ T5861] bridge_slave_0: left allmulticast mode
[  259.336608][ T5861] bridge_slave_0: left promiscuous mode
[  259.340435][ T5861] bridge0: port 1(bridge_slave_0) entered disabled state
[  259.560106][   T47] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[  259.737705][   T47] usb 2-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=40.c1
[  259.742289][   T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  259.745496][   T47] usb 2-1: Product: syz
[  259.747191][   T47] usb 2-1: Manufacturer: syz
[  259.749111][   T47] usb 2-1: SerialNumber: syz
[  259.785451][   T47] usb 2-1: config 0 descriptor??
[  260.002651][   T47] int51x1 2-1:0.0: probe with driver int51x1 failed with error -22
[  260.108319][ T5861] bond4 (unregistering): (slave bridge1): Removing an active aggregator
[  260.119128][ T5861] bond4 (unregistering): (slave bridge1): Releasing backup interface
[  260.124842][ T5861] bridge1 (unregistering): left promiscuous mode
[  260.127363][ T5861] bridge1 (unregistering): left allmulticast mode
[  260.218608][  T792] usb 2-1: USB disconnect, device number 29
[  260.428074][ T5861] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  260.439223][ T5861] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  260.454996][ T5861] bond0 (unregistering): Released all slaves
[  260.491589][ T5861] bond1 (unregistering): Released all slaves
[  260.622347][   T54] Bluetooth: hci1: command tx timeout
[  260.797415][ T5861] bond2 (unregistering): (slave veth0_to_bond): Releasing active interface
[  260.804722][ T5861] bond2 (unregistering): Released all slaves
[  260.818891][ T5861] bond3 (unregistering): Released all slaves
[  261.153455][ T5861] bond4 (unregistering): Released all slaves
[  261.169989][ T5861] bond5 (unregistering): Released all slaves
[  261.242041][T11027] loop3: detected capacity change from 0 to 32768
[  261.246105][T11027] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1972 (11027)
[  261.292067][T11027] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  261.299398][T11027] BTRFS info (device loop3): using sha256 (sha256-x86_64) checksum algorithm
[  261.303311][T11027] BTRFS info (device loop3): using free-space-tree
[  261.409560][T11008] chnl_net:caif_netlink_parms(): no params data found
[  261.529828][ T7324] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  261.928181][T11008] bridge0: port 1(bridge_slave_0) entered blocking state
[  261.932436][T11008] bridge0: port 1(bridge_slave_0) entered disabled state
[  261.935626][T11008] bridge_slave_0: entered allmulticast mode
[  261.955135][T11008] bridge_slave_0: entered promiscuous mode
[  261.977459][T11008] bridge0: port 2(bridge_slave_1) entered blocking state
[  261.980914][T11008] bridge0: port 2(bridge_slave_1) entered disabled state
[  261.983937][T11008] bridge_slave_1: entered allmulticast mode
[  261.988123][T11008] bridge_slave_1: entered promiscuous mode
[  262.041993][ T5861] hsr_slave_0: left promiscuous mode
[  262.058848][ T5861] hsr_slave_1: left promiscuous mode
[  262.064929][ T5861] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  262.067953][ T5861] batman_adv: batadv0: Removing interface: batadv_slave_0
[  262.080561][T11069] loop3: detected capacity change from 0 to 1024
[  262.087236][ T5861] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  262.099577][ T5861] batman_adv: batadv0: Removing interface: batadv_slave_1
[  262.102585][   T33] audit: type=1800 audit(1752297020.787:9498): pid=11069 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1983" name="file2" dev="loop3" ino=25 res=0 errno=0
[  262.167276][ T5861] veth1_macvtap: left promiscuous mode
[  262.177061][ T5861] veth0_macvtap: left promiscuous mode
[  262.182766][ T5861] veth1_vlan: left promiscuous mode
[  262.185039][ T5861] veth0_vlan: left promiscuous mode
[  262.316084][T11063] loop1: detected capacity change from 0 to 40427
[  262.330183][T11063] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  262.332877][T11063] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  262.337004][T11063] F2FS-fs (loop1): invalid crc value
[  262.452315][T11076] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  262.456799][T11076] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  262.710325][   T54] Bluetooth: hci1: command tx timeout
[  262.795029][T11063] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  262.797425][T11063] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  263.397095][T11089] loop3: detected capacity change from 0 to 1024
[  263.447523][T11089] hfsplus: xattr searching failed
[  263.532814][T11089] hfsplus: xattr searching failed
[  263.582185][ T1093] hfsplus: bad catalog file entry
[  263.587265][ T1093] hfsplus: b-tree write err: -5, ino 3
[  263.909015][T11087] loop1: detected capacity change from 0 to 131072
[  263.914063][T11087] F2FS-fs (loop1): Test dummy encryption mode enabled
[  263.924493][T11087] F2FS-fs (loop1): invalid crc value
[  264.015533][T11087] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  264.163640][ T5861] team0 (unregistering): Port device team_slave_1 removed
[  264.190653][T11087] fscrypt: AES-256-XTS using implementation "xts(ecb(aes-fixed-time))"
[  264.260932][ T5861] team0 (unregistering): Port device team_slave_0 removed
[  264.782515][   T54] Bluetooth: hci1: command tx timeout
[  265.121990][T11008] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  265.143174][T11008] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  265.229083][T11008] team0: Port device team_slave_0 added
[  265.241696][T11008] team0: Port device team_slave_1 added
[  265.247187][T11122] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2001'.
[  265.309002][T11008] batman_adv: batadv0: Adding interface: batadv_slave_0
[  265.319971][T11008] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  265.334778][T11008] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  265.350422][T11008] batman_adv: batadv0: Adding interface: batadv_slave_1
[  265.354255][T11008] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  265.373694][T11008] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  265.469207][T11130] loop1: detected capacity change from 0 to 2048
[  265.478501][T11130] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 129: 0x32 != 0x7d
[  265.508793][T11130] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  265.538829][T11008] hsr_slave_0: entered promiscuous mode
[  265.567569][T11008] hsr_slave_1: entered promiscuous mode
[  265.620796][T11132] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  265.625940][T11132] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  265.728148][T11008] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  265.745578][T11008] Cannot create hsr debugfs directory
[  265.885162][T11134] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2005'.
[  265.897806][ T5861] IPVS: stop unused estimator thread 0...
[  266.042821][T11140] loop1: detected capacity change from 0 to 2048
[  266.055980][T11140] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found
[  266.059273][T11140] UDF-fs: Scanning with blocksize 512 failed
[  266.062215][T11008] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  266.067537][T11140] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  266.068422][T11008] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  266.077745][T11008] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  266.086213][T11008] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  266.096375][T11140] overlayfs: upper fs needs to support d_type.
[  266.105331][T11140] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  266.108673][T11140] overlayfs: failed to set xattr on upper
[  266.114144][T11140] overlayfs: ...falling back to redirect_dir=nofollow.
[  266.117476][T11140] overlayfs: ...falling back to index=off.
[  266.120611][T11140] overlayfs: ...falling back to uuid=null.
[  266.187850][T11008] 8021q: adding VLAN 0 to HW filter on device bond0
[  266.253394][T11008] 8021q: adding VLAN 0 to HW filter on device team0
[  266.263005][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[  266.268059][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[  266.295390][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[  266.298368][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[  266.551190][   T47] usb 2-1: new low-speed USB device number 30 using dummy_hcd
[  266.576618][T11008] 8021q: adding VLAN 0 to HW filter on device batadv0
[  266.747584][   T47] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  266.803509][   T47] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  266.876316][   T54] Bluetooth: hci1: command tx timeout
[  266.909104][   T47] usb 2-1: config 0 descriptor??
[  267.157122][T11008] veth0_vlan: entered promiscuous mode
[  267.166459][T11008] veth1_vlan: entered promiscuous mode
[  267.200062][T11008] veth0_macvtap: entered promiscuous mode
[  267.206391][T11008] veth1_macvtap: entered promiscuous mode
[  267.232281][T11008] batman_adv: batadv0: Interface activated: batadv_slave_0
[  267.244093][T11008] batman_adv: batadv0: Interface activated: batadv_slave_1
[  267.257716][T11008] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  267.262844][T11008] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  267.266422][T11008] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  267.271664][T11008] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  267.373026][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  267.394266][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  267.470293][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  267.473443][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  267.709295][T11183] loop4: detected capacity change from 0 to 128
[  267.755177][T11183] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  267.760831][T11183] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  267.771017][T11180] loop3: detected capacity change from 0 to 32768
[  267.774288][T11180] XFS: noikeep mount option is deprecated.
[  267.818635][T11008] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  267.832976][T11180] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  267.899319][T11180] XFS (loop3): Ending clean mount
[  267.903041][T11180] XFS (loop3): Quotacheck needed: Please wait.
[  267.936092][ T5862] libceph: connect (1)[c::]:6789 error -101
[  267.937191][T11180] XFS (loop3): Quotacheck: Done.
[  267.939033][ T5862] libceph: mon0 (1)[c::]:6789 connect error
[  267.966799][T11195] ceph: No mds server is up or the cluster is laggy
[  268.076136][ T7324] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  268.462501][T11206] bridge1: entered promiscuous mode
[  268.464658][T11206] bridge1: entered allmulticast mode
[  268.627427][   T47] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  268.635088][   T47] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9
[  268.641902][   T47] asix 2-1:0.0: probe with driver asix failed with error -71
[  268.648073][   T47] usb 2-1: USB disconnect, device number 30
[  268.709909][ T5862] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  268.869768][ T5862] usb 4-1: Using ep0 maxpacket: 8
[  268.877283][ T5862] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  268.881667][ T5862] usb 4-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00
[  268.885274][ T5862] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  268.890938][ T5862] usb 4-1: config 0 descriptor??
[  269.321313][ T5862] lenovo 0003:17EF:6062.0011: hidraw0: USB HID v0.00 Device [HID 17ef:6062] on usb-dummy_hcd.3-1/input0
[  269.581586][   T10] usb 4-1: USB disconnect, device number 21
[  269.720056][T11232] loop1: detected capacity change from 0 to 32768
[  269.723266][T11232] bcachefs (/dev/loop1): error validating superblock: Invalid superblock section ext: field too small (64 < 88)
[  269.723266][T11232] ext (size 64):
[  269.723266][T11232] Recovery passes required:      recovery_pass_empty,scan_for_btree_nodes,accounting_read,stripes_read,set_may_go_rw,journal_replay,check_btree_backpointers,check_backpointers_to_extents,bucket_gens_init,reconstruct_snapshots,check_snapshot_trees,check_snapshots,check_subvols,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_unreachable_inodes,check_nlinks,resume_logged_ops,fix_reflink_p
[  269.723266][T11232] Errors to silently fix:        jset_unknown_csum,bkey_at_pos_max,alloc_key_empty_but_have_data,lru_entry_bad,btree_ptr_val_too_big,btree_ptr_v2_val_too_big,extent_ptrs_invalid_entry,extent_ptrs_no_ptrs,extent_ptrs_redundant_crc,extent_ptrs_unwritten,extent_ptrs_written_and_unwritten,ptr_to_invalid_device,ptr_to_duplicate_device,ptr_after_last_bucket,ptr_before_first_bucket,ptr_to_missing_alloc_key,ptr_to_missing_replicas_entry,ptr_too_stale,stale_dirty_ptr,ptr_crc_uncompress
[  269.723403][T11232] bcachefs: bch2_fs_get_tree() error: invalid_sb_ext
[  270.043292][T11234] loop1: detected capacity change from 0 to 32768
[  270.148102][T11234] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  270.148124][T11234]   allowing incompatible features above 0.0: (unknown version)
[  270.148132][T11234]   features: 
[  270.162240][T11234] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0
[  270.165510][T11234] bcachefs (loop1): initializing new filesystem
[  270.178472][T11234] bcachefs (loop1): going read-write
[  270.185236][T11234] bcachefs (loop1): marking superblocks
[  270.194044][T11234] bcachefs (loop1): initializing freespace
[  270.199871][T11234] bcachefs (loop1): done initializing freespace
[  270.204923][T11234] bcachefs (loop1): reading snapshots table
[  270.207455][T11234] bcachefs (loop1): reading snapshots done
[  270.247706][T11234] bcachefs (loop1): done starting filesystem
[  270.327526][ T5833] bcachefs (loop1): shutting down
[  270.330137][ T5833] bcachefs (loop1): going read-only
[  270.332366][ T5833] bcachefs (loop1): finished waiting for writes to stop
[  270.335921][ T5833] bcachefs (loop1): flushing journal and stopping allocators, journal seq 2
[  270.384184][ T5833] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 3
[  270.388399][ T5833] bcachefs (loop1): clean shutdown complete, journal seq 4
[  270.391480][ T5833] bcachefs (loop1): marking filesystem clean
[  270.412330][ T5833] bcachefs (loop1): shutdown complete
[  270.754840][   T33] audit: type=1326 audit(1752297029.437:9499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11261 comm="syz.3.2045" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f418c38e929 code=0x7ffc0000
[  270.770393][   T33] audit: type=1326 audit(1752297029.437:9500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11261 comm="syz.3.2045" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f418c38e929 code=0x7ffc0000
[  270.779207][   T33] audit: type=1326 audit(1752297029.447:9501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11261 comm="syz.3.2045" exe="/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f418c38e929 code=0x7ffc0000
[  270.782298][T11262] loop3: detected capacity change from 0 to 1024
[  270.790335][   T33] audit: type=1326 audit(1752297029.447:9502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11261 comm="syz.3.2045" exe="/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f418c38e963 code=0x7ffc0000
[  270.800978][T11262] EXT4-fs: Ignoring removed nobh option
[  270.801337][   T33] audit: type=1326 audit(1752297029.447:9503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11261 comm="syz.3.2045" exe="/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f418c38d3df code=0x7ffc0000
[  270.803703][T11262] EXT4-fs: Ignoring removed bh option
[  270.814363][   T33] audit: type=1326 audit(1752297029.457:9504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11261 comm="syz.3.2045" exe="/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f418c38e9b7 code=0x7ffc0000
[  270.814407][   T33] audit: type=1326 audit(1752297029.457:9505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11261 comm="syz.3.2045" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f418c38d290 code=0x7ffc0000
[  270.814438][   T33] audit: type=1326 audit(1752297029.457:9506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11261 comm="syz.3.2045" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f418c38e52b code=0x7ffc0000
[  270.848331][   T33] audit: type=1326 audit(1752297029.487:9507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11261 comm="syz.3.2045" exe="/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f418c38d58a code=0x7ffc0000
[  270.856794][   T33] audit: type=1326 audit(1752297029.487:9508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11261 comm="syz.3.2045" exe="/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f418c38d58a code=0x7ffc0000
[  270.870658][T11262] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  270.898636][ T7324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  272.185492][T11314] loop3: detected capacity change from 0 to 32768
[  272.193328][T11318] loop4: detected capacity change from 0 to 32768
[  272.196337][T11314] (syz.3.2068,11314,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  272.205793][T11314] (syz.3.2068,11314,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  272.207983][T11318] (syz.4.2070,11318,1):ocfs2_journal_addressable:1935 ERROR: The journal cannot address the entire volume. Enable the 'block64' journal option with tunefs.ocfs2
[  272.211235][T11318] (syz.4.2070,11318,1):ocfs2_check_volume:2432 ERROR: status = -27
[  272.221654][T11318] (syz.4.2070,11318,1):ocfs2_mount_volume:1764 ERROR: status = -27
[  272.225619][T11318] (syz.4.2070,11318,1):ocfs2_fill_super:1177 ERROR: status = -27
[  272.254364][T11314] JBD2: Ignoring recovery information on journal
[  272.293480][T11314] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  272.453717][T11318] syz.4.2070: attempt to access beyond end of device
[  272.453717][T11318] loop4: rw=4096, sector=0, nr_sectors = 1 limit=0
[  272.512062][   T98] I/O error, dev loop4, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 0
[  272.658775][ T7324] ocfs2: Unmounting device (7,3) on (node local)
[  272.785725][T11337] loop1: detected capacity change from 0 to 32768
[  272.790120][T11337] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2077 (11337)
[  272.798188][T11337] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  272.802416][T11337] BTRFS info (device loop1): using sha256 (sha256-x86_64) checksum algorithm
[  272.845017][T11337] BTRFS info (device loop1): rebuilding free space tree
[  272.857659][T11337] BTRFS info (device loop1): disabling free space tree
[  272.862726][T11337] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  272.866571][T11337] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  272.879696][ T5862] usb 5-1: new full-speed USB device number 2 using dummy_hcd
[  272.972671][ T5833] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  273.050982][ T5862] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  273.054253][ T5862] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E
[  273.057777][ T5862] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10
[  273.061985][ T5862] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  273.065404][ T5862] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  273.105882][ T5862] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[  273.108870][ T5862] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[  273.124460][ T5862] usb 5-1: Product: syz
[  273.125837][ T5862] usb 5-1: Manufacturer: syz
[  273.127413][ T5862] usb 5-1: SerialNumber: syz
[  273.130829][ T5862] usb 5-1: config 0 descriptor??
[  273.210837][  T792] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  273.338015][ T5862] radio-si470x 5-1:0.0: DeviceID=0x0000 ChipID=0x0000
[  273.340822][ T5862] radio-si470x 5-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0.
[  273.370725][  T792] usb 4-1: Using ep0 maxpacket: 32
[  273.375030][  T792] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7
[  273.379601][  T792] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  273.387478][  T792] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  273.393918][  T792] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  273.397184][  T792] usb 4-1: Product: syz
[  273.402163][  T792] usb 4-1: Manufacturer: syz
[  273.403978][  T792] usb 4-1: SerialNumber: syz
[  273.542319][ T5862] radio-si470x 5-1:0.0: software version 0, hardware version 0
[  273.545736][ T5862] radio-si470x 5-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0.
[  273.550749][ T5862] radio-si470x 5-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org
[  273.589703][  T791] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[  273.622451][  T792] usb 4-1: 2:1 : format type 0 is detected, processed as PCM
[  273.625440][  T792] usb 4-1: 2:1 : invalid UAC_FORMAT_TYPE desc
[  273.627847][  T792] usb 4-1: 2:1 : invalid channels 0
[  273.644513][  T792] usb 4-1: USB disconnect, device number 22
[  273.743143][ T5862] radio-si470x 5-1:0.0: submitting int urb failed (-90)
[  273.747730][  T791] usb 2-1: New USB device found, idVendor=0458, idProduct=7029, bcdDevice=8b.92
[  273.751607][  T791] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  273.754898][  T791] usb 2-1: Product: syz
[  273.756761][  T791] usb 2-1: Manufacturer: syz
[  273.758767][  T791] usb 2-1: SerialNumber: syz
[  273.766708][  T791] usb 2-1: config 0 descriptor??
[  273.775077][  T791] gspca_main: gspca_sn9c20x-2.14.0 probing 0458:7029
[  273.977149][  T791] gspca_sn9c20x: Write register 1000 failed -71
[  273.979639][  T791] gspca_sn9c20x: Device initialization failed
[  273.981809][  T791] gspca_sn9c20x 2-1:0.0: probe with driver gspca_sn9c20x failed with error -71
[  273.990900][  T791] usb 2-1: USB disconnect, device number 31
[  274.534010][T11375] loop3: detected capacity change from 0 to 32768
[  274.547624][ T5862] radio-si470x 5-1:0.0: si470x_get_report: usb_control_msg returned -71
[  274.556874][ T5862] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -22
[  274.566572][T11377] loop1: detected capacity change from 0 to 22
[  274.568854][ T5862] usb 5-1: USB disconnect, device number 2
[  274.569055][T11377] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  274.580303][T11377] VFS: Can't find a romfs filesystem on dev loop1.
[  274.580303][T11377] 
[  274.713847][T11381] loop1: detected capacity change from 0 to 2048
[  274.730411][T11382] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  274.767032][T11384] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2090'.
[  275.088903][T11381] NILFS error (device loop1): nilfs_check_folio: bad entry in directory #2: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0
[  275.108454][T11381] Remounting filesystem read-only
[  275.459786][   T10] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  275.649685][   T10] usb 4-1: Using ep0 maxpacket: 16
[  275.657232][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  275.675741][   T10] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  275.679400][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  275.694335][   T10] usb 4-1: Product: syz
[  275.696077][   T10] usb 4-1: Manufacturer: syz
[  275.697571][   T10] usb 4-1: SerialNumber: syz
[  275.714005][   T10] usb 4-1: config 0 descriptor??
[  275.721990][   T10] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  275.725041][   T10] em28xx 4-1:0.0: DVB interface 0 found: bulk
[  276.334272][   T10] em28xx 4-1:0.0: chip ID is em2882/3
[  276.630047][   T10] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  276.633796][   T10] em28xx 4-1:0.0: board has no eeprom
[  276.711896][   T10] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  276.714423][   T10] em28xx 4-1:0.0: dvb set to bulk mode.
[  276.716481][  T792] em28xx 4-1:0.0: Binding DVB extension
[  276.734441][   T10] usb 4-1: USB disconnect, device number 23
[  276.737076][   T10] em28xx 4-1:0.0: Disconnecting em28xx
[  276.776358][  T792] em28xx 4-1:0.0: Registering input extension
[  276.850109][  T792] rc_core: IR keymap rc-pinnacle-pctv-hd not found
[  276.854441][  T792] Registered IR keymap rc-empty
[  276.861663][T11410] loop1: detected capacity change from 0 to 40427
[  276.868148][T11410] F2FS-fs (loop1): build fault injection rate: 771
[  276.868406][  T792] rc rc0: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  276.874494][T11410] F2FS-fs (loop1): invalid crc value
[  276.874921][T11418] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2105'.
[  276.882369][  T792] input: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input18
[  276.897093][  T792] em28xx 4-1:0.0: Input extension successfully initialized
[  276.900104][   T10] em28xx 4-1:0.0: Closing input extension
[  276.942547][T11410] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  276.957486][   T10] em28xx 4-1:0.0: Freeing device
[  276.994943][ T5833] syz-executor: attempt to access beyond end of device
[  276.994943][ T5833] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  276.999298][ T5833] CPU: 0 UID: 0 PID: 5833 Comm: syz-executor Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa-dirty #0 PREEMPT(full) 
[  276.999312][ T5833] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  276.999319][ T5833] Call Trace:
[  276.999324][ T5833]  <TASK>
[  276.999328][ T5833]  dump_stack_lvl+0x189/0x250
[  276.999346][ T5833]  ? __pfx_dump_stack_lvl+0x10/0x10
[  276.999354][ T5833]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  276.999368][ T5833]  ? __pfx_queue_work_on+0x10/0x10
[  276.999380][ T5833]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  276.999391][ T5833]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  276.999403][ T5833]  ? f2fs_hw_is_readonly+0x39b/0x470
[  276.999420][ T5833]  f2fs_handle_critical_error+0x37c/0x540
[  276.999435][ T5833]  f2fs_write_end_io+0x495/0x810
[  276.999442][ T5833]  ? blkg_put+0x22/0x240
[  276.999478][ T5833]  __submit_merged_bio+0x27a/0x6a0
[  276.999494][ T5833]  __submit_merged_write_cond+0x255/0x530
[  276.999509][ T5833]  f2fs_write_data_pages+0x261d/0x3000
[  276.999539][ T5833]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  276.999584][ T5833]  ? folios_put_refs+0x559/0x640
[  276.999604][ T5833]  ? __lock_acquire+0xab9/0xd20
[  276.999618][ T5833]  ? do_raw_spin_lock+0x121/0x290
[  276.999636][ T5833]  ? do_raw_spin_unlock+0x4d/0x240
[  276.999671][ T5833]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  276.999687][ T5833]  do_writepages+0x32e/0x550
[  276.999702][ T5833]  ? do_raw_spin_unlock+0x4d/0x240
[  276.999715][ T5833]  filemap_fdatawrite+0x191/0x230
[  276.999726][ T5833]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  276.999760][ T5833]  ? do_raw_spin_unlock+0x4d/0x240
[  276.999795][ T5833]  f2fs_sync_dirty_inodes+0x31f/0x830
[  276.999813][ T5833]  f2fs_write_checkpoint+0x94a/0x1de0
[  276.999835][ T5833]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  276.999864][ T5833]  ? f2fs_stop_gc_thread+0x7f/0xb0
[  276.999872][ T5833]  ? kfree+0x18e/0x440
[  276.999883][ T5833]  ? kill_f2fs_super+0x298/0x6c0
[  276.999895][ T5833]  kill_f2fs_super+0x2c3/0x6c0
[  276.999906][ T5833]  ? __pfx_kill_f2fs_super+0x10/0x10
[  276.999913][ T5833]  ? radix_tree_delete_item+0x2b6/0x400
[  276.999931][ T5833]  ? shrinker_free+0x2ce/0x3e0
[  276.999945][ T5833]  deactivate_locked_super+0xbc/0x130
[  276.999956][ T5833]  cleanup_mnt+0x425/0x4c0
[  276.999964][ T5833]  ? lockdep_hardirqs_on+0x9c/0x150
[  276.999980][ T5833]  task_work_run+0x1d4/0x260
[  276.999994][ T5833]  ? __pfx_task_work_run+0x10/0x10
[  277.000004][ T5833]  ? __x64_sys_umount+0x122/0x160
[  277.000018][ T5833]  ? exit_to_user_mode_loop+0x40/0x110
[  277.000030][ T5833]  exit_to_user_mode_loop+0xec/0x110
[  277.000039][ T5833]  do_syscall_64+0x2bd/0x3b0
[  277.000046][ T5833]  ? lockdep_hardirqs_on+0x9c/0x150
[  277.000057][ T5833]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  277.000066][ T5833]  ? exc_page_fault+0x9f/0xf0
[  277.000079][ T5833]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  277.000086][ T5833] RIP: 0033:0x7f9ce378fc57
[  277.000097][ T5833] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  277.000104][ T5833] RSP: 002b:00007fff8cdb5038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  277.000114][ T5833] RAX: 0000000000000000 RBX: 00007f9ce3810925 RCX: 00007f9ce378fc57
[  277.000120][ T5833] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff8cdb50f0
[  277.000125][ T5833] RBP: 00007fff8cdb50f0 R08: 0000000000000000 R09: 0000000000000000
[  277.000130][ T5833] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff8cdb6180
[  277.000135][ T5833] R13: 00007f9ce3810925 R14: 0000000000043983 R15: 00007fff8cdb61c0
[  277.000150][ T5833]  </TASK>
[  277.136584][ T5833] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  277.200321][T11425] binder_alloc: 11424: pid 11424 spamming oneway? 1 buffers allocated for a total size of 4096
[  277.204436][T11425] binder_alloc: 11424: pid 11424 spamming oneway? 2 buffers allocated for a total size of 5120
[  277.247791][T11431] loop4: detected capacity change from 0 to 8
[  277.475646][T11446] raw_sendmsg: syz.1.2116 forgot to set AF_INET. Fix it!
[  277.598388][T11451] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.2118'.
[  277.680583][T11453] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  277.714669][T11444] loop3: detected capacity change from 0 to 40427
[  277.721856][T11444] F2FS-fs (loop3): invalid crc value
[  277.756325][T11444] F2FS-fs (loop3): Start checkpoint disabled!
[  277.759847][T11444] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  277.885819][T11450] loop4: detected capacity change from 0 to 32768
[  277.897334][T11450] syz.4.2119: attempt to access beyond end of device
[  277.897334][T11450] loop4: rw=0, sector=67109120, nr_sectors = 8 limit=32768
[  277.912091][T11450] Read error 10 at 0x0
[  277.916454][T11450] read_mapping_page failed!
[  277.922309][T11450] jfs_mount: diMount failed w/rc = -5
[  277.927526][T11450] Mount JFS Failure: -5
[  277.937319][T11450] jfs_mount failed w/return code = -5
[  278.320637][ T1093] kworker/u10:8: attempt to access beyond end of device
[  278.320637][ T1093] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  278.330890][ T1093] CPU: 1 UID: 0 PID: 1093 Comm: kworker/u10:8 Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa-dirty #0 PREEMPT(full) 
[  278.330918][ T1093] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  278.330929][ T1093] Workqueue: writeback wb_workfn (flush-7:3)
[  278.330962][ T1093] Call Trace:
[  278.330969][ T1093]  <TASK>
[  278.330977][ T1093]  dump_stack_lvl+0x189/0x250
[  278.331002][ T1093]  ? __pfx_dump_stack_lvl+0x10/0x10
[  278.331017][ T1093]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  278.331039][ T1093]  ? __pfx_queue_work_on+0x10/0x10
[  278.331059][ T1093]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  278.331078][ T1093]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  278.331100][ T1093]  ? f2fs_hw_is_readonly+0x39b/0x470
[  278.331128][ T1093]  f2fs_handle_critical_error+0x37c/0x540
[  278.331154][ T1093]  f2fs_write_end_io+0x495/0x810
[  278.331167][ T1093]  ? blkg_put+0x22/0x240
[  278.331199][ T1093]  __submit_merged_bio+0x27a/0x6a0
[  278.331224][ T1093]  __submit_merged_write_cond+0x255/0x530
[  278.331251][ T1093]  f2fs_write_data_pages+0x261d/0x3000
[  278.331302][ T1093]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  278.331337][ T1093]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  278.331383][ T1093]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  278.331405][ T1093]  ? look_up_lock_class+0x74/0x170
[  278.331434][ T1093]  ? trace_f2fs_writepages+0x7f/0x200
[  278.331455][ T1093]  ? f2fs_write_node_pages+0x478/0x6e0
[  278.331477][ T1093]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  278.331508][ T1093]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  278.331530][ T1093]  do_writepages+0x32e/0x550
[  278.331552][ T1093]  ? reacquire_held_locks+0x127/0x1d0
[  278.331575][ T1093]  ? writeback_sb_inodes+0x372/0x1000
[  278.331601][ T1093]  __writeback_single_inode+0x145/0xff0
[  278.331616][ T1093]  ? do_raw_spin_unlock+0x4d/0x240
[  278.331640][ T1093]  writeback_sb_inodes+0x6b5/0x1000
[  278.331709][ T1093]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  278.331765][ T1093]  ? rcu_is_watching+0x15/0xb0
[  278.331792][ T1093]  wb_writeback+0x43b/0xaf0
[  278.331815][ T1093]  ? queue_io+0x3a1/0x590
[  278.331833][ T1093]  ? __pfx_wb_writeback+0x10/0x10
[  278.331872][ T1093]  ? _raw_spin_unlock_irq+0x23/0x50
[  278.331899][ T1093]  wb_workfn+0x409/0xef0
[  278.331934][ T1093]  ? __pfx_wb_workfn+0x10/0x10
[  278.331958][ T1093]  ? __lock_acquire+0xab9/0xd20
[  278.331984][ T1093]  ? process_scheduled_works+0x9ef/0x17b0
[  278.332007][ T1093]  ? _raw_spin_unlock_irq+0x23/0x50
[  278.332026][ T1093]  ? process_scheduled_works+0x9ef/0x17b0
[  278.332040][ T1093]  ? process_scheduled_works+0x9ef/0x17b0
[  278.332058][ T1093]  process_scheduled_works+0xae1/0x17b0
[  278.332103][ T1093]  ? __pfx_process_scheduled_works+0x10/0x10
[  278.332137][ T1093]  worker_thread+0x8a0/0xda0
[  278.332180][ T1093]  kthread+0x711/0x8a0
[  278.332204][ T1093]  ? __pfx_worker_thread+0x10/0x10
[  278.332221][ T1093]  ? __pfx_kthread+0x10/0x10
[  278.332242][ T1093]  ? _raw_spin_unlock_irq+0x23/0x50
[  278.332261][ T1093]  ? lockdep_hardirqs_on+0x9c/0x150
[  278.332280][ T1093]  ? __pfx_kthread+0x10/0x10
[  278.332300][ T1093]  ret_from_fork+0x3fc/0x770
[  278.332320][ T1093]  ? __pfx_ret_from_fork+0x10/0x10
[  278.332342][ T1093]  ? __switch_to_asm+0x39/0x70
[  278.332358][ T1093]  ? __switch_to_asm+0x33/0x70
[  278.332374][ T1093]  ? __pfx_kthread+0x10/0x10
[  278.332394][ T1093]  ret_from_fork_asm+0x1a/0x30
[  278.332427][ T1093]  </TASK>
[  278.335030][ T1093] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  278.562594][T11468] loop4: detected capacity change from 0 to 32768
[  278.566539][T11468] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2125 (11468)
[  278.575503][T11468] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  278.582335][T11468] BTRFS info (device loop4): using sha256 (sha256-x86_64) checksum algorithm
[  278.585850][T11468] BTRFS info (device loop4): using free-space-tree
[  278.641940][T11008] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  279.513856][T11509] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2138'.
[  279.518850][T11509] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2138'.
[  279.582862][T11497] loop4: detected capacity change from 0 to 40427
[  279.589265][T11497] F2FS-fs (loop4): invalid crc value
[  279.665936][T11497] F2FS-fs (loop4): Start checkpoint disabled!
[  279.681867][T11497] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  279.725441][T11507] loop3: detected capacity change from 0 to 32768
[  279.735379][T11507] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  279.739895][ T7386] kworker/u9:5: attempt to access beyond end of device
[  279.739895][ T7386] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  279.745130][ T7386] CPU: 0 UID: 0 PID: 7386 Comm: kworker/u9:5 Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa-dirty #0 PREEMPT(full) 
[  279.745145][ T7386] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  279.745152][ T7386] Workqueue: writeback wb_workfn (flush-7:4)
[  279.745174][ T7386] Call Trace:
[  279.745179][ T7386]  <TASK>
[  279.745183][ T7386]  dump_stack_lvl+0x189/0x250
[  279.745199][ T7386]  ? __pfx_dump_stack_lvl+0x10/0x10
[  279.745207][ T7386]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  279.745221][ T7386]  ? __pfx_queue_work_on+0x10/0x10
[  279.745233][ T7386]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  279.745244][ T7386]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  279.745256][ T7386]  ? f2fs_hw_is_readonly+0x39b/0x470
[  279.745273][ T7386]  f2fs_handle_critical_error+0x37c/0x540
[  279.745288][ T7386]  f2fs_write_end_io+0x495/0x810
[  279.745295][ T7386]  ? blkg_put+0x22/0x240
[  279.745314][ T7386]  __submit_merged_bio+0x27a/0x6a0
[  279.745330][ T7386]  __submit_merged_write_cond+0x255/0x530
[  279.745344][ T7386]  f2fs_write_data_pages+0x261d/0x3000
[  279.745374][ T7386]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  279.745394][ T7386]  ? unwind_next_frame+0xa5/0x2390
[  279.745424][ T7386]  ? __lock_acquire+0xab9/0xd20
[  279.745447][ T7386]  ? finish_task_switch+0x266/0x950
[  279.745455][ T7386]  ? lockdep_hardirqs_on+0x9c/0x150
[  279.745471][ T7386]  ? rcu_is_watching+0x15/0xb0
[  279.745482][ T7386]  ? trace_sched_exit_tp+0x38/0x120
[  279.745497][ T7386]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  279.745509][ T7386]  do_writepages+0x32e/0x550
[  279.745522][ T7386]  ? reacquire_held_locks+0x127/0x1d0
[  279.745532][ T7386]  ? writeback_sb_inodes+0x372/0x1000
[  279.745547][ T7386]  __writeback_single_inode+0x145/0xff0
[  279.745556][ T7386]  ? do_raw_spin_unlock+0x4d/0x240
[  279.745593][ T7386]  writeback_sb_inodes+0x6b5/0x1000
[  279.745604][ T7386]  ? preempt_schedule+0xae/0xc0
[  279.745619][ T7386]  ? preempt_schedule+0xae/0xc0
[  279.745638][ T7386]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  279.745670][ T7386]  ? rcu_is_watching+0x15/0xb0
[  279.745684][ T7386]  wb_writeback+0x43b/0xaf0
[  279.745697][ T7386]  ? queue_io+0x3a1/0x590
[  279.745708][ T7386]  ? __pfx_wb_writeback+0x10/0x10
[  279.745721][ T7386]  ? _raw_spin_unlock_irq+0x23/0x50
[  279.745735][ T7386]  wb_workfn+0x409/0xef0
[  279.745754][ T7386]  ? __pfx_wb_workfn+0x10/0x10
[  279.745769][ T7386]  ? __lock_acquire+0xab9/0xd20
[  279.745782][ T7386]  ? process_scheduled_works+0x9ef/0x17b0
[  279.745796][ T7386]  ? _raw_spin_unlock_irq+0x23/0x50
[  279.745807][ T7386]  ? process_scheduled_works+0x9ef/0x17b0
[  279.745815][ T7386]  ? process_scheduled_works+0x9ef/0x17b0
[  279.745825][ T7386]  process_scheduled_works+0xae1/0x17b0
[  279.745849][ T7386]  ? __pfx_process_scheduled_works+0x10/0x10
[  279.745868][ T7386]  worker_thread+0x8a0/0xda0
[  279.745878][ T7386]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  279.745894][ T7386]  ? __kthread_parkme+0x7b/0x200
[  279.745909][ T7386]  kthread+0x711/0x8a0
[  279.745922][ T7386]  ? __pfx_worker_thread+0x10/0x10
[  279.745931][ T7386]  ? __pfx_kthread+0x10/0x10
[  279.745943][ T7386]  ? _raw_spin_unlock_irq+0x23/0x50
[  279.745953][ T7386]  ? lockdep_hardirqs_on+0x9c/0x150
[  279.745963][ T7386]  ? __pfx_kthread+0x10/0x10
[  279.745975][ T7386]  ret_from_fork+0x3fc/0x770
[  279.745986][ T7386]  ? __pfx_ret_from_fork+0x10/0x10
[  279.745998][ T7386]  ? __switch_to_asm+0x39/0x70
[  279.746008][ T7386]  ? __switch_to_asm+0x33/0x70
[  279.746017][ T7386]  ? __pfx_kthread+0x10/0x10
[  279.746028][ T7386]  ret_from_fork_asm+0x1a/0x30
[  279.746047][ T7386]  </TASK>
[  279.746051][ T7386] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  279.798964][T11507] XFS (loop3): Ending clean mount
[  279.875609][T11507] XFS (loop3): Quotacheck needed: Please wait.
[  279.932200][T11507] XFS (loop3): Quotacheck: Done.
[  279.964111][ T7324] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  280.140670][  T792] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[  280.290305][  T792] usb 2-1: Using ep0 maxpacket: 16
[  280.297862][  T792] usb 2-1: too many configurations: 60, using maximum allowed: 8
[  280.313712][  T792] usb 2-1: New USB device found, idVendor=0471, idProduct=032c, bcdDevice=ba.e9
[  280.317994][  T792] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=204
[  280.323065][  T792] usb 2-1: Product: syz
[  280.324738][  T792] usb 2-1: Manufacturer: syz
[  280.326514][  T792] usb 2-1: SerialNumber: syz
[  280.335143][  T792] usb 2-1: config 0 descriptor??
[  280.340453][  T792] pwc: Philips SPC 880NC USB webcam detected.
[  280.479722][   T10] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  280.552488][  T792] pwc: Warning: more than 1 configuration available.
[  280.559273][  T792] pwc: Failed to set LED on/off time (-71)
[  280.562150][  T792] pwc: send_video_command error -71
[  280.564238][  T792] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  280.572922][  T792] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71
[  280.579212][  T792] usb 2-1: USB disconnect, device number 32
[  280.626288][T11554] overlayfs: empty lowerdir
[  280.634765][   T10] usb 5-1: config 0 has too many interfaces: 129, using maximum allowed: 32
[  280.638187][   T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 129
[  280.644164][   T10] usb 5-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e
[  280.647440][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  280.652450][   T10] usb 5-1: Product: syz
[  280.654103][   T10] usb 5-1: Manufacturer: syz
[  280.655694][   T10] usb 5-1: SerialNumber: syz
[  280.660369][   T10] usb 5-1: config 0 descriptor??
[  280.686192][T11556] loop3: detected capacity change from 0 to 8
[  280.704612][T11556] SQUASHFS error: Failed to read block 0x260685: -5
[  280.707604][T11556] SQUASHFS error: Unable to read metadata cache entry [260685]
[  280.711751][T11556] SQUASHFS error: Unable to read directory block [260685:0]
[  280.779311][T11558] netlink: 'syz.3.2156': attribute type 21 has an invalid length.
[  280.789317][T11558] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2156'.
[  280.793134][T11558] netlink: 'syz.3.2156': attribute type 5 has an invalid length.
[  280.796104][T11558] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2156'.
[  281.079192][   T10] mos7840 5-1:0.0: required endpoints missing
[  281.103648][   T10] usb 5-1: USB disconnect, device number 3
[  281.132638][T11572] veth1_macvtap: left promiscuous mode
[  281.134693][T11572] macsec0: entered allmulticast mode
[  281.145261][T11572] veth1_macvtap: entered promiscuous mode
[  281.147129][T11572] veth1_macvtap: entered allmulticast mode
[  281.152048][T11572] macsec0: left allmulticast mode
[  281.153705][T11572] veth1_macvtap: left allmulticast mode
[  281.224074][T11576] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2166'.
[  281.439571][T11587] macvlan2: entered promiscuous mode
[  281.441429][T11587] bridge0: entered promiscuous mode
[  281.979585][  T791] usb 5-1: new full-speed USB device number 4 using dummy_hcd
[  282.151702][  T791] usb 5-1: unable to get BOS descriptor or descriptor too short
[  282.157581][  T791] usb 5-1: not running at top speed; connect to a high speed hub
[  282.163477][  T791] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  282.167094][  T791] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  282.171656][  T791] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  282.180142][  T791] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  282.184186][  T791] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  282.187579][  T791] usb 5-1: Product: syz
[  282.189361][  T791] usb 5-1: Manufacturer: syz
[  282.191547][ T5862] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  282.191652][  T791] usb 5-1: SerialNumber: syz
[  282.383487][ T5862] usb 4-1: New USB device found, idVendor=050d, idProduct=0121, bcdDevice=6f.3b
[  282.388082][ T5862] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  282.637934][ T5862] pegasus 4-1:254.0: probe with driver pegasus failed with error -71
[  282.645961][ T5862] usb 4-1: USB disconnect, device number 24
[  282.831302][  T791] usb 5-1: 0:2 : does not exist
[  282.839601][ T5897] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[  282.993670][ T5897] usb 2-1: unable to get BOS descriptor or descriptor too short
[  282.998202][ T5897] usb 2-1: config 255 has an invalid interface number: 171 but max is 0
[  283.003002][ T5897] usb 2-1: config 255 has no interface number 0
[  283.007260][ T5897] usb 2-1: config 255 interface 171 has no altsetting 0
[  283.014511][ T5897] usb 2-1: New USB device found, idVendor=0c45, idProduct=6240, bcdDevice=35.eb
[  283.018196][ T5897] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  283.022016][ T5897] usb 2-1: Product: syz
[  283.024093][ T5897] usb 2-1: Manufacturer: syz
[  283.025941][ T5897] usb 2-1: SerialNumber: syz
[  283.034610][ T5852] usb 5-1: USB disconnect, device number 4
[  283.246004][ T5897] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:6240
[  283.249257][ T5897] gspca_sn9c20x: Write register 1000 failed -71
[  283.250006][T11605] loop3: detected capacity change from 0 to 8
[  283.253714][ T5897] gspca_sn9c20x: Device initialization failed
[  283.256959][ T5897] gspca_sn9c20x 2-1:255.171: probe with driver gspca_sn9c20x failed with error -71
[  283.262960][ T5897] usb 2-1: USB disconnect, device number 33
[  283.270817][T11605] SQUASHFS error: Unable to read directory block [629:0]
[  283.416653][T11614] netlink: 'syz.3.2182': attribute type 1 has an invalid length.
[  283.448553][T11614] bond2: (slave gretap2): making interface the new active one
[  283.451996][T11614] bond2: (slave gretap2): Enslaving as an active interface with an up link
[  283.821121][T11627] loop4: detected capacity change from 0 to 32768
[  283.990069][T11636] x_tables: duplicate entry at hook 2
[  284.059774][ T5862] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[  284.223153][ T5862] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  284.226936][ T5862] usb 2-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00
[  284.230945][ T5862] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  284.234898][ T5862] usb 2-1: config 0 descriptor??
[  284.275317][T11648] loop4: detected capacity change from 0 to 256
[  284.424770][T11652] loop4: detected capacity change from 0 to 128
[  284.434320][T11652] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none.
[  284.484795][T11008] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  284.654032][ T5862] hid (null): usage index exceeded
[  284.656092][ T5862] hid (null): usage index exceeded
[  284.662723][ T5862] itetech 0003:258A:6A88.0012: ignoring exceeding usage max
[  284.666499][ T5862] itetech 0003:258A:6A88.0012: usage index exceeded
[  284.669044][ T5862] itetech 0003:258A:6A88.0012: item 0 4 2 0 parsing failed
[  284.676101][ T5862] itetech 0003:258A:6A88.0012: probe with driver itetech failed with error -22
[  284.723998][T11655] loop4: detected capacity change from 0 to 32768
[  284.733346][T11655] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  284.762651][T11655] XFS (loop4): Ending clean mount
[  284.768624][T11655] XFS (loop4): Quotacheck needed: Please wait.
[  284.812397][T11655] XFS (loop4): Quotacheck: Done.
[  284.862120][ T5862] usb 2-1: USB disconnect, device number 34
[  284.875818][T11008] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  285.077404][T11667] sctp: [Deprecated]: syz.4.2203 (pid 11667) Use of int in max_burst socket option.
[  285.077404][T11667] Use struct sctp_assoc_value instead
[  285.379611][ T5897] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  285.439400][T11673] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  285.532387][ T5897] usb 5-1: Using ep0 maxpacket: 8
[  285.535352][ T5897] usb 5-1: too many configurations: 245, using maximum allowed: 8
[  285.540363][ T5897] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  285.550604][ T5897] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  285.561383][ T5897] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  285.570369][ T5897] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  285.575558][ T5897] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  285.580706][ T5897] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  285.585034][ T5897] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  285.588948][ T5897] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  285.593996][ T5897] usb 5-1: New USB device found, idVendor=20a6, idProduct=1105, bcdDevice=c2.eb
[  285.596839][ T5897] usb 5-1: New USB device strings: Mfr=144, Product=230, SerialNumber=250
[  285.609582][ T5897] usb 5-1: Product: syz
[  285.610947][ T5897] usb 5-1: Manufacturer: syz
[  285.612376][ T5897] usb 5-1: SerialNumber: syz
[  285.615369][ T5897] usb 5-1: config 0 descriptor??
[  285.621061][ T5897] rndis_host 5-1:0.0: invalid descriptor buffer length
[  285.623853][ T5897] usb 5-1: bad CDC descriptors
[  285.626933][ T5897] option 5-1:0.0: GSM modem (1-port) converter detected
[  285.655317][T11681] evm: overlay not supported
[  285.837978][   T10] usb 5-1: USB disconnect, device number 5
[  285.841858][   T10] option 5-1:0.0: device disconnected
[  285.889056][   T27] bridge0: port 2(bridge_slave_1) entered disabled state
[  286.018644][T11698] loop1: detected capacity change from 0 to 8192
[  286.560654][T11712] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2224'.
[  286.763248][ T5862] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0
[  286.782352][ T5862] hid-generic 0000:0000:0000.0013: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  286.795549][T11717] loop4: detected capacity change from 0 to 1024
[  286.799650][T11717] EXT4-fs: Ignoring removed nomblk_io_submit option
[  286.803007][T11717] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  286.815608][T11717] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  286.942153][T11721] net_ratelimit: 3322 callbacks suppressed
[  286.942173][T11721] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  286.947627][   T10] IPVS: starting estimator thread 0...
[  287.044335][T11726] loop3: detected capacity change from 0 to 64
[  287.059737][T11724] IPVS: using max 62 ests per chain, 148800 per kthread
[  287.200779][T11734] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2232'.
[  287.203490][T11736] loop1: detected capacity change from 0 to 8
[  287.215465][T11736] SQUASHFS error: Failed to read block 0x2fc: -5
[  287.218061][T11736] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  287.223644][T11736] SQUASHFS error: Unable to read directory block [247:26]
[  287.345952][T11744] loop1: detected capacity change from 0 to 8
[  287.355967][T11744] SQUASHFS error: zlib decompression failed, data probably corrupt
[  287.363274][T11744] SQUASHFS error: Failed to read block 0x4e8: -5
[  287.365594][T11744] SQUASHFS error: zlib decompression failed, data probably corrupt
[  287.368222][T11744] SQUASHFS error: Failed to read block 0x4ee: -5
[  287.370809][T11744] SQUASHFS error: zlib decompression failed, data probably corrupt
[  287.373530][T11744] SQUASHFS error: Failed to read block 0x4ef: -5
[  287.376603][   T33] kauditd_printk_skb: 10 callbacks suppressed
[  287.376611][   T33] audit: type=1800 audit(1752297046.057:9519): pid=11744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2237" name="file1" dev="loop1" ino=5 res=0 errno=0
[  287.423777][T11746] loop1: detected capacity change from 0 to 512
[  287.426404][T11746] EXT4-fs: inline encryption not supported
[  287.432973][T11746] EXT4-fs error (device loop1): ext4_iget_extra_inode:5035: inode #15: comm syz.1.2238: corrupted in-inode xattr: invalid ea_ino
[  287.437130][T11746] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.2238: couldn't read orphan inode 15 (err -117)
[  287.442911][T11746] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  287.473564][ T5833] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  287.479904][ T5862] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  287.605584][T11008] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  287.629646][ T5862] usb 4-1: Using ep0 maxpacket: 16
[  287.644196][ T5862] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  287.647349][ T5862] usb 4-1: config 0 has no interface number 0
[  287.659833][ T5862] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  287.664062][ T5862] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  287.667679][ T5862] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00
[  287.674980][ T5862] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  287.682039][ T5862] usb 4-1: config 0 descriptor??
[  287.849327][T11756] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2242'.
[  288.293817][ T5862] uclogic 0003:28BD:0071.0014: pen parameters not found
[  288.296461][ T5862] uclogic 0003:28BD:0071.0014: interface is invalid, ignoring
[  288.419632][   T10] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  288.502531][ T5852] usb 4-1: USB disconnect, device number 25
[  288.549862][ T5862] usb 2-1: new full-speed USB device number 35 using dummy_hcd
[  288.584013][   T10] usb 5-1: unable to get BOS descriptor or descriptor too short
[  288.588177][   T10] usb 5-1: config 4 has an invalid interface number: 214 but max is 0
[  288.591560][   T10] usb 5-1: config 4 has no interface number 0
[  288.594035][   T10] usb 5-1: config 4 interface 214 has no altsetting 0
[  288.599558][   T10] usb 5-1: New USB device found, idVendor=05ac, idProduct=0243, bcdDevice=87.6e
[  288.603187][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  288.606502][   T10] usb 5-1: Product: syz
[  288.608293][   T10] usb 5-1: Manufacturer: syz
[  288.611756][   T10] usb 5-1: SerialNumber: syz
[  288.702198][ T5862] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  288.706131][ T5862] usb 2-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00
[  288.711077][ T5862] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  288.716829][ T5862] usb 2-1: config 0 descriptor??
[  288.829151][   T10] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:4.214/input/input19
[  288.840570][ T5263] bcm5974 5-1:4.214: could not read from device
[  288.850635][ T5263] bcm5974 5-1:4.214: could not read from device
[  288.853424][   T10] usb 5-1: USB disconnect, device number 6
[  289.059092][T11778] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  289.116186][T11780] loop3: detected capacity change from 0 to 1024
[  289.136424][ T5862] magicmouse 0003:05AC:0265.0015: unknown main item tag 0x0
[  289.139644][ T5862] magicmouse 0003:05AC:0265.0015: unknown main item tag 0x0
[  289.142762][ T5862] magicmouse 0003:05AC:0265.0015: unknown main item tag 0x0
[  289.145985][ T5862] magicmouse 0003:05AC:0265.0015: unknown main item tag 0x0
[  289.148939][ T5862] magicmouse 0003:05AC:0265.0015: unknown main item tag 0x0
[  289.154719][ T5862] magicmouse 0003:05AC:0265.0015: unbalanced collection at end of report description
[  289.155350][ T7386] hfsplus: b-tree write err: -5, ino 4
[  289.159401][ T5862] magicmouse 0003:05AC:0265.0015: magicmouse hid parse failed
[  289.164226][ T5862] magicmouse 0003:05AC:0265.0015: probe with driver magicmouse failed with error -22
[  289.202774][T11782] loop3: detected capacity change from 0 to 256
[  289.207590][T11782] FAT-fs (loop3): Directory bread(block 1285) failed
[  289.332942][   T10] usb 2-1: USB disconnect, device number 35
[  289.681355][T11794] loop3: detected capacity change from 0 to 40427
[  289.685093][T11794] F2FS-fs (loop3): heap/no_heap options were deprecated
[  289.689692][T11794] F2FS-fs (loop3): invalid crc value
[  289.691818][T11794] F2FS-fs (loop3): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root
[  289.747366][T11794] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  289.756633][T11792] loop4: detected capacity change from 0 to 40427
[  289.764412][T11792] F2FS-fs (loop4): invalid crc value
[  289.832138][T11792] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  289.870611][T11792] F2FS-fs (loop4): Corrupted max_depth of 3: 1025
[  289.877513][T11792] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  290.119772][   T10] usb 2-1: new full-speed USB device number 36 using dummy_hcd
[  290.220339][T11809] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2267'.
[  290.235434][T11811] netlink: 'syz.4.2262': attribute type 3 has an invalid length.
[  290.282179][   T10] usb 2-1: config 201 has an invalid interface number: 249 but max is 0
[  290.285854][   T10] usb 2-1: config 201 has an invalid descriptor of length 0, skipping remainder of the config
[  290.298703][   T10] usb 2-1: config 201 has no interface number 0
[  290.303344][   T10] usb 2-1: config 201 interface 249 altsetting 4 has an endpoint descriptor with address 0xF1, changing to 0x81
[  290.312950][   T10] usb 2-1: config 201 interface 249 altsetting 4 endpoint 0x3 has an invalid bInterval 0, changing to 10
[  290.317705][   T10] usb 2-1: config 201 interface 249 altsetting 4 endpoint 0x3 has invalid maxpacket 255, setting to 64
[  290.323029][   T10] usb 2-1: config 201 interface 249 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  290.328379][   T10] usb 2-1: config 201 interface 249 has no altsetting 0
[  290.335960][   T10] usb 2-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=fa.df
[  290.339774][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  290.342981][   T10] usb 2-1: Product: syz
[  290.344790][   T10] usb 2-1: Manufacturer: syz
[  290.346704][   T10] usb 2-1: SerialNumber: syz
[  290.354530][T11797] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  290.374980][T11819] loop3: detected capacity change from 0 to 512
[  290.378546][T11819] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  290.385680][T11819] EXT4-fs (loop3): 1 truncate cleaned up
[  290.389021][T11819] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  290.409985][T11819] EXT4-fs error (device loop3): ext4_find_extent:903: inode #15: comm syz.3.2271: inode has invalid extent depth: 25964
[  290.417780][   T33] audit: type=1326 audit(1752297049.097:9520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11821 comm="syz.4.2272" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f643dd8e929 code=0x0
[  290.420235][T11819] fs-verity (loop3, inode 15): Error -117 getting verity descriptor size
[  290.450960][ T7324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  290.582402][   T10] ath6kl: Failed to submit usb control message: -71
[  290.584711][   T10] ath6kl: unable to send the bmi data to the device: -71
[  290.589576][   T10] ath6kl: Unable to send get target info: -71
[  290.593809][   T10] ath6kl: Failed to init ath6kl core: -71
[  290.597602][   T10] ath6kl_usb 2-1:201.249: probe with driver ath6kl_usb failed with error -71
[  290.604650][   T10] usb 2-1: USB disconnect, device number 36
[  290.708841][T11832] loop3: detected capacity change from 0 to 256
[  290.842715][T11838] netlink: 'syz.3.2279': attribute type 10 has an invalid length.
[  290.868612][T11838] team0: Port device wlan1 added
[  291.093617][T11840] loop3: detected capacity change from 0 to 40427
[  291.103336][T11840] F2FS-fs (loop3): build fault injection rate: 14
[  291.106004][T11840] F2FS-fs (loop3): build fault injection type: 0x0
[  291.114186][T11840] F2FS-fs (loop3): invalid crc value
[  291.158117][T11840] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  291.191490][ T7324] syz-executor: attempt to access beyond end of device
[  291.191490][ T7324] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  291.196255][ T7324] CPU: 0 UID: 0 PID: 7324 Comm: syz-executor Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa-dirty #0 PREEMPT(full) 
[  291.196270][ T7324] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  291.196276][ T7324] Call Trace:
[  291.196280][ T7324]  <TASK>
[  291.196285][ T7324]  dump_stack_lvl+0x189/0x250
[  291.196303][ T7324]  ? __pfx_dump_stack_lvl+0x10/0x10
[  291.196312][ T7324]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  291.196326][ T7324]  ? __pfx_queue_work_on+0x10/0x10
[  291.196337][ T7324]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  291.196348][ T7324]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  291.196360][ T7324]  ? f2fs_hw_is_readonly+0x39b/0x470
[  291.196378][ T7324]  f2fs_handle_critical_error+0x37c/0x540
[  291.196392][ T7324]  f2fs_write_end_io+0x495/0x810
[  291.196401][ T7324]  ? blkg_put+0x22/0x240
[  291.196419][ T7324]  __submit_merged_bio+0x27a/0x6a0
[  291.196435][ T7324]  __submit_merged_write_cond+0x255/0x530
[  291.196450][ T7324]  f2fs_write_data_pages+0x261d/0x3000
[  291.196479][ T7324]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  291.196520][ T7324]  ? folios_put_refs+0x559/0x640
[  291.196537][ T7324]  ? __pfx_folios_put_refs+0x10/0x10
[  291.196553][ T7324]  ? rcu_is_watching+0x15/0xb0
[  291.196568][ T7324]  ? __lock_acquire+0xab9/0xd20
[  291.196586][ T7324]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  291.196598][ T7324]  do_writepages+0x32e/0x550
[  291.196613][ T7324]  ? do_raw_spin_unlock+0x4d/0x240
[  291.196627][ T7324]  filemap_fdatawrite+0x191/0x230
[  291.196637][ T7324]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  291.196671][ T7324]  ? do_raw_spin_unlock+0x4d/0x240
[  291.196684][ T7324]  f2fs_sync_dirty_inodes+0x31f/0x830
[  291.196700][ T7324]  f2fs_write_checkpoint+0x94a/0x1de0
[  291.196721][ T7324]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  291.196772][ T7324]  ? f2fs_stop_gc_thread+0x7f/0xb0
[  291.196781][ T7324]  ? kfree+0x18e/0x440
[  291.196792][ T7324]  ? kill_f2fs_super+0x298/0x6c0
[  291.196803][ T7324]  kill_f2fs_super+0x2c3/0x6c0
[  291.196815][ T7324]  ? __pfx_kill_f2fs_super+0x10/0x10
[  291.196821][ T7324]  ? radix_tree_delete_item+0x2b6/0x400
[  291.196838][ T7324]  ? shrinker_free+0x2ce/0x3e0
[  291.196853][ T7324]  deactivate_locked_super+0xbc/0x130
[  291.196864][ T7324]  cleanup_mnt+0x425/0x4c0
[  291.196872][ T7324]  ? lockdep_hardirqs_on+0x9c/0x150
[  291.196887][ T7324]  task_work_run+0x1d4/0x260
[  291.196901][ T7324]  ? __pfx_task_work_run+0x10/0x10
[  291.196911][ T7324]  ? __x64_sys_umount+0x122/0x160
[  291.196924][ T7324]  ? exit_to_user_mode_loop+0x40/0x110
[  291.196936][ T7324]  exit_to_user_mode_loop+0xec/0x110
[  291.196944][ T7324]  do_syscall_64+0x2bd/0x3b0
[  291.196952][ T7324]  ? lockdep_hardirqs_on+0x9c/0x150
[  291.196963][ T7324]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  291.196972][ T7324]  ? exc_page_fault+0x9f/0xf0
[  291.196984][ T7324]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  291.196992][ T7324] RIP: 0033:0x7f418c38fc57
[  291.197001][ T7324] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  291.197009][ T7324] RSP: 002b:00007ffdbd039c48 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  291.197019][ T7324] RAX: 0000000000000000 RBX: 00007f418c410925 RCX: 00007f418c38fc57
[  291.197024][ T7324] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdbd039d00
[  291.197029][ T7324] RBP: 00007ffdbd039d00 R08: 0000000000000000 R09: 0000000000000000
[  291.197034][ T7324] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffdbd03ad90
[  291.197039][ T7324] R13: 00007f418c410925 R14: 0000000000047103 R15: 00007ffdbd03add0
[  291.197053][ T7324]  </TASK>
[  291.197057][ T7324] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  291.324277][T11846] loop4: detected capacity change from 0 to 2048
[  291.338314][T11846] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024)
[  291.353005][T11847] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  291.459796][   T10] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[  291.538695][T11851] loop4: detected capacity change from 0 to 256
[  291.579614][   T33] audit: type=1800 audit(1752297050.257:9521): pid=11851 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2285" name="bus" dev="loop4" ino=1048649 res=0 errno=0
[  291.583042][T11851] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  291.595599][T11851] FAT-fs (loop4): Filesystem has been set read-only
[  291.598387][T11851] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  291.609738][T11851] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  291.613476][   T33] audit: type=1800 audit(1752297050.297:9522): pid=11851 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2285" name="file1" dev="loop4" ino=1048650 res=0 errno=0
[  291.629104][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  291.639619][   T10] usb 2-1: New USB device found, idVendor=1532, idProduct=010d, bcdDevice= 0.00
[  291.642991][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  291.650683][   T10] usb 2-1: config 0 descriptor??
[  291.981477][T11871] loop3: detected capacity change from 0 to 2048
[  291.988387][T11871] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  292.062748][   T10] razer 0003:1532:010D.0016: unknown main item tag 0x1
[  292.065035][   T10] razer 0003:1532:010D.0016: unknown main item tag 0x2
[  292.067297][   T10] razer 0003:1532:010D.0016: unbalanced delimiter at end of report description
[  292.070971][  T792] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  292.077008][   T10] razer 0003:1532:010D.0016: probe with driver razer failed with error -22
[  292.243540][  T792] usb 5-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33
[  292.247274][  T792] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  292.253115][  T792] usb 5-1: config 0 descriptor??
[  292.258575][  T792] gspca_main: sunplus-2.14.0 probing 055f:c420
[  292.268278][   T10] usb 2-1: USB disconnect, device number 37
[  292.389690][  T791] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  292.541618][  T791] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  292.545632][  T791] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 3
[  292.550742][  T791] usb 4-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00
[  292.554563][  T791] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  292.561224][  T791] usb 4-1: config 0 descriptor??
[  292.767509][  T791] Bluetooth: Can't get state to change to load ram patch err
[  292.771608][  T791] Bluetooth: Loading patch file failed
[  292.773953][  T791] ath3k 4-1:0.0: probe with driver ath3k failed with error -71
[  292.779054][  T791] usb 4-1: USB disconnect, device number 26
[  292.862613][T11881] loop1: detected capacity change from 0 to 1024
[  292.865614][T11881] EXT4-fs: Ignoring removed orlov option
[  292.867542][T11881] EXT4-fs: Ignoring removed nomblk_io_submit option
[  292.871120][  T792] gspca_sunplus: reg_w_riv err -71
[  292.872833][  T792] sunplus 5-1:0.0: probe with driver sunplus failed with error -71
[  292.876468][  T792] usb 5-1: USB disconnect, device number 7
[  292.887279][T11881] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  292.943744][ T5833] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  293.005223][T11886] loop1: detected capacity change from 0 to 512
[  293.010475][T11886] EXT4-fs: Ignoring removed oldalloc option
[  293.016843][T11886] EXT4-fs (loop1): 1 truncate cleaned up
[  293.020857][T11886] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  293.140462][T11886] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  293.201178][ T5833] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  293.239259][T11890] loop1: detected capacity change from 0 to 512
[  293.248551][T11890] EXT4-fs: Ignoring removed orlov option
[  293.252263][T11890] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  293.258135][T11890] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002]
[  293.262478][T11890] EXT4-fs error (device loop1): ext4_iget_extra_inode:5035: inode #15: comm syz.1.2301: corrupted in-inode xattr: e_value size too large
[  293.269049][T11890] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.2301: couldn't read orphan inode 15 (err -117)
[  293.276771][T11890] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  293.321576][ T5833] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  293.356814][T11893] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2302'.
[  293.621173][T11915] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  293.682408][T11921] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  293.760498][  T791] usb 4-1: new high-speed USB device number 27 using dummy_hcd
Connection to localhost closed by remote host.
[  294.305019][ T5730] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  294.417281][ T5730] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  294.503286][ T5730] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  294.571593][ T5730] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  294.687471][ T5730] bridge_slave_1: left allmulticast mode
[  294.697323][ T5730] bridge_slave_1: left promiscuous mode
[  294.699883][ T5730] bridge0: port 2(bridge_slave_1) entered disabled state
[  294.711716][ T5730] bridge_slave_0: left allmulticast mode
[  294.714002][ T5730] bridge_slave_0: left promiscuous mode
[  294.716359][ T5730] bridge0: port 1(bridge_slave_0) entered disabled state
[  295.365971][ T5730] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  295.370938][ T5730] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  295.374868][ T5730] bond0 (unregistering): Released all slaves
[  295.643137][ T5730] hsr_slave_0: left promiscuous mode
[  295.645999][ T5730] hsr_slave_1: left promiscuous mode
[  295.648815][ T5730] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  295.652553][ T5730] batman_adv: batadv0: Removing interface: batadv_slave_0
[  295.656557][ T5730] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  295.659754][ T5730] batman_adv: batadv0: Removing interface: batadv_slave_1
[  295.683964][ T5730] veth1_macvtap: left promiscuous mode
[  295.686298][ T5730] veth0_macvtap: left promiscuous mode
[  295.688701][ T5730] veth1_vlan: left promiscuous mode
[  295.691041][ T5730] veth0_vlan: left promiscuous mode
[  296.461500][ T5730] team0 (unregistering): Port device team_slave_1 removed
[  296.534307][ T5730] team0 (unregistering): Port device team_slave_0 removed
[  297.729967][ T5730] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  297.734323][ T5730] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  297.810699][ T5730] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  297.815332][ T5730] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  297.895794][ T5730] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  297.899903][ T5730] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  297.984523][ T5730] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  297.988670][ T5730] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  298.176898][ T5730] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  298.251165][ T5730] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  298.323830][ T5730] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  298.393589][ T5730] netdevsim netdevsim1 netdevsim0 (unregistering): left allmulticast mode
[  298.401409][ T5730] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  298.522330][ T5730] bridge_slave_1: left allmulticast mode
[  298.524673][ T5730] bridge_slave_1: left promiscuous mode
[  298.527103][ T5730] bridge0: port 2(bridge_slave_1) entered disabled state
[  298.533542][ T5730] bridge_slave_0: left allmulticast mode
[  298.535869][ T5730] bridge_slave_0: left promiscuous mode
[  298.542121][ T5730] bridge0: port 1(bridge_slave_0) entered disabled state
[  298.857019][ T5730] bond2 (unregistering): (slave gretap2): Releasing active interface
[  298.981079][ T5730] bridge0 (unregistering): left promiscuous mode
[  299.271120][ T5730] bond0 (unregistering): Released all slaves
[  299.474588][ T5730] bond1 (unregistering): Released all slaves
[  299.485973][ T5730] bond2 (unregistering): Released all slaves
[  300.037892][ T5730] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  300.043672][ T5730] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  300.048536][ T5730] bond0 (unregistering): Released all slaves
[  300.056993][ T5730] bond1 (unregistering): Released all slaves
[  300.192526][ T5730] tipc: Disabling bearer <udp:syz2>
[  300.211942][ T5730] tipc: Left network mode
[  300.255184][ T5730] tipc: Left network mode
[  300.306299][ T5730] 
[  300.307177][ T5730] ======================================================
[  300.309404][ T5730] WARNING: possible circular locking dependency detected
[  300.312124][ T5730] 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa-dirty #0 Not tainted
[  300.316407][ T5730] ------------------------------------------------------
[  300.319398][ T5730] kworker/u8:2/5730 is trying to acquire lock:
[  300.321795][ T5730] ffff8881282ace00 (team->team_lock_key#4){+.+.}-{4:4}, at: team_del_slave+0x32/0x1c0
[  300.324774][ T5730] 
[  300.324774][ T5730] but task is already holding lock:
[  300.327098][ T5730] ffff88811dd18768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0x133/0x6d0
[  300.331132][ T5730] 
[  300.331132][ T5730] which lock already depends on the new lock.
[  300.331132][ T5730] 
[  300.335404][ T5730] 
[  300.335404][ T5730] the existing dependency chain (in reverse order) is:
[  300.338983][ T5730] 
[  300.338983][ T5730] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}:
[  300.342023][ T5730]        lock_acquire+0x120/0x360
[  300.344109][ T5730]        __mutex_lock+0x182/0xe80
[  300.346163][ T5730]        ieee80211_open+0xed/0x1f0
[  300.348191][ T5730]        __dev_open+0x470/0x880
[  300.350133][ T5730]        netif_open+0xaa/0x170
[  300.352123][ T5730]        dev_open+0x125/0x260
[  300.353985][ T5730]        team_add_slave+0xb36/0x2840
[  300.356114][ T5730]        do_set_master+0x533/0x6d0
[  300.357685][ T5730]        do_setlink+0xcf0/0x41c0
[  300.359394][ T5730]        rtnl_newlink+0x160b/0x1c70
[  300.361430][ T5730]        rtnetlink_rcv_msg+0x7cf/0xb70
[  300.363519][ T5730]        netlink_rcv_skb+0x208/0x470
[  300.365567][ T5730]        netlink_unicast+0x75c/0x8e0
[  300.367681][ T5730]        netlink_sendmsg+0x805/0xb30
[  300.369760][ T5730]        __sock_sendmsg+0x21c/0x270
[  300.371818][ T5730]        ____sys_sendmsg+0x505/0x830
[  300.373893][ T5730]        ___sys_sendmsg+0x21f/0x2a0
[  300.375986][ T5730]        __x64_sys_sendmsg+0x19b/0x260
[  300.378214][ T5730]        do_syscall_64+0xfa/0x3b0
[  300.380228][ T5730]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  300.382745][ T5730] 
[  300.382745][ T5730] -> #0 (team->team_lock_key#4){+.+.}-{4:4}:
[  300.385842][ T5730]        validate_chain+0xb9b/0x2140
[  300.387875][ T5730]        __lock_acquire+0xab9/0xd20
[  300.389941][ T5730]        lock_acquire+0x120/0x360
[  300.391910][ T5730]        __mutex_lock+0x182/0xe80
[  300.393808][ T5730]        team_del_slave+0x32/0x1c0
[  300.395832][ T5730]        team_device_event+0x285/0xa20
[  300.397817][ T5730]        notifier_call_chain+0x1b6/0x3e0
[  300.399892][ T5730]        unregister_netdevice_many_notify+0x15d8/0x2320
[  300.402642][ T5730]        unregister_netdevice_queue+0x33c/0x380
[  300.405064][ T5730]        _cfg80211_unregister_wdev+0x165/0x590
[  300.407475][ T5730]        ieee80211_remove_interfaces+0x49a/0x6d0
[  300.409847][ T5730]        ieee80211_unregister_hw+0x5d/0x2c0
[  300.412112][ T5730]        mac80211_hwsim_del_radio+0x275/0x460
[  300.414439][ T5730]        hwsim_exit_net+0x584/0x640
[  300.416381][ T5730]        ops_undo_list+0x49a/0x990
[  300.418298][ T5730]        cleanup_net+0x4c5/0x800
[  300.420335][ T5730]        process_scheduled_works+0xae1/0x17b0
[  300.422957][ T5730]        worker_thread+0x8a0/0xda0
[  300.425178][ T5730]        kthread+0x711/0x8a0
[  300.427131][ T5730]        ret_from_fork+0x3fc/0x770
[  300.429151][ T5730]        ret_from_fork_asm+0x1a/0x30
[  300.430794][ T5730] 
[  300.430794][ T5730] other info that might help us debug this:
[  300.430794][ T5730] 
[  300.434293][ T5730]  Possible unsafe locking scenario:
[  300.434293][ T5730] 
[  300.437050][ T5730]        CPU0                    CPU1
[  300.438949][ T5730]        ----                    ----
[  300.440770][ T5730]   lock(&rdev->wiphy.mtx);
[  300.442383][ T5730]                                lock(team->team_lock_key#4);
[  300.444864][ T5730]                                lock(&rdev->wiphy.mtx);
[  300.447551][ T5730]   lock(team->team_lock_key#4);
[  300.449180][ T5730] 
[  300.449180][ T5730]  *** DEADLOCK ***
[  300.449180][ T5730] 
[  300.451806][ T5730] 5 locks held by kworker/u8:2/5730:
[  300.453483][ T5730]  #0: ffff88801b2f6948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  300.456869][ T5730]  #1: ffffc90002cffbc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  300.460043][ T5730]  #2: ffffffff8f510c90 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800
[  300.463239][ T5730]  #3: ffffffff8f51d888 (rtnl_mutex){+.+.}-{4:4}, at: ieee80211_unregister_hw+0x55/0x2c0
[  300.466435][ T5730]  #4: ffff88811dd18768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0x133/0x6d0
[  300.469902][ T5730] 
[  300.469902][ T5730] stack backtrace:
[  300.471888][ T5730] CPU: 1 UID: 0 PID: 5730 Comm: kworker/u8:2 Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa-dirty #0 PREEMPT(full) 
[  300.471900][ T5730] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  300.471908][ T5730] Workqueue: netns cleanup_net
[  300.471922][ T5730] Call Trace:
[  300.471928][ T5730]  <TASK>
[  300.471933][ T5730]  dump_stack_lvl+0x189/0x250
[  300.471946][ T5730]  ? __pfx_dump_stack_lvl+0x10/0x10
[  300.471956][ T5730]  ? __pfx__printk+0x10/0x10
[  300.471967][ T5730]  ? print_lock_name+0xde/0x100
[  300.471977][ T5730]  print_circular_bug+0x2ee/0x310
[  300.471988][ T5730]  check_noncircular+0x134/0x160
[  300.471999][ T5730]  validate_chain+0xb9b/0x2140
[  300.472010][ T5730]  ? lockdep_hardirqs_on+0x9c/0x150
[  300.472026][ T5730]  __lock_acquire+0xab9/0xd20
[  300.472037][ T5730]  ? team_del_slave+0x32/0x1c0
[  300.472046][ T5730]  lock_acquire+0x120/0x360
[  300.472054][ T5730]  ? team_del_slave+0x32/0x1c0
[  300.472099][ T5730]  ? __mutex_trylock_common+0x153/0x260
[  300.472118][ T5730]  __mutex_lock+0x182/0xe80
[  300.472132][ T5730]  ? team_del_slave+0x32/0x1c0
[  300.472144][ T5730]  ? rcu_is_watching+0x15/0xb0
[  300.472155][ T5730]  ? team_del_slave+0x32/0x1c0
[  300.472164][ T5730]  ? __pfx___mutex_lock+0x10/0x10
[  300.472172][ T5730]  ? bond_netdev_event+0xd9/0xe80
[  300.472182][ T5730]  ? __pfx___mutex_lock+0x10/0x10
[  300.472191][ T5730]  ? __pfx_bond_netdev_event+0x10/0x10
[  300.472209][ T5730]  team_del_slave+0x32/0x1c0
[  300.472225][ T5730]  team_device_event+0x285/0xa20
[  300.472244][ T5730]  notifier_call_chain+0x1b6/0x3e0
[  300.472257][ T5730]  unregister_netdevice_many_notify+0x15d8/0x2320
[  300.472272][ T5730]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[  300.472290][ T5730]  ? __lock_acquire+0xab9/0xd20
[  300.472301][ T5730]  unregister_netdevice_queue+0x33c/0x380
[  300.472313][ T5730]  ? __pfx_unregister_netdevice_queue+0x10/0x10
[  300.472325][ T5730]  _cfg80211_unregister_wdev+0x165/0x590
[  300.472337][ T5730]  ieee80211_remove_interfaces+0x49a/0x6d0
[  300.472346][ T5730]  ? __pfx_synchronize_rcu+0x10/0x10
[  300.472357][ T5730]  ? __pfx_ieee80211_remove_interfaces+0x10/0x10
[  300.472365][ T5730]  ? rcu_is_watching+0x15/0xb0
[  300.472375][ T5730]  ieee80211_unregister_hw+0x5d/0x2c0
[  300.472387][ T5730]  mac80211_hwsim_del_radio+0x275/0x460
[  300.472398][ T5730]  ? __pfx_mac80211_hwsim_del_radio+0x10/0x10
[  300.472410][ T5730]  hwsim_exit_net+0x584/0x640
[  300.472419][ T5730]  ? __pfx_hwsim_exit_net+0x10/0x10
[  300.472427][ T5730]  ? __ip_vs_dev_cleanup_batch+0x238/0x260
[  300.472437][ T5730]  ops_undo_list+0x49a/0x990
[  300.472449][ T5730]  ? __pfx_ops_undo_list+0x10/0x10
[  300.472459][ T5730]  cleanup_net+0x4c5/0x800
[  300.472468][ T5730]  ? __pfx_cleanup_net+0x10/0x10
[  300.472477][ T5730]  ? _raw_spin_unlock_irq+0x23/0x50
[  300.472488][ T5730]  ? process_scheduled_works+0x9ef/0x17b0
[  300.472497][ T5730]  ? process_scheduled_works+0x9ef/0x17b0
[  300.472505][ T5730]  process_scheduled_works+0xae1/0x17b0
[  300.472519][ T5730]  ? __pfx_process_scheduled_works+0x10/0x10
[  300.472531][ T5730]  worker_thread+0x8a0/0xda0
[  300.472540][ T5730]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  300.472552][ T5730]  ? __kthread_parkme+0x7b/0x200
[  300.472563][ T5730]  kthread+0x711/0x8a0
[  300.472574][ T5730]  ? __pfx_worker_thread+0x10/0x10
[  300.472583][ T5730]  ? __pfx_kthread+0x10/0x10
[  300.472593][ T5730]  ? _raw_spin_unlock_irq+0x23/0x50
[  300.472603][ T5730]  ? lockdep_hardirqs_on+0x9c/0x150
[  300.472614][ T5730]  ? __pfx_kthread+0x10/0x10
[  300.472624][ T5730]  ret_from_fork+0x3fc/0x770
[  300.472633][ T5730]  ? __pfx_ret_from_fork+0x10/0x10
[  300.472642][ T5730]  ? __switch_to_asm+0x39/0x70
[  300.472651][ T5730]  ? __switch_to_asm+0x33/0x70
[  300.472661][ T5730]  ? __pfx_kthread+0x10/0x10
[  300.472670][ T5730]  ret_from_fork_asm+0x1a/0x30
[  300.472683][ T5730]  </TASK>
[  300.611250][ T5730] team0: Port device wlan1 removed
[  300.865184][ T5730] hsr_slave_0: left promiscuous mode
[  300.867253][ T5730] hsr_slave_1: left promiscuous mode
[  300.871213][ T5730] hsr_slave_0: left promiscuous mode
[  300.873253][ T5730] hsr_slave_1: left promiscuous mode
[  300.875333][ T5730] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  300.877724][ T5730] batman_adv: batadv0: Removing interface: batadv_slave_0
[  300.880514][ T5730] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  300.882837][ T5730] batman_adv: batadv0: Removing interface: batadv_slave_1
[  300.888253][ T5730] veth1_macvtap: left promiscuous mode
[  300.890003][ T5730] veth0_macvtap: left promiscuous mode
[  300.891942][ T5730] veth1_vlan: left promiscuous mode
[  300.893696][ T5730] veth0_vlan: left promiscuous mode
[  300.895906][ T5730] hsr0: left allmulticast mode
[  300.897766][ T5730] veth1_macvtap: left promiscuous mode
[  300.900652][ T5730] veth0_macvtap: left promiscuous mode
[  300.902432][ T5730] veth1_vlan: left promiscuous mode
[  300.904135][ T5730] veth0_vlan: left promiscuous mode
[  301.677171][ T5730] team0 (unregistering): Port device team_slave_1 removed
[  301.706525][ T5730] team0 (unregistering): Port device team_slave_0 removed
[  302.647506][ T5730] IPVS: stop unused estimator thread 0...
[  302.650219][ T5730] IPVS: stop unused estimator thread 0...

VM DIAGNOSIS:
05:06:43  Registers:
info registers vcpu 0

CPU#0
RAX=f9ec5d4012922b00 RBX=ffffffff81976c78 RCX=f9ec5d4012922b00 RDX=0000000000000001
RSI=ffffffff8be29da0 RDI=ffffffff81976c78 RBP=ffffffff8de07ea8 RSP=ffffffff8de07d80
R8 =ffff88804b032f5b R9 =1ffff110096065eb R10=dffffc0000000000 R11=ffffed10096065ec
R12=ffffffff8fa1f3f0 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a50
RIP=ffffffff8b6f34d3 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055731bd7d5ac CR3=000000010f0bc000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000036e155d4 0000000000000039 XMM01=0100000000000100 0000000000000000
XMM02=65626d6520002e74 736f686c61636f6c XMM03=0000000000000000 0000000000000000
XMM04=ffffffffffffff00 0000000000000000 XMM05=0100000000000000 00000000000002ff
XMM06=0100000000000000 00000000000002ff XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=1ffffffff33bfc60 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd
RSI=0000000000000000 RDI=0000000000000020 RBP=ffffffff99dfe970 RSP=ffffc90002cfe6f0
R8 =ffff888107560237 R9 =1ffff11020eac046 R10=dffffc0000000000 R11=ffffffff85478d60
R12=dffffc0000000000 R13=0000000000000000 R14=ffffffff99dfe6e0 R15=0000000000000000
RIP=ffffffff85478dd7 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffebb4851a8 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00ff000000000000 0000000000000000 XMM01=ff00000000000000 0000000000000000
XMM02=0000000000000000 00000000000000ff XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
