last executing test programs:

2m30.192954466s ago: executing program 0 (id=128):
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0x800852, &(0x7f0000000100)={[{@nossd_spread}, {@compress_force_algo={'compress-force', 0x3d, 'zstd'}}, {@nossd_spread}, {@discard_sync}, {@clear_cache}, {@space_cache_v1}, {@acl}, {@nodiscard}]}, 0xfb, 0x50f9, &(0x7f0000005140)="$eJzs3U+IVWUfB/Dnzp1x5lVw7isEtsoikGrh4CYioqtMUFF0y8VgBE4tgnThJEi0EMQW/Vt4S4paSK6kFsksjKA2LqQwArehYS7cKAaSi3Yac8957pz7HO+5d0ZtTD8fmTnnOb/zPOe5l7O43+uccwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACEEF74/bNDVfVT16bPnJtp7jywZebyvul1p0OodbbX8vqOrc++8ua2HS9OxA6zL2fLRqPfkFnX81ljVc/GhX69P6+HEMaSAer58pk1pVGLq3vKA1a6fnH30U17mxuPH27Xr146e7L80lkwsdITWCn5eXVh8Vxqdn6PJHt024VTr9Zzimb90xPuX3kRAMCSTLU6i+7H0fwjbre9P60n7WbSbift+AmhXWwsRzbuqn7z3JDWV2iezSwqjPedZ1LP3/9uu5X2T9pJ1FjCPHt3zSPNRL95ziX1lZonAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJ3kkbdHH6qqn7o2febcTHPngS0zl/dNrzsdQqOzvZaVa6vfP9z869utxw78uPmr4xeef6ye94vL0cLO4be48sRkCG8UKhfisBfXhtDqLXSa4cty4a3OynOxAAAAwN3k/s7vkW47i4NjPe1aJ03WOv+iLCxev7j76Ka9zY3HD7frVy+dPbn88Vp9xmvecLxuu7H4UysE4xh/0/EW63HXPaVxqqUjpnn+8fNTf1f1L+X/RnX+j++c/A8AAMDNkP/TcaoNyv/fvfbHJ1X9S/l/Q88hS/k/zjjm/5GwvPwPAAAAd7Lbnf+bpXGqDcr/4y+NfV3Vv5T/p4bL/6PFaceNv8YJ75oMYWrQ1AEAAIA+4v+7L361EPN69s1BmtefevTguarxSvm/OVz+H7ulrwoAAAC4GUe+2P5wVb2U/1vD5f/x2zprAAAAYCne+XDig6p6Kf/PDpf/V+fL/MqHrNNP8a8QDk2GMLGwMpcVfg7tp7sFAAAA4BaJOf3PT3f+ULVfKf/PVd//P97pIF7/33P/v9L1/4VCdte/J90YAAAAgHtR+Xr+eHv87MkF/Z6/P+z1/w/87+CrVccv5f/9w+X/enF5K5//BwAAAMvwX3v+3/bSONUG3f//vo/e/aWqfyn/t4fL/3G5pvjyTtRq2fvz3mQI6xdW8rsJfhMPtyspzI8VCh2tpMe22CMvzI8XCh1zSY/NkyE8uLCyPyn8PxbaSeHK2rxwJCmcjoX8fOgWjiWFE/FM+3xtPt208H0s5BdYzMcrKNZ0L4lIelzt12OhcMMeZ7sHBwAAuKfE8Jxn2bHeZkij7Hxt0A6rB+0wMmiH+qAdRpMd0h37bQ+zvYW4vX1m49Ke/39kuPwf34pV2aLf9f8hXv+fP9ewe/3/bCw0ksJ8LLTSOwa04jGysPtxPEajlfe4sr5bAAAAgLta/F6gvsLzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP5h715j5KruA4CffY734d2FpAqhUbJJahw38Xptk4daqqwpVSPSNOuGBlURxcZek8ULdmxTYhQiYxPRCEFpg5R8KMIoimo+QK1ARFJAuEhxhMojoioKIFBoDVEQKSWJSBOkUM3ee2bvnLvz8GONl/5+knfOzP887zw859475wIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwP8Ph75y1d82iz/82/Oefu7Cicv2rrvw5WvOO/3xECZnH+/Iwh3919868fM7z71r731rbrvnyPkf7M3L5fEwUP3Tmd+5LtZ6ZGkI93aE0J0GVg5mgZ78/mCs712DIZwW5gK1ElP9WYm04fD9vhD2h7lArarv9YUwWAhc8MRDD95YTdzSF8KyEEIlbePZStZGXxo4qzcL9KeBbd1Z4FdvZGqB73ZmAThu8c1Qe9EfnKzPMDJ/uQavv54T1rE3Vzq8rpgYaZzvZ+sWuFMFvekDk8f1tJWqY0GU3h6HvNsWwbuttJ1v9rQVv0jl31DemAtVQufmqS0br5zZFR/pDGNjXY1qWqDn+alXv7TpaNKL5nUYOzByQl6HNz227M6uFZ969J6Vy1488KF9Lx1vN39U2KTF9EKrhPw1t2iex2jC58kiePuVviWN+tIVQtjy+d/7dLN4af4/0nz+H1/O8bazLnes9fWhbG4eHxmMiVeGsrk5AAAALBqLYa/ptrEHPlYoPlxJ6ivN/0fbO/4fD/nnk/lstIdCmJhN7BsO4YzZx7PAHbG5S4ZDeO9sarI+sC4JHArhnbOJFbWqkhJLYonRJPCToTwwkQQOx8BkEvhWDNycBK6LgYNJYFMMHEoC58ZAmK4fx+8P5eNoO9AXAxuyjXgwnoXwi6HYWrKtnqlVBQAAcILks8Oe+ruFcx2ON0OcXh7sa5UhnoHdMEMlqSGdwdamVQ1r6G5VQ2erGmrj3tN8+KWaO1rVXDoNo6M+w62//JvPhCZK8//x5vP/yjwd6Sgd/w9h/ezfmLszj8zU4hsm6zIAAAAAx2Hgf5//ZrN4af4/0d75/3GfSFchc3gk7obYOhzCeH0gq/YPy4HsqPdAHgAAAIDFoHY8vnYsfDq/zU7RTufT5fyTR5k/HvifmDd/76H7NzTrb2n+P9ne+f/99bdZJw7HXnxtOIQlhcAPYi+rgVmjMfDjj9cH8vEfjhvghlhVfmJCraobYokNMTCeBPY3KvHDWokz6gP5k1VrfF9tHNN5iUIAAAAATrq4OyAel4/n/7/vN2uualauNP/fcHTn/8/Og0un988MhLCqO4Su9IcBj/RnCwPGwGBHnnigP6urK63q2v4QzqkOLK3q+Xz9/+50jcEn+rKqYuCM9x149axq4pt9IawqBp783O0friZ2JYFa43/ZF8J7qqNNG//OkqzxnrTxry8J4d2FQK2qS5aEUG2sN63qoUp+HYO0qn+uhPC2QqBW1UcqIewOACxS8b/SzcUHd+6+euvGmZmpHQuYiPvw+8KW6ZmpsU3bZjZXGvRpc9LnumWMri2Pqd0r3zyTL1H02bvXD7aTrv1OcLzYVr4fv3TiYH4/fhfqmR3nmp66u2vTIX/g/eUmQuGbVKMhdy7wkPuLlcw9iaX6Y/7eMBCWXLlzasfYFzfu2rVjdfa33exrsr/xMFO2rVan26p/vr618fJouFpW4li31fJiJat2Xb591c7dV6+cvnzjpVOXTl2x+iNrxs8eXzv+0bNXVUc1nv1tMdTl81WdDPWN29sc1wkc6pndhUpOxqeGhITEYktsG1je9P/k0vx/e/P5f/zUiZ/8+foMjY7/j8TD/Nnjc4f5N8TA/naP/480OppfOzFgNAnsiYE9DvMDAADw1hAn+XFvZtwr/dMV33mxWbnS/H9Pe7//P0Hr/9eWrj+/0TL/K2KJ8Ubr/6fL/NfW/9/TaP3/dJn/2vr/+9+E9f+vrAWSTfIL6/8DAABvBSdv/f+Wy/unFwgoZWi5vH96gYBShpbL+Ld7gYCjXv//2f/8q/8OTZTm/ze3N/+3cD8AAACcOr78Z1f9TrN4af6/v735/8lf/y80Ov9/tFFgstHCgNb/AwAAYJFqtP7fyPX9FzcrV5r/H2xv/h9Pu+isyx1rfX0oW9MupGvavTJU+8kAAAAALA6dYWysp828dSujrjv2Np/KlwJtli56/k+OHN35/4fam//X/S7jpseW3dm14lOPvn7PymUvHvjQvpfmjv8DAAAAC6fd/RIAAAAAAAAAAAAAAMCb7/n/2Lu2Wbz0+/+wfvbxRr//j9f9i78veHtd7lhr6/X/8vsXfPKu3bNLFj4yFML7i4Gte7eeFvJr8y8vBh68aMU7qom9aYn7nzv3hWri4jTwiZWnv1ZNnJMENsRFEt+ZBuJVFV9bmgTi8or/ngbi9jiYBnrzwFeXZuPoSLfVTwezbdWRbqunB0MYLgRq2+rewayNjnSAtySB2gC/kAbiAP88D3SmvbprIOtVDAzGorcNZL0CAOCUFb8F9oQt0zNT4/ErfLw9s7v+NqpbsuzacrUdbTb/TL402WfvXj/YTror/S46d63xnlCpDmF16etqMUvH7ChPTC0tNt3bGwy51WpvnQ3KpY520/U2HlFfNqKxTdtmNve0HPja1lnWdLfMsro02Slm6ZzdpG3U0kZf2hhRm9umjS7H+51hbKwryfUHMTgS6rR6RbT7e/3iOn+NXgXFPFcc2ferZvWV5v8j7c3/K8VxvZZfDGBPvLLe3w1b5h8AAAAW1lfX/fob8d9nrn/4yWZ5S/P/0fbm/3EPVn4oONvbcShe/3/fcAizl9YfyQJ3xOYuGQ7hvbOpyVgiu6D++bHEeBa4I+4wWRFLbJisr2pJDBxMAj8ZygOHksDhGMj3UhwI+a6cvx8K4cOzqfX1JbbHEiNJ4NMxMJoExmJgPAksjYGJJPDy0jwwmQT+LQbCdP22untpvq0AAACORj7P6qm/G9J53sHuVhk6WmXob5Whs1WGSqsMjUYR7387ZuhJTl7pKGTqSWvtS2opZYgXwz/qfpUyhB/W50wLlpqO5x/UzjfoqM9w38e6K6GJ0vx/vL35f3/9bdb64Tj/n7v+Xxb4Qeze1+Kp46Mx8OOP1wfyHQOH42T3hlpVk3mJfNJ+QywxEQOjSWB7DEwkgQ3r88D+d9QH8pl2rfF9tcan8xKFAAAAAJx0cQdB3E0T5/+37fzKQLNypfn/RHvz/9jeQLGx62KtR5aGcG/HXG9qgZWDWSDuxxiMP49/12AIpxV2cNRKTPVnJXqThsP3+7JfqPemVX2vL/vxQbx/wRMPPXhjNXFLXwjLCntfam08W8na6EsDZ/Vmgf40sK07C8Q9P7XAdzuzABy32l7B+ILKT3WpGZm/XIPX31vlmqDp8Er7QOfJN99vrhZKaYdrvk+15uietqb7bzlhSm+PQ95ti/HdNuLdVvwilX9DeWMuVAmdm6e2bLxyZld8pPhL1pIFep6Lv1JtJ30CXod7jr23rVXSDownHx/j85eb/3XYEau76bFld3at+NSj96xc9uKBD+17qe1uNBB/KPzQNf86+KPC5l1olZC/5hbd58mkz5NF8d9A8u4e9bSFENa//PUbmsVL8//J9ub/3cntrF/HjblzOIQPFDbuI3Hz//Fw9jlYCGSfkm8rB7JD7v811PCTEwAAAE602u6O2v6C6fw2OyE8nSeX808eZf64v2Ji3vzt9rv/ry9a1ixemv9vaD7/X5J00/F/x/9ZII7/z+tU3xW9JH1gz3Htii5Vx4Jw/H9ep/q7zfH/eTn+7/j/fBz/b8Hx/3md6k9b6VvSdl+6Qggv/tEDTzeLl+b/29ub/1v/b/5F+2rr/21otP7f9kbr/+2x/h8AALCgGiw0l87zSqv3lTKkq/eVMrRcILDlEoPW/zvq9f9eOPPZ34QmSvP/Pe3N/+PLYaDY+mJZ/290fYOqbo6B7RYGBAAA4FTUaAcBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAb677/uF/NjeLP/zb855+7sKJy/auu/Dla847/fEQpmcf78jCHf3X3zrx8zvPvWvvfWtuu+fI+R+s5OV68tvfrcsda319KIT9hUcGY+KVoeqducAFn7xrd3c18chQCO8vBrbu3XpaNfGtoRCWFwMPXrTiHdXE3rTE/c+d+0I1cXEa+MTK01+rJs7JAx1pd/9xadbdjrS7Ny4NYbgQqHX3sqX1VdXa+NM80Jm28U+DWRsxMBiLfmMwayMGZmKJ6SUhrOoOoSut6uFKVlVXWtW/VLKqutKqvlwJ4ZwQQnda1XO9WVXd6cgf782qioEz3nfg1bOqif29IawqBp783O0fria+kARqjf9Fbwjvqb5k0sa/3ZM13pM2fktPCO8OIfSmJX7ZnZXoTUs83x3C2wqBWuOf7w5hd+AtIX741H2i7dx99daNMzNTOxYw0Zu31Re2TM9MjW3aNrO5kvSpkY5C+o1rj33sz7z6pU3V28/evX6wnXR3Xq5ntstreururj3Vex/71V+sZO75KNUf8/eGgbDkyp1TO8a+uHHXrh2rs7/tZl+T/e3Ko9m2Wr1YttXyYiWrdl2+fdXO3VevnL5846VTl05dsfoja8bPHl87/tGzV1VHNZ79PRFDvf3kD/XM7kIlJ+MDQEJCYrElOus+3cZP9Q/y0hf9uY72hMrsB3RpWlHM0jE7yhMx6HXHOOJj+Z7SckSrSxOHUpY182S5tj7L2tJkYq6WvizL7Pe60uSw2Fjn7CaN9zvD2FhXo+0wUn+3uHl/dhyb96l807WbBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4P/YgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwg4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRV24FgAAAAAQJi/dRg9GwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHApAAD//7IeJCA=")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f0000000000)={0x17c04, 0xffffffffffffffff, 0x0, 0xc73f, 0x81, 0x1})
pwrite64(r0, &(0x7f00000005c0)='\"', 0x1, 0x4fed0)

2m28.431476083s ago: executing program 0 (id=134):
bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8)

2m28.079527518s ago: executing program 0 (id=140):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0xff, 0x1, 0x20}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x8000000, 0x2, 0x2, 0x0, 0x8}, 0x20)

2m28.079148595s ago: executing program 0 (id=142):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x800, &(0x7f0000000100)={[{@errors_remount}, {@namecase}, {@gid={'gid', 0x3d, 0xee00}}, {@errors_remount}, {@keep_last_dots}, {@errors_continue}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'macceltic'}}, {@umask={'umask', 0x3d, 0x3ff}}, {@dmask={'dmask', 0x3d, 0x7}}]}, 0x1, 0x1533, &(0x7f0000000380)="$eJzs3AucTtX6OPDnWWvtMSbpbZLLsNZ6Nm8SyyRJLklySZIkSXJLSJrkSEJiyC1pSJJch+QyhOQyMWnc7/dLQpI0SRKSW7L+H8Vfnep3zvmdfjmfM8/383k/1jNrP2s/+33ey94b83WnwdUb1qhSn4jg34I//5EMALEA0B8ArgKAAADKxJeJPz+fU2Lyv7cT9ud6MO1yV8AuJ+5/9sb9z964/9kb9z974/5nb9z/7I37n71x/xnLzjZOLXA1P7Lvg+////er+4cz/P3/XySr5OjPV5e8tjNAzD+bwv3P3rj//7WCf2Yj7n/2xv3PrmIvdwHsPwC//7ODHH84w/3P3rj/jGVnl/v+8+V+QCR7PweX+/XHGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYYyx7OOUvUQBwcXy562KMMcYYY4wxxtifx+e43BUwxhhjjDHGGGPs/x6CAAkKAoiBHBALOSEOBABcCbnhKojA1RAP10AeuBbyQj7IDwUgAQpCIdBgwAJBCIWhCEThOigK10MxuAGKQwlwUBIS4UYoBTdBabgZysAtUBZuhXJQHipARbgNKsHtUBnugCpwJ1SFalAdasBdUBPuhlpwD9SGe6EO3Ad14X6oBw9AfXgQGsBD0BAehkbwCDSGJtAUmkHz/1X+89ANXoDu0AOSoSf0ghehN/SBvtAP+sNLMABehoHwCqTAIBgMr8IQeA2GwuswDN6A4fAmjICRMApGwxgYC6kwDsbDWzAB3oaJMAkmwxRIg6kwDd6B6TADZsK7MAveg9kwB+bCPEiH92E+LIAM+AAWwoeQCYtgMSyBpbAMlsMKWAmrYDWsgbWwDtbDBtgIm2AzbIGtsA22w0ewAz6GnbALdsMnsAc+/RfzT/5dfmcEBBQoUKHCGIzBWIzFOIzDXJgLc2NujGAE4zEe82AezIt5MT/mxwRMwEJYCA0aJCQsjIUxilEsikWxGBbD4lgcHTpMxEQshTdhaSyNZbAMlsWyWA7LY3msiBWxElbCylgZq2AVrIpVsTpWx7vwLuyJtbAW1sbaWAfrXLw9hfWxPjbABtgQG2IjbISNsTE2xabYHJtjC2yBLbEltsbW2AbbYFtsi0mYhO2wHbbH9tgBO2BH7IidsBN2xi7YJev5HIAv4AvYA6uKntgLe2FvTMnRF/thP3wJB+DL+DK+gik4CAfjq/gqvoZD8QQOwzdwOA7HSmIkjsLRSGIspmIqjsfxOAEn4ESchJNwCqbhVJyG03A6zsAZ+C7OwvfwPZyDc3AepmM6zscFmIEZuBBPYiYuwsW4BJfiMlyKK3AlrsDVuAZX4zpchxtwA27CTbgFt+A23AYfoQLAj3EX7sIU3IN7cC/uxX24D/fjfszCLDyAB/AgHsRDeAgP42E8gkfxGB7F43gcT+BJPIWn8AyewbP4bMKXDT66YVUKiPOUUCJGxIhYESviRJzIJXKJ3CK3iIiIiBfxIo/II/KKvCK/yC8SRIIoJAoJI4wgEcYAgIiKqCgqiopiopgoLooLJ5xIFImilCglSovSooy4RZQVt4pyorxo5SqKiqKSaO0qiztEFVFFVBXVRHVRQ9QQNUVNUUvUErVFbVFH1BF1xf2inuiJffFBcb4zDcUgbCQGY2PRRMgLn2AtxFBsKVqJ1uJx8QYOw7aihUsST4l2YhS2F38To/EZ0VGMxU7iOdFZdBFdxfOim2jpuoseYiL2FL3EFOwt+oi+op+YjtXEuzgrZ3XxikgRg8Rg8aqYh6+JoeJ1MeynI31TjBAjxSgxWowRY0WqGCfGi7fEBPG2mCgmicliikgTU8U08Y6YLmaImeJdMUu8J2aLOWKumCfSxftivlggMsQHYqH4UGSKRWKxWCKWivOfuSvESrFKrBZrxFqxTqwXG8RGsUlsFlvEVrFNbBcfiR3iY7FT7BK7xSdij/hU7BWfiX3ic7FffCGyxJfigPhKHBRfi0PiG3FYfCuOiKPimPhOHBffixPipDglTosz4gdxVvwozgkvQKIUUkolAxkjc8hYmVPGyStkLhlceHavlvHyGplHXivzynwyvywgE2RBWUhqaaSVJENZWBaRUXmdLCqvl8XkDbK4LCGdLCkT5Y2ylLxJlpY3yzLyFllW3irLyfKygqwob5OV5O0SIj/vo6qsJqvLGvIumQx3y1ryHllb3ivryPtkXXm/rCcfkPXlg7KBfEg2lA/LRvIR2Vg2kU1lM9lcPipbyMdkS9lKtpaPyzbyCdlWPimT5FOynfQXXiLPyI7yWdlJPic7yy6yq/xRnpNedpc9JPQE2Uu+KHvLPrKv7Cf7y5fkAPmyHChfkSlykBwsX5VD5GtyqHxdDpNvyOHyTTlCjpSj5Gg5Ro6VqXKcHC/fkhPk23KinCQnyykyTU6VfS+sNFPKf5j/1u/kD/xp7xvkRrlJbpZb5Fa5TW6XH8kdcofcKXfK3XK33CP3yL1yr9wn98n9cr/MklnygDwgD8qD8pA8JA/Lw/KIPCpPy+/kcfm9PCFPypPytDwjz8izF54DUKiEkkqpQMWoHCpW5VRx6gqVS12pcqurVERdreLVNSqPulblVflUflVAJaiCqpDSyiirSIWqsCqiouo6vPCCUcVVCeVUSZWobvxX8lVRdb0qpm74Vf7F+pL/oL7mqrlqoVqolqqlaq1aqzaqjWqr2qoklaTaqXaqvWqvOqgOqqPqqDqpTqqz6qy6qq6qm+qmuqvuKlklq17qRdVb9VF9VT/VX72kBqgBaqAaqFJUihqsBqshaogaqoaqYWqYGq6GqxFqhBqlRqkxaoxKValqvBqvJqgJaqKaqCarySpNpalpapqarqarmWqmmqVmqdlqtpqr5qp0la7mq/kqQ2WohWqhylSL1CK1RC1Ry9QytUKtUKvUKrVGrVHr1DqVqTaqjWqz2qy2qq1qu9qudqgdaqfaqXar3WqP2qP2qr1qn9qn9qv9KktlqQPqgDqoDqpD6pA6rA6rI+qIOqaOqePquDqhTqhT6pQ6o86os+qsOqfOnT/tC0QgAhWoICaICWKD2CAuiAtyBbmC3EHuIBJEgvggPsgTXBvkDfIF+YMCQUJQMCgU6MAENhAXmh4NrguKBtcHxYIbguJBicAFJYPE4MagVHBTUDq4OSgT3BKUDW4NygXlgwpBxeC2oFJwe1A5uCOoEtwZVA2qBdWDGsFdQc3g7qBWcE9QO7g3qBPcF9QN7g/qBQ8E9YMHgwbBQ0HD4OGgUfBI0DhoEjQNmgXN/9T1vT+R7zHXXffQybqn7qVf1L11H91X99P99Ut6gH5ZD9Sv6BQ9SA/Wr+oh+jU9VL+uh+k39HD9ph6hR+pRerQeo8fqVD1Oj9dv6Qn6bT1RT9KT9RSdpqfqafodPV3P0DP1u3qWfk/P1nP0XD1Pp+v39Xy9QGfoD/RC/aHO1Iv0Yr1EL9XL9HK9Qq/Uq/RqvUav1ev0er1Bb9Sb9Ga9RW/V2/R2/ZHeoT/WO/UuvVt/ovfoT/Ve/Znepz/X+/UXOkt/qQ/or/RB/bU+pL/Rh/W3+og+qo/p7/Rx/b0+oU/qU/q0PqN/0Gf1j/qc9udP7s9/vRtllIkxMSbWxJo4E2dymVwmt8ltIiZi4k28yWPymLwmr8lv8psEk2AKmULmPDJkCpvCJmqipqgpaoqZYqa4KW6ccSbRJJpSppQpbUqbMqaMKWvKmnKmnKlgKpjbzG3mdnO7ucPcYe40d5pqppqpYWqYmqamqWVqmdqmtqlj6pi6pq6pZ+qZ+qa+aWAamIamoWlkGpnGprFpapqa5qa5aWFamJampWltWps2po1pa9qaJJNk2pl2pr1pbzqYDqaj6Wg6mU6ms+lsupquppvpZrqb7ibZJJteppfpbXqbvqav6W/6mwFmgBloBpoUk2IGm8FmiBlihpqhZph5www/f6JqRppRZrQZY8aaVJNqxpvxZoKZYCaaiWaymWzSTJqZZqaZ6Wa6mWlmmllmlpltZpu5Zq5JN+lmvplvMkyGWWgWmkyTaRabxWapWWqWm+VmpVlpVpvVZi2sNevNerPRbDSbzWaz1Ww12812s8PsMDvNTrPb7DZ7zB6z1+w1+8w+s9/sN1kmyxwwB8xBc9AcMofMYXPYHDFHzDFzzBw3x80Jc8KcMqfMGZPvwvelN7E2p42zV9hc9kqb215l/z7ObwvYBFvQFrLa5rX5fhUba20xe4MtbktYZ0vaRHvjb+JytrytYCva22wle7ut/Ju4pr3b1rL32Nr2XlvD3vWruI69z9a1D9t6iAC2iW1gm9mG9mHbyD5iG9smtqltZtvYJ2xb+6RNsk/Zdvbp38Tz7QK70q6yq+0au9PusqfsaXvQfm3P2B9sd9vD9rcv2QH2ZTvQvmJT7KDfxMPtm3aEHWlH2dF2jB37m3iynWLT7FQ7zb5jp9sZv4nT7ft2ls2ws+0cO9fO+yk+X1OG/cAutB/aTBvAYrvELrXL7HK74v/XusSus+vtBrvDfmw32y12q91mt188Eba77G77id1jP7UH7Fd2n/3c7reHbJb98qf4/PEdst/Yw/Zbe8Qetcfsd/a4/V79lDuyN4D9wX5nf7TnrLdASECSFAUUQzkolnJSHF1BuehKyk1XUYSupni6hvLQtZSX8lF+KkAJVJAKkSZDlohCKkxFKErX0cXyilMJclSSEulGKkU3UWm6mcrQLVSWbqVyVJ4qUEW6jSrR7VSZ7qAqdCdVpWpUnWrQXVST7qZadA/VpnupDt1Hdel+qkcPUH16kBrQQ9SQHqZG9Ag1pibUlJpRc3qUWtBj1JJaUWt6nNrQE9SWnqQkeora0dPUnv5GHWgodKRnqRM9R52pC3Wl56kbvUDdqQclU0/qRS9Sb+pDfakf9aeXaAC9TAPpFUqhQTSYXqUh9BoNpddpGL1Bw+lNGkEjaRSNpjE0llJpHI2nt2gCvU0TaRJNpimURlNpGr1D02kGzaR3aRa9R7NpDs2leZRO79N8WkAZ9AEtpA8pkxbRYlpCS2kZLacVtJJW0WpaQ2tpHa2nDbSRNtFm2kJbaRttp49oB31MO2kX7aZPaA99SnvpM9pHn9N++oKy6Es6QF/RQfqaDtE3vgd9S0foKB2j7+g4fU8n6CSdotN0hn6gs/QjnSNPEGIoQhmqMAhjwhxhbJgzjAuvCHOFV4a5w6vCSHh1GB9eE+YJrw3zhvnC/GGBMCEsGBYKdWhCG1IYhoXDImE0vC4sGl4fFgsxLB6WCF1YMkwMbwxLhTeFpcObwzLhLWHZ8NawXFg+fPjeiuFtYaXw9rByeEdYJbwzrBpWC6uHNcK7wprh3WGt8J6wdnhvWDq8L6wb3h/WCx8I64cPhg3Ch8KG4cNho/CRsHHYJGwaNgubh4+GLcLHwpZhq7B1+HjYJnwibBs+GSaFT4Xtwqd/mr9vwR/PJ4c9w17hi+GLoff3yLnRedH06PvR+dEF0YzoB9GF0Q+jmdFF0cXRJdGl0WXR5dEV0ZXRVdHV0TXRtdF10fXRDVHva+QAh0446ZQLXIzL4WJdThfnrnC53JUut7vKRdzVLt5d4/K4a11el8/ldwVcgivoCjntjLOOXOgKuyIu6q5zRd31rpi7wRV3JZxzJV2ia+aau+auhXvMtXStXGv3uHvcPeGecE+6J91Trp172rV3f3Md3DOuo3vWPeuec51dF9fVPe+6uXG5f35PJrterpfr7Xq7vq6v6+/6uwFugBvoBroUl+IGu8FuiBvihrqhbpgb5oa74W6EG+FGuVFujBvjUl2qG+/GuwlugpvoJrrJbrJLc2lumpvmprvprtKMn/cy2812c91cl+7S3Xx3/pwxwy10C12my3SL3WK31C11y91yt9KtdKvdarfWrXXr3Xq30W10m91mt9VtddvddrfD7XA7/VU/L+r2uL1ur9vn9rn97guX5b50B9xX7qD72h1y37jD7lt3xB11x9x37rj73p1wJ90pd9qdcT+4s+5Hd855lxoZFxkfeSsyIfJ2ZGJkUmRyZEokLTI1Mi3yTmR6ZEZkZuTdyKzIe5HZkTmRuZF5kfTI+5H5kQWRjMgHkYWRDyOZkUWRxZElkaWRZRHvC24OfWFfxEf9db6ov94X8zf44r6Ed76kT/Q3+lL+Jl/a3+zL+Ft8WX+rL+fL+wr+Ed/YN/FNfTPf3D/qW/jHfEvfyrf2j/s2/gnf1j/pk/xTvp1/2rf3f/Md/DO+o3/Wd/LP+c6+i+/qn/fd/Au+u+/hk31P38u/6Hv7Pr6v7+f7+5f8AP+yH+hf8Sl+kB/sX/VD/Gt+qH/dD/Nv+OExb/oRFy+RYaxP9eP8eP+Wn+Df9hP9JD/ZT/Fpfqqf5t/x0/0MP9O/62f59/xsP8fP9fN8un/fz/cLfIb/wC/0H/pMv+jiTWW/3K/wK/0qv9qv8Wv9Or/eb/Ab/Sa/2W/xW/02v91/5Hf4j/1Ov8vv9p/4Pf5Tv9d/5vflBL/ff+Gz/Jf+gP/KH/Rf+0P+G3/Yf+uP+KP+mP/OH/ff+xP+pD/lT/sz/gd/1v/oz/H/WWOMMcYY+6eMuzQUv575+XZ+z9/JEb/YuBcAXLmlQNYv58+fUa7N+/O4j0hoEwGAp3p0evDio2rV5OTkC9tmSgiKzAG4+DdB58XApXgRtIYnIAlaQanfrb+P6HKG/sH60VsA4n6REwuX4kvrfwaAyb+z/qOPD59fNjwV/z+sPwegWJFLOTnhUrwIWv90f6UVlP6D+vO1+GX9sb9dP+fnqQAtf5GTCy7Fl+pPhMfgaUj61ZaMMcYYY4wxxtjP+ogKHS5ef178F5+/d32eoC7l5IBL8T+6PmeMMcYYY4wxxtjl90yXrk8+mpTUqsO/Pqj8v8r6pweN4P9q5b9kcMd/Rhn/wsB7gIs/UQDwby4IcH4g/8qj2PSX7Cvlwlvn76eWnvYB/Ge08s8YXOYPJsYYY4wxxtif7tJJ/69/ri5XQYwxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGWDb0V/w6sV/ur8flO1TGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGPssvl/AQAA//8lsf60")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x99501e, 0x0)
mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0)
mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x887008, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x2020)

2m28.000742039s ago: executing program 0 (id=144):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x2, "19fde941"}]}}, 0x0}, 0x0)
syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3445}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, &(0x7f00000009c0)={0x2c, 0x0, &(0x7f0000000380)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, 0x0, &(0x7f0000000a00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)

2m27.738636086s ago: executing program 0 (id=145):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x2c, r1, 0x5, 0x70bd2e, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_SAE_PASSWORD={0x4}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x44840}, 0x20040000)

2m27.592006232s ago: executing program 32 (id=145):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x2c, r1, 0x5, 0x70bd2e, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_SAE_PASSWORD={0x4}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x44840}, 0x20040000)

48.472760991s ago: executing program 2 (id=1068):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x48, 0x18, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg2\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x40044}, 0x20008000)

48.423997769s ago: executing program 2 (id=1069):
syz_mount_image$hpfs(&(0x7f0000009e00), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0x0, @ANYBLOB="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"], 0x1, 0x9dc3, &(0x7f0000009ec0)="$eJwEwAMAbQUAwNBs27aXbdu2bS/3ro1s27Zt27a/0blvgPcP8IEBPjjAhwb48AAfGeCjA3xsgI8P8IkBPjnApwb49ACfGeCzA3xugM8P8IUBvjjAlwb48gBfGeCrA3xtgK8P8I0BvjnAtwb49gDfGeC7A3xvgO8P8IMBfjjAjwb48QA/GeCnA/xsgJ8P8IsBfjnArwb49QC/GeC3A/xugN8P8IcB/jjAnwb48wB/GeCvA/xtgL8P8I8B/jnAvwb49wD/GeC/A/xvgEMGOHSAwwY4fIAjBjhygKMGOHqAYwY4doDjBDhugOMFOH6AEwQ4YYATBThxgJMEOGmAkwU4eYBTBDhlgFMFOHWA0wQ4bYDTBTh9gDMEOGOAMwU4c4CzBDhrgLMFOHuAcwQ4Z4BzBTh3gPMEOG+A8wU4f4ALBLhggAsFuHCAiwS4aICLBbh4gEsEuGSASwW4dIDLBEiAywa4XIDLB7hCgCsGuFKAKwe4SoCrBrhagKsHuEaAawa4VoBrB7hOgOsGuF6A6we4QYAbBrhRgBsHuEmAmwa4WYCbB7hFgFsGuFWAWwe4TYDbBrhdgNsHuEOAOwa4U4A7B7hLgLsGuFuAuwe4R4B7BrhXgHsHuE+A+wa4X4D7B3hAgAcGeFCABwd4SICHBnhYgIcHeESARwZ4VIBHB3hMgMcGeFyAxwd4QoAnBnhSgCcHeEqApwZogKcFeHqAZwR4ZoBnBXh2gOcEeG6AgwCDAMMAowDjAJMA0wCzAPMAiwDLAKsA6wCbANsAuwD7AM8L8PwALwjwwgAvCvDiAC8J8NIALwvw8gCvCPDKAK8K8OoArwnw2gCvC/D6AG8I8MYAbwrw5gBvCfDWAG8L8PYA7wjwzgDvCvDuAO8J8N4A7wvw/gAfCPDBAB8K8OEAHwnw0QAfC/DxAJ8I8MkAnwrw6QCfCfDZAJ8L8PkAXwjwxQBfCvDlAF8J8NUAXwvw9QDfCPDNAN8K8O0A3wnw3QDfC/D9AD8I8MMAPwrw4wA/CfDTAD8L8PMAvwjwywC/CvDrAL8J8NsAvwvw+wB/CPDHAH8K8OcAfwnw1wB/C/D3AP8I8M8A/wrw7wD/CfDfAP8LcEiAQwMcFuDwAEcEODLAUQGODnBMgGMDHCfEcUMcL8TxQ5wgxAlDnCjEiUOcJMRJQ5wsxMlDnCLEKUOcKsSpQ5wmxGlDnC7E6UOcIcQZQ5wpxJlDnCXEWUOcLcTZQ5wjxDlDnCvEuUOcJ8R5Q5wvxPlDXCDEBUNcKMSFQ1wkxEVDXCzExUNcIsQlQ1wqxKVDXCZEQlw2xOVCXD7EFUJcMcSVQlw5xFVCXDXE1UJcPcQ1QlwzxLVCXDvEdUJcN8T1Qlw/xA1C3DDEjULcOMRNQtw0xM1C3DzELULcMsStQtw6xG1C3DbE7ULcPsQdQtwxxJ1C3DnEXULcNcTdQtw9xD1C3DPEvULcO8R9Qtw3xP1C3D/EA0I8MMSDQjw4xENCPDTEw0I8PMQjQjwyxKNCPDrEY0I8NsTjQjw+xBNCPDHEk0I8OcRTQjw1REM8LcTTQzwjxDNDPCvEs0M8J8RzQxyEGIQYhhiFGIeYhJiGmIWYh1iEWIZYhViH2ITYhtiF2Id4Xojnh3hBiBeGeFGIF4d4SYiXhnhZiJeHeEWIV4Z4VYhXh3hNiNeGeF2I14d4Q4g3hnhTiDeHeEuIt4Z4W4i3h3hHiHeGeFeId4d4T4j3hnhfiPeH+ECID4b4UIgPh/hIiI+G+FiIj4f4RIhPhvhUiE+H+EyIz4b4XIjPh/hCiC+G+FKIL4f4SoivhvhaiK+H+EaIb4b4Vohvh/hOiO+G+F6I74f4QYgfhvhRiB+H+EmIn4b4WYifh/hFiF+G+FWIX4f4TYjfhvhdiN+H+EOIP4b4U4g/h/hLiL+G+FuIv4f4R4h/hvhXiH+H+E+I/4b4X4hDQhwa4rAQh4c4IsSRIY4KcXSIY0IcG+I4EY4b4XgRjh/hBBFOGOFEEU4c4SQRThrhZBFOHuEUEU4Z4VQRTh3hNBFOG+F0EU4f4QwRzhjhTBHOHOEsEc4a4WwRzh7hHBHOGeFcEc4d4TwRzhvhfBHOH+ECES4Y4UIRLhzhIhEuGuFiES4e4RIRLhnhUhEuHeEyERLhshEuF+HyEa4Q4YoRrhThyhGuEuGqEa4W4eoRrhHhmhGuFeHaEa4T4boRrhfh+hFuEOGGEW4U4cYRbhLhphFuFuHmEW4R4ZYRbhXh1hFuE+G2EW4X4fYR7hDhjhHuFOHOEe4S4a4R7hbh7hHuEeGeEe4V4d4R7hPhvhHuF+H+ER4Q4YERHhThwREeEuGhER4W4eERHhHhkREeFeHRER4T4bERHhfh8RGeEOGJEZ4U4ckRnhLhqREa4WkRnh7hGRGeGeFZEZ4d4TkRnhvhIMIgwjDCKMI4wiTCNMIswjzCIsIywirCOsImwjbCLsI+wvMiPD/CCyK8MMKLIrw4wksivDTCyyK8PMIrIrwywqsivDrCayK8NsLrIrw+whsivDHCmyK8OcJbIrw1wtsivD3COyK8M8K7Irw7wnsivDfC+yK8P8IHInwwwocifDjCRyJ8NMLHInw8wicifDLCpyJ8OsJnInw2wucifD7CFyJ8McKXInw5wlcifDXC1yJ8PcI3InwzwrcifDvCdyJ8N8L3Inw/wg8i/DDCjyL8OMJPIvw0ws8i/DzCLyL8MsKvIvw6wm8i/DbC7yL8PsIfIvwxwp8i/DnCXyL8NcLfIvw9wj8i/DPCvyL8O8J/Ivw3wv8iHBLh0AiHRTg8whERjoxwVISjIxwT4dgIx4lx3BjHi3H8GCeIccIYJ4px4hgniXHSGCeLcfIYp4hxyhininHqGKeJcdoYp4tx+hhniHHGGGeKceYYZ4lx1hhni3H2GOeIcc4Y54px7hjniXHeGOeLcf4YF4hxwRgXinHhGBeJcdEYF4tx8RiXiHHJGJeKcekYl4mRGJeNcbkYl49xhRhXjHGlGFeOcZUYV41xtRhXj3GNGNeMca0Y145xnRjXjXG9GNePcYMYN4xxoxg3jnGTGDeNcbMYN49xixi3jHGrGLeOcZsYt41xuxi3j3GHGHeMcacYd45xlxh3jXG3GHePcY8Y94xxrxj3jnGfGPeNcb8Y94/xgBgPjPGgGA+O8ZAYD43xsBgPj/GIGI+M8agYj47xmBiPjfG4GI+P8YQYT4zxpBhPjvGUGE+N0RhPi/H0GM+I8cwYz4rx7BjPifHcGAcxBjGGMUYxxjEmMaYxZjHmMRYxljFWMdYxNjG2MXYx9jGeF+P5MV4Q44UxXhTjxTFeEuOlMV4W4+UxXhHjlTFeFePVMV4T47UxXhfj9THeEOONMd4U480x3hLjrTHeFuPtMd4R450x3hXj3THeE+O9Md4X4/0xPhDjgzE+FOPDMT4S46MxPhbj4zE+EeOTMT4V49MxPhPjszE+F+PzMb4Q44sxvhTjyzG+EuOrMb4W4+sxvhHjmzG+FePbMb4T47sxvhfj+zF+EOOHMX4U48cxfhLjpzF+FuPnMX4R45cxfhXj1zF+E+O3MX4X4/cx/hDjjzH+FOPPMf4S468x/hbj7zH+EeOfMf4V498x/hPjvzH+F+OQGIfGOCzG4TGOiHFkjKNiHB3jmBjHxjhOguMmOF6C4yc4QYITJjhRghMnOEmCkyY4WYKTJzhFglMmOFWCUyc4TYLTJjhdgtMnOEOCMyY4U4IzJzhLgrMmOFuCsyc4R4JzJjhXgnMnOE+C8yY4X4LzJ7hAggsmuFCCCye4SIKLJrhYgosnuESCSya4VIJLJ7hMgiS4bILLJbh8giskuGKCKyW4coKrJLhqgqsluHqCayS4ZoJrJbh2guskuG6C6yW4foIbJLhhghsluHGCmyS4aYKbJbh5glskuGWCWyW4dYLbJLhtgtsluH2COyS4Y4I7JbhzgrskuGuCuyW4e4J7JLhngnsluHeC+yS4b4L7Jbh/ggckeGCCByV4cIKHJHhogocleHiCRyR4ZIJHJXh0gsckeGyCxyV4fIInJHhigicleHKCpyR4aoImeFqCpyd4RoJnJnhWgmcneE6C5yY4SDBIMEwwSjBOMEkwTTBLME+wSLBMsEqwTrBJsE2wS7BP8LwEz0/wggQvTPCiBC9O8JIEL03wsgQvT/CKBK9M8KoEr07wmgSvTfC6BK9P8IYEb0zwpgRvTvCWBG9N8LYEb0/wjgTvTPCuBO9O8J4E703wvgTvT/CBBB9M8KEEH07wkQQfTfCxBB9P8IkEn0zwqQSfTvCZBJ9N8LkEn0/whQRfTPClBF9O8JUEX03wtQRfT/CNBN9M8K0E307wnQTfTfC9BN9P8IMEP0zwowQ/TvCTBD9N8LMEP0/wiwS/TPCrBL9O8JsEv03wuwS/T/CHBH9M8KcEf07wlwR/TfC3BH9P8I8E/0zwrwT/TvCfBP9N8L8EhyQ4NMFhCQ5PcESCIxMcleDoBMckODbBcVIcN8XxUhw/xQlSnDDFiVKcOMVJUpw0xclSnDzFKVKcMsWpUpw6xWlSnDbF6VKcPsUZUpwxxZlSnDnFWVKcNcXZUpw9xTlSnDPFuVKcO8V5Upw3xflSnD/FBVJcMMWFUlw4xUVSXDTFxVJcPMUlUlwyxaVSXDrFZVIkxWVTXC7F5VNcIcUVU1wpxZVTXCXFVVNcLcXVU1wjxTVTXCvFtVNcJ8V1U1wvxfVT3CDFDVPcKMWNU9wkxU1T3CzFzVPcIsUtU9wqxa1T3CbFbVPcLsXtU9whxR1T3CnFnVPcJcVdU9wtxd1T3CPFPVPcK8W9U9wnxX1T3C/F/VM8IMUDUzwoxYNTPCTFQ1M8LMXDUzwixSNTPCrFo1M8JsVjUzwuxeNTPCHFE1M8KcWTUzwlxVNTNMXTUjw9xTNSPDPFs1I8O8VzUjw3xUGKQYphilGKcYpJimmKWYp5ikWKZYpVinWKTYptil2KfYrnpXh+ihekeGGKF6V4cYqXpHhpipeleHmKV6R4ZYpXpXh1itekeG2K16V4fYo3pHhjijeleHOKt6R4a4q3pXh7inekeGeKd6V4d4r3pHhviveleH+KD6T4YIoPpfhwio+k+GiKj6X4eIpPpPhkik+l+HSKz6T4bIrPpfh8ii+k+GKKL6X4coqvpPhqiq+l+HqKb6T4Zopvpfh2iu+k+G6K76X4foofpPhhih+l+HGKn6T4aYqfpfh5il+k+GWKX6X4dYrfpPhtit+l+H2KP6T4Y4o/pfhzir+k+GuKv6X4e4p/pPhnin+l+HeK/6T4b4r/pTgkxaEpDktxeIojUhyZ4qgUR6c4JsWxKY6T4bgZjpfh+BlOkOGEGU6U4cQZTpLhpBlOluHkGU6R4ZQZTpXh1BlOk+G0GU6X4fQZzpDhjBnOlOHMGc6S4awZzpbh7BnOkeGcGc6V4dwZzpPhvBnOl+H8GS6Q4YIZLpThwhkukuGiGS6W4eIZLpHhkhkuleHSGS6TIRkum+FyGS6f4QoZrpjhShmunOEqGa6a4WoZrp7hGhmumeFaGa6d4ToZrpvhehmun+EGGW6Y4UYZbpzhJhlumuFmGW6e4RYZbpnhVhluneE2GW6b4XYZbp/hDhnumOFOGe6c4S4Z7prhbhnunuEeGe6Z4V4Z7p3hPhnum+F+Ge6f4QEZHpjhQRkenOEhGR6a4WEZHp7hERkemeFRGR6d4TEZHpvhcRken+EJGZ6Y4UkZnpzhKRmemqEZnpbh6RmekeGZGZ6V4dkZnpPhuRkOMgwyDDOMMowzTDJMM8wyzDMsMiwzrDKsM2wybDPsMuwzPC/D8zO8IMMLM7wow4szvCTDSzO8LMPLM7wiwyszvCrDqzO8JsNrM7wuw+szvCHDGzO8KcObM7wlw1szvC3D2zO8I8M7M7wrw7szvCfDezO8L8P7M3wgwwczfCjDhzN8JMNHM3wsw8czfCLDJzN8KsOnM3wmw2czfC7D5zN8IcMXM3wpw5czfCXDVzN8LcPXM3wjwzczfCvDtzN8J8N3M3wvw/cz/CDDDzP8KMOPM/wkw08z/CzDzzP8IsMvM/wqw68z/CbDbzP8LsPvM/whwx8z/CnDnzP8JcNfM/wtw98z/CPDPzP8K8O/M/wnw38z/C/DIRkOzXBYhsMzHJHhyAxHZTg6wzEZjs1wnBzHzXG8HMfPcYIcJ8xxohwnznGSHCfNcbIcJ89xihynzHGqHKfOcZocp81xuhynz3GGHGfMcaYcZ85xlhxnzXG2HGfPcY4c58xxrhznznGeHOfNcb4c589xgRwXzHGhHBfOcZEcF81xsRwXz3GJHJfMcakcl85xmRzJcdkcl8tx+RxXyHHFHFfKceUcV8lx1RxXy3H1HNfIcc0c18px7RzXyXHdHNfLcf0cN8hxwxw3ynHjHDfJcdMcN8tx8xy3yHHLHLfKcesct8lx2xy3y3H7HHfIccccd8px5xx3yXHXHHfLcfcc98hxzxz3ynHvHPfJcd8c98tx/xwPyPHAHA/K8eAcD8nx0BwPy/HwHI/I8cgcj8rx6ByPyfHYHI/L8fgcT8jxxBxPyvHkHE/J8dQczfG0HE/P8Ywcz8zxrBzPzvGcHM/NcZBjkGOYY5RjnGOSY5pjlmOeY5FjmWOVY51jk2ObY5djn+N5OZ6f4wU5XpjjRTlenOMlOV6a42U5Xp7jFTlemeNVOV6d4zU5XpvjdTlen+MNOd6Y40053pzjLTnemuNtOd6e4x053pnjXTneneM9Od6b43053p/jAzk+mONDOT6c4yM5PprjYzk+nuMTOT6Z41M5Pp3jMzk+m+NzOT6f4ws5vpjjSzm+nOMrOb6a42s5vp7jGzm+meNbOb6d4zs5vpvjezm+n+MHOX6Y40c5fpzjJzl+muNnOX6e4xc5fpnjVzl+neM3OX6b43c5fp/jDzn+mONPOf6c4y85/prjbzn+nuMfOf6Z4185/p3jPzn+m+N/OQ7JcWiOw3IcnuOIHEfmOCrH0TmOyXFsjuMUOG6B4xU4foETFDhhgRMVOHGBkxQ4aYGTFTh5gVMUOGWBUxU4dYHTFDhtgdMVOH2BMxQ4Y4EzFThzgbMUOGuBsxU4e4FzFDhngXMVOHeB8xQ4b4HzFTh/gQsUuGCBCxW4cIGLFLhogYsVuHiBSxS4ZIFLFbh0gcsUSIHLFrhcgcsXuEKBKxa4UoErF7hKgasWuFqBqxe4RoFrFrhWgWsXuE6B6xa4XoHrF7hBgRsWuFGBGxe4SYGbFrhZgZsXuEWBWxa4VYFbF7hNgdsWuF2B2xe4Q4E7FrhTgTsXuEuBuxa4W4G7F7hHgXsWuFeBexe4T4H7FrhfgfsXeECBBxZ4UIEHF3hIgYcWeFiBhxd4RIFHFnhUgUcXeEyBxxZ4XIHHF3hCgScWeFKBJxd4SoGnFmiBpxV4eoFnFHhmgWcVeHaB5xR4boGDAoMCwwKjAuMCkwLTArMC8wKLAssCqwLrApsC2wK7AvsCzyvw/AIvKPDCAi8q8OICLynw0gIvK/DyAq8o8MoCryrw6gKvKfDaAq8r8PoCbyjwxgJvKvDmAm8p8NYCbyvw9gLvKPDOAu8q8O4C7ynw3gLvK/D+Ah8o8MECHyrw4QIfKfDRAh8r8PECnyjwyQKfKvDpAp8p8NkCnyvw+QJfKPDFAl8q8OUCXynw1QJfK/D1At8o8M0C3yrw7QLfKfDdAt8r8P0CPyjwwwI/KvDjAj8p8NMCPyvw8wK/KPDLAr8q8OsCvynw2wK/K/D7An8o8McCfyrw5wJ/KfDXAn8r8PcC/yjwzwL/KvDvAv8p8N8C/ytwSIFDCxxW4PACRxQ4ssBRBY4ucEyBYwscp8RxSxyvxPFLnKDECUucqMSJS5ykxElLnKzEyUucosQpS5yqxKlLnKbEaUucrsTpS5yhxBlLnKnEmUucpcRZS5ytxNlLnKPEOUucq8S5S5ynxHlLnK/E+UtcoMQFS1yoxIVLXKTERUtcrMTFS1yixCVLXKrEpUtcpkRKXLbE5UpcvsQVSlyxxJVKXLnEVUpctcTVSly9xDVKXLPEtUpcu8R1Sly3xPVKXL/EDUrcsMSNSty4xE1K3LTEzUrcvMQtStyyxK1K3LrEbUrctsTtSty+xB1K3LHEnUrcucRdSty1xN1K3L3EPUrcs8S9Sty7xH1K3LfE/Urcv8QDSjywxINKPLjEQ0o8tMTDSjy8xCNKPLLEo0o8usRjSjy2xONKPL7EE0o8scSTSjy5xFNKPLVESzytxNNLPKPEM0s8q8SzSzynxHNLHJQYlBiWGJUYl5iUmJaYlZiXWJRYlliVWJfYlNiW2JXYl3heieeXeEGJF5Z4UYkXl3hJiZeWeFmJl5d4RYlXlnhViVeXeE2J15Z4XYnXl3hDiTeWeFOJN5d4S4m3lnhbibeXeEeJd5Z4V4l3l3hPifeWeF+J95f4QIkPlvhQiQ+X+EiJj5b4WImPl/hEiU+W+FSJT5f4TInPlvhcic+X+EKJL5b4Uokvl/hKia+W+FqJr5f4RolvlvhWiW+X+E6J75b4Xonvl/hBiR+W+FGJH5f4SYmflvhZiZ+X+EWJX5b4VYlfl/hNid+W+F2J35f4Q4k/lvhTiT+X+EuJv5b4W4m/l/hHiX+W+FeJf5f4T4n/lvhfiUNKHFrisBKHlziixJEljipxdIljShxb4jgVjlvheBWOX+EEFU5Y4UQVTlzhJBVOWuFkFU5e4RQVTlnhVBVOXeE0FU5b4XQVTl/hDBXOWOFMFc5c4SwVzlrhbBXOXuEcFc5Z4VwVzl3hPBXOW+F8Fc5f4QIVLljhQhUuXOEiFS5a4WIVLl7hEhUuWeFSFS5d4TIVUuGyFS5X4fIVrlDhihWuVOHKFa5S4aoVrlbh6hWuUeGaFa5V4doVrlPhuhWuV+H6FW5Q4YYVblThxhVuUuGmFW5W4eYVblHhlhVuVeHWFW5T4bYVblfh9hXuUOGOFe5U4c4V7lLhrhXuVuHuFe5R4Z4V7lXh3hXuU+G+Fe5X4f4VHlDhgRUeVOHBFR5S4aEVHlbh4RUeUeGRFR5V4dEVHlPhsRUeV+HxFZ5Q4YkVnlThyRWeUuGpFVrhaRWeXuEZFZ5Z4VkVnl3hORWeW+GgwqDCsMKowrjCpMK0wqzCvMKiwrLCqsK6wqbCtsKuwr7C8yo8v8ILKrywwosqvLjCSyq8tMLLKry8wisqvLLCqyq8usJrKry2wusqvL7CGyq8scKbKry5wlsqvLXC2yq8vcI7KryzwrsqvLvCeyq8t8L7Kry/wgcqfLDChyp8uMJHKny0wscqfLzCJyp8ssKnKny6wmcqfLbC5yp8vsIXKnyxwpcqfLnCVyp8tcLXKny9wjcqfLPCtyp8u8J3Kny3wvcqfL/CDyr8sMKPKvy4wk8q/LTCzyr8vMIvKvyywq8q/LrCbyr8tsLvKvy+wh8q/LHCnyr8ucJfKvy1wt8q/L3CPyr8s8K/Kvy7wn8q/LfC/yocUuHQCodVOLzCERWOrHBUhaMrHFPh2ArHqXHcGsercfwaJ6hxwhonqnHiGiepcdIaJ6tx8hqnqHHKGqeqceoap6lx2hqnq3H6GmeoccYaZ6px5hpnqXHWGmercfYa56hxzhrnqnHuGuepcd4a56tx/hoXqHHBGheqceEaF6lx0RoXq3HxGpeocckal6px6RqXqZEal61xuRqXr3GFGlescaUaV65xlRpXrXG1GlevcY0a16xxrRrXrnGdGtetcb0a169xgxo3rHGjGjeucZMaN61xsxo3r3GLGrescasat65xmxq3rXG7GrevcYcad6xxpxp3rnGXGnetcbcad69xjxr3rHGvGveucZ8a961xvxr3r/GAGg+s8aAaD67xkBoPrfGwGg+v8Ygaj6zxqBqPrvGYGo+t8bgaj6/xhBpPrPGkGk+u8ZQaT63RGk+r8fQaz6jxzBrPqvHsGs+p8dwaBzUGNYY1RjXGNSY1pjVmNeY1FjWWNVY11jU2NbY1djX2NZ5X4/k1XlDjhTVeVOPFNV5S46U1Xlbj5TVeUeOVNV5V49U1XlPjtTVeV+P1Nd5Q44013lTjzTXeUuOtNd5W4+013lHjnTXeVePdNd5T47013lfj/TU+UOODNT5U48M1PlLjozU+VuPjNT5R45M1PlXj0zU+U+OzNT5X4/M1vlDjizW+VOPLNb5S46s1vlbj6zW+UeObNb5V49s1vlPjuzW+V+P7NX5Q44c1flTjxzV+UuOnNX5W4+c1flHjlzV+VePXNX5T47c1flfj9zX+UOOPNf5U4881/lLjrzX+VuPvNf5R4581/lXj3zX+U+O/Nf5X45Aah9Y4rMbhNY6ocWSNo2ocXeOYGsfWOE6D4zY4XoPjNzhBgxM2OFGDEzc4SYOTNjhZg5M3OEWDUzY4VYNTNzhNg9M2OF2D0zc4Q4MzNjhTgzM3OEuDszY4W4OzNzhHg3M2OFeDczc4T4PzNjhfg/M3uECDCza4UIMLN7hIg4s2uFiDize4RINLNrhUg0s3uEyDNLhsg8s1uHyDKzS4YoMrNbhyg6s0uGqDqzW4eoNrNLhmg2s1uHaD6zS4boPrNbh+gxs0uGGDGzW4cYObNLhpg5s1uHmDWzS4ZYNbNbh1g9s0uG2D2zW4fYM7NLhjgzs1uHODuzS4a4O7Nbh7g3s0uGeDezW4d4P7NLhvg/s1uH+DBzR4YIMHNXhwg4c0eGiDhzV4eINHNHhkg0c1eHSDxzR4bIPHNXh8gyc0eGKDJzV4coOnNHhqgzZ4WoOnN3hGg2c2eFaDZzd4ToPnNjhoMGgwbDBqMG4waTBtMGswb7BosGywarBusGmwbbBrsG/wvAbPb/CCBi9s8KIGL27wkgYvbfCyBi9v8IoGr2zwqgavbvCaBq9t8LoGr2/whgZvbPCmBm9u8JYGb23wtgZvb/COBu9s8K4G727wngbvbfC+Bu9v8IEGH2zwoQYfbvCRBh9t8LEGH2/wiQafbPCpBp9u8JkGn23wuQafb/CFBl9s8KUGX27wlQZfbfC1Bl9v8I0G32zwrQbfbvCdBt9t8L0G32/wgwY/bPCjBj9u8JMGP23wswY/b/CLBr9s8KsGv27wmwa/bfC7Br9v8IcGf2zwpwZ/bvCXBn9t8LcGf2/wjwb/bPCvBv9u8J8G/23wvwaHNDi0wWENDm9wRIMjGxzV4OgGxzQ4tsFxWhy3xfFaHL/FCVqcsMWJWpy4xUlanLTFyVqcvMUpWpyyxalanLrFaVqctsXpWpy+xRlanLHFmVqcucVZWpy1xdlanL3FOVqcs8W5Wpy7xXlanLfF+Vqcv8UFWlywxYVaXLjFRVpctMXFWly8xSVaXLLFpVpcusVlWqTFZVtcrsXlW1yhxRVbXKnFlVtcpcVVW1ytxdVbXKPFNVtcq8W1W1ynxXVbXK/F9VvcoMUNW9yoxY1b3KTFTVvcrMXNW9yixS1b3KrFrVvcpsVtW9yuxe1b3KHFHVvcqcWdW9ylxV1b3K3F3Vvco8U9W9yrxb1b3KfFfVvcr8X9WzygxQNbPKjFg1s8pMVDWzysxcNbPKLFI1s8qsWjWzymxWNbPK7F41s8ocUTWzypxZNbPKXFU1u0xdNaPL3FM1o8s8WzWjy7xXNaPLfFQYtBi2GLUYtxi0mLaYtZi3mLRYtli1WLdYtNi22LXYt9i+e1eH6LF7R4YYsXtXhxi5e0eGmLl7V4eYtXtHhli1e1eHWL17R4bYvXtXh9ize0eGOLN7V4c4u3tHhri7e1eHuLd7R4Z4t3tXh3i/e0eG+L97V4f4sPtPhgiw+1+HCLj7T4aIuPtfh4i0+0+GSLT7X4dIvPtPhsi8+1+HyLL7T4Yosvtfhyi6+0+GqLr7X4eotvtPhmi2+1+HaL77T4bovvtfh+ix+0+GGLH7X4cYuftPhpi5+1+HmLX7T4ZYtftfh1i9+0+G2L37X4fYs/tPhjiz+1+HOLv7T4a4u/tfh7i3+0+GeLf7X4d4v/tPhvi/+1OKTFoS0Oa3F4iyNaHNniqBZHtzimxbEtjtPhuB2O1+H4HU7Q4YQdTtThxB1O0uGkHU7W4eQdTtHhlB1O1eHUHU7T4bQdTtfh9B3O0OGMHc7U4cwdztLhrB3O1uHsHc7R4ZwdztXh3B3O0+G8Hc7X4fwdLtDhgh0u1OHCHS7S4aIdLtbh4h0u0eGSHS7V4dIdLtMhHS7b4XIdLt/hCh2u2OFKHa7c4Sodrtrhah2u3uEaHa7Z4Vodrt3hOh2u2+F6Ha7f4QYdbtjhRh1u3OEmHW7a4WYdbt7hFh1u2eFWHW7d4TYdbtvhdh1u3+EOHe7Y4U4d7tzhLh3u2uFuHe7e4R4d7tnhXh3u3eE+He7b4X4d7t/hAR0e2OFBHR7c4SEdHtrhYR0e3uERHR7Z4VEdHt3hMR0e2+FxHR7f4QkdntjhSR2e3OEpHZ7aoR2e1uHpHZ7R4ZkdntXh2R2e0+G5HQ46DDoMO4w6jDtMOkw7zDrMOyw6LDusOqw7bDpsO+w67Ds8r8PzO7ygwws7vKjDizu8pMNLO7ysw8s7vKLDKzu8qsOrO7ymw2s7vK7D6zu8ocMbO7ypw5s7vKXDWzu8rcPbO7yjwzs7vKvDuzu8p8N7O7yvw/s7fKDDBzt8qMOHO3ykw0c7fKzDxzt8osMnO3yqw6c7fKbDZzt8rsPnO3yhwxc7fKnDlzt8pcNXO3ytw9c7fKPDNzt8q8O3O3ynw3c7fK/D9zv8oMMPO/yow487/KTDTzv8rMPPO/yiwy87/KrDrzv8psNvO/yuw+87/KHDHzv8qcOfO/ylw187/K3D3zv8o8M/O/yrw787/KfDfzv8r8MhHQ7tcFiHwzsc0eHIDkd1OLrDMR2O7XCcHsftcbwex+9xgh4n7HGiHifucZIeJ+1xsh4n73GKHqfscaoep+5xmh6n7XG6HqfvcYYeZ+xxph5n7nGWHmftcbYeZ+9xjh7n7HGuHufucZ4e5+1xvh7n73GBHhfscaEeF+5xkR4X7XGxHhfvcYkel+xxqR6X7nGZHulx2R6X63H5HlfoccUeV+px5R5X6XHVHlfrcfUe1+hxzR7X6nHtHtfpcd0e1+tx/R436HHDHjfqceMeN+lx0x4363HzHrfoccset+px6x636XHbHrfrcfsed+hxxx536nHnHnfpcdced+tx9x736HHPHvfqce8e9+lx3x7363H/Hg/o8cAeD+rx4B4P6fHQHg/r8fAej+jxyB6P6vHoHo/p8dgej+vx+B5P6PHEHk/q8eQeT+nx1B7t8bQeT+/xjB7P7PGsHs/u8Zwez+1x0GPQY9hj1GPcY9Jj2mPWY95j0WPZY9Vj3WPTY9tj12Pf43k9nt/jBT1e2ONFPV7c4yU9XtrjZT1e3uMVPV7Z41U9Xt3jNT1e2+N1PV7f4w093tjjTT3e3OMtPd7a42093t7jHT3e2eNdPd7d4z093tvj/wTAAwBtBQDA0Gzbtpdt27ZtL9t810a2bdu27fpG574B3j/ABwb44AAfGuDDA3xkgI8O8LEBPj7AJwb45ACfGuDTA3xmgM8O8LkBPj/AFwb44gBfGuDLA3xlgK8O8LUBvj7ANwb45gDfGuDbA3xngO8O8L0Bvj/ADwb44QA/GuDHA/xkgJ8O8LMBfj7ALwb45QC/GuDXA/xmgN8O8LsBfj/AHwb44wB/GuDPA/xlgL8O8LcB/j7APwb45wD/GuDfA/xngP8O8L8BDhng0AEOG+DwAY4Y4MgBjhrg6AGOGeDYAY4T4LgBjhfg+AFOEOCEAU4U4MQBThLgpAFOFuDkAU4R4JQBThXg1AFOE+C0AU4X4PQBzhDgjAHOFODMAc4S4KwBzhbg7AHOEeCcAc4V4NwBzhPgvAHOF+D8AS4Q4IIBLhTgwgEuEuCiAS4W4OIBLhHgkgEuFeDSAS4TIAEuG+ByAS4f4AoBrhjgSgGuHOAqAa4a4GoBrh7gGgGuGeBaAa4d4DoBrhvgegGuH+AGAW4Y4EYBbhzgJgFuGuBmAW4e4BYBbhngVgFuHeA2AW4b4HYBbh/gDgHuGOBOAe4c4C4B7hrgbgHuHuAeAe4Z4F4B7h3gPgHuG+B+Ae4f4AEBHhjgQQEeHOAhAR4a4GEBHh7gEQEeGeBRAR4d4DEBHhvgcQEeH+AJAZ4Y4EkBnhzgKQGeGqABnhbg6QGeEeCZAZ4V4NkBnhPguQGeF+D5AV4Q4IUBXhTgxQFeEuClAV4W4OUBXhHglQFeFeDVAV4T4LUBDgIMAgwDjAKMA0wCTAPMAswDLAIsA6wCrANsAmwD7ALsA7wuwOsDvCHAGwO8KcCbA7wlwFsDvC3A2wO8I8A7A7wrwLsDvCfAewO8L8D7A3wgwAcDfCjAhwN8JMBHA3wswMcDfCLAJwN8KsCnA3wmwGcDfC7A5wN8IcAXA3wpwJcDfCXAVwN8LcDXA3wjwDcDfCvAtwN8J8B3A3wvwPcD/CDADwP8KMCPA/wkwE8D/CzAzwP8IsAvA/wqwK8D/CbAbwP8LsDvA/whwB8D/CnAnwP8JcBfA/wtwN8D/CPAPwP8K8C/A/wnwH8D/C/AIQEODXBYgMMDHBHgyABHBTg6wDEBjg1wnBDHDXG8EMcPcYIQJwxxohAnDnGSECcNcbIQJw9xihCnDHGqEKcOcZoQpw1xuhCnD3GGEGcMcaYQZw5xlhBnDXG2EGcPcY4Q5wxxrhDnDnGeEOcNcb4Q5w9xgRAXDHGhEBcOcZEQFw1xsRAXD3GJEJcMcakQlw5xmRAJcdkQlwtx+RBXCHHFEFcKceUQVwlx1RBXC3H1ENcIcc0Q1wpx7RDXCXHdENcLcf0QNwhxwxA3CnHjEDcJcdMQNwtx8xC3CHHLELcKcesQtwlx2xC3C3H7EHcIcccQdwpx5xB3CXHXEHcLcfcQ9whxzxD3CnHvEPcJcd8Q9wtx/xAPCPHAEA8K8eAQDwnx0BAPC/HwEI8I8cgQjwrx6BCPCfHYEI8L8fgQTwjxxBBPCvHkEE8J8dQQDfG0EE8P8YwQzwzxrBDPDvGcEM8N8bwQzw/xghAvDPGiEC8O8ZIQLw3xshAvD/GKEK8M8aoQrw7xmhCvDXEQYhBiGGIUYhxiEmIaYhZiHmIRYhliFWIdYhNiG2IXYh/idSFeH+INId4Y4k0h3hziLSHeGuJtId4e4h0h3hniXSHeHeI9Id4b4n0h3h/iAyE+GOJDIT4c4iMhPhriYyE+HuITIT4Z4lMhPh3iMyE+G+JzIT4f4gshvhjiSyG+HOIrIb4a4mshvh7iGyG+GeJbIb4d4jshvhvieyG+H+IHIX4Y4kchfhziJyF+GuJnIX4e4hchfhniVyF+HeI3IX4b4nchfh/iDyH+GOJPIf4c4i8h/hribyH+HuIfIf4Z4l8h/h3iPyH+G+J/IQ4JcWiIw0IcHuKIEEeGOCrE0SGOCXFsiONEOG6E40U4foQTRDhhhBNFOHGEk0Q4aYSTRTh5hFNEOGWEU0U4dYTTRDhthNNFOH2EM0Q4Y4QzRThzhLNEOGuEs0U4e4RzRDhnhHNFOHeE80Q4b4TzRTh/hAtEuGCEC0W4cISLRLhohItFuHiES0S4ZIRLRbh0hMtESITLRrhchMtHuEKEK0a4UoQrR7hKhKtGuFqEq0e4RoRrRrhWhGtHuE6E60a4XoTrR7hBhBtGuFGEG0e4SYSbRrhZhJtHuEWEW0a4VYRbR7hNhNtGuF2E20e4Q4Q7RrhThDtHuEuEu0a4W4S7R7hHhHtGuFeEe0e4T4T7RrhfhPtHeECEB0Z4UIQHR3hIhIdGeFiEh0d4RIRHRnhUhEdHeEyEx0Z4XITHR3hChCdGeFKEJ0d4SoSnRmiEp0V4eoRnRHhmhGdFeHaE50R4boTnRXh+hBdEeGGEF0V4cYSXRHhphJdFeHmEV0R4ZYRXRXh1hNdEeG2EgwiDCMMIowjjCJMI0wizCPMIiwjLCKsI6wibCNsIuwj7CK+L8PoIb4jwxghvivDmCG+J8NYIb4vw9gjviPDOCO+K8O4I74nw3gjvi/D+CB+I8MEIH4rw4QgfifDRCB+L8PEIn4jwyQifivDpCJ+J8NkIn4vw+QhfiPDFCF+K8OUIX4nw1Qhfi/D1CN+I8M0I34rw7QjfifDdCN+L8P0IP4jwwwg/ivDjCD+J8NMIP4vw8wi/iPDLCL+K8OsIv4nw2wi/i/D7CH+I8McIf4rw5wh/ifDXCH+L8PcI/4jwzwj/ivDvCP+J8N8I/4twSIRDIxwW4fAIR0Q4MsJREY6OcEyEYyMcJ8ZxYxwvxvFjnCDGCWOcKMaJY5wkxkljnCzGyWOcIsYpY5wqxqljnCbGaWOcLsbpY5whxhljnCnGmWOcJcZZY5wtxtljnCPGOWOcK8a5Y5wnxnljnC/G+WNcIMYFY1woxoVjXCTGRWNcLMbFY1wixiVjXCrGpWNcJkZiXDbG5WJcPsYVYlwxxpViXDnGVWJcNcbVYlw9xjViXDPGtWJcO8Z1Ylw3xvViXD/GDWLcMMaNYtw4xk1i3DTGzWLcPMYtYtwyxq1i3DrGbWLcNsbtYtw+xh1i3DHGnWLcOcZdYtw1xt1i3D3GPWLcM8a9Ytw7xn1i3DfG/WLcP8YDYjwwxoNiPDjGQ2I8NMbDYjw8xiNiPDLGo2I8OsZjYjw2xuNiPD7GE2I8McaTYjw5xlNiPDVGYzwtxtNjPCPGM2M8K8azYzwnxnNjPC/G82O8IMYLY7woxotjvCTGS2O8LMbLY7wixitjvCrGq2O8JsZrYxzEGMQYxhjFGMeYxJjGmMWYx1jEWMZYxVjH2MTYxtjF2Md4XYzXx3hDjDfGeFOMN8d4S4y3xnhbjLfHeEeMd8Z4V4x3x3hPjPfGeF+M98f4QIwPxvhQjA/H+EiMj8b4WIyPx/hEjE/G+FSMT8f4TIzPxvhcjM/H+EKML8b4Uowvx/hKjK/G+FqMr8f4RoxvxvhWjG/H+E6M78b4Xozvx/hBjB/G+FGMH8f4SYyfxvhZjJ/H+EWMX8b4VYxfx/hNjN/G+F2M38f4Q4w/xvhTjD/H+EuMv8b4W4y/x/hHjH/G+FeMf8f4T4z/xvhfjENiHBrjsBiHxzgixpExjopxdIxjYhwb4zgJjpvgeAmOn+AECU6Y4EQJTpzgJAlOmuBkCU6e4BQJTpngVAlOneA0CU6b4HQJTp/gDAnOmOBMCc6c4CwJzprgbAnOnuAcCc6Z4FwJzp3gPAnOm+B8Cc6f4AIJLpjgQgkunOAiCS6a4GIJLp7gEgkumeBSCS6d4DIJkuCyCS6X4PIJrpDgigmulODKCa6S4KoJrpbg6gmukeCaCa6V4NoJrpPgugmul+D6CW6Q4IYJbpTgxglukuCmCW6W4OYJbpHglgluleDWCW6T4LYJbpfg9gnukOCOCe6U4M4J7pLgrgnuluDuCe6R4J4J7pXg3gnuk+C+Ce6X4P4JHpDggQkelODBCR6S4KEJHpbg4QkekeCRCR6V4NEJHpPgsQkel+DxCZ6Q4IkJnpTgyQmekuCpCZrgaQmenuAZCZ6Z4FkJnp3gOQmem+B5CZ6f4AUJXpjgRQlenOAlCV6a4GUJXp7gFQlemeBVCV6d4DUJXpvgIMEgwTDBKME4wSTBNMEswTzBIsEywSrBOsEmwTbBLsE+wesSvD7BGxK8McGbErw5wVsSvDXB2xK8PcE7ErwzwbsSvDvBexK8N8H7Erw/wQcSfDDBhxJ8OMFHEnw0wccSfDzBJxJ8MsGnEnw6wWcSfDbB5xJ8PsEXEnwxwZcSfDnBVxJ8NcHXEnw9wTcSfDPBtxJ8O8F3Enw3wfcSfD/BDxL8MMGPEvw4wU8S/DTBzxL8PMEvEvwywa8S/DrBbxL8NsHvEvw+wR8S/DHBnxL8OcFfEvw1wd8S/D3BPxL8M8G/Evw7wX8S/DfB/xIckuDQBIclODzBEQmOTHBUgqMTHJPg2ATHSXHcFMdLcfwUJ0hxwhQnSnHiFCdJcdIUJ0tx8hSnSHHKFKdKceoUp0lx2hSnS3H6FGdIccYUZ0px5hRnSXHWFGdLcfYU50hxzhTnSnHuFOdJcd4U50tx/hQXSHHBFBdKceEUF0lx0RQXS3HxFJdIcckUl0px6RSXSZEUl01xuRSXT3GFFFdMcaUUV05xlRRXTXG1FFdPcY0U10xxrRTXTnGdFNdNcb0U109xgxQ3THGjFDdOcZMUN01xsxQ3T3GLFLdMcasUt05xmxS3TXG7FLdPcYcUd0xxpxR3TnGXFHdNcbcUd09xjxT3THGvFPdOcZ8U901xvxT3T/GAFA9M8aAUD07xkBQPTfGwFA9P8YgUj0zxqBSPTvGYFI9N8bgUj0/xhBRPTPGkFE9O8ZQUT03RFE9L8fQUz0jxzBTPSvHsFM9J8dwUz0vx/BQvSPHCFC9K8eIUL0nx0hQvS/HyFK9I8coUr0rx6hSvSfHaFAcpBimGKUYpxikmKaYpZinmKRYplilWKdYpNim2KXYp9ilel+L1Kd6Q4o0p3pTizSnekuKtKd6W4u0p3pHinSneleLdKd6T4r0p3pfi/Sk+kOKDKT6U4sMpPpLioyk+luLjKT6R4pMpPpXi0yk+k+KzKT6X4vMpvpDiiym+lOLLKb6S4qspvpbi6ym+keKbKb6V4tspvpPiuym+l+L7KX6Q4ocpfpTixyl+kuKnKX6W4ucpfpHilyl+leLXKX6T4rcpfpfi9yn+kOKPKf6U4s8p/pLiryn+luLvKf6R4p8p/pXi3yn+k+K/Kf6X4pAUh6Y4LMXhKY5IcWSKo1IcneKYFMemOE6G42Y4XobjZzhBhhNmOFGGE2c4SYaTZjhZhpNnOEWGU2Y4VYZTZzhNhtNmOF2G02c4Q4YzZjhThjNnOEuGs2Y4W4azZzhHhnNmOFeGc2c4T4bzZjhfhvNnuECGC2a4UIYLZ7hIhotmuFiGi2e4RIZLZrhUhktnuEyGZLhshstluHyGK2S4YoYrZbhyhqtkuGqGq2W4eoZrZLhmhmtluHaG62S4bobrZbh+hhtkuGGGG2W4cYabZLhphptluHmGW2S4ZYZbZbh1httkuG2G22W4fYY7ZLhjhjtluHOGu2S4a4a7Zbh7hntkuGeGe2W4d4b7ZLhvhvtluH+GB2R4YIYHZXhwhodkeGiGh2V4eIZHZHhkhkdleHSGx2R4bIbHZXh8hidkeGKGJ2V4coanZHhqhmZ4WoanZ3hGhmdmeFaGZ2d4TobnZnhehudneEGGF2Z4UYYXZ3hJhpdmeFmGl2d4RYZXZnhVhldneE2G12Y4yDDIMMwwyjDOMMkwzTDLMM+wyLDMsMqwzrDJsM2wy7DP8LoMr8/whgxvzPCmDG/O8JYMb83wtgxvz/CODO/M8K4M787wngzvzfC+DO/P8IEMH8zwoQwfzvCRDB/N8LEMH8/wiQyfzPCpDJ/O8JkMn83wuQyfz/CFDF/M8KUMX87wlQxfzfC1DF/P8I0M38zwrQzfzvCdDN/N8L0M38/wgww/zPCjDD/O8JMMP83wsww/z/CLDL/M8KsMv87wmwy/zfC7DL/P8IcMf8zwpwx/zvCXDH/N8LcMf8/wjwz/zPCvDP/O8J8M/83wvwyHZDg0w2EZDs9wRIYjMxyV4egMx2Q4NsNxchw3x/FyHD/HCXKcMMeJcpw4x0lynDTHyXKcPMcpcpwyx6lynDrHaXKcNsfpcpw+xxlynDHHmXKcOcdZcpw1x9lynD3HOXKcM8e5cpw7x3lynDfH+XKcP8cFclwwx4VyXDjHRXJcNMfFclw8xyVyXDLHpXJcOsdlciTHZXNcLsflc1whxxVzXCnHlXNcJcdVc1wtx9VzXCPHNXNcK8e1c1wnx3VzXC/H9XPcIMcNc9wox41z3CTHTXPcLMfNc9wixy1z3CrHrXPcJsdtc9wux+1z3CHHHXPcKcedc9wlx11z3C3H3XPcI8c9c9wrx71z3CfHfXPcL8f9czwgxwNzPCjHg3M8JMdDczwsx8NzPCLHI3M8Ksejczwmx2NzPC7H43M8IccTczwpx5NzPCXHU3M0x9NyPD3HM3I8M8ezcjw7x3NyPDfH83I8P8cLcrwwx4tyvDjHS3K8NMfLcrw8xytyvDLHq3K8Osdrcrw2x0GOQY5hjlGOcY5JjmmOWY55jkWOZY5VjnWOTY5tjl2OfY7X5Xh9jjfkeGOON+V4c4635HhrjrfleHuOd+R4Z4535Xh3jvfkeG+O9+V4f44P5Phgjg/l+HCOj+T4aI6P5fh4jk/k+GSOT+X4dI7P5Phsjs/l+HyOL+T4Yo4v5fhyjq/k+GqOr+X4eo5v5Phmjm/l+HaO7+T4bo7v5fh+jh/k+GGOH+X4cY6f5Phpjp/l+HmOX+T4ZY5f5fh1jt/k+G2O3+X4fY4/5Phjjj/l+HOOv+T4a46/5fh7jn/k+GeOf+X4d47/5Phvjv/lOCTHoTkOy3F4jiNyHJnjqBxH5zgmx7E5jlPguAWOV+D4BU5Q4IQFTlTgxAVOUuCkBU5W4OQFTlHglAVOVeDUBU5T4LQFTlfg9AXOUOCMBc5U4MwFzlLgrAXOVuDsBc5R4JwFzlXg3AXOU+C8Bc5X4PwFLlDgggUuVODCBS5S4KIFLlbg4gUuUeCSBS5V4NIFLlMgBS5b4HIFLl/gCgWuWOBKBa5c4CoFrlrgagWuXuAaBa5Z4FoFrl3gOgWuW+B6Ba5f4AYFbljgRgVuXOAmBW5a4GYFbl7gFgVuWeBWBW5d4DYFblvgdgVuX+AOBe5Y4E4F7lzgLgXuWuBuBe5e4B4F7lngXgXuXeA+Be5b4H4F7l/gAQUeWOBBBR5c4CEFHlrgYQUeXuARBR5Z4FEFHl3gMQUeW+BxBR5f4AkFnljgSQWeXOApBZ5aoAWeVuDpBZ5R4JkFnlXg2QWeU+C5BZ5X4PkFXlDghQVeVODFBV5S4KUFXlbg5QVeUeCVBV5V4NUFXlPgtQUOCgwKDAuMCowLTApMC8wKzAssCiwLrAqsC2wKbAvsCuwLvK7A6wu8ocAbC7ypwJsLvKXAWwu8rcDbC7yjwDsLvKvAuwu8p8B7C7yvwPsLfKDABwt8qMCHC3ykwEcLfKzAxwt8osAnC3yqwKcLfKbAZwt8rsDnC3yhwBcLfKnAlwt8pcBXC3ytwNcLfKPANwt8q8C3C3ynwHcLfK/A9wv8oMAPC/yowI8L/KTATwv8rMDPC/yiwC8L/KrArwv8psBvC/yuwO8L/KHAHwv8qcCfC/ylwF8L/K3A3wv8o8A/C/yrwL8L/KfAfwv8r8AhBQ4tcFiBwwscUeDIAkcVOLrAMQWOLXCcEsctcbwSxy9xghInLHGiEicucZISJy1xshInL3GKEqcscaoSpy5xmhKnLXG6EqcvcYYSZyxxphJnLnGWEmctcbYSZy9xjhLnLHGuEucucZ4S5y1xvhLnL3GBEhcscaESFy5xkRIXLXGxEhcvcYkSlyxxqRKXLnGZEilx2RKXK3H5ElcoccUSVypx5RJXKXHVElcrcfUS1yhxzRLXKnHtEtcpcd0S1ytx/RI3KHHDEjcqceMSNylx0xI3K3HzErcoccsStypx6xK3KXHbErcrcfsSdyhxxxJ3KnHnEncpcdcSdytx9xL3KHHPEvcqce8S9ylx3xL3K3H/Eg8o8cASDyrx4BIPKfHQEg8r8fASjyjxyBKPKvHoEo8p8dgSjyvx+BJPKPHEEk8q8eQSTynx1BIt8bQSTy/xjBLPLPGsEs8u8ZwSzy3xvBLPL/GCEi8s8aISLy7xkhIvLfGyEi8v8YoSryzxqhKvLvGaEq8tcVBiUGJYYlRiXGJSYlpiVmJeYlFiWWJVYl1iU2JbYldiX+J1JV5f4g0l3ljiTSXeXOItJd5a4m0l3l7iHSXeWeJdJd5d4j0l3lvifSXeX+IDJT5Y4kMlPlziIyU+WuJjJT5e4hMlPlniUyU+XeIzJT5b4nMlPl/iCyW+WOJLJb5c4islvlriayW+XuIbJb5Z4lslvl3iOyW+W+J7Jb5f4gclfljiRyV+XOInJX5a4mclfl7iFyV+WeJXJX5d4jclflvidyV+X+IPJf5Y4k8l/lziLyX+WuJvJf5e4h8l/lniXyX+XeI/Jf5b4n8lDilxaInDShxe4ogSR5Y4qsTRJY4pcWyJ41Q4boXjVTh+hRNUOGGFE1U4cYWTVDhphZNVOHmFU1Q4ZYVTVTh1hdNUOG2F01U4fYUzVDhjhTNVOHOFs1Q4a4WzVTh7hXNUOGeFc1U4d4XzVDhvhfNVOH+FC1S4YIULVbhwhYtUuGiFi1W4eIVLVLhkhUtVuHSFy1RIhctWuFyFy1e4QoUrVrhShStXuEqFq1a4WoWrV7hGhWtWuFaFa1e4ToXrVrhehetXuEGFG1a4UYUbV7hJhZtWuFmFm1e4RYVbVrhVhVtXuE2F21a4XYXbV7hDhTtWuFOFO1e4S4W7VrhbhbtXuEeFe1a4V4V7V7hPhftWuF+F+1d4QIUHVnhQhQdXeEiFh1Z4WIWHV3hEhUdWeFSFR1d4TIXHVnhchcdXeEKFJ1Z4UoUnV3hKhadWaIWnVXh6hWdUeGaFZ1V4doXnVHhuhedVeH6FF1R4YYUXVXhxhZdUeGmFl1V4eYVXVHhlhVdVeHWF11R4bYWDCoMKwwqjCuMKkwrTCrMK8wqLCssKqwrrCpsK2wq7CvsKr6vw+gpvqPDGCm+q8OYKb6nw1gpvq/D2Cu+o8M4K76rw7grvqfDeCu+r8P4KH6jwwQofqvDhCh+p8NEKH6vw8QqfqPDJCp+q8OkKn6nw2Qqfq/D5Cl+o8MUKX6rw5QpfqfDVCl+r8PUK36jwzQrfqvDtCt+p8N0K36vw/Qo/qPDDCj+q8OMKP6nw0wo/q/DzCr+o8MsKv6rw6wq/qfDbCr+r8PsKf6jwxwp/qvDnCn+p8NcKf6vw9wr/qPDPCv+q8O8K/6nw3wr/q3BIhUMrHFbh8ApHVDiywlEVjq5wTIVjKxynxnFrHK/G8WucoMYJa5yoxolrnKTGSWucrMbJa5yixilrnKrGqWucpsZpa5yuxulrnKHGGWucqcaZa5ylxllrnK3G2Wuco8Y5a5yrxrlrnKfGeWucr8b5a1ygxgVrXKjGhWtcpMZFa1ysxsVrXKLGJWtcqsala1ymRmpctsblaly+xhVqXLHGlWpcucZValy1xtVqXL3GNWpcs8a1aly7xnVqXLfG9Wpcv8YNatywxo1q3LjGTWrctMbNaty8xi1q3LLGrWrcusZtaty2xu1q3L7GHWrcscadaty5xl1q3LXG3WrcvcY9atyzxr1q3LvGfWrct8b9aty/xgNqPLDGg2o8uMZDajy0xsNqPLzGI2o8ssajajy6xmNqPLbG42o8vsYTajyxxpNqPLnGU2o8tUZrPK3G02s8o8YzazyrxrNrPKfGc2s8r8bza7ygxgtrvKjGi2u8pMZLa7ysxstrvKLGK2u8qsara7ymxmtrHNQY1BjWGNUY15jUmNaY1ZjXWNRY1ljVWNfY1NjW2NXY13hdjdfXeEONN9Z4U40313hLjbfWeFuNt9d4R4131nhXjXfXeE+N99Z4X4331/hAjQ/W+FCND9f4SI2P1vhYjY/X+ESNT9b4VI1P1/hMjc/W+FyNz9f4Qo0v1vhSjS/X+EqNr9b4Wo2v1/hGjW/W+FaNb9f4To3v1vheje/X+EGNH9b4UY0f1/hJjZ/W+FmNn9f4RY1f1vhVjV/X+E2N39b4XY3f1/hDjT/W+FONP9f4S42/1vhbjb/X+EeNf9b4V41/1/hPjf/W+F+NQ2ocWuOwGofXOKLGkTWOqnF0jWNqHFvjOA2O2+B4DY7f4AQNTtjgRA1O3OAkDU7a4GQNTt7gFA1O2eBUDU7d4DQNTtvgdA1O3+AMDc7Y4EwNztzgLA3O2uBsDc7e4BwNztngXA3O3eA8Dc7b4HwNzt/gAg0u2OBCDS7c4CINLtrgYg0u3uASDS7Z4FINLt3gMg3S4LINLtfg8g2u0OCKDa7U4MoNrtLgqg2u1uDqDa7R4JoNrtXg2g2u0+C6Da7X4PoNbtDghg1u1ODGDW7S4KYNbtbg5g1u0eCWDW7V4NYNbtPgtg1u1+D2De7Q4I4N7tTgzg3u0uCuDe7W4O4N7tHgng3u1eDeDe7T4L4N7tfg/g0e0OCBDR7U4MENHtLgoQ0e1uDhDR7R4JENHtXg0Q0e0+CxDR7X4PENntDgiQ2e1ODJDZ7S4KkN2uBpDZ7e4BkNntngWQ2e3eA5DZ7b4HkNnt/gBQ1e2OBFDV7c4CUNXtrgZQ1e3uAVDV7Z4FUNXt3gNQ1e2+CgwaDBsMGowbjBpMG0wazBvMGiwbLBqsG6wabBtsGuwb7B6xq8vsEbGryxwZsavLnBWxq8tcHbGry9wTsavLPBuxq8u8F7Gry3wfsavL/BBxp8sMGHGny4wUcafLTBxxp8vMEnGnyywacafLrBZxp8tsHnGny+wRcafLHBlxp8ucFXGny1wdcafL3BNxp8s8G3Gny7wXcafLfB9xp8v8EPGvywwY8a/LjBTxr8tMHPGvy8wS8a/LLBrxr8usFvGvy2we8a/L7BHxr8scGfGvy5wV8a/LXB3xr8vcE/Gvyzwb8a/LvBfxr8t8H/GhzS4NAGhzU4vMERDY5scFSDoxsc0+DYBsdpcdwWx2tx/BYnaHHCFidqceIWJ2lx0hYna3HyFqdoccoWp2px6hanaXHaFqdrcfoWZ2hxxhZnanHmFmdpcdYWZ2tx9hbnaHHOFudqce4W52lx3hbna3H+FhdoccEWF2px4RYXaXHRFhdrcfEWl2hxyRaXanHpFpdpkRaXbXG5FpdvcYUWV2xxpRZXbnGVFldtcbUWV29xjRbXbHGtFtducZ0W121xvRbXb3GDFjdscaMWN25xkxY3bXGzFjdvcYsWt2xxqxa3bnGbFrdtcbsWt29xhxZ3bHGnFnducZcWd21xtxZ3b3GPFvdsca8W925xnxb3bXG/Fvdv8YAWD2zxoBYPbvGQFg9t8bAWD2/xiBaPbPGoFo9u8ZgWj23xuBaPb/GEFk9s8aQWT27xlBZPbdEWT2vx9BbPaPHMFs9q8ewWz2nx3BbPa/H8Fi9o8cIWL2rx4hYvafHSFi9r8fIWr2jxyhavavHqFq9p8doWBy0GLYYtRi3GLSYtpi1mLeYtFi2WLVYt1i02LbYtdi32LV7X4vUt3tDijS3e1OLNLd7S4q0t3tbi7S3e0eKdLd7V4t0t3tPivS3e1+L9LT7Q4oMtPtTiwy0+0uKjLT7W4uMtPtHiky0+1eLTLT7T4rMtPtfi8y2+0OKLLb7U4sstvtLiqy2+1uLrLb7R4pstvtXi2y2+0+K7Lb7X4vstftDihy1+1OLHLX7S4qctftbi5y1+0eKXLX7V4tctftPity1+1+L3Lf7Q4o8t/tTizy3+0uKvLf7W4u8t/tHiny3+1eLfLf7T4r8t/tfikBaHtjisxeEtjmhxZIujWhzd4pgWx7Y4Tofjdjheh+N3OEGHE3Y4UYcTdzhJh5N2OFmHk3c4RYdTdjhVh1N3OE2H03Y4XYfTdzhDhzN2OFOHM3c4S4ezdjhbh7N3OEeHc3Y4V4dzdzhPh/N2OF+H83e4QIcLdrhQhwt3uEiHi3a4WIeLd7hEh0t2uFSHS3e4TId0uGyHy3W4fIcrdLhihyt1uHKHq3S4aoerdbh6h2t0uGaHa3W4dofrdLhuh+t1uH6HG3S4YYcbdbhxh5t0uGmHm3W4eYdbdLhlh1t1uHWH23S4bYfbdbh9hzt0uGOHO3W4c4e7dLhrh7t1uHuHe3S4Z4d7dbh3h/t0uG+H+3W4f4cHdHhghwd1eHCHh3R4aIeHdXh4h0d0eGSHR3V4dIfHdHhsh8d1eHyHJ3R4YocndXhyh6d0eGqHdnhah6d3eEaHZ3Z4Vodnd3hOh+d2eF6H53d4QYcXdnhRhxd3eEmHl3Z4WYeXd3hFh1d2eFWHV3d4TYfXdjjoMOgw7DDqMO4w6TDtMOsw77DosOyw6rDusOmw7bDrsO/wug6v7/CGDm/s8KYOb+7wlg5v7fC2Dm/v8I4O7+zwrg7v7vCeDu/t8L4O7+/wgQ4f7PChDh/u8JEOH+3wsQ4f7/CJDp/s8KkOn+7wmQ6f7fC5Dp/v8IUOX+zwpQ5f7vCVDl/t8LUOX+/wjQ7f7PCtDt/u8J0O3+3wvQ7f7/CDDj/s8KMOP+7wkw4/7fCzDj/v8IsOv+zwqw6/7vCbDr/t8LsOv+/whw5/7PCnDn/u8JcOf+3wtw5/7/CPDv/s8K8O/+7wnw7/7fC/Dod0OLTDYR0O73BEhyM7HNXh6A7HdDi2w3F6HLfH8Xocv8cJepywx4l6nLjHSXqctMfJepy8xyl6nLLHqXqcusdpepy2x+l6nL7HGXqcsceZepy5x1l6nLXH2Xqcvcc5epyzx7l6nLvHeXqct8f5epy/xwV6XLDHhXpcuMdFely0x8V6XLzHJXpcsselely6x2V6pMdle1yux+V7XKHHFXtcqceVe1ylx1V7XK3H1Xtco8c1e1yrx7V7XKfHdXtcr8f1e9ygxw173KjHjXvcpMdNe9ysx8173KLHLXvcqsete9ymx2173K7H7Xvcoccde9ypx5173KXHXXvcrcfde9yjxz173KvHvXvcp8d9e9yvx/17PKDHA3s8qMeDezykx0N7PKzHw3s8oscjezyqx6N7PKbHY3s8rsfjezyhxxN7PKnHk3s8pcdTe7TH03o8vcczejyzx7N6PLvHc3o8t8fzejy/xwt6vLDHi3q8uMdLery0x8t6vLzHK3q8sserery6x2t6vLbHQY9Bj2GPUY9xj0mPaY9Zj3mPRY9lj1WPdY9Nj22PXY99j9f1eH2PN/R4Y4839Xhzj7f0eGuPt/V4e4939Hhnj3f1eHeP9/R4b4//EwAPALQVAABDs23bXrZt27a9bNvGuzaybdu29Y3OfQO8f4APDPDBAT40wIcH+MgAHx3gYwN8fIBPDPDJAT41wKcH+MwAnx3gcwN8foAvDPDFAb40wJcH+MoAXx3gawN8fYBvDPDNAb41wLcH+M4A3x3gewN8f4AfDPDDAX40wI8H+MkAPx3gZwP8fIBfDPDLAX41wK8H+M0Avx3gdwP8foA/DPDHAf40wJ8H+MsAfx3gbwP8fYB/DPDPAf41wL8H+M8A/x3gfwMcMsChAxw2wOEDHDHAkQMcNcDRAxwzwLEDHCfAcQMcL8DxA5wgwAkDnCjAiQOcJMBJA5wswMkDnCLAKQOcKsCpA5wmwGkDnC7A6QOcIcAZA5wpwJkDnCXAWQOcLcDZA5wjwDkDnCvAuQOcJ8B5A5wvwPkDXCDABQNcKMCFA1wkwEUDXCzAxQNcIsAlA1wqwKUDXCZAAlw2wOUCXD7AFQJcMcCVAlw5wFUCXDXA1QJcPcA1AlwzwLUCXDvAdQJcN8D1Alw/wA0C3DDAjQLcOMBNAtw0wM0C3DzALQLcMsCtAtw6wG0C3DbA7QLcPsAdAtwxwJ0C3DnAXQLcNcDdAtw9wD0C3DPAvQLcO8B9Atw3wP0C3D/AAwI8MMCDAjw4wEMCPDTAwwI8PMAjAjwywKMCPDrAYwI8NsDjAjw+wBMCPDHAkwI8OcBTAjw1QAM8LcDTAzwjwDMDPCvAswM8J8BzAzwvwPMDvCDACwO8KMCLA7wkwEsDvCzAywO8IsArA7wqwKsDvCbAawO8LsDrA7whwBsDvCnAmwO8JcBbA7wtwNsDvCPAOwO8K8C7A7wnwHsDHAQYBBgGGAUYB5gEmAaYBZgHWARYBlgFWAfYBNgG2AXYB3hfgPcH+ECADwb4UIAPB/hIgI8G+FiAjwf4RIBPBvhUgE8H+EyAzwb4XIDPB/hCgC8G+FKALwf4SoCvBvhagK8H+EaAbwb4VoBvB/hOgO8G+F6A7wf4QYAfBvhRgB8H+EmAnwb4WYCfB/hFgF8G+FWAXwf4TYDfBvhdgN8H+EOAPwb4U4A/B/hLgL8G+FuAvwf4R4B/BvhXgH8H+E+A/wb4X4BDAhwa4LAAhwc4IsCRAY4KcHSAYwIcG+A4IY4b4nghjh/iBCFOGOJEIU4c4iQhThriZCFOHuIUIU4Z4lQhTh3iNCFOG+J0IU4f4gwhzhjiTCHOHOIsIc4a4mwhzh7iHCHOGeJcIc4d4jwhzhvifCHOH+ICIS4Y4kIhLhziIiEuGuJiIS4e4hIhLhniUiEuHeIyIRLisiEuF+LyIa4Q4oohrhTiyiGuEuKqIa4W4uohrhHimiGuFeLaIa4T4rohrhfi+iFuEOKGIW4U4sYhbhLipiFuFuLmIW4R4pYhbhXi1iFuE+K2IW4X4vYh7hDijiHuFOLOIe4S4q4h7hbi7iHuEeKeIe4V4t4h7hPiviHuF+L+IR4Q4oEhHhTiwSEeEuKhIR4W4uEhHhHikSEeFeLRIR4T4rEhHhfi8SGeEOKJIZ4U4skhnhLiqSEa4mkhnh7iGSGeGeJZIZ4d4jkhnhvieSGeH+IFIV4Y4kUhXhziJSFeGuJlIV4e4hUhXhniVSFeHeI1IV4b4nUhXh/iDSHeGOJNId4c4i0h3hribSHeHuIdId4Z4l0h3h3iPSHeG+IgxCDEMMQoxDjEJMQ0xCzEPMQixDLEKsQ6xCbENsQuxD7E+0K8P8QHQnwwxIdCfDjER0J8NMTHQnw8xCdCfDLEp0J8OsRnQnw2xOdCfD7EF0J8McSXQnw5xFdCfDXE10J8PcQ3QnwzxLdCfDvEd0J8N8T3Qnw/xA9C/DDEj0L8OMRPQvw0xM9C/DzEL0L8MsSvQvw6xG9C/DbE70L8PsQfQvwxxJ9C/DnEX0L8NcTfQvw9xD9C/DPEv0L8O8R/Qvw3xP9CHBLi0BCHhTg8xBEhjgxxVIijQxwT4tgQx4lw3AjHi3D8CCeIcMIIJ4pw4ggniXDSCCeLcPIIp4hwygininDqCKeJcNoIp4tw+ghniHDGCGeKcOYIZ4lw1ghni3D2COeIcM4I54pw7gjniXDeCOeLcP4IF4hwwQgXinDhCBeJcNEIF4tw8QiXiHDJCJeKcOkIl4mQCJeNcLkIl49whQhXjHClCFeOcJUIV41wtQhXj3CNCNeMcK0I145wnQjXjXC9CNePcIMIN4xwowg3jnCTCDeNcLMIN49wiwi3jHCrCLeOcJsIt41wuwi3j3CHCHeMcKcId45wlwh3jXC3CHePcI8I94xwrwj3jnCfCPeNcL8I94/wgAgPjPCgCA+O8JAID43wsAgPj/CICI+M8KgIj47wmAiPjfC4CI+P8IQIT4zwpAhPjvCUCE+N0AhPi/D0CM+I8MwIz4rw7AjPifDcCM+L8PwIL4jwwggvivDiCC+J8NIIL4vw8giviPDKCK+K8OoIr4nw2givi/D6CG+I8MYIb4rw5ghvifDWCG+L8PYI74jwzgjvivDuCO+J8N4IBxEGEYYRRhHGESYRphFmEeYRFhGWEVYR1hE2EbYRdhH2Ed4X4f0RPhDhgxE+FOHDET4S4aMRPhbh4xE+EeGTET4V4dMRPhPhsxE+F+HzEb4Q4YsRvhThyxG+EuGrEb4W4esRvhHhmxG+FeHbEb4T4bsRvhfh+xF+EOGHEX4U4ccRfhLhpxF+FuHnEX4R4ZcRfhXh1xF+E+G3EX4X4fcR/hDhjxH+FOHPEf4S4a8R/hbh7xH+EeGfEf4V4d8R/hPhvxH+F+GQCIdGOCzC4RGOiHBkhKMiHB3hmAjHRjhOjOPGOF6M48c4QYwTxjhRjBPHOEmMk8Y4WYyTxzhFjFPGOFWMU8c4TYzTxjhdjNPHOEOMM8Y4U4wzxzhLjLPGOFuMs8c4R4xzxjhXjHPHOE+M88Y4X4zzx7hAjAvGuFCMC8e4SIyLxrhYjIvHuESMS8a4VIxLx7hMjMS4bIzLxbh8jCvEuGKMK8W4coyrxLhqjKvFuHqMa8S4Zoxrxbh2jOvEuG6M68W4fowbxLhhjBvFuHGMm8S4aYybxbh5jFvEuGWMW8W4dYzbxLhtjNvFuH2MO8S4Y4w7xbhzjLvEuGuMu8W4e4x7xLhnjHvFuHeM+8S4b4z7xbh/jAfEeGCMB8V4cIyHxHhojIfFeHiMR8R4ZIxHxXh0jMfEeGyMx8V4fIwnxHhijCfFeHKMp8R4aozGeFqMp8d4RoxnxnhWjGfHeE6M58Z4Xoznx3hBjBfGeFGMF8d4SYyXxnhZjJfHeEWMV8Z4VYxXx3hNjNfGeF2M18d4Q4w3xnhTjDfHeEuMt8Z4W4y3x3hHjHfGeFeMd8d4T4z3xjiIMYgxjDGKMY4xiTGNMYsxj7GIsYyxirGOsYmxjbGLsY/xvhjvj/GBGB+M8aEYH47xkRgfjfGxGB+P8YkYn4zxqRifjvGZGJ+N8bkYn4/xhRhfjPGlGF+O8ZUYX43xtRhfj/GNGN+M8a0Y347xnRjfjfG9GN+P8YMYP4zxoxg/jvGTGD+N8bMYP4/xixi/jPGrGL+O8ZsYv43xuxi/j/GHGH+M8acYf47xlxh/jfG3GH+P8Y8Y/4zxrxj/jvGfGP+N8b8Yh8Q4NMZhMQ6PcUSMI2McFePoGMfEODbGcRIcN8HxEhw/wQkSnDDBiRKcOMFJEpw0wckSnDzBKRKcMsGpEpw6wWkSnDbB6RKcPsEZEpwxwZkSnDnBWRKcNcHZEpw9wTkSnDPBuRKcO8F5Epw3wfkSnD/BBRJcMMGFElw4wUUSXDTBxRJcPMElElwywaUSXDrBZRIkwWUTXC7B5RNcIcEVE1wpwZUTXCXBVRNcLcHVE1wjwTUTXCvBtRNcJ8F1E1wvwfUT3CDBDRPcKMGNE9wkwU0T3CzBzRPcIsEtE9wqwa0T3CbBbRPcLsHtE9whwR0T3CnBnRPcJcFdE9wtwd0T3CPBPRPcK8G9E9wnwX0T3C/B/RM8IMEDEzwowYMTPCTBQxM8LMHDEzwiwSMTPCrBoxM8JsFjEzwuweMTPCHBExM8KcGTEzwlwVMTNMHTEjw9wTMSPDPBsxI8O8FzEjw3wfMSPD/BCxK8MMGLErw4wUsSvDTByxK8PMErErwywasSvDrBaxK8NsHrErw+wRsSvDHBmxK8OcFbErw1wdsSvD3BOxK8M8G7Erw7wXsSvDfBQYJBgmGCUYJxgkmCaYJZgnmCRYJlglWCdYJNgm2CXYJ9gvcleH+CDyT4YIIPJfhwgo8k+GiCjyX4eIJPJPhkgk8l+HSCzyT4bILPJfh8gi8k+GKCLyX4coKvJPhqgq8l+HqCbyT4ZoJvJfh2gu8k+G6C7yX4foIfJPhhgh8l+HGCnyT4aYKfJfh5gl8k+GWCXyX4dYLfJPhtgt8l+H2CPyT4Y4I/Jfhzgr8k+GuCvyX4e4J/JPhngn8l+HeC/yT4b4L/JTgkwaEJDktweIIjEhyZ4KgERyc4JsGxCY6T4rgpjpfi+ClOkOKEKU6U4sQpTpLipClOluLkKU6R4pQpTpXi1ClOk+K0KU6X4vQpzpDijCnOlOLMKc6S4qwpzpbi7CnOkeKcKc6V4twpzpPivCnOl+L8KS6Q4oIpLpTiwikukuKiKS6W4uIpLpHikikuleLSKS6TIikum+JyKS6f4goprpjiSimunOIqKa6a4moprp7iGimumeJaKa6d4joprpvieimun+IGKW6Y4kYpbpziJilumuJmKW6e4hYpbpniViluneI2KW6b4nYpbp/iDinumOJOKe6c4i4p7pribinunuIeKe6Z4l4p7p3iPinum+J+Ke6f4gEpHpjiQSkenOIhKR6a4mEpHp7iESkemeJRKR6d4jEpHpvicSken+IJKZ6Y4kkpnpziKSmemqIpnpbi6SmekeKZKZ6V4tkpnpPiuSmel+L5KV6Q4oUpXpTixSlekuKlKV6W4uUpXpHilSleleLVKV6T4rUpXpfi9SnekOKNKd6U4s0p3pLirSneluLtKd6R4p0p3pXi3Snek+K9KQ5SDFIMU4xSjFNMUkxTzFLMUyxSLFOsUqxTbFJsU+xS7FO8L8X7U3wgxQdTfCjFh1N8JMVHU3wsxcdTfCLFJ1N8KsWnU3wmxWdTfC7F51N8IcUXU3wpxZdTfCXFV1N8LcXXU3wjxTdTfCvFt1N8J8V3U3wvxfdT/CDFD1P8KMWPU/wkxU9T/CzFz1P8IsUvU/wqxa9T/CbFb1P8LsXvU/whxR9T/CnFn1P8JcVfU/wtxd9T/CPFP1P8K8W/U/wnxX9T/C/FISkOTXFYisNTHJHiyBRHpTg6xTEpjk1xnAzHzXC8DMfPcIIMJ8xwogwnznCSDCfNcLIMJ89wigynzHCqDKfOcJoMp81wugynz3CGDGfMcKYMZ85wlgxnzXC2DGfPcI4M58xwrgznznCeDOfNcL4M589wgQwXzHChDBfOcJEMF81wsQwXz3CJDJfMcKkMl85wmQzJcNkMl8tw+QxXyHDFDFfKcOUMV8lw1QxXy3D1DNfIcM0M18pw7QzXyXDdDNfLcP0MN8hwwww3ynDjDDfJcNMMN8tw8wy3yHDLDLfKcOsMt8lw2wy3y3D7DHfIcMcMd8pw5wx3yXDXDHfLcPcM98hwzwz3ynDvDPfJcN8M98tw/wwPyPDADA/K8OAMD8nw0AwPy/DwDI/I8MgMj8rw6AyPyfDYDI/L8PgMT8jwxAxPyvDkDE/J8NQMzfC0DE/P8IwMz8zwrAzPzvCcDM/N8LwMz8/wggwvzPCiDC/O8JIML83wsgwvz/CKDK/M8KoMr87wmgyvzfC6DK/P8IYMb8zwpgxvzvCWDG/N8LYMb8/wjgzvzPCuDO/O8J4M781wkGGQYZhhlGGcYZJhmmGWYZ5hkWGZYZVhnWGTYZthl2Gf4X0Z3p/hAxk+mOFDGT6c4SMZPprhYxk+nuETGT6Z4VMZPp3hMxk+m+FzGT6f4QsZvpjhSxm+nOErGb6a4WsZvp7hGxm+meFbGb6d4TsZvpvhexm+n+EHGX6Y4UcZfpzhJxl+muFnGX6e4RcZfpnhVxl+neE3GX6b4XcZfp/hDxn+mOFPGf6c4S8Z/prhbxn+nuEfGf6Z4V8Z/p3hPxn+m+F/GQ7JcGiGwzIcnuGIDEdmOCrD0RmOyXBshuPkOG6O4+U4fo4T5DhhjhPlOHGOk+Q4aY6T5Th5jlPkOGWOU+U4dY7T5DhtjtPlOH2OM+Q4Y44z5ThzjrPkOGuOs+U4e45z5DhnjnPlOHeO8+Q4b47z5Th/jgvkuGCOC+W4cI6L5LhojovluHiOS+S4ZI5L5bh0jsvkSI7L5rhcjsvnuEKOK+a4Uo4r57hKjqvmuFqOq+e4Ro5r5rhWjmvnuE6O6+a4Xo7r57hBjhvmuFGOG+e4SY6b5rhZjpvnuEWOW+a4VY5b57hNjtvmuF2O2+e4Q4475rhTjjvnuEuOu+a4W46757hHjnvmuFeOe+e4T4775rhfjvvneECOB+Z4UI4H53hIjofmeFiOh+d4RI5H5nhUjkfneEyOx+Z4XI7H53hCjifmeFKOJ+d4So6n5miOp+V4eo5n5HhmjmfleHaO5+R4bo7n5Xh+jhfkeGGOF+V4cY6X5HhpjpfleHmOV+R4ZY5X5Xh1jtfkeG2O1+V4fY435HhjjjfleHOOt+R4a4635Xh7jnfkeGeOd+V4d4735HhvjoMcgxzDHKMc4xyTHNMcsxzzHIscyxyrHOscmxzbHLsc+xzvy/H+HB/I8cEcH8rx4RwfyfHRHB/L8fEcn8jxyRyfyvHpHJ/J8dkcn8vx+RxfyPHFHF/K8eUcX8nx1Rxfy/H1HN/I8c0c38rx7RzfyfHdHN/L8f0cP8jxwxw/yvHjHD/J8dMcP8vx8xy/yPHLHL/K8escv8nx2xy/y/H7HH/I8cccf8rx5xx/yfHXHH/L8fcc/8jxzxz/yvHvHP/J8d8c/8txSI5DcxyW4/AcR+Q4MsdROY7OcUyOY3Mcp8BxCxyvwPELnKDACQucqMCJC5ykwEkLnKzAyQucosApC5yqwKkLnKbAaQucrsDpC5yhwBkLnKnAmQucpcBZC5ytwNkLnKPAOQucq8C5C5ynwHkLnK/A+QtcoMAFC1yowIULXKTARQtcrMDFC1yiwCULXKrApQtcpkAKXLbA5QpcvsAVClyxwJUKXLnAVQpctcDVCly9wDUKXLPAtQpcu8B1Cly3wPUKXL/ADQrcsMCNCty4wE0K3LTAzQrcvMAtCtyywK0K3LrAbQrctsDtCty+wB0K3LHAnQrcucBdCty1wN0K3L3APQrcs8C9Cty7wH0K3LfA/Qrcv8ADCjywwIMKPLjAQwo8tMDDCjy8wCMKPLLAowo8usBjCjy2wOMKPL7AEwo8scCTCjy5wFMKPLVACzytwNMLPKPAMws8q8CzCzynwHMLPK/A8wu8oMALC7yowIsLvKTASwu8rMDLC7yiwCsLvKrAqwu8psBrC7yuwOsLvKHAGwu8qcCbC7ylwFsLvK3A2wu8o8A7C7yrwLsLvKfAewscFBgUGBYYFRgXmBSYFpgVmBdYFFgWWBVYF9gU2BbYFdgXeF+B9xf4QIEPFvhQgQ8X+EiBjxb4WIGPF/hEgU8W+FSBTxf4TIHPFvhcgc8X+EKBLxb4UoEvF/hKga8W+FqBrxf4RoFvFvhWgW8X+E6B7xb4XoHvF/hBgR8W+FGBHxf4SYGfFvhZgZ8X+EWBXxb4VYFfF/hNgd8W+F2B3xf4Q4E/FvhTgT8X+EuBvxb4W4G/F/hHgX8W+FeBfxf4T4H/FvhfgUMKHFrgsAKHFziiwJEFjipwdIFjChxb4DgljlvieCWOX+IEJU5Y4kQlTlziJCVOWuJkJU5e4hQlTlniVCVOXeI0JU5b4nQlTl/iDCXOWOJMJc5c4iwlzlribCXOXuIcJc5Z4lwlzl3iPCXOW+J8Jc5f4gIlLljiQiUuXOIiJS5a4mIlLl7iEiUuWeJSJS5d4jIlUuKyJS5X4vIlrlDiiiWuVOLKJa5S4qolrlbi6iWuUeKaJa5V4tolrlPiuiWuV+L6JW5Q4oYlblTixiVuUuKmJW5W4uYlblHiliVuVeLWJW5T4rYlblfi9iXuUOKOJe5U4s4l7lLiriXuVuLuJe5R4p4l7lXi3iXuU+K+Je5X4v4lHlDigSUeVOLBJR5S4qElHlbi4SUeUeKRJR5V4tElHlPisSUeV+LxJZ5Q4oklnlTiySWeUuKpJVriaSWeXuIZJZ5Z4lklnl3iOSWeW+J5JZ5f4gUlXljiRSVeXOIlJV5a4mUlXl7iFSVeWeJVJV5d4jUlXlvidSVeX+INJd5Y4k0l3lziLSXeWuJtJd5e4h0l3lniXSXeXeI9Jd5b4qDEoMSwxKjEuMSkxLTErMS8xKLEssSqxLrEpsS2xK7EvsT7Sry/xAdKfLDEh0p8uMRHSny0xMdKfLzEJ0p8ssSnSny6xGdKfLbE50p8vsQXSnyxxJdKfLnEV0p8tcTXSny9xDdKfLPEt0p8u8R3Sny3xPdKfL/ED0r8sMSPSvy4xE9K/LTEz0r8vMQvSvyyxK9K/LrEb0r8tsTvSvy+xB9K/LHEn0r8ucRfSvy1xN9K/L3EP0r8s8S/Svy7xH9K/LfE/0ocUuLQEoeVOLzEESWOLHFUiaNLHFPi2BLHqXDcCsercPwKJ6hwwgonqnDiCiepcNIKJ6tw8gqnqHDKCqeqcOoKp6lw2gqnq3D6CmeocMYKZ6pw5gpnqXDWCmercPYK56hwzgrnqnDuCuepcN4K56tw/goXqHDBCheqcOEKF6lw0QoXq3DxCpeocMkKl6pw6QqXqZAKl61wuQqXr3CFClescKUKV65wlQpXrXC1ClevcI0K16xwrQrXrnCdCtetcL0K169wgwo3rHCjCjeucJMKN61wswo3r3CLCrescKsKt65wmwq3rXC7CrevcIcKd6xwpwp3rnCXCnetcLcKd69wjwr3rHCvCveucJ8K961wvwr3r/CACg+s8KAKD67wkAoPrfCwCg+v8IgKj6zwqAqPrvCYCo+t8LgKj6/whApPrPCkCk+u8JQKT63QCk+r8PQKz6jwzArPqvDsCs+p8NwKz6vw/AovqPDCCi+q8OIKL6nw0govq/DyCq+o8MoKr6rw6gqvqfDaCq+r8PoKb6jwxgpvqvDmCm+p8NYKb6vw9grvqPDOCu+q8O4K76nw3goHFQYVhhVGFcYVJhWmFWYV5hUWFZYVVhXWFTYVthV2FfYV3lfh/RU+UOGDFT5U4cMVPlLhoxU+VuHjFT5R4ZMVPlXh0xU+U+GzFT5X4fMVvlDhixW+VOHLFb5S4asVvlbh6xW+UeGbFb5V4dsVvlPhuxW+V+H7FX5Q4YcVflThxxV+UuGnFX5W4ecVflHhlxV+VeHXFX5T4bcVflfh9xX+UOGPFf5U4c8V/lLhrxX+VuHvFf5R4Z8V/lXh3xX+U+G/Ff5X4ZAKh1Y4rMLhFY6ocGSFoyocXeGYCsdWOE6N49Y4Xo3j1zhBjRPWOFGNE9c4SY2T1jhZjZPXOEWNU9Y4VY1T1zhNjdPWOF2N09c4Q40z1jhTjTPXOEuNs9Y4W42z1zhHjXPWOFeNc9c4T43z1jhfjfPXuECNC9a4UI0L17hIjYvWuFiNi9e4RI1L1rhUjUvXuEyN1LhsjcvVuHyNK9S4Yo0r1bhyjavUuGqNq9W4eo1r1LhmjWvVuHaN69S4bo3r1bh+jRvUuGGNG9W4cY2b1LhpjZvVuHmNW9S4ZY1b1bh1jdvUuG2N29W4fY071LhjjTvVuHONu9S4a4271bh7jXvUuGeNe9W4d4371LhvjfvVuH+NB9R4YI0H1XhwjYfUeGiNh9V4eI1H1HhkjUfVeHSNx9R4bI3H1Xh8jSfUeGKNJ9V4co2n1HhqjdZ4Wo2n13hGjWfWeFaNZ9d4To3n1nhejefXeEGNF9Z4UY0X13hJjZfWeFmNl9d4RY1X1nhVjVfXeE2N19Z4XY3X13hDjTfWeFONN9d4S4231nhbjbfXeEeNd9Z4V41313hPjffWOKgxqDGsMaoxrjGpMa0xqzGvsaixrLGqsa6xqbGtsauxr/G+Gu+v8YEaH6zxoRofrvGRGh+t8bEaH6/xiRqfrPGpGp+u8Zkan63xuRqfr/GFGl+s8aUaX67xlRpfrfG1Gl+v8Y0a36zxrRrfrvGdGt+t8b0a36/xgxo/rPGjGj+u8ZMaP63xsxo/r/GLGr+s8asav67xmxq/rfG7Gr+v8Ycaf6zxpxp/rvGXGn+t8bcaf6/xjxr/rPGvGv+u8Z8a/63xvxqH1Di0xmE1Dq9xRI0jaxxV4+gax9Q4tsZxGhy3wfEaHL/BCRqcsMGJGpy4wUkanLTByRqcvMEpGpyywakanLrBaRqctsHpGpy+wRkanLHBmRqcucFZGpy1wdkanL3BORqcs8G5Gpy7wXkanLfB+Rqcv8EFGlywwYUaXLjBRRpctMHFGly8wSUaXLLBpRpcusFlGqTBZRtcrsHlG1yhwRUbXKnBlRtcpcFVG1ytwdUbXKPBNRtcq8G1G1ynwXUbXK/B9RvcoMENG9yowY0b3KTBTRvcrMHNG9yiwS0b3KrBrRvcpsFtG9yuwe0b3KHBHRvcqcGdG9ylwV0b3K3B3Rvco8E9G9yrwb0b3KfBfRvcr8H9GzygwQMbPKjBgxs8pMFDGzyswcMbPKLBIxs8qsGjGzymwWMbPK7B4xs8ocETGzypwZMbPKXBUxu0wdMaPL3BMxo8s8GzGjy7wXMaPLfB8xo8v8ELGrywwYsavLjBSxq8tMHLGry8wSsavLLBqxq8usFrGry2wesavL7BGxq8scGbGry5wVsavLXB2xq8vcE7GryzwbsavLvBexq8t8FBg0GDYYNRg3GDSYNpg1mDeYNFg2WDVYN1g02DbYNdg32D9zV4f4MPNPhggw81+HCDjzT4aIOPNfh4g080+GSDTzX4dIPPNPhsg881+HyDLzT4YoMvNfhyg680+GqDrzX4eoNvNPhmg281+HaD7zT4boPvNfh+gx80+GGDHzX4cYOfNPhpg581+HmDXzT4ZYNfNfh1g980+G2D3zX4fYM/NPhjgz81+HODvzT4a4O/Nfh7g380+GeDfzX4d4P/NPhvg/81OKTBoQ0Oa3B4gyMaHNngqAZHNzimwbENjtPiuC2O1+L4LU7Q4oQtTtTixC1O0uKkLU7W4uQtTtHilC1O1eLULU7T4rQtTtfi9C3O0OKMLc7U4swtztLirC3O1uLsLc7R4pwtztXi3C3O0+K8Lc7X4vwtLtDigi0u1OLCLS7S4qItLtbi4i0u0eKSLS7V4tItLtMiLS7b4nItLt/iCi2u2OJKLa7c4iotrtriai2u3uIaLa7Z4lotrt3iOi2u2+J6La7f4gYtbtjiRi1u3OImLW7a4mYtbt7iFi1u2eJWLW7d4jYtbtvidi1u3+IOLe7Y4k4t7tziLi3u2uJuLe7e4h4t7tniXi3u3eI+Le7b4n4t7t/iAS0e2OJBLR7c4iEtHtriYS0e3uIRLR7Z4lEtHt3iMS0e2+JxLR7f4gktntjiSS2e3OIpLZ7aoi2e1uLpLZ7R4pktntXi2S2e0+K5LZ7X4vktXtDihS1e1OLFLV7S4qUtXtbi5S1e0eKVLV7V4tUtXtPitS1e1+L1Ld7Q4o0t3tTizS3e0uKtLd7W4u0t3tHinS3e1eLdLd7T4r0tDloMWgxbjFqMW0xaTFvMWsxbLFosW6xarFtsWmxb7FrsW7yvxftbfKDFB1t8qMWHW3ykxUdbfKzFx1t8osUnW3yqxadbfKbFZ1t8rsXnW3yhxRdbfKnFl1t8pcVXW3ytxddbfKPFN1t8q8W3W3ynxXdbfK/F91v8oMUPW/yoxY9b/KTFT1v8rMXPW/yixS9b/KrFr1v8psVvW/yuxe9b/KHFH1v8qcWfW/ylxV9b/K3F31v8o8U/W/yrxb9b/KfFf1v8r8UhLQ5tcViLw1sc0eLIFke1OLrFMS2ObXGcDsftcLwOx+9wgg4n7HCiDifucJIOJ+1wsg4n73CKDqfscKoOp+5wmg6n7XC6DqfvcIYOZ+xwpg5n7nCWDmftcLYOZ+9wjg7n7HCuDufucJ4O5+1wvg7n73CBDhfscKEOF+5wkQ4X7XCxDhfvcIkOl+xwqQ6X7nCZDulw2Q6X63D5DlfocMUOV+pw5Q5X6XDVDlfrcPUO1+hwzQ7X6nDtDtfpcN0O1+tw/Q436HDDDjfqcOMON+lw0w4363DzDrfocMsOt+pw6w636XDbDrfrcPsOd+hwxw536nDnDnfpcNcOd+tw9w736HDPDvfqcO8O9+lw3w7363D/Dg/o8MAOD+rw4A4P6fDQDg/r8PAOj+jwyA6P6vDoDo/p8NgOj+vw+A5P6PDEDk/q8OQOT+nw1A7t8LQOT+/wjA7P7PCsDs/u8JwOz+3wvA7P7/CCDi/s8KIOL+7wkg4v7fCyDi/v8IoOr+zwqg6v7vCaDq/t8LoOr+/whg5v7PCmDm/u8JYOb+3wtg5v7/CODu/s8K4O7+7wng7v7XDQYdBh2GHUYdxh0mHaYdZh3mHRYdlh1WHdYdNh22HXYd/hfR3e3+EDHT7Y4UMdPtzhIx0+2uFjHT7e4RMdPtnhUx0+3eEzHT7b4XMdPt/hCx2+2OFLHb7c4Ssdvtrhax2+3uEbHb7Z4Vsdvt3hOx2+2+F7Hb7f4QcdftjhRx1+3OEnHX7a4Wcdft7hFx1+2eFXHX7d4Tcdftvhdx1+3+EPHf7Y4U8d/tzhLx3+2uFvHf7e4R8d/tnhXx3+3eE/Hf7b4X8dDulwaIfDOhze4YgOR3Y4qsPRHY7pcGyH4/Q4bo/j9Th+jxP0OGGPE/U4cY+T9Dhpj5P1OHmPU/Q4ZY9T9Th1j9P0OG2P0/U4fY8z9DhjjzP1OHOPs/Q4a4+z9Th7j3P0OGePc/U4d4/z9Dhvj/P1OH+PC/S4YI8L9bhwj4v0uGiPi/W4eI9L9Lhkj0v1uHSPy/RIj8v2uFyPy/e4Qo8r9rhSjyv3uEqPq/a4Wo+r97hGj2v2uFaPa/e4To/r9rhej+v3uEGPG/a4UY8b97hJj5v2uFmPm/e4RY9b9rhVj1v3uE2P2/a4XY/b97hDjzv2uFOPO/e4S4+79rhbj7v3uEePe/a4V49797hPj/v2uF+P+/d4QI8H9nhQjwf3eEiPh/Z4WI+H93hEj0f2eFSPR/d4TI/H9nhcj8f3eEKPJ/Z4Uo8n93hKj6f2aI+n9Xh6j2f0eGaPZ/V4do/n9Hhuj+f1eH6PF/R4YY8X9Xhxj5f0eGmPl/V4eY9X9Hhlj1f1eHWP1/R4bY/X9Xh9jzf0eGOPN/V4c4+39Hhrj7f1eHuPd/R4Z4939Xh3j/f0eG+Pgx6DHsMeox7jHpMe0x6zHvMeix7LHqse6x6bHtseux77Hv8nAB4AaCsAAIZm27a9bNu2bXvZtm27d21k27b9jU4wwHCA0QDjASYDTAeYDTAfYDHAcoDVAOsBNgNsB9gNsB/gcwN8foAvDPDFAb40wJcH+MoAXx3gawN8fYBvDPDNAb41wLcH+M4A3x3gewN8f4AfDPDDAX40wI8H+MkAPx3gZwP8fIBfDPDLAX41wK8H+M0Avx3gdwP8foA/DPDHAf40wJ8H+MsAfx3gbwP8fYB/DPDPAf41wL8H+M8A/x3gfwMcMsChAxw2wOEDHDHAkQMcNcDRAxwzwLEDHCfAcQMcL8DxA5wgwAkDnCjAiQOcJMBJA5wswMkDnCLAKQOcKsCpA5wmwGkDnC7A6QOcIcAZA5wpwJkDnCXAWQOcLcDZA5wjwDkDnCvAuQOcJ8B5A5wvwPkDXCDABQNcKMCFA1wkwEUDXCzAxQNcIsAlA1wqwKUDXCZAAlw2wOUCXD7AFQJcMcCVAlw5wFUCXDXA1QJcPcA1AlwzwLUCXDvAdQJcN8D1Alw/wA0C3DDAjQLcOMBNAtw0wM0C3DzALQLcMsCtAtw6wG0C3DbA7QLcPsAdAtwxwJ0C3DnAXQLcNcDdAtw9wD0C3DPAvQLcO8B9Atw3wP0C3D/AAwI8MMCDAjw4wEMCPDTAwwI8PMAjAjwywKMCPDrAYwI8NsDjAjw+wBMCPDHAkwI8OcBTAjw1QAM8LcDTAzwjwDMDPCvAswM8J8BzAzwvwPMDvCDACwO8KMCLA7wkwEsDvCzAywO8IsArA7wqwKsDvCbAawO8LsDrA7whwBsDvCnAmwO8JcBbA7wtwNsDvCPAOwO8K8C7A7wnwHsDvC/A+wN8IMAHA3wowIcDfCTARwN8LMDHA3wiwCcDfCrApwN8JsBnAxwEGAQYBhgFGAeYBJgGmAWYB1gEWAZYBVgH2ATYBtgF2Af4XIDPB/hCgC8G+FKALwf4SoCvBvhagK8H+EaAbwb4VoBvB/hOgO8G+F6A7wf4QYAfBvhRgB8H+EmAnwb4WYCfB/hFgF8G+FWAXwf4TYDfBvhdgN8H+EOAPwb4U4A/B/hLgL8G+FuAvwf4R4B/BvhXgH8H+E+A/wb4X4BDAhwa4LAAhwc4IsCRAY4KcHSAYwIcG+A4IY4b4nghjh/iBCFOGOJEIU4c4iQhThriZCFOHuIUIU4Z4lQhTh3iNCFOG+J0IU4f4gwhzhjiTCHOHOIsIc4a4mwhzh7iHCHOGeJcIc4d4jwhzhvifCHOH+ICIS4Y4kIhLhziIiEuGuJiIS4e4hIhLhniUiEuHeIyIRLisiEuF+LyIa4Q4oohrhTiyiGuEuKqIa4W4uohrhHimiGuFeLaIa4T4rohrhfi+iFuEOKGIW4U4sYhbhLipiFuFuLmIW4R4pYhbhXi1iFuE+K2IW4X4vYh7hDijiHuFOLOIe4S4q4h7hbi7iHuEeKeIe4V4t4h7hPiviHuF+L+IR4Q4oEhHhTiwSEeEuKhIR4W4uEhHhHikSEeFeLRIR4T4rEhHhfi8SGeEOKJIZ4U4skhnhLiqSEa4mkhnh7iGSGeGeJZIZ4d4jkhnhvieSGeH+IFIV4Y4kUhXhziJSFeGuJlIV4e4hUhXhniVSFeHeI1IV4b4nUhXh/iDSHeGOJNId4c4i0h3hribSHeHuIdId4Z4l0h3h3iPSHeG+J9Id4f4gMhPhjiQyE+HOIjIT4a4mMhPh7iEyE+GeJTIT4d4jMhPhviIMQgxDDEKMQ4xCTENMQsxDzEIsQyxCrEOsQmxDbELsQ+xOdCfD7EF0J8McSXQnw5xFdCfDXE10J8PcQ3QnwzxLdCfDvEd0J8N8T3Qnw/xA9C/DDEj0L8OMRPQvw0xM9C/DzEL0L8MsSvQvw6xG9C/DbE70L8PsQfQvwxxJ9C/DnEX0L8NcTfQvw9xD9C/DPEv0L8O8R/Qvw3xP9CHBLi0BCHhTg8xBEhjgxxVIijQxwT4tgQx4lw3AjHi3D8CCeIcMIIJ4pw4ggniXDSCCeLcPIIp4hwygininDqCKeJcNoIp4tw+ghniHDGCGeKcOYIZ4lw1ghni3D2COeIcM4I54pw7gjniXDeCOeLcP4IF4hwwQgXinDhCBeJcNEIF4tw8QiXiHDJCJeKcOkIl4mQCJeNcLkIl49whQhXjHClCFeOcJUIV41wtQhXj3CNCNeMcK0I145wnQjXjXC9CNePcIMIN4xwowg3jnCTCDeNcLMIN49wiwi3jHCrCLeOcJsIt41wuwi3j3CHCHeMcKcId45wlwh3jXC3CHePcI8I94xwrwj3jnCfCPeNcL8I94/wgAgPjPCgCA+O8JAID43wsAgPj/CICI+M8KgIj47wmAiPjfC4CI+P8IQIT4zwpAhPjvCUCE+N0AhPi/D0CM+I8MwIz4rw7AjPifDcCM+L8PwIL4jwwggvivDiCC+J8NIIL4vw8giviPDKCK+K8OoIr4nw2givi/D6CG+I8MYIb4rw5ghvifDWCG+L8PYI74jwzgjvivDuCO+J8N4I74vw/ggfiPDBCB+K8OEIH4nw0Qgfi/DxCJ+I8MkIn4rw6QififDZCAcRBhGGEUYRxhEmEaYRZhHmERYRlhFWEdYRNhG2EXYR9hE+F+HzEb4Q4YsRvhThyxG+EuGrEb4W4esRvhHhmxG+FeHbEb4T4bsRvhfh+xF+EOGHEX4U4ccRfhLhpxF+FuHnEX4R4ZcRfhXh1xF+E+G3EX4X4fcR/hDhjxH+FOHPEf4S4a8R/hbh7xH+EeGfEf4V4d8R/hPhvxH+F+GQCIdGOCzC4RGOiHBkhKMiHB3hmAjHRjhOjOPGOF6M48c4QYwTxjhRjBPHOEmMk8Y4WYyTxzhFjFPGOFWMU8c4TYzTxjhdjNPHOEOMM8Y4U4wzxzhLjLPGOFuMs8c4R4xzxjhXjHPHOE+M88Y4X4zzx7hAjAvGuFCMC8e4SIyLxrhYjIvHuESMS8a4VIxLx7hMjMS4bIzLxbh8jCvEuGKMK8W4coyrxLhqjKvFuHqMa8S4Zoxrxbh2jOvEuG6M68W4fowbxLhhjBvFuHGMm8S4aYybxbh5jFvEuGWMW8W4dYzbxLhtjNvFuH2MO8S4Y4w7xbhzjLvEuGuMu8W4e4x7xLhnjHvFuHeM+8S4b4z7xbh/jAfEeGCMB8V4cIyHxHhojIfFeHiMR8R4ZIxHxXh0jMfEeGyMx8V4fIwnxHhijCfFeHKMp8R4aozGeFqMp8d4RoxnxnhWjGfHeE6M58Z4Xoznx3hBjBfGeFGMF8d4SYyXxnhZjJfHeEWMV8Z4VYxXx3hNjNfGeF2M18d4Q4w3xnhTjDfHeEuMt8Z4W4y3x3hHjHfGeFeMd8d4T4z3xnhfjPfH+ECMD8b4UIwPx/hIjI/G+FiMj8f4RIxPxvhUjE/H+EyMz8Y4iDGIMYwxijGOMYkxjTGLMY+xiLGMsYqxjrGJsY2xi7GP8bkYn4/xhRhfjPGlGF+O8ZUYX43xtRhfj/GNGN+M8a0Y347xnRjfjfG9GN+P8YMYP4zxoxg/jvGTGD+N8bMYP4/xixi/jPGrGL+O8ZsYv43xuxi/j/GHGH+M8acYf47xlxh/jfG3GH+P8Y8Y/4zxrxj/jvGfGP+N8b8Yh8Q4NMZhMQ6PcUSMI2McFePoGMfEODbGcRIcN8HxEhw/wQkSnDDBiRKcOMFJEpw0wckSnDzBKRKcMsGpEpw6wWkSnDbB6RKcPsEZEpwxwZkSnDnBWRKcNcHZEpw9wTkSnDPBuRKcO8F5Epw3wfkSnD/BBRJcMMGFElw4wUUSXDTBxRJcPMElElwywaUSXDrBZRIkwWUTXC7B5RNcIcEVE1wpwZUTXCXBVRNcLcHVE1wjwTUTXCvBtRNcJ8F1E1wvwfUT3CDBDRPcKMGNE9wkwU0T3CzBzRPcIsEtE9wqwa0T3CbBbRPcLsHtE9whwR0T3CnBnRPcJcFdE9wtwd0T3CPBPRPcK8G9E9wnwX0T3C/B/RM8IMEDEzwowYMTPCTBQxM8LMHDEzwiwSMTPCrBoxM8JsFjEzwuweMTPCHBExM8KcGTEzwlwVMTNMHTEjw9wTMSPDPBsxI8O8FzEjw3wfMSPD/BCxK8MMGLErw4wUsSvDTByxK8PMErErwywasSvDrBaxK8NsHrErw+wRsSvDHBmxK8OcFbErw1wdsSvD3BOxK8M8G7Erw7wXsSvDfB+xK8P8EHEnwwwYcSfDjBRxJ8NMHHEnw8wScSfDLBpxJ8OsFnEnw2wUGCQYJhglGCcYJJgmmCWYJ5gkWCZYJVgnWCTYJtgl2CfYLPJfh8gi8k+GKCLyX4coKvJPhqgq8l+HqCbyT4ZoJvJfh2gu8k+G6C7yX4foIfJPhhgh8l+HGCnyT4aYKfJfh5gl8k+GWCXyX4dYLfJPhtgt8l+H2CPyT4Y4I/Jfhzgr8k+GuCvyX4e4J/JPhngn8l+HeC/yT4b4L/JTgkwaEJDktweIIjEhyZ4KgERyc4JsGxCY6T4rgpjpfi+ClOkOKEKU6U4sQpTpLipClOluLkKU6R4pQpTpXi1ClOk+K0KU6X4vQpzpDijCnOlOLMKc6S4qwpzpbi7CnOkeKcKc6V4twpzpPivCnOl+L8KS6Q4oIpLpTiwikukuKiKS6W4uIpLpHikikuleLSKS6TIikum+JyKS6f4goprpjiSimunOIqKa6a4moprp7iGimumeJaKa6d4joprpvieimun+IGKW6Y4kYpbpziJilumuJmKW6e4hYpbpniViluneI2KW6b4nYpbp/iDinumOJOKe6c4i4p7pribinunuIeKe6Z4l4p7p3iPinum+J+Ke6f4gEpHpjiQSkenOIhKR6a4mEpHp7iESkemeJRKR6d4jEpHpvicSken+IJKZ6Y4kkpnpziKSmemqIpnpbi6SmekeKZKZ6V4tkpnpPiuSmel+L5KV6Q4oUpXpTixSlekuKlKV6W4uUpXpHilSleleLVKV6T4rUpXpfi9SnekOKNKd6U4s0p3pLirSneluLtKd6R4p0p3pXi3Snek+K9Kd6X4v0pPpDigyk+lOLDKT6S4qMpPpbi4yk+keKTKT6V4tMpPpPisykOUgxSDFOMUoxTTFJMU8xSzFMsUixTrFKsU2xSbFPsUuxTfC7F51N8IcUXU3wpxZdTfCXFV1N8LcXXU3wjxTdTfCvFt1N8J8V3U3wvxfdT/CDFD1P8KMWPU/wkxU9T/CzFz1P8IsUvU/wqxa9T/CbFb1P8LsXvU/whxR9T/CnFn1P8JcVfU/wtxd9T/CPFP1P8K8W/U/wnxX9T/C/FISkOTXFYisNTHJHiyBRHpTg6xTEpjk1xnAzHzXC8DMfPcIIMJ8xwogwnznCSDCfNcLIMJ89wigynzHCqDKfOcJoMp81wugynz3CGDGfMcKYMZ85wlgxnzXC2DGfPcI4M58xwrgznznCeDOfNcL4M589wgQwXzHChDBfOcJEMF81wsQwXz3CJDJfMcKkMl85wmQzJcNkMl8tw+QxXyHDFDFfKcOUMV8lw1QxXy3D1DNfIcM0M18pw7QzXyXDdDNfLcP0MN8hwwww3ynDjDDfJcNMMN8tw8wy3yHDLDLfKcOsMt8lw2wy3y3D7DHfIcMcMd8pw5wx3yXDXDHfLcPcM98hwzwz3ynDvDPfJcN8M98tw/wwPyPDADA/K8OAMD8nw0AwPy/DwDI/I8MgMj8rw6AyPyfDYDI/L8PgMT8jwxAxPyvDkDE/J8NQMzfC0DE/P8IwMz8zwrAzPzvCcDM/N8LwMz8/wggwvzPCiDC/O8JIML83wsgwvz/CKDK/M8KoMr87wmgyvzfC6DK/P8IYMb8zwpgxvzvCWDG/N8LYMb8/wjgzvzPCuDO/O8J4M783wvgzvz/CBDB/M8KEMH87wkQwfzfCxDB/P8IkMn8zwqQyfzvCZDJ/NcJBhkGGYYZRhnGGSYZphlmGeYZFhmWGVYZ1hk2GbYZdhn+FzGT6f4QsZvpjhSxm+nOErGb6a4WsZvp7hGxm+meFbGb6d4TsZvpvhexm+n+EHGX6Y4UcZfpzhJxl+muFnGX6e4RcZfpnhVxl+neE3GX6b4XcZfp/hDxn+mOFPGf6c4S8Z/prhbxn+nuEfGf6Z4V8Z/p3hPxn+m+F/GQ7JcGiGwzIcnuGIDEdmOCrD0RmOyXBshuPkOG6O4+U4fo4T5DhhjhPlOHGOk+Q4aY6T5Th5jlPkOGWOU+U4dY7T5DhtjtPlOH2OM+Q4Y44z5ThzjrPkOGuOs+U4e45z5DhnjnPlOHeO8+Q4b47z5Th/jgvkuGCOC+W4cI6L5LhojovluHiOS+S4ZI5L5bh0jsvkSI7L5rhcjsvnuEKOK+a4Uo4r57hKjqvmuFqOq+e4Ro5r5rhWjmvnuE6O6+a4Xo7r57hBjhvmuFGOG+e4SY6b5rhZjpvnuEWOW+a4VY5b57hNjtvmuF2O2+e4Q4475rhTjjvnuEuOu+a4W46757hHjnvmuFeOe+e4T4775rhfjvvneECOB+Z4UI4H53hIjofmeFiOh+d4RI5H5nhUjkfneEyOx+Z4XI7H53hCjifmeFKOJ+d4So6n5miOp+V4eo5n5HhmjmfleHaO5+R4bo7n5Xh+jhfkeGGOF+V4cY6X5HhpjpfleHmOV+R4ZY5X5Xh1jtfkeG2O1+V4fY435HhjjjfleHOOt+R4a4635Xh7jnfkeGeOd+V4d4735HhvjvfleH+OD+T4YI4P5fhwjo/k+GiOj+X4eI5P5Phkjk/l+HSOz+T4bI6DHIMcwxyjHOMckxzTHLMc8xyLHMscqxzrHJsc2xy7HPscn8vx+RxfyPHFHF/K8eUcX8nx1Rxfy/H1HN/I8c0c38rx7RzfyfHdHN/L8f0cP8jxwxw/yvHjHD/J8dMcP8vx8xy/yPHLHL/K8escv8nx2xy/y/H7HH/I8cccf8rx5xx/yfHXHH/L8fcc/8jxzxz/yvHvHP/J8d8c/8txSI5DcxyW4/AcR+Q4MsdROY7OcUyOY3Mcp8BxCxyvwPELnKDACQucqMCJC5ykwEkLnKzAyQucosApC5yqwKkLnKbAaQucrsDpC5yhwBkLnKnAmQucpcBZC5ytwNkLnKPAOQucq8C5C5ynwHkLnK/A+QtcoMAFC1yowIULXKTARQtcrMDFC1yiwCULXKrApQtcpkAKXLbA5QpcvsAVClyxwJUKXLnAVQpctcDVCly9wDUKXLPAtQpcu8B1Cly3wPUKXL/ADQrcsMCNCty4wE0K3LTAzQrcvMAtCtyywK0K3LrAbQrctsDtCty+wB0K3LHAnQrcucBdCty1wN0K3L3APQrcs8C9Cty7wH0K3LfA/Qrcv8ADCjywwIMKPLjAQwo8tMDDCjy8wCMKPLLAowo8usBjCjy2wOMKPL7AEwo8scCTCjy5wFMKPLVACzytwNMLPKPAMws8q8CzCzynwHMLPK/A8wu8oMALC7yowIsLvKTASwu8rMDLC7yiwCsLvKrAqwu8psBrC7yuwOsLvKHAGwu8qcCbC7ylwFsLvK3A2wu8o8A7C7yrwLsLvKfAewu8r8D7C3ygwAcLfKjAhwt8pMBHC3yswMcLfKLAJwt8qsCnC3ymwGcLHBQYFBgWGBUYF5gUmBaYFZgXWBRYFlgVWBfYFNgW2BXYF/hcgc8X+EKBLxb4UoEvF/hKga8W+FqBrxf4RoFvFvhWgW8X+E6B7xb4XoHvF/hBgR8W+FGBHxf4SYGfFvhZgZ8X+EWBXxb4VYFfF/hNgd8W+F2B3xf4Q4E/FvhTgT8X+EuBvxb4W4G/F/hHgX8W+FeBfxf4T4H/FvhfgUMKHFrgsAKHFziiwJEFjipwdIFjChxb4DgljlvieCWOX+IEJU5Y4kQlTlziJCVOWuJkJU5e4hQlTlniVCVOXeI0JU5b4nQlTl/iDCXOWOJMJc5c4iwlzlribCXOXuIcJc5Z4lwlzl3iPCXOW+J8Jc5f4gIlLljiQiUuXOIiJS5a4mIlLl7iEiUuWeJSJS5d4jIlUuKyJS5X4vIlrlDiiiWuVOLKJa5S4qolrlbi6iWuUeKaJa5V4tolrlPiuiWuV+L6JW5Q4oYlblTixiVuUuKmJW5W4uYlblHiliVuVeLWJW5T4rYlblfi9iXuUOKOJe5U4s4l7lLiriXuVuLuJe5R4p4l7lXi3iXuU+K+Je5X4v4lHlDigSUeVOLBJR5S4qElHlbi4SUeUeKRJR5V4tElHlPisSUeV+LxJZ5Q4oklnlTiySWeUuKpJVriaSWeXuIZJZ5Z4lklnl3iOSWeW+J5JZ5f4gUlXljiRSVeXOIlJV5a4mUlXl7iFSVeWeJVJV5d4jUlXlvidSVeX+INJd5Y4k0l3lziLSXeWuJtJd5e4h0l3lniXSXeXeI9Jd5b4n0l3l/iAyU+WOJDJT5c4iMlPlriYyU+XuITJT5Z4lMlPl3iMyU+W+KgxKDEsMSoxLjEpMS0xKzEvMSixLLEqsS6xKbEtsSuxL7E50p8vsQXSnyxxJdKfLnEV0p8tcTXSny9xDdKfLPEt0p8u8R3Sny3xPdKfL/ED0r8sMSPSvy4xE9K/LTEz0r8vMQvSvyyxK9K/LrEb0r8tsTvSvy+xB9K/LHEn0r8ucRfSvy1xN9K/L3EP0r8s8S/Svy7xH9K/LfE/0ocUuLQEoeVOLzEESWOLHFUiaNLHFPi2BLHqXDcCsercPwKJ6hwwgonqnDiCiepcNIKJ6tw8gqnqHDKCqeqcOoKp6lw2gqnq3D6CmeocMYKZ6pw5gpnqXDWCmercPYK56hwzgrnqnDuCuepcN4K56tw/goXqHDBCheqcOEKF6lw0QoXq3DxCpeocMkKl6pw6QqXqZAKl61wuQqXr3CFClescKUKV65wlQpXrXC1ClevcI0K16xwrQrXrnCdCtetcL0K169wgwo3rHCjCjeucJMKN61wswo3r3CLCrescKsKt65wmwq3rXC7CrevcIcKd6xwpwp3rnCXCnetcLcKd69wjwr3rHCvCveucJ8K961wvwr3r/CACg+s8KAKD67wkAoPrfCwCg+v8IgKj6zwqAqPrvCYCo+t8LgKj6/whApPrPCkCk+u8JQKT63QCk+r8PQKz6jwzArPqvDsCs+p8NwKz6vw/AovqPDCCi+q8OIKL6nw0govq/DyCq+o8MoKr6rw6gqvqfDaCq+r8PoKb6jwxgpvqvDmCm+p8NYKb6vw9grvqPDOCu+q8O4K76nw3grvq/D+Ch+o8MEKH6rw4QofqfDRCh+r8PEKn6jwyQqfqvDpCp+p8NkKBxUGFYYVRhXGFSYVphVmFeYVFhWWFVYV1hU2FbYVdhX2FT5X4fMVvlDhixW+VOHLFb5S4asVvlbh6xW+UeGbFb5V4dsVvlPhuxW+V+H7FX5Q4YcVflThxxV+UuGnFX5W4ecVflHhlxV+VeHXFX5T4bcVflfh9xX+UOGPFf5U4c8V/lLhrxX+VuHvFf5R4Z8V/lXh3xX+U+G/Ff5X4ZAKh1Y4rMLhFY6ocGSFoyocXeGYCsdWOE6N49Y4Xo3j1zhBjRPWOFGNE9c4SY2T1jhZjZPXOEWNU9Y4VY1T1zhNjdPWOF2N09c4Q40z1jhTjTPXOEuNs9Y4W42z1zhHjXPWOFeNc9c4T43z1jhfjfPXuECNC9a4UI0L17hIjYvWuFiNi9e4RI1L1rhUjUvXuEyN1LhsjcvVuHyNK9S4Yo0r1bhyjavUuGqNq9W4eo1r1LhmjWvVuHaN69S4bo3r1bh+jRvUuGGNG9W4cY2b1LhpjZvVuHmNW9S4ZY1b1bh1jdvUuG2N29W4fY071LhjjTvVuHONu9S4a4271bh7jXvUuGeNe9W4d4371LhvjfvVuH+NB9R4YI0H1XhwjYfUeGiNh9V4eI1H1HhkjUfVeHSNx9R4bI3H1Xh8jSfUeGKNJ9V4co2n1HhqjdZ4Wo2n13hGjWfWeFaNZ9d4To3n1nhejefXeEGNF9Z4UY0X13hJjZfWeFmNl9d4RY1X1nhVjVfXeE2N19Z4XY3X13hDjTfWeFONN9d4S4231nhbjbfXeEeNd9Z4V41313hPjffWeF+N99f4QI0P1vhQjQ/X+EiNj9b4WI2P1/hEjU/W+FSNT9f4TI3P1jioMagxrDGqMa4xqTGtMasxr7GosayxqrGusamxrbGrsa/xuRqfr/GFGl+s8aUaX67xlRpfrfG1Gl+v8Y0a36zxrRrfrvGdGt+t8b0a36/xgxo/rPGjGj+u8ZMaP63xsxo/r/GLGr+s8asav67xmxq/rfG7Gr+v8Ycaf6zxpxp/rvGXGn+t8bcaf6/xjxr/rPGvGv+u8Z8a/63xvxqH1Di0xmE1Dq9xRI0jaxxV4+gax9Q4tsZxGhy3wfEaHL/BCRqcsMGJGpy4wUkanLTByRqcvMEpGpyywakanLrBaRqctsHpGpy+wRkanLHBmRqcucFZGpy1wdkanL3BORqcs8G5Gpy7wXkanLfB+Rqcv8EFGlywwYUaXLjBRRpctMHFGly8wSUaXLLBpRpcusFlGqTBZRtcrsHlG1yhwRUbXKnBlRtcpcFVG1ytwdUbXKPBNRtcq8G1G1ynwXUbXK/B9RvcoMENG9yowY0b3KTBTRvcrMHNG9yiwS0b3KrBrRvcpsFtG9yuwe0b3KHBHRvcqcGdG9ylwV0b3K3B3Rvco8E9G9yrwb0b3KfBfRvcr8H9GzygwQMbPKjBgxs8pMFDGzyswcMbPKLBIxs8qsGjGzymwWMbPK7B4xs8ocETGzypwZMbPKXBUxu0wdMaPL3BMxo8s8GzGjy7wXMaPLfB8xo8v8ELGrywwYsavLjBSxq8tMHLGry8wSsavLLBqxq8usFrGry2wesavL7BGxq8scGbGry5wVsavLXB2xq8vcE7GryzwbsavLvBexq8t8H7Gry/wQcafLDBhxp8uMFHGny0wccafLzBJxp8ssGnGny6wWcafLbBQYNBg2GDUYNxg0mDaYNZg3mDRYNlg1WDdYNNg22DXYN9g881+HyDLzT4YoMvNfhyg680+GqDrzX4eoNvNPhmg281+HaD7zT4boPvNfh+gx80+GGDHzX4cYOfNPhpg581+HmDXzT4ZYNfNfh1g980+G2D3zX4fYM/NPhjgz81+HODvzT4a4O/Nfh7g380+GeDfzX4d4P/NPhvg/81OKTBoQ0Oa3B4gyMaHNngqAZHNzimwbENjtPiuC2O1+L4LU7Q4oQtTtTixC1O0uKkLU7W4uQtTtHilC1O1eLULU7T4rQtTtfi9C3O0OKMLc7U4swtztLirC3O1uLsLc7R4pwtztXi3C3O0+K8Lc7X4vwtLtDigi0u1OLCLS7S4qItLtbi4i0u0eKSLS7V4tItLtMiLS7b4nItLt/iCi2u2OJKLa7c4iotrtriai2u3uIaLa7Z4lotrt3iOi2u2+J6La7f4gYtbtjiRi1u3OImLW7a4mYtbt7iFi1u2eJWLW7d4jYtbtvidi1u3+IOLe7Y4k4t7tziLi3u2uJuLe7e4h4t7tniXi3u3eI+Le7b4n4t7t/iAS0e2OJBLR7c4iEtHtriYS0e3uIRLR7Z4lEtHt3iMS0e2+JxLR7f4gktntjiSS2e3OIpLZ7aoi2e1uLpLZ7R4pktntXi2S2e0+K5LZ7X4vktXtDihS1e1OLFLV7S4qUtXtbi5S1e0eKVLV7V4tUtXtPitS1e1+L1Ld7Q4o0t3tTizS3e0uKtLd7W4u0t3tHinS3e1eLdLd7T4r0t3tfi/S0+0OKDLT7U4sMtPtLioy0+1uLjLT7R4pMtPtXi0y0+0+KzLQ5aDFoMW4xajFtMWkxbzFrMWyxaLFusWqxbbFpsW+xa7Ft8rsXnW3yhxRdbfKnFl1t8pcVXW3ytxddbfKPFN1t8q8W3W3ynxXdbfK/F91v8oMUPW/yoxY9b/KTFT1v8rMXPW/yixS9b/KrFr1v8psVvW/yuxe9b/KHFH1v8qcWfW/ylxV9b/K3F31v8o8U/W/yrxb9b/KfFf1v8r8UhLQ5tcViLw1sc0eLIFke1OLrFMS2ObXGcDsftcLwOx+9wgg4n7HCiDifucJIOJ+1wsg4n73CKDqfscKoOp+5wmg6n7XC6DqfvcIYOZ+xwpg5n7nCWDmftcLYOZ+9wjg7n7HCuDufucJ4O5+1wvg7n73CBDhfscKEOF+5wkQ4X7XCxDhfvcIkOl+xwqQ6X7nCZDulw2Q6X63D5DlfocMUOV+pw5Q5X6XDVDlfrcPUO1+hwzQ7X6nDtDtfpcN0O1+tw/Q436HDDDjfqcOMON+lw0w4363DzDrfocMsOt+pw6w636XDbDrfrcPsOd+hwxw536nDnDnfpcNcOd+tw9w736HDPDvfqcO8O9+lw3w7363D/Dg/o8MAOD+rw4A4P6fDQDg/r8PAOj+jwyA6P6vDoDo/p8NgOj+vw+A5P6PDEDk/q8OQOT+nw1A7t8LQOT+/wjA7P7PCsDs/u8JwOz+3wvA7P7/CCDi/s8KIOL+7wkg4v7fCyDi/v8IoOr+zwqg6v7vCaDq/t8LoOr+/whg5v7PCmDm/u8JYOb+3wtg5v7/CODu/s8K4O7+7wng7v7fC+Du/v8IEOH+zwoQ4f7vCRDh/t8LEOH+/wiQ6f7PCpDp/u8JkOn+1w0GHQYdhh1GHcYdJh2mHWYd5h0WHZYdVh3WHTYdth12Hf4XMdPt/hCx2+2OFLHb7c4Ssdvtrhax2+3uEbHb7Z4Vsdvt3hOx2+2+F7Hb7f4QcdftjhRx1+3OEnHX7a4Wcdft7hFx1+2eFXHX7d4Tcdftvhdx1+3+EPHf7Y4U8d/tzhLx3+2uFvHf7e4R8d/tnhXx3+3eE/Hf7b4X8dDulwaIfDOhze4YgOR3Y4qsPRHY7pcGyH4/Q4bo/j9Th+jxP0OGGPE/U4cY+T9Dhpj5P1OHmPU/Q4ZY9T9Th1j9P0OG2P0/U4fY8z9DhjjzP1OHOPs/Q4a4+z9Th7j3P0OGePc/U4d4/z9Dhvj/P1OH+PC/S4YI8L9bhwj4v0uGiPi/W4eI9L9Lhkj0v1uHSPy/RIj8v2uFyPy/e4Qo8r9rhSjyv3uEqPq/a4Wo+r97hGj2v2uFaPa/e4To/r9rhej+v3uEGPG/a4UY8b97hJj5v2uFmPm/e4RY9b9rhVj1v3uE2P2/a4XY/b97hDjzv2uFOPO/e4S4+79rhbj7v3uEePe/a4V49797hPj/v2uF+P+/d4QI8H9nhQjwf3eEiPh/Z4WI+H93hEj0f2eFSPR/d4TI/H9nhcj8f3eEKPJ/Z4Uo8n93hKj6f2aI+n9Xh6j2f0eGaPZ/V4do/n9Hhuj+f1eH6PF/R4YY8X9Xhxj5f0eGmPl/V4eY9X9Hhlj1f1eHWP1/R4bY/X9Xh9jzf0eGOPN/V4c4+39Hhrj7f1eHuPd/R4Z4939Xh3j/f0eG+P9/V4f48P9Phgjw/1+HCPj/T4aI+P9fh4j0/0+GSPT/X4dI/P9Phsj4Me/w8AAP//wLDz/g==")

48.348069262s ago: executing program 2 (id=1070):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000400)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x5}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x6}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x60}}, 0x80)

48.3478609s ago: executing program 2 (id=1071):
syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000580)='./file1\x00', 0x2000000, &(0x7f00000004c0)=ANY=[], 0x2, 0x238, &(0x7f0000000800)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f})
chdir(&(0x7f0000000040)='./file0\x00')
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x121140, 0x13d)
statfs(&(0x7f0000000c80)='./file3\x00', 0x0)

48.203462481s ago: executing program 2 (id=1072):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x19, 0x4, 0x8, 0x8}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x3100, 0x3100, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

47.984150478s ago: executing program 2 (id=1074):
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040))
syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mount$binderfs(0x0, 0x0, 0x0, 0x4000, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYBLOB], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000100], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108)
socket$inet6_tcp(0xa, 0x1, 0x0)

47.833650416s ago: executing program 33 (id=1074):
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040))
syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mount$binderfs(0x0, 0x0, 0x0, 0x4000, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYBLOB], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000100], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108)
socket$inet6_tcp(0xa, 0x1, 0x0)

1.929720013s ago: executing program 3 (id=1493):
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x80, 0x30, 0x1000, 0x258, 0x0, 0x3, 0x0, 0x0, {0x10, 0x8}, {0x8, 0x8, 0x2}, {0xffffffff, 0x20000, 0x2}, {0x0, 0x0, 0x8000000}, 0x0, 0x10, 0x0, 0x3fd, 0x1, 0x9, 0x0, 0x0, 0x2b6b7db2, 0x6, 0x5, 0x100000, 0x0, 0x0, 0x2, 0x4})

1.929031162s ago: executing program 3 (id=1495):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0x4, 0x0, &(0x7f00000000c0))

1.859363277s ago: executing program 3 (id=1497):
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000280), 0x8802, 0x0)
r0 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000300)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31})
io_uring_enter(r0, 0x7a98, 0x0, 0x0, 0x0, 0x0)

1.858672303s ago: executing program 3 (id=1499):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000380)={[{@debug}, {@delalloc}, {@journal_ioprio}, {@test_dummy_encryption}, {@nodiscard}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@acl}, {@init_itable}]}, 0x1, 0xbb4, &(0x7f00000017c0)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="600000001800010000000000000000001d01000008", @ANYBLOB="05000d000100000008000a00", @ANYRES32=0x0, @ANYBLOB="15"], 0x60}}, 0x1)
ioctl$BTRFS_IOC_WAIT_SYNC(r4, 0x40089416, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
clock_getres(0x2, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2000}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r6, 0x0, 0x500000000000000}, 0x10)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
socket$inet(0x2, 0x4, 0x77)

869.479911ms ago: executing program 3 (id=1517):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'bond_slave_0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x2c, 0x2, 0x7, 0x20000004}})

707.74746ms ago: executing program 3 (id=1520):
syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b04392a09044c03003a92a2010a2401"], 0x0)

469.660713ms ago: executing program 4 (id=1526):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0)

375.526328ms ago: executing program 4 (id=1528):
get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x3)

320.485374ms ago: executing program 4 (id=1530):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0xbc, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa, 0x0, 0xfffc}, [@CTA_EXPECT_MASTER={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @empty}}}]}, @CTA_EXPECT_MASK={0x3c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @empty}}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}]}]}, 0xbc}}, 0x0)

248.933566ms ago: executing program 4 (id=1531):
r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=")
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000580)={@id={0x2, 0x0, @c}, 0x40, 0x0, '\x00', @a})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000580)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a})

239.853239ms ago: executing program 1 (id=1532):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18)
r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000200000014000200626d6e643000000000000000000000000900010073"], 0x34}}, 0x0)

168.29429ms ago: executing program 4 (id=1533):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000001500)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400))
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, 0x0})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000003dc0))

139.469971ms ago: executing program 4 (id=1534):
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12012000000000106d0494c2000000000001090224000100000000090400008203000000092109000001220100090581030002000007"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0)

139.220414ms ago: executing program 1 (id=1535):
mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000)
mbind(&(0x7f0000ff4000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000040)=0x7, 0x8, 0x0)
get_mempolicy(0x0, 0x0, 0x3, &(0x7f0000ff8000/0x1000)=nil, 0x2)

68.466097ms ago: executing program 1 (id=1536):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a"], 0x7c}}, 0x0)
keyctl$get_security(0x11, 0x0, &(0x7f0000002980)=""/4099, 0x1003)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}})
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf})

68.302711ms ago: executing program 1 (id=1537):
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
write$vga_arbiter(r0, &(0x7f0000000240)=@other={'unlock', ' ', 'io+mem'}, 0xe)

168.798µs ago: executing program 1 (id=1538):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_netfilter(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001480)={0x14, 0x12, 0x0, 0x201, 0x0, 0x25dfdbfe, {0x7}}, 0x14}}, 0x0)

0s ago: executing program 1 (id=1539):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f00000007c0)={[{@nodioread_nolock}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x3}}]}, 0x1, 0x46f, &(0x7f0000000bc0)="$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")

kernel console output (not intermixed with test programs):

   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  163.775931][   T24] usb 4-1: Product: syz
[  163.777163][   T24] usb 4-1: Manufacturer: syz
[  163.778598][   T24] usb 4-1: SerialNumber: syz
[  163.783006][   T24] cdc_eem 4-1:4.51: probe with driver cdc_eem failed with error -22
[  163.984381][   T24] usb 4-1: USB disconnect, device number 12
[  164.270095][ T5851] tipc: Node number set to 4269801488
[  164.457539][   T24] usb 2-1: new full-speed USB device number 17 using dummy_hcd
[  164.609239][   T24] usb 2-1: config 10 has an invalid interface number: 185 but max is 0
[  164.611599][   T24] usb 2-1: config 10 has no interface number 0
[  164.613487][   T24] usb 2-1: config 10 interface 185 has no altsetting 0
[  164.617980][   T24] usb 2-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice=72.2f
[  164.620611][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  164.623185][   T24] usb 2-1: Product: syz
[  164.624406][   T24] usb 2-1: Manufacturer: syz
[  164.625859][   T24] usb 2-1: SerialNumber: syz
[  164.667668][ T5818] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  164.717267][ T8465] loop3: detected capacity change from 0 to 512
[  164.756637][ T8465] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  164.775899][ T8465] ext4 filesystem being mounted at /280/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  164.838236][ T6277] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  164.868471][   T24] snd-usb-caiaq 2-1:10.185: can't set alt interface.
[  164.873200][   T24] usb 2-1: unable to init card! (ret=-5)
[  164.875286][   T24] snd-usb-caiaq 2-1:10.185: probe with driver snd-usb-caiaq failed with error -5
[  164.888793][   T24] usb 2-1: USB disconnect, device number 17
[  165.047534][ T5864] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  165.185759][ T8475] loop3: detected capacity change from 0 to 32768
[  165.191586][ T8475] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.894 (8475)
[  165.201082][ T5864] usb 3-1: too many configurations: 25, using maximum allowed: 8
[  165.209773][ T5864] usb 3-1: config 0 interface 0 has no altsetting 0
[  165.210686][ T8475] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  165.215213][ T5864] usb 3-1: config 0 interface 0 has no altsetting 0
[  165.215819][ T8475] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[  165.224686][ T5864] usb 3-1: config 0 interface 0 has no altsetting 0
[  165.229153][ T5864] usb 3-1: config 0 interface 0 has no altsetting 0
[  165.233866][ T5864] usb 3-1: config 0 interface 0 has no altsetting 0
[  165.236881][ T5864] usb 3-1: config 0 interface 0 has no altsetting 0
[  165.244188][ T5864] usb 3-1: config 0 interface 0 has no altsetting 0
[  165.248349][ T5864] usb 3-1: config 0 interface 0 has no altsetting 0
[  165.250783][ T5864] usb 3-1: New USB device found, idVendor=0403, idProduct=bdc8, bcdDevice=a9.d7
[  165.253565][ T5864] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  165.254634][ T8475] BTRFS info (device loop3): enabling ssd optimizations
[  165.259991][ T5864] usb 3-1: config 0 descriptor??
[  165.267519][ T8475] BTRFS info (device loop3): turning on async discard
[  165.270064][ T8475] BTRFS info (device loop3): enabling free space tree
[  165.270327][ T5864] ftdi_sio 3-1:0.0: Ignoring interface reserved for JTAG
[  165.349765][ T6277] BTRFS info (device loop3): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  165.491669][   T47] usb 3-1: USB disconnect, device number 15
[  165.634076][ T8501] loop1: detected capacity change from 0 to 512
[  165.663873][ T8501] EXT4-fs warning (device loop1): ext4_xattr_inode_get:560: inode #11: comm syz.1.899: EA inode hash validation failed
[  165.669187][ T8501] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #15: comm syz.1.899: corrupted inode contents
[  165.675106][ T8501] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #15: comm syz.1.899: mark_inode_dirty error
[  165.679672][ T8501] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #15: comm syz.1.899: corrupted inode contents
[  165.683401][ T8501] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2996: inode #15: comm syz.1.899: mark_inode_dirty error
[  165.687323][ T8501] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2999: inode #15: comm syz.1.899: mark inode dirty (error -117)
[  165.694927][ T8501] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -117)
[  165.698733][ T8501] EXT4-fs (loop1): 1 orphan inode deleted
[  165.701580][ T8501] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  165.726407][ T5812] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  165.837210][ T8509] loop1: detected capacity change from 0 to 16
[  165.846187][ T8509] erofs (device loop1): mounted with root inode @ nid 36.
[  166.081394][ T8516] syz.1.901: attempt to access beyond end of device
[  166.081394][ T8516] loop1: rw=524288, sector=34359738360, nr_sectors = 32 limit=16
[  166.086792][ T8516] syz.1.901: attempt to access beyond end of device
[  166.086792][ T8516] loop1: rw=0, sector=34359738360, nr_sectors = 8 limit=16
[  166.104801][ T8516] syz.1.901: attempt to access beyond end of device
[  166.104801][ T8516] loop1: rw=0, sector=34359738360, nr_sectors = 8 limit=16
[  166.149672][   T33] audit: type=1800 audit(1762394208.339:48): pid=8516 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.901" name="file1" dev="loop1" ino=86 res=0 errno=0
[  166.340452][ T8521] loop3: detected capacity change from 0 to 128
[  166.340999][ T8519] loop2: detected capacity change from 0 to 256
[  166.353477][ T8521] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  166.357226][ T8519] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d)
[  166.362068][ T8521] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  166.572655][ T8525] loop3: detected capacity change from 0 to 32768
[  166.590199][ T8525] ocfs2: Slot 0 on device (7,3) was already allocated to this node!
[  166.600257][ T8525] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  166.608580][   T12] (kworker/u8:0,12,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=312, inode=13845347915746889, rec_len=25793, name_len=214
[  166.611304][   T33] audit: type=1800 audit(1762394208.859:49): pid=8525 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.909" name="file1" dev="loop3" ino=17058 res=0 errno=0
[  166.644825][ T6277] ocfs2: Unmounting device (7,3) on (node local)
[  166.781179][ T8532] tipc: Failed to remove unknown binding: 66,1,1/4269801488:84858618/84858620
[  166.785615][ T8532] tipc: Failed to remove unknown binding: 66,1,1/4269801488:84858618/84858620
[  167.282869][ T8544] netlink: 'syz.1.916': attribute type 2 has an invalid length.
[  167.298388][ T8544] : entered promiscuous mode
[  167.490551][ T8542] loop3: detected capacity change from 0 to 40427
[  167.496634][ T8542] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  167.499633][ T8542] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  167.505736][ T8542] F2FS-fs (loop3): invalid crc value
[  167.568449][ T8542] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  167.576173][ T8542] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  167.580050][ T8542] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  167.758782][ T8561] loop2: detected capacity change from 0 to 256
[  167.762819][ T8561] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  167.919762][ T5851] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  168.070685][ T8566] loop2: detected capacity change from 0 to 512
[  168.107641][ T8566] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.924: Invalid inode bitmap blk 4 in block_group 0
[  168.114255][ T8566] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  168.123317][ T8566] EXT4-fs error (device loop2): ext4_lookup:1787: inode #15: comm syz.2.924: inode has both inline data and extents flags
[  168.136926][ T8566] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 7969 vs 220 free clusters
[  168.141586][ T5851] usb 2-1: Using ep0 maxpacket: 16
[  168.143172][ T5851] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  168.146814][ T5851] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  168.155466][ T5851] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  168.162982][ T5851] usb 2-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d
[  168.166220][ T5851] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  168.169544][ T5851] usb 2-1: Product: syz
[  168.171272][ T5851] usb 2-1: Manufacturer: syz
[  168.172952][ T5851] usb 2-1: SerialNumber: syz
[  168.176944][ T5851] usb 2-1: config 0 descriptor??
[  168.189492][ T5811] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  168.191471][ T5851] gspca_main: STV06xx-2.14.0 probing 046d:08f0
[  168.194497][ T5851] gspca_stv06xx: st6422 sensor detected
[  168.244118][ T8570] loop2: detected capacity change from 0 to 8
[  168.259352][ T8570] SQUASHFS error: Unable to read directory block [2c0:35]
[  168.334800][ T8572] loop2: detected capacity change from 0 to 512
[  168.347955][ T8572] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  168.449803][ T5851] STV06xx 2-1:0.0: probe with driver STV06xx failed with error -71
[  168.455855][ T5851] usb 2-1: USB disconnect, device number 18
[  169.172575][ T8590] loop1: detected capacity change from 0 to 8
[  169.210375][ T8590] SQUASHFS error: Failed to read block 0x34e: -5
[  169.213124][ T8590] SQUASHFS error: Unable to read metadata cache entry [34c]
[  169.228448][   T33] audit: type=1800 audit(1762394211.479:50): pid=8590 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.933" name="file1" dev="loop1" ino=5 res=0 errno=0
[  169.327556][ T8592] loop1: detected capacity change from 0 to 128
[  169.347712][ T8592] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  169.352224][ T8592] hpfs: filesystem error: improperly stopped
[  169.354562][ T8592] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  169.369120][ T8592] hpfs: You really don't want any checks? You are crazy...
[  169.383759][ T8592] hpfs: hpfs_map_sector(): read error
[  169.385838][ T8592] hpfs: code page support is disabled
[  169.399277][ T8592] hpfs: hpfs_map_4sectors(): unaligned read
[  169.401588][ T8592] hpfs: hpfs_map_4sectors(): unaligned read
[  169.423791][ T8592] hpfs: filesystem error: unable to find root dir
[  169.730561][ T8602] loop1: detected capacity change from 0 to 2048
[  169.754728][ T8602] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found!
[  169.776083][ T8602] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  169.932167][ T8604] netlink: 8 bytes leftover after parsing attributes in process `syz.1.939'.
[  170.006935][ T8595] loop2: detected capacity change from 0 to 32768
[  170.025145][ T8595] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.935 (8595)
[  170.074222][ T8595] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  170.084373][ T8595] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm
[  170.279571][ T8620] loop1: detected capacity change from 0 to 2048
[  170.301432][ T8595] BTRFS info (device loop2): enabling ssd optimizations
[  170.303827][ T8595] BTRFS info (device loop2): turning on async discard
[  170.305844][ T8595] BTRFS info (device loop2): enabling free space tree
[  170.364299][ T8620] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  170.371817][   T33] audit: type=1800 audit(1762394212.619:51): pid=8595 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.935" name="file2" dev="loop2" ino=261 res=0 errno=0
[  170.403993][ T8620] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters
[  170.418867][   T33] audit: type=1800 audit(1762394212.649:52): pid=8620 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.942" name="file1" dev="loop1" ino=15 res=0 errno=0
[  170.422945][ T8620] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 245 with max blocks 1 with error 28
[  170.430997][ T8620] EXT4-fs (loop1): This should not happen!! Data will be lost
[  170.430997][ T8620] 
[  170.433883][ T8620] EXT4-fs (loop1): Total free blocks count 0
[  170.435639][ T8620] EXT4-fs (loop1): Free/Dirty block details
[  170.437365][ T8620] EXT4-fs (loop1): free_blocks=4096
[  170.461803][ T8620] EXT4-fs (loop1): dirty_blocks=32
[  170.463256][ T8620] EXT4-fs (loop1): Block reservation details
[  170.502355][ T5811] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  170.521645][ T8620] EXT4-fs (loop1): i_reserved_data_blocks=2
[  170.615731][ T5812] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  170.792884][ T8645] loop2: detected capacity change from 0 to 128
[  170.813012][ T8645] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  170.817092][ T8645] hpfs: filesystem error: improperly stopped
[  170.822652][ T8645] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  170.824987][ T8645] hpfs: You really don't want any checks? You are crazy...
[  170.833109][ T8648] loop3: detected capacity change from 0 to 256
[  170.835513][ T8648] exfat: Deprecated parameter 'namecase'
[  170.841879][ T8645] hpfs: hpfs_map_sector(): read error
[  170.843477][ T8645] hpfs: code page support is disabled
[  170.848553][ T8646] loop1: detected capacity change from 0 to 128
[  170.849467][ T8648] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d)
[  170.852141][ T8645] hpfs: hpfs_map_4sectors(): unaligned read
[  170.865197][ T8645] hpfs: hpfs_map_4sectors(): unaligned read
[  170.867059][ T8645] hpfs: filesystem error: unable to find root dir
[  170.886101][ T8646] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  170.908089][ T8646] hpfs: filesystem error: improperly stopped
[  170.909851][ T8646] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  170.912053][ T8646] hpfs: You really don't want any checks? You are crazy...
[  170.914276][ T8646] hpfs: hpfs_map_sector(): read error
[  170.934489][ T8646] hpfs: code page support is disabled
[  170.950332][ T8646] hpfs: hpfs_map_4sectors(): unaligned read
[  170.952546][ T8646] hpfs: hpfs_map_4sectors(): unaligned read
[  170.954418][ T8646] hpfs: filesystem error: unable to find root dir
[  171.167549][    T9] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  171.257481][ T5278] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  171.321085][    T9] usb 4-1: Using ep0 maxpacket: 16
[  171.324774][    T9] usb 4-1: config 0 interface 0 altsetting 218 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  171.330437][    T9] usb 4-1: config 0 interface 0 has no altsetting 0
[  171.333177][    T9] usb 4-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice= 0.00
[  171.336697][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  171.359602][    T9] usb 4-1: config 0 descriptor??
[  171.409549][ T5278] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  171.412563][ T5278] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  171.415095][ T5278] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  171.419489][ T5278] usb 3-1: config 0 descriptor??
[  171.424863][ T5278] pwc: Askey VC010 type 2 USB webcam detected.
[  171.781238][    T9] logitech-djreceiver 0003:046D:C52B.0008: unknown main item tag 0x0
[  171.825357][ T5278] pwc: recv_control_msg error -32 req 02 val 2b00
[  171.828722][ T5278] pwc: recv_control_msg error -32 req 02 val 2700
[  171.831303][ T5278] pwc: recv_control_msg error -32 req 02 val 2c00
[  171.834062][ T5278] pwc: recv_control_msg error -32 req 04 val 1000
[  171.836927][ T5278] pwc: recv_control_msg error -32 req 04 val 1300
[  171.992772][    T9] usb 4-1: USB disconnect, device number 13
[  172.040657][ T5278] pwc: recv_control_msg error -71 req 02 val 2000
[  172.042875][ T5278] pwc: recv_control_msg error -71 req 02 val 2100
[  172.046420][ T5278] pwc: recv_control_msg error -71 req 04 val 1500
[  172.049244][ T5278] pwc: recv_control_msg error -71 req 02 val 2500
[  172.051409][ T5278] pwc: recv_control_msg error -71 req 02 val 2400
[  172.053564][ T5278] pwc: recv_control_msg error -71 req 02 val 2600
[  172.055761][ T5278] pwc: recv_control_msg error -71 req 02 val 2900
[  172.058739][ T5278] pwc: recv_control_msg error -71 req 02 val 2800
[  172.061038][ T5278] pwc: recv_control_msg error -71 req 04 val 1100
[  172.063174][ T5278] pwc: recv_control_msg error -71 req 04 val 1200
[  172.070220][ T5278] pwc: Registered as video103.
[  172.072758][ T5278] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input13
[  172.088712][ T5278] usb 3-1: USB disconnect, device number 16
[  172.113409][ T6129] udevd[6129]: setting owner of /dev/input/event3 to uid=0, gid=104 failed: No such file or directory
[  172.287088][ T8669] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  172.360494][ T8673] loop1: detected capacity change from 0 to 64
[  172.364425][ T8673] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing
[  172.401948][ T8675] loop1: detected capacity change from 0 to 256
[  172.412691][ T8675] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  172.464698][ T8677] loop1: detected capacity change from 0 to 1024
[  172.483179][ T8677] hfsplus: bad catalog entry type
[  172.510973][ T2181] hfsplus: b-tree write err: -5, ino 4
[  172.555014][   T33] audit: type=1326 audit(1762394214.799:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8679 comm="syz.1.965" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f779f78efc9 code=0x0
[  172.705075][ T8687] loop1: detected capacity change from 0 to 128
[  173.110838][ T8693] loop3: detected capacity change from 0 to 512
[  173.166615][ T8693] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.971: bad orphan inode 11862016
[  173.175378][ T8693] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  173.180187][ T8693] ext4 filesystem being mounted at /302/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  173.205828][ T6277] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  173.288969][ T8702] loop3: detected capacity change from 0 to 4096
[  173.291513][ T8704] sctp: [Deprecated]: syz.2.975 (pid 8704) Use of int in max_burst socket option.
[  173.291513][ T8704] Use struct sctp_assoc_value instead
[  173.307603][   T47] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  173.460790][   T47] usb 2-1: Using ep0 maxpacket: 8
[  173.463911][   T47] usb 2-1: config 179 has an invalid interface number: 65 but max is 0
[  173.466497][   T47] usb 2-1: config 179 has no interface number 0
[  173.477454][   T47] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[  173.480798][   T47] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[  173.491189][   T47] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  173.498065][   T47] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0
[  173.501901][   T47] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  173.519350][   T47] usb 2-1: config 179 interface 65 has no altsetting 0
[  173.521987][   T47] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  173.525387][   T47] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  173.555420][   T47] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input14
[  173.604100][ T8718] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  173.652839][ T8720] loop2: detected capacity change from 0 to 8
[  173.687794][ T8720] SQUASHFS error: xz decompression failed, data probably corrupt
[  173.690046][ T8720] SQUASHFS error: Failed to read block 0x108: -5
[  173.691950][ T8720] SQUASHFS error: Unable to read metadata cache entry [106]
[  173.694260][ T8720] SQUASHFS error: Unable to read inode 0x11f
[  173.714303][ T8722] netlink: 60 bytes leftover after parsing attributes in process `syz.3.984'.
[  173.723293][ T8722] netlink: 60 bytes leftover after parsing attributes in process `syz.3.984'.
[  173.732295][ T8722] netlink: 60 bytes leftover after parsing attributes in process `syz.3.984'.
[  173.765442][    T9] usb 2-1: USB disconnect, device number 19
[  173.937630][ T8735] macvtap0: entered allmulticast mode
[  173.939278][ T8735] veth0_macvtap: entered allmulticast mode
[  174.043217][ T8739] loop3: detected capacity change from 0 to 256
[  174.051400][ T8739] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011e5d, chksum : 0x63a11b78, utbl_chksum : 0xe619d30d)
[  174.189110][ T8743] loop3: detected capacity change from 0 to 164
[  174.249916][ T8745] overlayfs: missing 'lowerdir'
[  174.661451][ T8751] tmpfs: Bad value for 'mpol'
[  174.789509][ T8747] loop3: detected capacity change from 0 to 32768
[  174.800510][ T8747] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.996 (8747)
[  174.960767][ T8747] BTRFS info (device loop3): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885
[  174.978562][ T8747] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm
[  175.102463][ T8747] BTRFS info (device loop3): enabling ssd optimizations
[  175.104560][ T8747] BTRFS info (device loop3): turning on async discard
[  175.106508][ T8747] BTRFS info (device loop3): enabling free space tree
[  175.190634][ T6277] BTRFS info (device loop3): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885
[  175.246897][ T8756] loop1: detected capacity change from 0 to 32768
[  175.255031][ T8756] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1000 (8756)
[  175.266331][ T8756] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  175.284847][ T8756] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm
[  175.525504][ T8756] BTRFS info (device loop1): enabling ssd optimizations
[  175.552032][ T8756] BTRFS info (device loop1): turning on async discard
[  175.554489][ T8756] BTRFS info (device loop1): enabling free space tree
[  175.584653][ T5812] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  175.786641][ T8805] Trying to write to read-only block-device nullb0
[  175.909377][ T8802] F2FS-fs: Conflicting test_dummy_encryption options
[  176.094430][ T8816] loop1: detected capacity change from 0 to 256
[  176.096964][ T8816] exfat: Deprecated parameter 'utf8'
[  176.103040][ T8816] exfat: Deprecated parameter 'namecase'
[  176.109701][ T8816] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[  176.204515][ T8823] loop1: detected capacity change from 0 to 64
[  176.245764][ T8823] Trying to free block not in datazone
[  176.483239][ T8835] loop1: detected capacity change from 0 to 16
[  176.496436][ T8835] erofs (device loop1): mounted with root inode @ nid 36.
[  176.526422][   T57] erofs (device loop1): failed to decompress 6887 in[4096, 0] out[9000]
[  176.536495][ T8835] erofs (device loop1): failed to decompress 6887 in[4096, 0] out[8192]
[  176.539638][ T8835] erofs (device loop1): read error -117 @ 1 of nid 89
[  176.541987][   T33] audit: type=1800 audit(1762394218.789:54): pid=8835 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1021" name="file2" dev="loop1" ino=89 res=0 errno=0
[  177.343720][ T8875] loop1: detected capacity change from 0 to 2048
[  177.345935][ T5851] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  177.370145][ T8876] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  177.385059][ T8875] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[  177.393477][ T8875] Remounting filesystem read-only
[  177.395210][ T8875] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[  177.399277][ T8875] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[  177.402212][ T8875] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[  177.405414][ T8875] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[  177.409146][ T8875] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[  177.411976][ T8875] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[  177.417709][ T8875] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[  177.421609][   T33] audit: type=1800 audit(1762394219.669:55): pid=8875 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1039" name="file2" dev="loop1" ino=16 res=0 errno=0
[  177.499539][ T5851] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  177.504475][ T5851] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  177.508776][ T5851] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  177.511565][ T5851] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[  177.513870][ T5851] usb 4-1: Manufacturer: syz
[  177.516695][ T5851] usb 4-1: config 0 descriptor??
[  177.529027][ T5877] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  177.693268][ T5877] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  177.696450][ T5877] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  177.700042][ T5877] usb 3-1: Product: syz
[  177.701940][ T5877] usb 3-1: Manufacturer: syz
[  177.703775][ T5877] usb 3-1: SerialNumber: syz
[  178.088744][ T8878] loop1: detected capacity change from 0 to 131072
[  178.095434][ T8878] F2FS-fs (loop1): invalid crc value
[  178.140350][ T8878] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  178.143596][ T8878] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  178.148802][ T5877] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  178.153101][ T5877] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  178.237198][ T8878] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1040'.
[  178.534731][ T5851] uclogic 0003:256C:006D.0009: v1 frame probing failed: -71
[  178.542410][ T5851] uclogic 0003:256C:006D.0009: failed probing parameters: -71
[  178.544600][ T5851] uclogic 0003:256C:006D.0009: probe with driver uclogic failed with error -71
[  178.553031][ T5851] usb 4-1: USB disconnect, device number 14
[  179.124163][ T8892] can0: slcan on pty26.
[  179.179354][ T8891] can0 (unregistered): slcan off pty26.
[  179.319843][ T8898] loop3: detected capacity change from 0 to 256
[  179.339067][ T8898] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000e8a4, chksum : 0x7bc75166, utbl_chksum : 0xe619d30d)
[  180.001512][ T5877] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000080. ret = -EPROTO
[  180.007044][ T5877] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  180.011216][ T5877] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  180.019042][ T5877] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71
[  180.025041][ T5877] usb 3-1: USB disconnect, device number 17
[  181.029525][ T8926] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1059'.
[  181.322249][ T8940] loop3: detected capacity change from 0 to 4096
[  181.326429][ T8940] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512).
[  181.493818][ T8944] loop2: detected capacity change from 0 to 16
[  181.500013][ T8944] erofs (device loop2): mounted with root inode @ nid 36.
[  181.601793][ T8948] loop2: detected capacity change from 0 to 128
[  181.605271][ T8948] hpfs: Unexpected value for 'help'
[  181.637535][ T5278] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  181.700695][ T8952] loop2: detected capacity change from 0 to 16
[  181.709054][ T8952] erofs (device loop2): mounted with root inode @ nid 36.
[  181.728420][ T8952] overlayfs: failed to get redirect (-117)
[  181.753322][ T8952] overlayfs: failed to get redirect (-117)
[  181.797625][ T5278] usb 4-1: Using ep0 maxpacket: 32
[  181.801830][ T5278] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  181.805808][ T5278] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  181.809506][ T5278] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  181.812788][ T5278] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  181.821644][ T5278] usb 4-1: config 0 descriptor??
[  182.250487][ T5278] savu 0003:1E7D:2D5A.000A: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0
[  182.380223][ T5818] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  182.393318][ T5818] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  182.400474][ T5818] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  182.410963][ T5818] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  182.420819][ T5818] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  182.498845][ T8942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  182.501997][ T8942] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  182.511570][ T5278] usb 4-1: USB disconnect, device number 15
[  182.695930][ T8958] chnl_net:caif_netlink_parms(): no params data found
[  182.753167][ T8958] bridge0: port 1(bridge_slave_0) entered blocking state
[  182.755961][ T8958] bridge0: port 1(bridge_slave_0) entered disabled state
[  182.758791][ T8958] bridge_slave_0: entered allmulticast mode
[  182.762012][ T8958] bridge_slave_0: entered promiscuous mode
[  182.766299][ T8958] bridge0: port 2(bridge_slave_1) entered blocking state
[  182.769669][ T8958] bridge0: port 2(bridge_slave_1) entered disabled state
[  182.771957][ T8958] bridge_slave_1: entered allmulticast mode
[  182.775162][ T8958] bridge_slave_1: entered promiscuous mode
[  182.796678][ T8958] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  182.801375][ T8958] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  182.821745][ T8958] team0: Port device team_slave_0 added
[  182.825342][ T8958] team0: Port device team_slave_1 added
[  182.853342][ T8958] batman_adv: batadv0: Adding interface: batadv_slave_0
[  182.855855][ T8958] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  182.866192][ T8958] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  182.872192][ T8958] batman_adv: batadv0: Adding interface: batadv_slave_1
[  182.874692][ T8958] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  182.885099][ T8958] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  182.943217][ T8958] hsr_slave_0: entered promiscuous mode
[  182.946276][ T8958] hsr_slave_1: entered promiscuous mode
[  182.950106][ T8958] debugfs: 'hsr0' already exists in 'hsr'
[  182.952373][ T8958] Cannot create hsr debugfs directory
[  183.014910][ T8967] capability: warning: `syz.1.1076' uses deprecated v2 capabilities in a way that may be insecure
[  183.511582][ T8958] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  183.526155][ T8958] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  183.540400][ T8958] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  183.556832][ T8958] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  183.810473][ T8975] loop3: detected capacity change from 0 to 32768
[  183.838310][ T8975] (syz.3.1079,8975,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0xaff4b7b9. Applying ECC.
[  183.844784][ T8975] (syz.3.1079,8975,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xb3775c19, computed 0xdf810603
[  183.860437][ T8975] (syz.3.1079,8975,0):ocfs2_validate_inode_block:1458 ERROR: Checksum failed for dinode 18
[  183.874801][ T8975] (syz.3.1079,8975,0):ocfs2_read_locked_inode:597 ERROR: status = -5
[  183.885317][ T8975] (syz.3.1079,8975,0):ocfs2_init_global_system_inodes:452 ERROR: status = -5
[  183.903814][ T8975] (syz.3.1079,8975,0):ocfs2_init_global_system_inodes:476 ERROR: status = -5
[  183.918069][ T8958] 8021q: adding VLAN 0 to HW filter on device bond0
[  183.927775][ T8975] (syz.3.1079,8975,0):ocfs2_initialize_super:2198 ERROR: status = -5
[  183.938645][ T8975] (syz.3.1079,8975,0):ocfs2_fill_super:1177 ERROR: status = -5
[  184.018527][ T8958] 8021q: adding VLAN 0 to HW filter on device team0
[  184.046454][   T54] bridge0: port 1(bridge_slave_0) entered blocking state
[  184.049602][   T54] bridge0: port 1(bridge_slave_0) entered forwarding state
[  184.120776][   T54] bridge0: port 2(bridge_slave_1) entered blocking state
[  184.125152][   T54] bridge0: port 2(bridge_slave_1) entered forwarding state
[  184.462023][ T8958] 8021q: adding VLAN 0 to HW filter on device batadv0
[  184.517694][ T5818] Bluetooth: hci1: command tx timeout
[  184.913157][ T8958] veth0_vlan: entered promiscuous mode
[  184.925395][ T8958] veth1_vlan: entered promiscuous mode
[  184.970467][ T8958] veth0_macvtap: entered promiscuous mode
[  184.986037][ T8958] veth1_macvtap: entered promiscuous mode
[  185.012462][ T8958] batman_adv: batadv0: Interface activated: batadv_slave_0
[  185.025447][ T8958] batman_adv: batadv0: Interface activated: batadv_slave_1
[  185.054918][   T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  185.059906][   T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  185.067151][   T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  185.079551][   T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  185.185284][ T7160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  185.190268][ T7160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  185.296127][ T2181] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  185.300852][ T2181] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  185.596184][ T9043] loop3: detected capacity change from 0 to 512
[  185.681433][   T24] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  185.695393][ T9043] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.1102: invalid indirect mapped block 4294967295 (level 1)
[  185.710222][ T9043] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.1102: invalid indirect mapped block 4294967295 (level 1)
[  185.716562][ T9043] EXT4-fs (loop3): 2 truncates cleaned up
[  185.720296][ T9043] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  185.992619][   T24] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  186.014664][   T24] usb 2-1: config 27 interface 0 altsetting 0 has a duplicate endpoint with address 0xB, skipping
[  186.042633][   T24] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  186.129105][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  186.141659][ T6277] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  186.153457][   T24] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  186.176072][   T24] usb 2-1: invalid MIDI out EP 0
[  186.266903][ T6129] udevd[6129]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  186.300432][   T24] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22
[  186.382737][ T9052] loop3: detected capacity change from 0 to 4096
[  186.386493][ T9052] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[  186.401371][ T9052] ntfs3(loop3): ino=19, mi_enum_attr
[  186.403335][ T9052] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  186.569907][    T9] usb 2-1: USB disconnect, device number 20
[  186.587868][ T5818] Bluetooth: hci1: command tx timeout
[  186.770681][ T9057] loop3: detected capacity change from 0 to 32768
[  186.774013][ T9057] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1106 (9057)
[  186.793840][ T9057] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  186.796633][ T9057] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm
[  186.797285][ T9062] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1108'.
[  186.803196][ T9057] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  186.861973][ T9057] BTRFS info (device loop3): rebuilding free space tree
[  186.872485][ T9057] BTRFS info (device loop3): disabling free space tree
[  186.874873][ T9057] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  186.878577][ T9057] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  186.884142][ T9057] BTRFS info (device loop3): checking UUID tree
[  186.887230][ T9057] BTRFS info (device loop3): enabling ssd optimizations
[  186.890961][ T9057] BTRFS info (device loop3): turning off barriers
[  186.893408][ T9057] BTRFS info (device loop3): disabling tree log
[  186.895709][ T9057] BTRFS info (device loop3): turning on flush-on-commit
[  186.898729][ T9057] BTRFS info (device loop3): enabling disk space caching
[  186.901298][ T9057] BTRFS info (device loop3): force clearing of disk cache
[  186.904012][ T9057] BTRFS info (device loop3): use zstd compression, level 3
[  186.906706][ T9057] BTRFS info (device loop3): max_inline set to 0
[  187.144016][ T9087] loop4: detected capacity change from 0 to 2048
[  187.165870][ T6277] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  187.179992][ T9087] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  187.185979][ T9087] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  187.228659][ T9087] overlayfs: failed to verify upper (/file0, ino=12, err=-28)
[  187.231201][ T9087] overlayfs: failed to verify index dir 'upper' xattr
[  187.233893][ T9087] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index.
[  187.340242][ T8958] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  187.667533][    T9] usb 4-1: new full-speed USB device number 16 using dummy_hcd
[  187.822898][    T9] usb 4-1: config 150 has an invalid interface number: 204 but max is 2
[  187.826422][    T9] usb 4-1: config 150 has 2 interfaces, different from the descriptor's value: 3
[  187.833266][    T9] usb 4-1: config 150 has no interface number 0
[  187.835821][    T9] usb 4-1: config 150 interface 204 has no altsetting 0
[  187.841830][    T9] usb 4-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb
[  187.845436][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  187.849064][    T9] usb 4-1: Product: syz
[  187.850832][    T9] usb 4-1: Manufacturer: syz
[  187.852673][    T9] usb 4-1: SerialNumber: syz
[  188.027790][ T9093] loop1: detected capacity change from 0 to 131072
[  188.038938][ T9093] F2FS-fs (loop1): Zoned block device path is missing
[  188.041505][ T9093] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  188.046044][ T9093] F2FS-fs (loop1): invalid crc value
[  188.068779][    T9] xr_serial 4-1:150.204: skipping garbage
[  188.075780][    T9] xr_serial 4-1:150.204: xr_serial converter detected
[  188.114819][ T9093] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  188.124645][ T9093] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  188.127246][ T9093] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  188.667687][ T5818] Bluetooth: hci1: command tx timeout
[  188.672901][    T9] xr_serial ttyUSB0: Failed to set reg 0x0d: -71
[  188.674834][    T9] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71
[  188.683397][ T9116] loop4: detected capacity change from 0 to 40427
[  188.691253][    T9] usb 4-1: USB disconnect, device number 16
[  188.691297][ T9116] F2FS-fs (loop4): Image doesn't support compression
[  188.693869][    T9] xr_serial 4-1:150.204: device disconnected
[  188.704366][ T9116] F2FS-fs (loop4): build fault injection rate: 690
[  188.715552][ T9116] F2FS-fs (loop4): invalid crc value
[  188.798342][ T9116] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  188.802339][ T9116] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  188.849427][ T8958] syz-executor: attempt to access beyond end of device
[  188.849427][ T8958] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  188.853513][ T8958] CPU: 0 UID: 0 PID: 8958 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  188.853524][ T8958] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  188.853531][ T8958] Call Trace:
[  188.853534][ T8958]  <TASK>
[  188.853538][ T8958]  dump_stack_lvl+0x189/0x250
[  188.853556][ T8958]  ? __pfx_dump_stack_lvl+0x10/0x10
[  188.853566][ T8958]  ? __pfx_queue_work_on+0x10/0x10
[  188.853574][ T8958]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  188.853585][ T8958]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  188.853600][ T8958]  f2fs_handle_critical_error+0x37c/0x540
[  188.853616][ T8958]  f2fs_write_end_io+0x886/0xb60
[  188.853633][ T8958]  __submit_merged_bio+0x27a/0x6a0
[  188.853648][ T8958]  __submit_merged_write_cond+0x255/0x530
[  188.853662][ T8958]  f2fs_write_data_pages+0x261d/0x3000
[  188.853669][ T8958]  ? __pfx_usage_match+0x10/0x10
[  188.853677][ T8958]  ? __bfs+0x154/0x2a0
[  188.853700][ T8958]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  188.853707][ T8958]  ? __switch_to+0xdc8/0x1690
[  188.853739][ T8958]  ? rcu_is_watching+0x15/0xb0
[  188.853749][ T8958]  ? trace_sched_exit_tp+0x36/0x110
[  188.853760][ T8958]  ? __schedule+0x17ae/0x4cc0
[  188.853771][ T8958]  ? folios_put_refs+0x584/0x670
[  188.853785][ T8958]  ? __pfx_folios_put_refs+0x10/0x10
[  188.853799][ T8958]  ? __lock_acquire+0xab9/0xd20
[  188.853814][ T8958]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  188.853822][ T8958]  do_writepages+0x32e/0x550
[  188.853838][ T8958]  ? do_raw_spin_unlock+0x4d/0x240
[  188.853851][ T8958]  filemap_fdatawrite+0x199/0x240
[  188.853861][ T8958]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  188.853899][ T8958]  ? do_raw_spin_unlock+0x4d/0x240
[  188.853911][ T8958]  f2fs_sync_dirty_inodes+0x31f/0x830
[  188.853927][ T8958]  f2fs_write_checkpoint+0x93e/0x2440
[  188.853935][ T8958]  ? __lock_acquire+0xab9/0xd20
[  188.853957][ T8958]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  188.853993][ T8958]  kill_f2fs_super+0x2cc/0x6d0
[  188.854005][ T8958]  ? __pfx_kill_f2fs_super+0x10/0x10
[  188.854039][ T8958]  ? shrinker_free+0x2ce/0x3e0
[  188.854051][ T8958]  deactivate_locked_super+0xbc/0x130
[  188.854062][ T8958]  cleanup_mnt+0x425/0x4c0
[  188.854072][ T8958]  ? lockdep_hardirqs_on+0x9c/0x150
[  188.854083][ T8958]  task_work_run+0x1d4/0x260
[  188.854096][ T8958]  ? __pfx_task_work_run+0x10/0x10
[  188.854105][ T8958]  ? __x64_sys_umount+0x122/0x160
[  188.854117][ T8958]  ? exit_to_user_mode_loop+0x40/0x130
[  188.854126][ T8958]  exit_to_user_mode_loop+0xe9/0x130
[  188.854134][ T8958]  do_syscall_64+0x2bd/0xfa0
[  188.854143][ T8958]  ? lockdep_hardirqs_on+0x9c/0x150
[  188.854153][ T8958]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  188.854160][ T8958]  ? exc_page_fault+0xab/0x100
[  188.854171][ T8958]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  188.854178][ T8958] RIP: 0033:0x7fedcbf902f7
[  188.854187][ T8958] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  188.854194][ T8958] RSP: 002b:00007fff1a67b968 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  188.854203][ T8958] RAX: 0000000000000000 RBX: 00007fedcc011d7d RCX: 00007fedcbf902f7
[  188.854208][ T8958] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff1a67ba20
[  188.854213][ T8958] RBP: 00007fff1a67ba20 R08: 0000000000000000 R09: 0000000000000000
[  188.854217][ T8958] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff1a67cab0
[  188.854222][ T8958] R13: 00007fedcc011d7d R14: 000000000002e145 R15: 00007fff1a67caf0
[  188.854238][ T8958]  </TASK>
[  188.854241][ T8958] F2FS-fs (loop4): Remounting filesystem read-only
[  189.107547][ T5864] usb 2-1: new full-speed USB device number 21 using dummy_hcd
[  189.267278][ T9124] loop3: detected capacity change from 0 to 2048
[  189.273568][ T5864] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 12361, setting to 64
[  189.282519][ T5864] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  189.285859][ T5864] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  189.289723][ T5864] usb 2-1: config 0 descriptor??
[  189.296065][ T9122] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  189.310892][ T9124]  loop3: p1 < > p4
[  189.310892][ T9124]  p4: <netbsd: >
[  189.315029][ T9124] loop3: p4 size 722688 extends beyond EOD, truncated
[  189.416070][ T6129] udevd[6129]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[  189.422910][ T5932] udevd[5932]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[  189.518203][ T5864] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  189.593179][ T9126] loop4: detected capacity change from 0 to 32768
[  189.610091][ T9126] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  189.644898][ T9126] XFS (loop4): Ending clean mount
[  189.693180][ T9126] XFS (loop4): Quotacheck needed: Please wait.
[  189.954426][ T9126] XFS (loop4): Quotacheck: Done.
[  189.955697][   T24] usb 2-1: USB disconnect, device number 21
[  190.015480][ T8958] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  190.517285][ T9145] loop4: detected capacity change from 0 to 32768
[  190.588578][ T9145] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  190.602381][ T9145] XFS (loop4): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  190.610574][ T9145] XFS (loop4): Starting recovery (logdev: internal)
[  190.623028][ T9145] XFS (loop4): Ending recovery (logdev: internal)
[  190.625870][ T9145] XFS (loop4): AG 0: Corrupt finobt pointer at level 1 index 0.
[  190.628730][ T9145] XFS (loop4): Failed to initialize disk quotas, err -117.
[  190.644187][ T9145] XFS (loop4): AG 0: Corrupt finobt pointer at level 1 index 0.
[  190.657345][ T8958] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  190.663297][ T8958] XFS (loop4): Uncorrected metadata errors detected; please run xfs_repair.
[  190.748162][ T5818] Bluetooth: hci1: command tx timeout
[  190.827522][ T5864] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  190.859561][ T9174] tipc: Started in network mode
[  190.861045][ T9174] tipc: Node identity ea918aa52439, cluster identity 4711
[  190.865409][ T9174] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  190.868608][ T9174] syzkaller0: entered promiscuous mode
[  190.870655][ T9174] syzkaller0: entered allmulticast mode
[  190.890495][ T9174] tipc: Resetting bearer <eth:syzkaller0>
[  190.896331][ T9173] tipc: Resetting bearer <eth:syzkaller0>
[  190.909467][ T9173] tipc: Disabling bearer <eth:syzkaller0>
[  191.010593][ T5864] usb 4-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5
[  191.013821][ T5864] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  191.022124][ T5864] usb 4-1: Product: syz
[  191.023672][ T5864] usb 4-1: Manufacturer: syz
[  191.025328][ T5864] usb 4-1: SerialNumber: syz
[  191.039267][ T5864] usb 4-1: config 0 descriptor??
[  191.042471][ T9182] loop4: detected capacity change from 0 to 64
[  191.043294][ T5864] gspca_main: sq905c-2.14.0 probing 2770:9052
[  191.247991][ T5864] gspca_sq905c: sq905c_command: usb_control_msg failed (-71)
[  191.255756][ T5864] sq905c 4-1:0.0: Get version command failed
[  191.262317][ T5864] sq905c 4-1:0.0: probe with driver sq905c failed with error -71
[  191.271683][ T5864] usb 4-1: USB disconnect, device number 17
[  191.375939][ T9188] loop1: detected capacity change from 0 to 32768
[  191.393325][ T9188] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  191.494863][ T5812] ocfs2: Unmounting device (7,1) on (node local)
[  191.661476][ T9208] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1152'.
[  191.771734][ T9212] loop4: detected capacity change from 0 to 512
[  191.783593][ T9212] EXT4-fs: Ignoring removed nomblk_io_submit option
[  191.813307][ T9212] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt.
[  191.823016][ T9212] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #11: comm syz.4.1154: corrupted inode contents
[  191.828534][ T9212] EXT4-fs error (device loop4): ext4_dirty_inode:6517: inode #11: comm syz.4.1154: mark_inode_dirty error
[  191.833221][ T9212] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.1154: invalid indirect mapped block 1 (level 1)
[  191.838593][ T9212] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #11: comm syz.4.1154: corrupted inode contents
[  191.854502][ T9212] EXT4-fs error (device loop4) in ext4_orphan_del:301: Corrupt filesystem
[  191.858787][ T9212] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #11: comm syz.4.1154: corrupted inode contents
[  191.865500][ T9212] EXT4-fs error (device loop4): ext4_truncate:4637: inode #11: comm syz.4.1154: mark_inode_dirty error
[  191.870908][ T9212] EXT4-fs error (device loop4) in ext4_process_orphan:343: Corrupt filesystem
[  191.874819][ T9212] EXT4-fs (loop4): 1 truncate cleaned up
[  191.878698][ T9212] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  191.917554][ T8958] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  192.007166][ T9206] loop1: detected capacity change from 0 to 32768
[  192.020307][ T9206] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1148 (9206)
[  192.036623][ T9206] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  192.047538][ T9206] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm
[  192.175963][ T9206] BTRFS info (device loop1): enabling ssd optimizations
[  192.180150][ T9206] BTRFS info (device loop1): turning on async discard
[  192.182364][ T9206] BTRFS info (device loop1): enabling free space tree
[  192.256531][ T5812] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  192.627509][ T9251] loop4: detected capacity change from 0 to 40427
[  192.630641][ T9251] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  192.632895][ T9251] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  192.637881][ T9251] F2FS-fs (loop4): invalid crc value
[  192.676470][ T9251] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  192.683581][ T9251] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  192.685554][ T9251] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  193.377493][   T47] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  193.537568][   T47] usb 4-1: Using ep0 maxpacket: 32
[  193.546495][   T47] usb 4-1: config 2 has an invalid interface number: 157 but max is 0
[  193.549615][   T47] usb 4-1: config 2 has no interface number 0
[  193.556794][   T47] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=a4.1b
[  193.560153][   T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  193.562789][   T47] usb 4-1: Product: syz
[  193.564389][   T47] usb 4-1: Manufacturer: syz
[  193.566448][   T47] usb 4-1: SerialNumber: syz
[  193.598540][   T47] imon 4-1:2.157: unable to register, err -19
[  193.794159][ T5864] usb 4-1: USB disconnect, device number 18
[  193.952052][ T9266] loop4: detected capacity change from 0 to 512
[  193.984705][ T9266] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  193.989213][ T9266] ext4 filesystem being mounted at /37/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  193.996271][   T33] audit: type=1800 audit(1762394236.239:56): pid=9266 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1166" name="bus" dev="loop4" ino=18 res=0 errno=0
[  194.019668][ T8958] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  194.070179][ T9272] loop4: detected capacity change from 0 to 16
[  194.080100][ T9272] erofs (device loop4): mounted with root inode @ nid 36.
[  194.178878][ T9276] loop4: detected capacity change from 0 to 4096
[  194.181696][ T9276] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512).
[  194.194973][ T9276] ntfs3(loop4): ino=19, mi_enum_attr
[  194.196797][ T9276] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  194.353261][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[  194.355623][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[  194.561885][ T9286] loop3: detected capacity change from 0 to 40427
[  194.585625][ T9286] F2FS-fs (loop3): invalid crc value
[  194.629850][ T9286] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  194.639735][ T9286] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  194.688468][ T6277] syz-executor: attempt to access beyond end of device
[  194.688468][ T6277] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  194.693050][ T6277] CPU: 1 UID: 0 PID: 6277 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  194.693062][ T6277] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  194.693068][ T6277] Call Trace:
[  194.693071][ T6277]  <TASK>
[  194.693075][ T6277]  dump_stack_lvl+0x189/0x250
[  194.693092][ T6277]  ? __pfx_dump_stack_lvl+0x10/0x10
[  194.693103][ T6277]  ? __pfx_queue_work_on+0x10/0x10
[  194.693112][ T6277]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  194.693123][ T6277]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  194.693138][ T6277]  f2fs_handle_critical_error+0x37c/0x540
[  194.693154][ T6277]  f2fs_write_end_io+0x886/0xb60
[  194.693171][ T6277]  __submit_merged_bio+0x27a/0x6a0
[  194.693185][ T6277]  __submit_merged_write_cond+0x255/0x530
[  194.693200][ T6277]  f2fs_write_data_pages+0x261d/0x3000
[  194.693225][ T6277]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  194.693254][ T6277]  ? __mod_zone_page_state+0xd7/0x140
[  194.693271][ T6277]  ? folios_put_refs+0x58b/0x670
[  194.693285][ T6277]  ? __pfx_folios_put_refs+0x10/0x10
[  194.693292][ T6277]  ? rcu_is_watching+0x15/0xb0
[  194.693306][ T6277]  ? __lock_acquire+0xab9/0xd20
[  194.693323][ T6277]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  194.693331][ T6277]  do_writepages+0x32e/0x550
[  194.693347][ T6277]  ? do_raw_spin_unlock+0x4d/0x240
[  194.693359][ T6277]  filemap_fdatawrite+0x199/0x240
[  194.693370][ T6277]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  194.693404][ T6277]  ? do_raw_spin_unlock+0x4d/0x240
[  194.693416][ T6277]  f2fs_sync_dirty_inodes+0x31f/0x830
[  194.693432][ T6277]  f2fs_write_checkpoint+0x93e/0x2440
[  194.693440][ T6277]  ? __lock_acquire+0xab9/0xd20
[  194.693467][ T6277]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  194.693504][ T6277]  kill_f2fs_super+0x2cc/0x6d0
[  194.693516][ T6277]  ? __pfx_kill_f2fs_super+0x10/0x10
[  194.693533][ T6277]  ? shrinker_free+0x2ce/0x3e0
[  194.693543][ T6277]  deactivate_locked_super+0xbc/0x130
[  194.693555][ T6277]  cleanup_mnt+0x425/0x4c0
[  194.693564][ T6277]  ? lockdep_hardirqs_on+0x9c/0x150
[  194.693600][ T6277]  task_work_run+0x1d4/0x260
[  194.693619][ T6277]  ? __pfx_task_work_run+0x10/0x10
[  194.693628][ T6277]  ? __x64_sys_umount+0x122/0x160
[  194.693641][ T6277]  ? exit_to_user_mode_loop+0x40/0x130
[  194.693650][ T6277]  exit_to_user_mode_loop+0xe9/0x130
[  194.693658][ T6277]  do_syscall_64+0x2bd/0xfa0
[  194.693668][ T6277]  ? lockdep_hardirqs_on+0x9c/0x150
[  194.693677][ T6277]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  194.693685][ T6277]  ? exc_page_fault+0xab/0x100
[  194.693695][ T6277]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  194.693703][ T6277] RIP: 0033:0x7f24069902f7
[  194.693712][ T6277] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  194.693719][ T6277] RSP: 002b:00007fff24dc2b28 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  194.693728][ T6277] RAX: 0000000000000000 RBX: 00007f2406a11d7d RCX: 00007f24069902f7
[  194.693733][ T6277] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff24dc2be0
[  194.693738][ T6277] RBP: 00007fff24dc2be0 R08: 0000000000000000 R09: 0000000000000000
[  194.693742][ T6277] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff24dc3c70
[  194.693747][ T6277] R13: 00007f2406a11d7d R14: 000000000002f811 R15: 00007fff24dc3cb0
[  194.693762][ T6277]  </TASK>
[  194.693766][ T6277] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  195.054484][ T9307] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1184'.
[  195.058131][ T9307] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1184'.
[  195.124619][ T9301] loop4: detected capacity change from 0 to 32768
[  195.162037][ T9301] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  195.203141][ T9301] (syz.4.1180,9301,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is smaller than minimal - offset=16, inode=65, rec_len=12, name_len=0
[  195.209453][ T9301] (syz.4.1180,9301,1):__ocfs2_delete_entry:1170 ERROR: status = -5
[  195.212353][ T9301] (syz.4.1180,9301,1):ocfs2_unlink:993 ERROR: status = -5
[  195.216236][ T9301] (syz.4.1180,9301,1):ocfs2_unlink:1046 ERROR: status = -5
[  195.242489][ T8958] ocfs2: Unmounting device (7,4) on (node local)
[  195.253492][ T9313] loop3: detected capacity change from 0 to 8
[  195.260698][ T9313] unable to read xattr id index table
[  195.476635][   T33] audit: type=1326 audit(1762394237.719:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9317 comm="syz.4.1186" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedcbf8efc9 code=0x7ffc0000
[  195.488036][   T33] audit: type=1326 audit(1762394237.719:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9317 comm="syz.4.1186" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedcbf8efc9 code=0x7ffc0000
[  195.512818][   T33] audit: type=1326 audit(1762394237.749:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9317 comm="syz.4.1186" exe="/syz-executor" sig=0 arch=c000003e syscall=75 compat=0 ip=0x7fedcbf8efc9 code=0x7ffc0000
[  195.530246][   T33] audit: type=1326 audit(1762394237.749:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9317 comm="syz.4.1186" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedcbf8efc9 code=0x7ffc0000
[  195.546756][   T33] audit: type=1326 audit(1762394237.749:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9317 comm="syz.4.1186" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedcbf8efc9 code=0x7ffc0000
[  195.565916][ T9309] loop1: detected capacity change from 0 to 32768
[  195.866608][ T9324] tmpfs: Bad value for 'mpol'
[  196.731565][ T9342] loop4: detected capacity change from 0 to 512
[  196.740710][   T33] audit: type=1326 audit(1762394238.979:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9344 comm="syz.3.1196" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f240698efc9 code=0x7ffc0000
[  196.746535][   T33] audit: type=1326 audit(1762394238.979:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9344 comm="syz.3.1196" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f240698efc9 code=0x7ffc0000
[  196.763780][   T33] audit: type=1326 audit(1762394238.999:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9344 comm="syz.3.1196" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f240698efc9 code=0x7ffc0000
[  196.771882][   T33] audit: type=1326 audit(1762394238.999:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9344 comm="syz.3.1196" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f240698efc9 code=0x7ffc0000
[  196.786331][ T9342] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  196.790370][ T9342] ext4 filesystem being mounted at /54/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  196.811053][ T9350] loop3: detected capacity change from 0 to 4096
[  196.824167][ T9350] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  196.826890][ T9350] EXT4-fs (loop3): Test dummy encryption mode enabled
[  196.838873][ T8958] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  196.839574][ T9350] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  196.942510][ T6277] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  197.134447][ T9357] loop3: detected capacity change from 0 to 32768
[  197.139978][ T9357] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1201 (9357)
[  197.158653][ T9357] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  197.162328][ T9357] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[  197.196713][ T9357] BTRFS info (device loop3): enabling ssd optimizations
[  197.199534][ T9357] BTRFS info (device loop3): turning on async discard
[  197.200877][   T24] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  197.202035][ T9357] BTRFS info (device loop3): enabling free space tree
[  197.364086][ T6277] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  197.391767][   T24] usb 5-1: Using ep0 maxpacket: 32
[  197.395666][   T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  197.396874][ T9378] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[  197.401044][   T24] usb 5-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[  197.404501][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  197.406815][   T24] usb 5-1: Product: syz
[  197.410163][   T24] usb 5-1: Manufacturer: syz
[  197.411615][   T24] usb 5-1: SerialNumber: syz
[  197.438324][   T24] usb 5-1: config 0 descriptor??
[  197.442453][   T24] cdc_ether 5-1:0.0: skipping garbage
[  197.444048][   T24] usb 5-1: bad CDC descriptors
[  197.445870][   T24] usb 5-1: unsupported MDLM descriptors
[  197.600599][ T9384] loop3: detected capacity change from 0 to 1024
[  197.641867][ T2181] hfsplus: b-tree write err: -5, ino 4
[  197.650647][ T5877] usb 5-1: USB disconnect, device number 2
[  197.757698][   T24] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  197.928361][   T24] usb 2-1: Using ep0 maxpacket: 8
[  197.932654][   T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  197.936503][   T24] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E
[  197.942952][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7
[  197.947594][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  197.952980][   T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  197.968728][   T24] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[  197.972185][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[  197.975357][   T24] usb 2-1: Product: syz
[  197.976977][   T24] usb 2-1: Manufacturer: syz
[  197.978901][   T24] usb 2-1: SerialNumber: syz
[  197.991976][   T24] usb 2-1: config 0 descriptor??
[  198.217088][   T24] radio-si470x 2-1:0.0: DeviceID=0x6e38 ChipID=0x8e9d
[  198.419634][   T24] radio-si470x 2-1:0.0: si470x_get_report: usb_control_msg returned -71
[  198.424382][   T24] radio-si470x 2-1:0.0: si470x_get_scratch: si470x_get_report returned -71
[  198.431049][   T24] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -5
[  198.454468][   T24] usb 2-1: USB disconnect, device number 22
[  198.751455][ T9407] overlayfs: conflicting options: userxattr,redirect_dir=follow
[  199.118926][ T9415] loop4: detected capacity change from 0 to 4096
[  199.607728][ T9429] loop4: detected capacity change from 0 to 4096
[  199.752262][ T9435] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1229'.
[  199.812941][ T9433] loop1: detected capacity change from 0 to 32768
[  199.821433][ T9433] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1228 (9433)
[  199.831362][ T9433] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  199.834397][ T9433] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm
[  199.873876][ T9433] BTRFS info (device loop1): enabling ssd optimizations
[  199.875913][ T9433] BTRFS info (device loop1): turning on async discard
[  199.887538][ T9433] BTRFS info (device loop1): enabling free space tree
[  199.902378][ T9433] BTRFS info (device loop1): device stats zeroed by syz.1.1228 (9433)
[  199.930400][ T5812] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  200.508710][ T5864] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  200.667770][ T5864] usb 2-1: Using ep0 maxpacket: 8
[  200.672678][ T9483] loop3: detected capacity change from 0 to 40427
[  200.677457][ T5864] usb 2-1: unable to get BOS descriptor or descriptor too short
[  200.678613][ T9483] F2FS-fs (loop3): invalid crc value
[  200.680970][ T5864] usb 2-1: config 4 interface 0 has no altsetting 0
[  200.697614][ T5864] usb 2-1: string descriptor 0 read error: -22
[  200.699579][ T5864] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[  200.702139][ T5864] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  200.729841][ T5864] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[  200.751196][ T5864] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  200.754488][ T5864] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[  200.756672][ T5864] usb 2-1: media controller created
[  200.772405][ T9483] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  200.776164][ T9483] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  200.792134][ T5864] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  200.935532][ T9497] loop4: detected capacity change from 0 to 2048
[  200.979134][ T9498] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  201.076226][ T9499] NILFS error (device loop4): nilfs_check_folio: bad entry in directory #2: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0
[  201.091997][ T9499] Remounting filesystem read-only
[  201.133187][ T5864] usb 2-1: USB disconnect, device number 23
[  202.461819][ T9506] loop1: detected capacity change from 0 to 32768
[  202.482245][   T33] kauditd_printk_skb: 5 callbacks suppressed
[  202.482260][   T33] audit: type=1800 audit(1762394244.729:71): pid=9506 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1247" name="file2" dev="loop1" ino=5 res=0 errno=0
[  202.610158][ T9512] netlink: 'syz.3.1249': attribute type 10 has an invalid length.
[  202.646427][ T9512] team0: Port device dummy0 added
[  202.661442][ T9517] netlink: 'syz.3.1249': attribute type 10 has an invalid length.
[  202.682042][ T9517] team0: Port device dummy0 removed
[  202.685932][ T9517] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  202.840453][ T9516] loop4: detected capacity change from 0 to 32768
[  202.843176][ T9516] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1253 (9516)
[  202.849145][ T9516] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  202.852061][ T9516] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm
[  202.884322][ T9516] BTRFS info (device loop4): enabling ssd optimizations
[  202.886727][ T9516] BTRFS info (device loop4): turning on async discard
[  202.889519][ T9516] BTRFS info (device loop4): enabling free space tree
[  202.965249][ T5826] BTRFS info (device loop4): qgroup scan completed (inconsistency flag cleared)
[  203.024840][ T9546] usb usb1: usbfs: process 9546 (syz.1.1258) did not claim interface 0 before use
[  203.027906][   T24] usb 4-1: new full-speed USB device number 19 using dummy_hcd
[  203.038743][ T8958] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  203.214375][   T24] usb 4-1: config 6 has an invalid interface number: 2 but max is 0
[  203.217763][   T24] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config
[  203.221167][   T24] usb 4-1: config 6 has no interface number 0
[  203.223071][   T24] usb 4-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  203.226664][   T24] usb 4-1: config 6 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  203.288163][   T24] usb 4-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91
[  203.296777][   T24] usb 4-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3
[  203.317681][   T24] usb 4-1: Product: syz
[  203.319404][   T24] usb 4-1: Manufacturer: syz
[  203.321851][   T24] usb 4-1: SerialNumber: syz
[  203.340151][   T24] hso 4-1:6.2: Failed to find INT IN ep
[  203.441292][ T9560] loop4: detected capacity change from 0 to 64
[  203.544065][   T24] usb 4-1: USB disconnect, device number 19
[  203.758291][ T9566] loop4: detected capacity change from 0 to 32768
[  203.775693][ T9566] XFS (loop4): Mounting V5 filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 in no-recovery mode. Filesystem will be inconsistent.
[  203.819031][ T8958] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  204.120254][ T9587] netlink: 'syz.3.1272': attribute type 1 has an invalid length.
[  204.122532][ T9587] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1272'.
[  204.125100][ T9587] netlink: 4104 bytes leftover after parsing attributes in process `syz.3.1272'.
[  204.237277][ T9576] loop1: detected capacity change from 0 to 32768
[  204.246698][ T9576] ERROR: (device loop1): xtSearch: xt_getpage: xtree page corrupt
[  204.246698][ T9576] 
[  204.250381][ T9576] xtLookup: xtSearch returned -5
[  204.252054][ T9576] read_mapping_page failed!
[  204.253432][ T9576] jfs_mount: diMount(ipaimap) failed w/rc = -5
[  204.255433][ T9576] Mount JFS Failure: -5
[  204.256652][ T9576] jfs_mount failed w/return code = -5
[  204.364671][ T9599] loop1: detected capacity change from 0 to 128
[  204.392959][ T9599] syz.1.1279: attempt to access beyond end of device
[  204.392959][ T9599] loop1: rw=2049, sector=138, nr_sectors = 8 limit=128
[  204.398789][ T9599] syz.1.1279: attempt to access beyond end of device
[  204.398789][ T9599] loop1: rw=2049, sector=146, nr_sectors = 8 limit=128
[  204.405756][ T9599] syz.1.1279: attempt to access beyond end of device
[  204.405756][ T9599] loop1: rw=2049, sector=152, nr_sectors = 2 limit=128
[  204.410496][ T9599] Buffer I/O error on dev loop1, logical block 76, lost async page write
[  204.416090][ T9599] syz.1.1279: attempt to access beyond end of device
[  204.416090][ T9599] loop1: rw=2049, sector=170, nr_sectors = 8 limit=128
[  204.421553][ T9599] syz.1.1279: attempt to access beyond end of device
[  204.421553][ T9599] loop1: rw=2049, sector=176, nr_sectors = 2 limit=128
[  204.422110][  T974] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  204.425395][ T9599] Buffer I/O error on dev loop1, logical block 88, lost async page write
[  204.431143][ T9599] syz.1.1279: attempt to access beyond end of device
[  204.431143][ T9599] loop1: rw=2049, sector=178, nr_sectors = 8 limit=128
[  204.435705][ T9599] syz.1.1279: attempt to access beyond end of device
[  204.435705][ T9599] loop1: rw=2049, sector=184, nr_sectors = 2 limit=128
[  204.440016][ T9599] Buffer I/O error on dev loop1, logical block 92, lost async page write
[  204.446288][ T9599] syz.1.1279: attempt to access beyond end of device
[  204.446288][ T9599] loop1: rw=2049, sector=202, nr_sectors = 8 limit=128
[  204.452623][ T9599] syz.1.1279: attempt to access beyond end of device
[  204.452623][ T9599] loop1: rw=2049, sector=208, nr_sectors = 2 limit=128
[  204.458973][ T9599] Buffer I/O error on dev loop1, logical block 104, lost async page write
[  204.462956][ T9599] syz.1.1279: attempt to access beyond end of device
[  204.462956][ T9599] loop1: rw=2049, sector=210, nr_sectors = 8 limit=128
[  204.475381][ T9599] Buffer I/O error on dev loop1, logical block 108, lost async page write
[  204.481631][ T9599] Buffer I/O error on dev loop1, logical block 120, lost async page write
[  204.488031][ T9599] Buffer I/O error on dev loop1, logical block 124, lost async page write
[  204.493103][ T9599] Buffer I/O error on dev loop1, logical block 80, lost async page write
[  204.500110][ T9599] Buffer I/O error on dev loop1, logical block 84, lost async page write
[  204.504584][ T9599] Buffer I/O error on dev loop1, logical block 112, lost async page write
[  204.567513][ T5864] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  204.597530][  T974] usb 5-1: Using ep0 maxpacket: 8
[  204.601376][  T974] usb 5-1: config 179 has an invalid interface number: 65 but max is 0
[  204.604296][  T974] usb 5-1: config 179 has no interface number 0
[  204.606180][  T974] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[  204.609392][  T974] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[  204.612792][  T974] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9
[  204.616718][  T974] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024
[  204.627739][  T974] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  204.641839][  T974] usb 5-1: config 179 interface 65 has no altsetting 0
[  204.643982][  T974] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  204.646449][  T974] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  204.684686][  T974] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input15
[  204.729148][ T5864] usb 4-1: config 0 has an invalid interface number: 188 but max is 0
[  204.731485][ T5864] usb 4-1: config 0 has no interface number 0
[  204.733239][ T5864] usb 4-1: config 0 interface 188 has no altsetting 0
[  204.735104][ T5864] usb 4-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=dc.ab
[  204.743887][ T5864] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  204.759086][ T5246] input input15: unable to receive magic message: -110
[  204.775608][ T5864] usb 4-1: config 0 descriptor??
[  204.789729][ T5864] ftdi_sio 4-1:0.188: FTDI USB Serial Device converter detected
[  204.793423][ T5864] ftdi_sio ttyUSB0: unknown device type: 0xdcab
[  204.810431][ T5246] input input15: unable to receive magic message: -32
[  204.856825][ T5246] input input15: unable to receive magic message: -32
[  204.888447][ T9606] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1282'.
[  204.896494][ T5246] input input15: unable to receive magic message: -32
[  204.900463][ T9606] netlink: 'syz.1.1282': attribute type 7 has an invalid length.
[  204.902900][ T9606] netlink: 'syz.1.1282': attribute type 8 has an invalid length.
[  204.905254][ T9606] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1282'.
[  204.912388][ T5246] input input15: unable to receive magic message: -32
[  205.018157][ T6124] usb 4-1: USB disconnect, device number 20
[  205.020936][ T9610] loop1: detected capacity change from 0 to 2048
[  205.025729][ T6124] ftdi_sio 4-1:0.188: device disconnected
[  205.054503][ T9610] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  205.111746][  T974] usb 5-1: USB disconnect, device number 3
[  205.111834][    C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  205.265293][ T9615] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  205.269981][ T9615] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28
[  205.273489][ T9615] EXT4-fs (loop1): This should not happen!! Data will be lost
[  205.273489][ T9615] 
[  205.276299][ T9615] EXT4-fs (loop1): Total free blocks count 0
[  205.278270][ T9615] EXT4-fs (loop1): Free/Dirty block details
[  205.280105][ T9615] EXT4-fs (loop1): free_blocks=2415919504
[  205.281971][ T9615] EXT4-fs (loop1): dirty_blocks=16
[  205.283668][ T9615] EXT4-fs (loop1): Block reservation details
[  205.285908][ T9615] EXT4-fs (loop1): i_reserved_data_blocks=1
[  205.922162][ T5812] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  205.935269][ T9619] loop3: detected capacity change from 0 to 40427
[  205.943360][ T9619] F2FS-fs (loop3): invalid crc value
[  206.001691][ T9619] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  206.005498][ T9619] F2FS-fs (loop3): Start checkpoint disabled!
[  206.009579][ T9619] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0
[  206.011548][ T9627] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1289'.
[  206.013414][ T9619] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  206.074359][   T33] audit: type=1800 audit(1762394248.319:72): pid=9619 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1286" name="file1" dev="loop3" ino=10 res=0 errno=0
[  206.478237][   T33] audit: type=1800 audit(1762394248.559:73): pid=9643 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1286" name="file1" dev="loop3" ino=10 res=0 errno=0
[  206.608724][   T24] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  206.612815][ T9650] loop1: detected capacity change from 0 to 4096
[  206.616022][ T9650] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512).
[  206.691487][ T7160] CPU: 1 UID: 0 PID: 7160 Comm: kworker/u10:7 Not tainted syzkaller #0 PREEMPT(full) 
[  206.691502][ T7160] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  206.691507][ T7160] Workqueue: writeback wb_workfn (flush-7:3)
[  206.691523][ T7160] Call Trace:
[  206.691526][ T7160]  <TASK>
[  206.691530][ T7160]  dump_stack_lvl+0x189/0x250
[  206.691544][ T7160]  ? __pfx_dump_stack_lvl+0x10/0x10
[  206.691554][ T7160]  ? __pfx_queue_work_on+0x10/0x10
[  206.691562][ T7160]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  206.691572][ T7160]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  206.691586][ T7160]  f2fs_handle_critical_error+0x37c/0x540
[  206.691601][ T7160]  f2fs_write_end_io+0x886/0xb60
[  206.691616][ T7160]  __submit_merged_bio+0x27a/0x6a0
[  206.691630][ T7160]  __submit_merged_write_cond+0x255/0x530
[  206.691643][ T7160]  f2fs_write_data_pages+0x261d/0x3000
[  206.691701][ T7160]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  206.691723][ T7160]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  206.691748][ T7160]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  206.691770][ T7160]  ? trace_f2fs_writepages+0x7f/0x200
[  206.691781][ T7160]  ? f2fs_write_node_pages+0x478/0x6e0
[  206.691793][ T7160]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  206.691805][ T7160]  ? __lock_acquire+0xab9/0xd20
[  206.691816][ T7160]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  206.691824][ T7160]  do_writepages+0x32e/0x550
[  206.691836][ T7160]  ? reacquire_held_locks+0x127/0x1d0
[  206.691844][ T7160]  ? writeback_sb_inodes+0x384/0x1010
[  206.691858][ T7160]  __writeback_single_inode+0x145/0xff0
[  206.691868][ T7160]  ? do_raw_spin_unlock+0x4d/0x240
[  206.691880][ T7160]  writeback_sb_inodes+0x6c7/0x1010
[  206.691901][ T7160]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  206.691930][ T7160]  ? rcu_is_watching+0x15/0xb0
[  206.691943][ T7160]  wb_writeback+0x43b/0xaf0
[  206.691956][ T7160]  ? queue_io+0x311/0x590
[  206.691967][ T7160]  ? __pfx_wb_writeback+0x10/0x10
[  206.691980][ T7160]  ? _raw_spin_unlock_irq+0x23/0x50
[  206.691992][ T7160]  wb_workfn+0x409/0xef0
[  206.692007][ T7160]  ? __pfx_wb_workfn+0x10/0x10
[  206.692017][ T7160]  ? __lock_acquire+0xab9/0xd20
[  206.692029][ T7160]  ? process_scheduled_works+0x9ef/0x17b0
[  206.692040][ T7160]  ? _raw_spin_unlock_irq+0x23/0x50
[  206.692048][ T7160]  ? process_scheduled_works+0x9ef/0x17b0
[  206.692056][ T7160]  ? process_scheduled_works+0x9ef/0x17b0
[  206.692064][ T7160]  process_scheduled_works+0xae1/0x17b0
[  206.692085][ T7160]  ? __pfx_process_scheduled_works+0x10/0x10
[  206.692115][ T7160]  worker_thread+0x8a0/0xda0
[  206.692125][ T7160]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  206.692137][ T7160]  ? __kthread_parkme+0x7b/0x200
[  206.692151][ T7160]  kthread+0x711/0x8a0
[  206.692161][ T7160]  ? __pfx_worker_thread+0x10/0x10
[  206.692169][ T7160]  ? __pfx_kthread+0x10/0x10
[  206.692179][ T7160]  ? _raw_spin_unlock_irq+0x23/0x50
[  206.692188][ T7160]  ? lockdep_hardirqs_on+0x9c/0x150
[  206.692196][ T7160]  ? __pfx_kthread+0x10/0x10
[  206.692206][ T7160]  ret_from_fork+0x4bc/0x870
[  206.692216][ T7160]  ? __pfx_ret_from_fork+0x10/0x10
[  206.692227][ T7160]  ? __switch_to_asm+0x39/0x70
[  206.692233][ T7160]  ? __switch_to_asm+0x33/0x70
[  206.692238][ T7160]  ? __pfx_kthread+0x10/0x10
[  206.692248][ T7160]  ret_from_fork_asm+0x1a/0x30
[  206.692262][ T7160]  </TASK>
[  206.692345][ T7160] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  206.818151][   T24] usb 5-1: Using ep0 maxpacket: 8
[  206.821143][   T24] usb 5-1: config 0 has an invalid interface number: 122 but max is 0
[  206.823534][   T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  206.826389][   T24] usb 5-1: config 0 has no interface number 0
[  206.828599][   T24] usb 5-1: config 0 interface 122 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 8
[  206.831402][   T24] usb 5-1: config 0 interface 122 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 8
[  206.860917][   T24] usb 5-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7
[  206.863541][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  206.865825][   T24] usb 5-1: Product: syz
[  206.867032][   T24] usb 5-1: Manufacturer: syz
[  206.877959][   T24] usb 5-1: SerialNumber: syz
[  206.881416][   T24] usb 5-1: config 0 descriptor??
[  206.883438][ T9642] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  206.889106][ T9652] loop1: detected capacity change from 0 to 128
[  206.899125][ T9652] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  206.903594][ T9652] hpfs: filesystem error: improperly stopped
[  206.906289][ T9652] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  206.911309][ T9652] hpfs: You really don't want any checks? You are crazy...
[  206.914515][ T9652] hpfs: hpfs_map_sector(): read error
[  206.916715][ T9652] hpfs: code page support is disabled
[  206.920197][ T9652] hpfs: hpfs_map_4sectors(): unaligned read
[  206.922552][ T9652] hpfs: hpfs_map_4sectors(): unaligned read
[  206.924991][ T9652] hpfs: filesystem error: unable to find root dir
[  207.094558][   T24] usb 5-1: NFC: intf ffff88810d9b9000 id ffffffff8e908c40
[  207.108842][   T24] usb 5-1: USB disconnect, device number 4
[  207.141436][ T9658] loop3: detected capacity change from 0 to 512
[  207.151102][ T9658] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  207.153652][ T9658] EXT4-fs (loop3): orphan cleanup on readonly fs
[  207.155832][ T9658] Quota error (device loop3): v2_read_file_info: Free block number 1 out of range (1, 6).
[  207.165254][ T9658] EXT4-fs warning (device loop3): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  207.174731][ T9658] EXT4-fs (loop3): Cannot turn on quotas: error -117
[  207.181554][ T9658] EXT4-fs (loop3): 1 truncate cleaned up
[  207.184516][ T9658] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  207.191306][ T9658] EXT4-fs error (device loop3): ext4_lookup:1791: inode #2: comm syz.3.1299: deleted inode referenced: 12
[  207.213551][ T6277] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  207.265904][ T9662] loop3: detected capacity change from 0 to 1024
[  207.406257][ T9670] loop3: detected capacity change from 0 to 512
[  207.412818][ T9670] EXT4-fs (loop3): fragment/cluster size (262144) != block size (2048)
[  207.516970][ T9673] dlm: no locking on control device
[  208.113066][ T6124] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  208.434624][ T6124] usb 5-1: Using ep0 maxpacket: 32
[  209.084913][ T6124] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  209.098452][ T6124] usb 5-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39
[  209.101184][ T6124] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  209.103616][ T6124] usb 5-1: Product: syz
[  209.104836][ T6124] usb 5-1: Manufacturer: syz
[  209.106257][ T6124] usb 5-1: SerialNumber: syz
[  209.114428][ T6124] usb 5-1: config 0 descriptor??
[  209.133681][ T6124] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b
[  209.709195][    C1] Dead loop on virtual device ipvlan1, fix it urgently!
[  209.782106][ T6124] gspca_pac7302: reg_w() failed i: ff v: 01 error -71
[  209.784749][ T6124] gspca_pac7302 5-1:0.0: probe with driver gspca_pac7302 failed with error -71
[  209.826547][ T6124] usb 5-1: USB disconnect, device number 5
[  210.086531][ T9709] loop3: detected capacity change from 0 to 128
[  210.092463][ T9709] EXT4-fs: Ignoring removed nobh option
[  210.110956][ T9709] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  210.116289][ T9709] ext4 filesystem being mounted at /413/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  210.127756][ T9709] fscrypt (loop3, inode 12): Mutually exclusive encryption flags (0x0e)
[  210.151497][ T6277] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  210.601558][ T9739] loop3: detected capacity change from 0 to 8
[  210.637931][ T9739] SQUASHFS error: Failed to read block 0x738: -5
[  210.640682][ T9739] SQUASHFS error: Unable to read metadata cache entry [736]
[  210.947651][   T47] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  211.064293][ T9749] o2cb: This node has not been configured.
[  211.066750][ T9749] o2cb: Cluster check failed. Fix errors before retrying.
[  211.069674][ T9749] (syz.3.1337,9749,1):user_dlm_register:674 ERROR: status = -22
[  211.072522][ T9749] (syz.3.1337,9749,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file1"
[  211.123272][   T47] usb 5-1: config 0 has an invalid interface number: 120 but max is 0
[  211.132696][   T47] usb 5-1: config 0 has no interface number 0
[  211.145697][   T47] usb 5-1: config 0 interface 120 has no altsetting 0
[  211.181362][   T47] usb 5-1: New USB device found, idVendor=13d8, idProduct=0010, bcdDevice=8f.72
[  211.184748][   T47] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  211.187186][   T47] usb 5-1: Product: syz
[  211.189765][   T47] usb 5-1: Manufacturer: syz
[  211.191273][   T47] usb 5-1: SerialNumber: syz
[  211.195591][   T47] usb 5-1: config 0 descriptor??
[  211.410000][   T47] comedi comedi5: could not switch to alternate setting 1
[  211.412163][   T47] usbduxfast 5-1:0.120: driver 'usbduxfast' failed to auto-configure device.
[  211.420200][   T47] usb 5-1: USB disconnect, device number 6
[  211.783805][ T9751] loop3: detected capacity change from 0 to 512
[  211.793501][ T9751] EXT4-fs: inline encryption not supported
[  211.797330][ T9751] EXT4-fs: Ignoring removed orlov option
[  211.807213][ T9751] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8842c01c, mo2=0102]
[  211.812110][ T9751] EXT4-fs (loop3): orphan cleanup on readonly fs
[  211.822657][ T9751] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1338: bg 0: block 248: padding at end of block bitmap is not set
[  211.831253][ T9751] Quota error (device loop3): write_blk: dquota write failed
[  211.835068][ T9751] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[  211.839434][ T9751] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.1338: Failed to acquire dquot type 1
[  211.846349][ T9751] EXT4-fs (loop3): 1 truncate cleaned up
[  211.860803][ T9751] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  211.870123][ T9751] EXT4-fs error (device loop3): ext4_lookup:1791: inode #2: comm syz.3.1338: deleted inode referenced: 12
[  211.892530][ T6277] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  212.193106][ T9762] loop3: detected capacity change from 0 to 4096
[  212.203652][ T9762] ntfs3(loop3): Primary boot: invalid bytes per sector 1792.
[  212.206657][ T9762] ntfs3(loop3): try to read out of volume at offset 0x1ffe00
[  212.276803][ T9764] loop3: detected capacity change from 0 to 128
[  212.293119][ T9756] loop4: detected capacity change from 0 to 40427
[  212.306915][ T9756] F2FS-fs (loop4): invalid crc value
[  212.379620][ T9756] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  212.383568][ T9756] F2FS-fs (loop4): Start checkpoint disabled!
[  212.391512][ T9756] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0
[  212.394633][ T9756] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  212.445776][   T28] bio_check_eod: 27 callbacks suppressed
[  212.445810][   T28] kworker/u9:1: attempt to access beyond end of device
[  212.445810][   T28] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  212.453564][   T28] CPU: 0 UID: 0 PID: 28 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT(full) 
[  212.453584][   T28] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  212.453595][   T28] Workqueue: writeback wb_workfn (flush-7:4)
[  212.453621][   T28] Call Trace:
[  212.453628][   T28]  <TASK>
[  212.453635][   T28]  dump_stack_lvl+0x189/0x250
[  212.453660][   T28]  ? __pfx_dump_stack_lvl+0x10/0x10
[  212.453680][   T28]  ? __pfx_queue_work_on+0x10/0x10
[  212.453695][   T28]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  212.453714][   T28]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  212.453743][   T28]  f2fs_handle_critical_error+0x37c/0x540
[  212.453770][   T28]  f2fs_write_end_io+0x886/0xb60
[  212.453802][   T28]  __submit_merged_bio+0x27a/0x6a0
[  212.453828][   T28]  __submit_merged_write_cond+0x255/0x530
[  212.453855][   T28]  f2fs_write_data_pages+0x261d/0x3000
[  212.453899][   T28]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  212.453927][   T28]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  212.453974][   T28]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  212.453995][   T28]  ? look_up_lock_class+0x74/0x170
[  212.454023][   T28]  ? trace_f2fs_writepages+0x7f/0x200
[  212.454045][   T28]  ? f2fs_write_node_pages+0x478/0x6e0
[  212.454070][   T28]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  212.454100][   T28]  ? __lock_acquire+0xab9/0xd20
[  212.454122][   T28]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  212.454138][   T28]  do_writepages+0x32e/0x550
[  212.454162][   T28]  ? reacquire_held_locks+0x127/0x1d0
[  212.454179][   T28]  ? writeback_sb_inodes+0x384/0x1010
[  212.454206][   T28]  __writeback_single_inode+0x145/0xff0
[  212.454247][   T28]  ? do_raw_spin_unlock+0x4d/0x240
[  212.454270][   T28]  writeback_sb_inodes+0x6c7/0x1010
[  212.454311][   T28]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  212.454367][   T28]  ? rcu_is_watching+0x15/0xb0
[  212.454393][   T28]  wb_writeback+0x43b/0xaf0
[  212.454421][   T28]  ? queue_io+0x311/0x590
[  212.454443][   T28]  ? __pfx_wb_writeback+0x10/0x10
[  212.454470][   T28]  ? _raw_spin_unlock_irq+0x23/0x50
[  212.454492][   T28]  wb_workfn+0x409/0xef0
[  212.454523][   T28]  ? __pfx_wb_workfn+0x10/0x10
[  212.454544][   T28]  ? __lock_acquire+0xab9/0xd20
[  212.454569][   T28]  ? process_scheduled_works+0x9ef/0x17b0
[  212.454592][   T28]  ? _raw_spin_unlock_irq+0x23/0x50
[  212.454608][   T28]  ? process_scheduled_works+0x9ef/0x17b0
[  212.454623][   T28]  ? process_scheduled_works+0x9ef/0x17b0
[  212.454640][   T28]  process_scheduled_works+0xae1/0x17b0
[  212.454682][   T28]  ? __pfx_process_scheduled_works+0x10/0x10
[  212.454714][   T28]  worker_thread+0x8a0/0xda0
[  212.454754][   T28]  kthread+0x711/0x8a0
[  212.454777][   T28]  ? __pfx_worker_thread+0x10/0x10
[  212.454791][   T28]  ? __pfx_kthread+0x10/0x10
[  212.454812][   T28]  ? _raw_spin_unlock_irq+0x23/0x50
[  212.454829][   T28]  ? lockdep_hardirqs_on+0x9c/0x150
[  212.454846][   T28]  ? __pfx_kthread+0x10/0x10
[  212.454865][   T28]  ret_from_fork+0x4bc/0x870
[  212.454884][   T28]  ? __pfx_ret_from_fork+0x10/0x10
[  212.454906][   T28]  ? __switch_to_asm+0x39/0x70
[  212.454919][   T28]  ? __switch_to_asm+0x33/0x70
[  212.454930][   T28]  ? __pfx_kthread+0x10/0x10
[  212.454950][   T28]  ret_from_fork_asm+0x1a/0x30
[  212.454979][   T28]  </TASK>
[  212.454986][   T28] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  212.915933][ T9777] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  213.546894][ T9777] loop3: detected capacity change from 0 to 65536
[  213.604736][ T9777] XFS (loop3): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  213.634424][ T9777] XFS (loop3): Internal error !xlog_verify_bno(log, 0, nbblks) at line 81 of file fs/xfs/xfs_log_recover.c.  Caller xlog_alloc_buffer+0x11f/0x200
[  213.638764][ T9777] CPU: 0 UID: 0 PID: 9777 Comm: syz.3.1349 Not tainted syzkaller #0 PREEMPT(full) 
[  213.638781][ T9777] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  213.638788][ T9777] Call Trace:
[  213.638795][ T9777]  <TASK>
[  213.638802][ T9777]  dump_stack_lvl+0x189/0x250
[  213.638827][ T9777]  ? __pfx_dump_stack_lvl+0x10/0x10
[  213.638848][ T9777]  ? rcu_is_watching+0x15/0xb0
[  213.638861][ T9777]  xfs_corruption_error+0x122/0x170
[  213.638871][ T9777]  ? xlog_alloc_buffer+0x11f/0x200
[  213.638883][ T9777]  xlog_alloc_buffer+0x160/0x200
[  213.638891][ T9777]  ? xlog_alloc_buffer+0x11f/0x200
[  213.638902][ T9777]  xlog_do_recovery_pass+0x4df/0xc30
[  213.638918][ T9777]  ? __pfx_xlog_do_recovery_pass+0x10/0x10
[  213.638935][ T9777]  ? kfree+0x19a/0x6d0
[  213.638948][ T9777]  xlog_verify_head+0x136/0x440
[  213.638962][ T9777]  xlog_find_tail+0x5ca/0x840
[  213.638977][ T9777]  xlog_recover+0x4b/0x3e0
[  213.638988][ T9777]  xfs_log_mount+0x253/0x3e0
[  213.639007][ T9777]  xfs_mountfs+0xe5e/0x22c0
[  213.639023][ T9777]  ? __pfx_xfs_mountfs+0x10/0x10
[  213.639036][ T9777]  ? trace_xfs_inode_timestamp_range+0x84/0x200
[  213.639046][ T9777]  xfs_fs_fill_super+0x11b3/0x1600
[  213.639057][ T9777]  get_tree_bdev_flags+0x40e/0x4d0
[  213.639070][ T9777]  ? __pfx_xfs_fs_fill_super+0x10/0x10
[  213.639078][ T9777]  ? __pfx_get_tree_bdev_flags+0x10/0x10
[  213.639094][ T9777]  vfs_get_tree+0x92/0x2b0
[  213.639106][ T9777]  do_new_mount+0x302/0xa10
[  213.639116][ T9777]  ? apparmor_capable+0x137/0x1b0
[  213.639148][ T9777]  ? __pfx_do_new_mount+0x10/0x10
[  213.639162][ T9777]  ? ns_capable+0x8a/0xf0
[  213.639172][ T9777]  ? kmem_cache_free+0x19b/0x690
[  213.639189][ T9777]  __se_sys_mount+0x313/0x410
[  213.639200][ T9777]  ? __pfx___se_sys_mount+0x10/0x10
[  213.639209][ T9777]  ? do_syscall_64+0xbe/0xfa0
[  213.639218][ T9777]  ? __x64_sys_mount+0x20/0xc0
[  213.639227][ T9777]  do_syscall_64+0xfa/0xfa0
[  213.639236][ T9777]  ? lockdep_hardirqs_on+0x9c/0x150
[  213.639247][ T9777]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  213.639255][ T9777]  ? exc_page_fault+0xab/0x100
[  213.639266][ T9777]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  213.639274][ T9777] RIP: 0033:0x7f240699076a
[  213.639283][ T9777] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  213.639289][ T9777] RSP: 002b:00007f24077e8e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  213.639298][ T9777] RAX: ffffffffffffffda RBX: 00007f24077e8ef0 RCX: 00007f240699076a
[  213.639304][ T9777] RDX: 0000200000000800 RSI: 0000200000000000 RDI: 00007f24077e8eb0
[  213.639310][ T9777] RBP: 0000200000000800 R08: 00007f24077e8ef0 R09: 0000000003000010
[  213.639315][ T9777] R10: 0000000003000010 R11: 0000000000000246 R12: 0000200000000000
[  213.639320][ T9777] R13: 00007f24077e8eb0 R14: 000000000000b9aa R15: 0000200000000040
[  213.639334][ T9777]  </TASK>
[  213.639338][ T9777] XFS (loop3): Corruption detected. Unmount and run xfs_repair
[  213.684566][ T9801] loop4: detected capacity change from 0 to 164
[  213.685412][ T9777] XFS (loop3): Invalid block length (0x20040) for buffer
[  213.690292][ T9801] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  213.691509][ T9777] XFS (loop3): failed to locate log tail
[  213.742187][ T9777] XFS (loop3): log mount/recovery failed: error -12
[  213.745886][ T9777] XFS (loop3): log mount failed
[  214.173271][ T9807] loop4: detected capacity change from 0 to 32768
[  214.186319][ T9807] MetaData crosses page boundary!!
[  214.191147][ T9807] lblock = 621d00, size  = 28672
[  214.193130][ T9807] CPU: 0 UID: 0 PID: 9807 Comm: syz.4.1359 Not tainted syzkaller #0 PREEMPT(full) 
[  214.193146][ T9807] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  214.193153][ T9807] Call Trace:
[  214.193159][ T9807]  <TASK>
[  214.193165][ T9807]  dump_stack_lvl+0x189/0x250
[  214.193189][ T9807]  ? __pfx_dump_stack_lvl+0x10/0x10
[  214.193214][ T9807]  ? __pfx__printk+0x10/0x10
[  214.193236][ T9807]  __get_metapage+0x9ea/0xde0
[  214.193262][ T9807]  dtSearch+0x591/0x21b0
[  214.193287][ T9807]  ? __kmalloc_noprof+0x432/0x7f0
[  214.193321][ T9807]  jfs_lookup+0x155/0x380
[  214.193345][ T9807]  ? __pfx_jfs_lookup+0x10/0x10
[  214.193384][ T9807]  ? do_raw_spin_unlock+0x4d/0x240
[  214.193406][ T9807]  ? _raw_spin_unlock+0x28/0x50
[  214.193423][ T9807]  ? d_alloc+0x144/0x190
[  214.193441][ T9807]  lookup_one_qstr_excl+0x131/0x360
[  214.193461][ T9807]  filename_create+0x224/0x3c0
[  214.193483][ T9807]  ? __pfx_filename_create+0x10/0x10
[  214.193510][ T9807]  do_mknodat+0x184/0x4d0
[  214.193530][ T9807]  ? __pfx_do_mknodat+0x10/0x10
[  214.193548][ T9807]  ? getname_flags+0x1e5/0x540
[  214.193565][ T9807]  __x64_sys_mknod+0x8c/0xa0
[  214.193585][ T9807]  do_syscall_64+0xfa/0xfa0
[  214.193602][ T9807]  ? lockdep_hardirqs_on+0x9c/0x150
[  214.193620][ T9807]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  214.193634][ T9807]  ? exc_page_fault+0xab/0x100
[  214.193654][ T9807]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  214.193666][ T9807] RIP: 0033:0x7fedcbf8efc9
[  214.193681][ T9807] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  214.193694][ T9807] RSP: 002b:00007fedca1f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000085
[  214.193711][ T9807] RAX: ffffffffffffffda RBX: 00007fedcc1e5fa0 RCX: 00007fedcbf8efc9
[  214.193721][ T9807] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000200000000080
[  214.193729][ T9807] RBP: 00007fedcc011f91 R08: 0000000000000000 R09: 0000000000000000
[  214.193735][ T9807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  214.193743][ T9807] R13: 00007fedcc1e6038 R14: 00007fedcc1e5fa0 R15: 00007fff1a67c6d8
[  214.193766][ T9807]  </TASK>
[  214.193772][ T9807] bread failed!
[  214.276410][ T9807] jfs_lookup: dtSearch returned -5
[  214.366926][ T9811] loop3: detected capacity change from 0 to 32768
[  214.388297][ T9811] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  214.402990][ T9811] XFS (loop3): Ending clean mount
[  214.443343][ T6277] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  214.816323][ T9821] loop3: detected capacity change from 0 to 32768
[  214.839698][ T9821] ocfs2: Slot 0 on device (7,3) was already allocated to this node!
[  214.863811][ T9821] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  214.878915][ T5826] (kworker/u8:2,5826,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=312, inode=13845347915746889, rec_len=25793, name_len=214
[  214.935678][ T6277] ocfs2: Unmounting device (7,3) on (node local)
[  215.100254][ T9830] loop3: detected capacity change from 0 to 1024
[  215.146756][ T9830] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  215.171168][ T6277] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  215.707062][ T9828] loop4: detected capacity change from 0 to 131072
[  215.711718][ T9828] F2FS-fs (loop4): invalid crc value
[  215.742806][ T9828] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  215.749323][ T9828] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[  216.587577][ T5864] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  216.705816][ T9853] loop1: detected capacity change from 0 to 4096
[  216.748653][ T5864] usb 5-1: Using ep0 maxpacket: 16
[  216.753321][ T5864] usb 5-1: device descriptor read/all, error -71
[  216.834123][ T9860] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1375'.
[  217.001220][ T9872] loop1: detected capacity change from 0 to 512
[  217.004370][ T9872] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  217.011569][ T9872] EXT4-fs (loop1): 1 truncate cleaned up
[  217.014557][ T9872] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  217.021848][ T9872] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.1381: bg 0: block 4: invalid block bitmap
[  217.042212][ T5812] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  217.097725][   T24] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  217.259610][   T24] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  217.263531][   T24] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  217.277516][   T24] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  217.280712][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  217.286783][ T9862] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  217.292410][   T24] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  217.307761][   T10] usb 2-1: new full-speed USB device number 24 using dummy_hcd
[  217.455193][ T9881] loop8: detected capacity change from 0 to 7
[  217.462004][ T9881] Dev loop8: unable to read RDB block 7
[  217.463633][ T9881]  loop8: unable to read partition table
[  217.465347][ T9881] loop8: partition table beyond EOD, truncated
[  217.467119][ T9881] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5)
[  217.476340][   T10] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 254, changing to 4
[  217.482709][   T10] usb 2-1: config 1 interface 1 has no altsetting 0
[  217.486616][ T9881] Dev loop8: unable to read RDB block 7
[  217.488641][   T10] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  217.491723][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  217.494660][   T10] usb 2-1: Product: syz
[  217.496357][ T9881]  loop8: unable to read partition table
[  217.498507][   T10] usb 2-1: Manufacturer: syz
[  217.500193][   T10] usb 2-1: SerialNumber: syz
[  217.502135][ T9881] loop8: partition table beyond EOD, truncated
[  217.519818][   T24] usb 4-1: USB disconnect, device number 21
[  217.717878][   T10] usb 2-1: 2:1: invalid format type 0x1002 is detected, processed as PCM
[  217.720306][   T10] usb 2-1: 2:1 : sample bitwidth 66 in over sample bytes 4
[  217.722378][   T10] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc
[  217.731762][   T10] usb 2-1: USB disconnect, device number 24
[  218.303723][ T9896] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1391'.
[  218.331807][ T9896] netlink: 'syz.1.1391': attribute type 1 has an invalid length.
[  218.699815][ T9911] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1398'.
[  218.717025][ T9911] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1398'.
[  218.722829][   T12] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  218.726237][   T12] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  218.752921][   T12] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  218.756869][   T12] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  219.105997][ T9942] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  219.109268][ T9942] IPv6: NLM_F_CREATE should be set when creating new route
[  219.111880][ T9942] IPv6: NLM_F_CREATE should be set when creating new route
[  219.114485][ T9942] IPv6: NLM_F_CREATE should be set when creating new route
[  219.277502][   T24] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  219.429741][   T24] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e
[  219.437619][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  219.455583][   T24] usb 5-1: config 0 descriptor??
[  219.605418][ T9956] loop1: detected capacity change from 0 to 128
[  220.002207][   T24] ath6kl: Unsupported hardware version: 0x0
[  220.019335][   T24] ath6kl: Failed to init ath6kl core: -22
[  220.022022][   T24] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -22
[  220.067824][   T10] usb 5-1: USB disconnect, device number 9
[  220.174232][ T9962] kernel profiling enabled (shift: 34)
[  220.176699][ T9962] profiling shift: 34 too large
[  220.733996][ T9968] netlink: 'syz.4.1423': attribute type 10 has an invalid length.
[  220.748644][ T9968] batman_adv: batadv0: Adding interface: wlan0
[  220.750616][ T9968] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  220.764959][ T9968] batman_adv: batadv0: Interface activated: wlan0
[  220.873512][ T9975] loop3: detected capacity change from 0 to 2048
[  220.882386][ T9975] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  220.885486][ T9975] UDF-fs: error (device loop3): udf_read_inode: (ino 1408) failed !bh
[  220.888170][ T9975] UDF-fs: error (device loop3): udf_fill_super: Error in udf_iget, block=96, partition=0
[  221.049811][ T9990] loop4: detected capacity change from 0 to 512
[  221.068752][ T9990] EXT4-fs (loop4): orphan cleanup on readonly fs
[  221.071772][ T9990] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.1433: bad orphan inode 13
[  221.075881][ T9990] ext4_test_bit(bit=12, block=18) = 1
[  221.079060][ T9990] is_bad_inode(inode)=0
[  221.080668][ T9990] NEXT_ORPHAN(inode)=2130706432
[  221.082469][ T9990] max_ino=32
[  221.083789][ T9990] i_nlink=1
[  221.085960][ T9990] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  221.094976][ T9999] random: crng reseeded on system resumption
[  221.112135][ T9990] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended
[  221.142024][ T9990] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1433: bg 0: block 248: padding at end of block bitmap is not set
[  221.152932][ T9990] Quota error (device loop4): write_blk: dquota write failed
[  221.155934][ T9990] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  221.161204][ T9990] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.1433: Failed to acquire dquot type 1
[  221.178372][ T9990] EXT4-fs warning (device loop4): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  221.190934][ T9990] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended
[  221.210202][ T9990] Quota error (device loop4): write_blk: dquota write failed
[  221.212755][ T9990] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota
[  221.215839][ T9990] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.1433: Failed to acquire dquot type 1
[  221.227735][ T9990] EXT4-fs warning (device loop4): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-28, ino=4). Please run e2fsck to fix.
[  221.275294][ T8958] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  221.377877][   T10] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  221.767547][   T10] usb 4-1: Using ep0 maxpacket: 8
[  221.770816][   T10] usb 4-1: config 162 has an invalid interface number: 97 but max is 0
[  221.773176][   T10] usb 4-1: config 162 has no interface number 0
[  221.774978][   T10] usb 4-1: config 162 interface 97 has no altsetting 0
[  221.780157][   T10] usb 4-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=e1.3b
[  221.782891][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  221.785400][   T10] usb 4-1: Product: syz
[  221.786649][   T10] usb 4-1: Manufacturer: syz
[  221.789552][   T10] usb 4-1: SerialNumber: syz
[  222.004123][   T10] metro_usb 4-1:162.97: Metrologic USB to Serial converter detected
[  222.007590][ T5877] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  222.008297][   T10] usb 4-1: Metrologic USB to Serial converter now attached to ttyUSB0
[  222.018240][   T10] usb 4-1: USB disconnect, device number 22
[  222.023078][   T10] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0
[  222.026875][   T10] metro_usb 4-1:162.97: device disconnected
[  222.171128][ T5877] usb 5-1: Using ep0 maxpacket: 8
[  222.176944][ T5877] usb 5-1: unable to get BOS descriptor or descriptor too short
[  222.187366][ T5877] usb 5-1: config 2 has an invalid interface number: 153 but max is 0
[  222.190550][ T5877] usb 5-1: config 2 has no interface number 0
[  222.192811][ T5877] usb 5-1: config 2 interface 153 has no altsetting 0
[  222.197318][ T5877] usb 5-1: New USB device found, idVendor=1199, idProduct=683b, bcdDevice=95.ac
[  222.200798][ T5877] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  222.203718][ T5877] usb 5-1: Product: syz
[  222.205250][ T5877] usb 5-1: Manufacturer: syz
[  222.206928][ T5877] usb 5-1: SerialNumber: syz
[  222.418431][ T5877] hub 5-1:2.153: bad descriptor, ignoring hub
[  222.420660][ T5877] hub 5-1:2.153: probe with driver hub failed with error -5
[  222.424331][ T5877] sierra 5-1:2.153: Sierra USB modem converter detected
[  222.428338][   T47] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  222.463105][ T5877] usb 5-1: USB disconnect, device number 10
[  222.465935][ T5877] sierra 5-1:2.153: device disconnected
[  222.587557][   T47] usb 2-1: Using ep0 maxpacket: 8
[  222.595707][   T47] usb 2-1: config 1 has an invalid interface number: 44 but max is 0
[  222.598781][   T47] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  222.602437][   T47] usb 2-1: config 1 has no interface number 0
[  222.604675][   T47] usb 2-1: config 1 interface 44 altsetting 2 endpoint 0x6 has invalid maxpacket 512, setting to 64
[  222.608576][   T47] usb 2-1: config 1 interface 44 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 15
[  222.613188][   T47] usb 2-1: config 1 interface 44 has no altsetting 0
[  222.620918][   T47] usb 2-1: New USB device found, idVendor=05ef, idProduct=8884, bcdDevice=a3.c1
[  222.624058][   T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  222.629090][   T47] usb 2-1: Product: syz
[  222.630684][   T47] usb 2-1: Manufacturer: syz
[  222.632389][   T47] usb 2-1: SerialNumber: syz
[  222.837517][   T10] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  222.848515][ T5864] usb 2-1: USB disconnect, device number 25
[  222.990378][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  222.993875][T10032] loop4: detected capacity change from 0 to 16
[  222.994230][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  222.998400][T10032] erofs (device loop4): mounted with root inode @ nid 36.
[  223.000296][   T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  223.008303][   T10] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  223.011786][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  223.016865][   T10] usb 4-1: config 0 descriptor??
[  223.639589][   T10] plantronics 0003:047F:FFFF.000B: reserved main item tag 0xe
[  223.642909][   T10] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0
[  223.649185][   T10] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  223.923561][   T10] usb 4-1: USB disconnect, device number 23
[  223.932508][T10042] input: syz0 as /devices/virtual/input/input17
[  224.027799][   T47] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  224.177505][   T47] usb 2-1: Using ep0 maxpacket: 8
[  224.249202][   T47] usb 2-1: config 11 has an invalid interface number: 61 but max is 0
[  224.252489][   T47] usb 2-1: config 11 has no interface number 0
[  224.254682][   T47] usb 2-1: config 11 interface 61 has no altsetting 0
[  224.260278][   T47] usb 2-1: New USB device found, idVendor=0545, idProduct=800c, bcdDevice= 3.0a
[  224.263746][   T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  224.268464][   T47] usb 2-1: Product: syz
[  224.270119][   T47] usb 2-1: Manufacturer: syz
[  224.271854][   T47] usb 2-1: SerialNumber: syz
[  224.491177][   T47] usb 2-1: USB disconnect, device number 26
[  225.081964][T10060] loop1: detected capacity change from 0 to 1024
[  225.086726][T10060] EXT4-fs: Ignoring removed nomblk_io_submit option
[  225.103185][T10060] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  225.125410][ T5812] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  225.164643][T10065] loop1: detected capacity change from 0 to 1024
[  225.168414][T10065] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  225.182916][T10065] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  225.215728][ T5812] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  225.248132][   T10] usb 5-1: new full-speed USB device number 11 using dummy_hcd
[  225.272219][T10071] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1464'.
[  225.398896][   T10] usb 5-1: config 0 has an invalid interface number: 41 but max is 0
[  225.401314][   T10] usb 5-1: config 0 has no interface number 0
[  225.403006][   T10] usb 5-1: config 0 interface 41 has no altsetting 0
[  225.407546][   T10] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  225.410323][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  225.412530][   T10] usb 5-1: Product: syz
[  225.413821][   T10] usb 5-1: Manufacturer: syz
[  225.415157][   T10] usb 5-1: SerialNumber: syz
[  225.427893][   T10] usb 5-1: config 0 descriptor??
[  225.493940][T10084] ptrace attach of "/syz-executor exec"[6277] was attempted by ""[10084]
[  225.631714][T10089] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  226.354126][   T10] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0
[  226.411797][T10102] loop1: detected capacity change from 0 to 4096
[  226.422421][T10102] NILFS (loop1): invalid segment: Checksum error in segment payload
[  226.424761][T10102] NILFS (loop1): trying rollback from an earlier position
[  226.435094][T10102] NILFS (loop1): recovery complete
[  226.437876][T10103] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  226.613433][T10109] loop1: detected capacity change from 0 to 16
[  226.619602][T10109] erofs (device loop1): mounted with root inode @ nid 36.
[  226.627734][   T33] audit: type=1800 audit(1762394268.879:74): pid=10109 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1480" name="file1" dev="loop1" ino=86 res=0 errno=0
[  227.147173][T10122] netlink: 'syz.3.1484': attribute type 3 has an invalid length.
[  227.640509][   T10] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Error reading RX_CTL register:ffffffb9
[  227.643918][   T10] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9
[  227.647528][   T10] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -71
[  227.651880][   T10] usb 5-1: USB disconnect, device number 11
[  227.933030][T10137] loop3: detected capacity change from 0 to 2048
[  227.936028][T10137] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities
[  228.076999][T10140] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd
[  228.187242][T10154] input: syz1 as /devices/virtual/input/input18
[  228.252087][T10156] loop3: detected capacity change from 0 to 4096
[  228.258515][T10156] EXT4-fs (loop3): Test dummy encryption mode enabled
[  228.274262][T10156] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[  228.280069][T10156] System zones: 0-5
[  228.300156][T10156] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  228.338725][T10168] loop1: detected capacity change from 0 to 512
[  228.343103][T10168] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  228.596773][   T33] audit: type=1326 audit(1762394270.789:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10155 comm="syz.3.1499" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f240698efc9 code=0x7ffc0000
[  228.635558][   T33] audit: type=1326 audit(1762394270.789:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10155 comm="syz.3.1499" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f240698efc9 code=0x7ffc0000
[  228.689444][   T33] audit: type=1326 audit(1762394270.789:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10155 comm="syz.3.1499" exe="/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7f240698efc9 code=0x7ffc0000
[  228.728589][   T33] audit: type=1326 audit(1762394270.789:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10155 comm="syz.3.1499" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f240698efc9 code=0x7ffc0000
[  228.781580][   T33] audit: type=1326 audit(1762394270.799:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10155 comm="syz.3.1499" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f240698efc9 code=0x7ffc0000
[  228.814690][   T33] audit: type=1326 audit(1762394270.799:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10155 comm="syz.3.1499" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f240698efc9 code=0x7ffc0000
[  228.825478][   T33] audit: type=1326 audit(1762394270.799:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10155 comm="syz.3.1499" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f240698efc9 code=0x7ffc0000
[  228.836349][   T33] audit: type=1326 audit(1762394270.799:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10155 comm="syz.3.1499" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f240698efc9 code=0x7ffc0000
[  228.850164][   T33] audit: type=1326 audit(1762394270.799:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10155 comm="syz.3.1499" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f240698efc9 code=0x7ffc0000
[  228.950799][T10195] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1512'.
[  229.123013][ T6277] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  229.312423][T10211] loop1: detected capacity change from 0 to 256
[  229.356568][T10203] loop4: detected capacity change from 0 to 32768
[  229.364872][T10203] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  229.397252][ T8958] ocfs2: Unmounting device (7,4) on (node local)
[  229.498417][T10223] loop1: detected capacity change from 0 to 1024
[  229.510866][T10223] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  229.526672][T10223] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: comm syz.1.1525: inode #1163684815: comm syz.1.1525: iget: illegal inode #
[  229.532820][T10223] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.1525: error while reading EA inode 1163684815 err=-117
[  229.547555][   T10] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  229.585502][ T5812] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  229.699583][T10236] loop1: detected capacity change from 0 to 1024
[  229.702717][T10236] EXT4-fs: Ignoring removed bh option
[  229.703334][   T10] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  229.705499][T10236] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  229.711994][   T10] usb 4-1: config 220 has 1 interface, different from the descriptor's value: 3
[  229.720448][   T10] usb 4-1: config 220 interface 0 has no altsetting 0
[  229.723225][T10236] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  229.726156][   T10] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  229.731201][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  229.733816][   T10] usb 4-1: Product: syz
[  229.735311][   T10] usb 4-1: Manufacturer: syz
[  229.736697][   T10] usb 4-1: SerialNumber: syz
[  229.755881][T10236] EXT4-fs error (device loop1): ext4_check_all_de:659: inode #12: block 7: comm syz.1.1529: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0
[  229.767965][T10236] EXT4-fs (loop1): Remounting filesystem read-only
[  229.772937][T10242] loop4: detected capacity change from 0 to 128
[  229.779462][T10242] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  229.783172][T10242] ext4 filesystem being mounted at /164/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  229.802664][ T5812] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  229.826066][ T8958] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  229.945614][   T10] uvcvideo 4-1:220.0: probe with driver uvcvideo failed with error -22
[  229.949800][   T10] usb 4-1: USB disconnect, device number 24
[  230.046140][T10260] loop1: detected capacity change from 0 to 512
[  230.052658][T10260] 
[  230.053427][T10260] ======================================================
[  230.055442][T10260] WARNING: possible circular locking dependency detected
[  230.057456][T10260] syzkaller #0 Not tainted
[  230.059659][T10260] ------------------------------------------------------
[  230.063063][T10260] syz.1.1539/10260 is trying to acquire lock:
[  230.065280][T10260] ffff8881bb3beb98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1cc/0x350
[  230.068903][T10260] 
[  230.068903][T10260] but task is already holding lock:
[  230.071591][T10260] ffff8881aedf43b8 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x3eb/0x700
[  230.075216][T10260] 
[  230.075216][T10260] which lock already depends on the new lock.
[  230.075216][T10260] 
[  230.079052][T10260] 
[  230.079052][T10260] the existing dependency chain (in reverse order) is:
[  230.082365][T10260] 
[  230.082365][T10260] -> #1 (&ei->xattr_sem){++++}-{4:4}:
[  230.085203][T10260]        lock_acquire+0x120/0x360
[  230.087104][T10260]        down_write+0x96/0x1f0
[  230.088904][T10260]        ext4_destroy_inline_data+0x28/0xe0
[  230.091136][T10260]        ext4_do_writepages+0x526/0x4610
[  230.093266][T10260]        ext4_writepages+0x205/0x350
[  230.095283][T10260]        do_writepages+0x32e/0x550
[  230.097219][T10260]        file_write_and_wait_range+0x23e/0x340
[  230.099602][T10260]        generic_buffers_fsync_noflush+0x6c/0x180
[  230.102044][T10260]        ext4_sync_file+0x332/0xb20
[  230.103939][T10260]        ext4_buffered_write_iter+0x2ca/0x3a0
[  230.106213][T10260]        ext4_file_write_iter+0x298/0x1bc0
[  230.108502][T10260]        do_iter_readv_writev+0x623/0x8c0
[  230.110665][T10260]        vfs_writev+0x31a/0x960
[  230.112494][T10260]        __se_sys_pwritev2+0x179/0x290
[  230.114580][T10260]        do_syscall_64+0xfa/0xfa0
[  230.116521][T10260]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  230.118969][T10260] 
[  230.118969][T10260] -> #0 (&sbi->s_writepages_rwsem){++++}-{0:0}:
[  230.122109][T10260]        validate_chain+0xb9b/0x2140
[  230.124115][T10260]        __lock_acquire+0xab9/0xd20
[  230.126107][T10260]        lock_acquire+0x120/0x360
[  230.128030][T10260]        percpu_down_read_internal+0x48/0x1c0
[  230.130313][T10260]        ext4_writepages+0x1cc/0x350
[  230.132298][T10260]        do_writepages+0x32e/0x550
[  230.134147][T10260]        __writeback_single_inode+0x145/0xff0
[  230.136381][T10260]        writeback_single_inode+0x1f9/0x6a0
[  230.138596][T10260]        write_inode_now+0x160/0x1d0
[  230.140625][T10260]        iput+0x830/0xc50
[  230.142282][T10260]        ext4_xattr_block_set+0x1fce/0x2ac0
[  230.144463][T10260]        ext4_expand_extra_isize_ea+0x12da/0x1ea0
[  230.146796][T10260]        __ext4_expand_extra_isize+0x30d/0x400
[  230.149039][T10260]        __ext4_mark_inode_dirty+0x46c/0x700
[  230.151276][T10260]        ext4_evict_inode+0x80d/0xee0
[  230.153306][T10260]        evict+0x504/0x9c0
[  230.154948][T10260]        ext4_orphan_cleanup+0xc20/0x1460
[  230.157104][T10260]        ext4_fill_super+0x5920/0x61e0
[  230.159162][T10260]        get_tree_bdev_flags+0x40e/0x4d0
[  230.161236][T10260]        vfs_get_tree+0x92/0x2b0
[  230.163039][T10260]        do_new_mount+0x302/0xa10
[  230.164886][T10260]        __se_sys_mount+0x313/0x410
[  230.166750][T10260]        do_syscall_64+0xfa/0xfa0
[  230.168580][T10260]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  230.170912][T10260] 
[  230.170912][T10260] other info that might help us debug this:
[  230.170912][T10260] 
[  230.174554][T10260]  Possible unsafe locking scenario:
[  230.174554][T10260] 
[  230.177205][T10260]        CPU0                    CPU1
[  230.179137][T10260]        ----                    ----
[  230.181125][T10260]   lock(&ei->xattr_sem);
[  230.182690][T10260]                                lock(&sbi->s_writepages_rwsem);
[  230.185411][T10260]                                lock(&ei->xattr_sem);
[  230.187844][T10260]   rlock(&sbi->s_writepages_rwsem);
[  230.189747][T10260] 
[  230.189747][T10260]  *** DEADLOCK ***
[  230.189747][T10260] 
[  230.192630][T10260] 3 locks held by syz.1.1539/10260:
[  230.194468][T10260]  #0: ffff8881bb3ba0e0 (&type->s_umount_key#27/1){+.+.}-{4:4}, at: alloc_super+0x1bb/0x930
[  230.198106][T10260]  #1: ffff8881bb3ba610 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x2d6/0xee0
[  230.201398][T10260]  #2: ffff8881aedf43b8 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x3eb/0x700
[  230.205059][T10260] 
[  230.205059][T10260] stack backtrace:
[  230.207153][T10260] CPU: 1 UID: 0 PID: 10260 Comm: syz.1.1539 Not tainted syzkaller #0 PREEMPT(full) 
[  230.207172][T10260] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  230.207183][T10260] Call Trace:
[  230.207191][T10260]  <TASK>
[  230.207198][T10260]  dump_stack_lvl+0x189/0x250
[  230.207222][T10260]  ? __pfx_dump_stack_lvl+0x10/0x10
[  230.207241][T10260]  ? __pfx__printk+0x10/0x10
[  230.207255][T10260]  ? print_lock_name+0xde/0x100
[  230.207270][T10260]  print_circular_bug+0x2ee/0x310
[  230.207289][T10260]  check_noncircular+0x134/0x160
[  230.207306][T10260]  validate_chain+0xb9b/0x2140
[  230.207326][T10260]  ? look_up_lock_class+0x74/0x170
[  230.207344][T10260]  ? register_lock_class+0x51/0x320
[  230.207359][T10260]  __lock_acquire+0xab9/0xd20
[  230.207374][T10260]  ? ext4_writepages+0x1cc/0x350
[  230.207389][T10260]  lock_acquire+0x120/0x360
[  230.207401][T10260]  ? ext4_writepages+0x1cc/0x350
[  230.207422][T10260]  percpu_down_read_internal+0x48/0x1c0
[  230.207436][T10260]  ? ext4_writepages+0x1cc/0x350
[  230.207452][T10260]  ext4_writepages+0x1cc/0x350
[  230.207469][T10260]  ? __pfx_ext4_writepages+0x10/0x10
[  230.207485][T10260]  ? do_raw_spin_lock+0x121/0x290
[  230.207506][T10260]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  230.207523][T10260]  ? lockdep_hardirqs_on+0x9c/0x150
[  230.207541][T10260]  ? __pfx_ext4_writepages+0x10/0x10
[  230.207557][T10260]  do_writepages+0x32e/0x550
[  230.207578][T10260]  ? do_raw_spin_lock+0x121/0x290
[  230.207597][T10260]  __writeback_single_inode+0x145/0xff0
[  230.207618][T10260]  ? do_raw_spin_unlock+0x4d/0x240
[  230.207637][T10260]  writeback_single_inode+0x1f9/0x6a0
[  230.207654][T10260]  write_inode_now+0x160/0x1d0
[  230.207671][T10260]  ? __pfx_write_inode_now+0x10/0x10
[  230.207708][T10260]  ? do_raw_spin_unlock+0x4d/0x240
[  230.207730][T10260]  iput+0x830/0xc50
[  230.207746][T10260]  ext4_xattr_block_set+0x1fce/0x2ac0
[  230.207773][T10260]  ? __pfx_ext4_xattr_block_set+0x10/0x10
[  230.207788][T10260]  ? ext4_xattr_block_find+0x2d4/0x350
[  230.207804][T10260]  ext4_expand_extra_isize_ea+0x12da/0x1ea0
[  230.207831][T10260]  __ext4_expand_extra_isize+0x30d/0x400
[  230.207849][T10260]  __ext4_mark_inode_dirty+0x46c/0x700
[  230.207895][T10260]  ext4_evict_inode+0x80d/0xee0
[  230.207919][T10260]  ? __pfx_ext4_evict_inode+0x10/0x10
[  230.207939][T10260]  ? do_raw_spin_unlock+0x4d/0x240
[  230.207956][T10260]  ? __pfx_ext4_evict_inode+0x10/0x10
[  230.207974][T10260]  evict+0x504/0x9c0
[  230.207993][T10260]  ? __pfx_evict+0x10/0x10
[  230.208008][T10260]  ? do_raw_spin_unlock+0x4d/0x240
[  230.208026][T10260]  ? _raw_spin_unlock+0x28/0x50
[  230.208041][T10260]  ? iput+0x946/0xc50
[  230.208056][T10260]  ext4_orphan_cleanup+0xc20/0x1460
[  230.208078][T10260]  ? __pfx_ext4_orphan_cleanup+0x10/0x10
[  230.208096][T10260]  ? ext4_register_li_request+0x259/0x720
[  230.208114][T10260]  ? errseq_check_and_advance+0x66/0x120
[  230.208133][T10260]  ext4_fill_super+0x5920/0x61e0
[  230.208155][T10260]  ? __pfx_ext4_fill_super+0x10/0x10
[  230.208170][T10260]  ? snprintf+0xda/0x120
[  230.208186][T10260]  ? __pfx_snprintf+0x10/0x10
[  230.208198][T10260]  ? set_blocksize+0x21e/0x500
[  230.208219][T10260]  ? sb_set_blocksize+0x104/0x180
[  230.208238][T10260]  ? setup_bdev_super+0x4c1/0x5b0
[  230.208259][T10260]  get_tree_bdev_flags+0x40e/0x4d0
[  230.208278][T10260]  ? __pfx_ext4_fill_super+0x10/0x10
[  230.208293][T10260]  ? __pfx_get_tree_bdev_flags+0x10/0x10
[  230.208316][T10260]  vfs_get_tree+0x92/0x2b0
[  230.208336][T10260]  do_new_mount+0x302/0xa10
[  230.208354][T10260]  ? apparmor_capable+0x137/0x1b0
[  230.208370][T10260]  ? __pfx_do_new_mount+0x10/0x10
[  230.208389][T10260]  ? ns_capable+0x8a/0xf0
[  230.208403][T10260]  ? kmem_cache_free+0x19b/0x690
[  230.208425][T10260]  __se_sys_mount+0x313/0x410
[  230.208439][T10260]  ? __pfx___se_sys_mount+0x10/0x10
[  230.208452][T10260]  ? do_syscall_64+0xbe/0xfa0
[  230.208470][T10260]  ? __x64_sys_mount+0x20/0xc0
[  230.208482][T10260]  do_syscall_64+0xfa/0xfa0
[  230.208499][T10260]  ? lockdep_hardirqs_on+0x9c/0x150
[  230.208515][T10260]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  230.208530][T10260]  ? exc_page_fault+0xab/0x100
[  230.208548][T10260]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  230.208562][T10260] RIP: 0033:0x7f779f79076a
[  230.208576][T10260] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  230.208590][T10260] RSP: 002b:00007f77a0571e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  230.208605][T10260] RAX: ffffffffffffffda RBX: 00007f77a0571ef0 RCX: 00007f779f79076a
[  230.208616][T10260] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f77a0571eb0
[  230.208627][T10260] RBP: 0000200000000180 R08: 00007f77a0571ef0 R09: 0000000000800700
[  230.208636][T10260] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0
[  230.208647][T10260] R13: 00007f77a0571eb0 R14: 000000000000046f R15: 000000000000002c
[  230.208663][T10260]  </TASK>
[  230.208782][  T974] usb 5-1: new full-speed USB device number 12 using dummy_hcd
[  230.221659][T10260] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #11: comm syz.1.1539: iget: bad extra_isize 90 (inode size 256)
[  230.369177][  T974] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 130, using maximum allowed: 30
[  230.371157][T10260] EXT4-fs (loop1): Remounting filesystem read-only
[  230.373606][  T974] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  230.376617][T10260] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -30)
[  230.379591][  T974] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  230.382540][T10260] EXT4-fs (loop1): 1 orphan inode deleted
[  230.384938][  T974] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 130
[  230.386606][T10260] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  230.388433][  T974] usb 5-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00
[  230.420908][  T974] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  230.421478][ T5812] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  230.424597][  T974] usb 5-1: config 0 descriptor??
[  230.430077][T10250] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  230.839098][  T974] logitech 0003:046D:C294.000C: unknown main item tag 0x0
[  230.842320][  T974] logitech 0003:046D:C294.000C: hidraw0: USB HID v0.09 Device [HID 046d:c294] on usb-dummy_hcd.4-1/input0
[  230.846084][  T974] logitech 0003:046D:C294.000C: no inputs found
[  231.069313][  T974] usb 5-1: USB disconnect, device number 12

VM DIAGNOSIS:
01:57:52  Registers:
info registers vcpu 0

CPU#0
RAX=c565645cbc931700 RBX=ffffffff81967bf7 RCX=c565645cbc931700 RDX=0000000000000001
RSI=ffffffff8bbf0840 RDI=ffffffff81967bf7 RBP=ffffffff8dc07ea8 RSP=ffffffff8dc07d80
R8 =ffff888121232fdb R9 =1ffff110242465fb R10=dffffc0000000000 R11=ffffed10242465fc
R12=ffffffff8f7cdc70 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1b92a40
RIP=ffffffff8b464dd3 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88818eb3d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c395357 CR3=00000001702c0000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=7712c53e93b9f1e8 728370bf3cb3486e
XMM06=63e772d7f3a22482 dabb339f3c035440 XMM07=bd0dad416e16bee6 46815929601aad29
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f2406a1315a
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000000002d RBX=000000000000002d RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000005ff6 RDI=0000000000005ff7 RBP=00000000000003f8 RSP=ffffc90005f2e270
R8 =ffff8881094f8237 R9 =1ffff1102129f046 R10=dffffc0000000000 R11=ffffffff8514d8e0
R12=dffffc0000000000 R13=ffffffff997d7929 R14=ffffffff99aeaf20 R15=0000000000000000
RIP=ffffffff8514d95c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f77a05726c0 ffffffff 00c00000
GS =0000 ffff8882a9f3d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f779f7736a0 CR3=000000017364e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ffffffffffffffff ffffffffffff0000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=ffffffffffffffff ffffffffffffffff XMM03=ffffffffffffffff ffffffffffffffff
XMM04=000000ff00000000 0000000000000000 XMM05=0000000000000000 0000000000002c33
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 00007f779f81315a
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
