last executing test programs:

3.830071493s ago: executing program 2 (id=551):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000075f84c1071042703a461000000010902120001000000000904"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000014c0)=ANY=[@ANYBLOB="00000100000011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

2.608267197s ago: executing program 1 (id=567):
r0 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x11)

2.500498702s ago: executing program 1 (id=570):
syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000080)='./bus\x00', 0xa00004, &(0x7f0000000500)={[{@adinicb}, {@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@utf8}, {@uid}, {}, {@iocharset={'iocharset', 0x3d, 'cp1250'}}, {@mode={'mode', 0x3d, 0x8}}, {}, {@adinicb}, {@gid_forget}, {@lastblock={'lastblock', 0x3d, 0x7}}, {@umask}, {@anchor={'anchor', 0x3d, 0x907}}]}, 0x1, 0xc4d, &(0x7f0000000f40)="$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")
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x10000d2, &(0x7f0000000180)=ANY=[@ANYBLOB="646f74732c6e66732c71756965742c6e6f646f74732c636865636b3d7374726963742c6e66733d7374616c655f72772c646f74732c6572726f72733d636f6e74696e7565008000000000000074732c00", @ANYBLOB="2d08ea511df70e05f2d9c2e775ba8779a6f7f74369d4e45a842386517e8e20254e4444d8a7c4b083d3b2d56ae7efea57", @ANYRES64, @ANYRES64, @ANYRESHEX=0x0, @ANYRESDEC, @ANYRES32, @ANYRES16, @ANYBLOB="e5d4612a7539a31a875b57a8350f866afe156ac82650ee04deb8bce956d77c", @ANYRESOCT], 0x1, 0x23d, &(0x7f0000000a40)="$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")
syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000000)={0x14, &(0x7f0000000100)=ANY=[@ANYBLOB="201f387a690769bb917366"], 0x0}, 0x0)
lgetxattr(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trusted.'], 0x0, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0)

1.88543205s ago: executing program 2 (id=577):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x7fff}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002a00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r0}, &(0x7f0000000400), &(0x7f0000000480)}, 0x20)
socket$kcm(0x10, 0x2, 0x0)

1.816451626s ago: executing program 1 (id=578):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10)
connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
ftruncate(r1, 0xb66f)
sendmsg$inet(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="c962", 0x2}], 0x1}, 0x4004045)
sendfile(r0, r1, 0x0, 0x7ffff006)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000fe6000/0x14000)=nil, 0x14000, 0x0, 0x0, 0x0, &(0x7f00000006c0)=""/177, 0xe8, 0x0, 0x0}, &(0x7f0000000100)=0x40)

1.759071057s ago: executing program 2 (id=579):
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x9, 0xe6, 0x30, 0x8, 0x403, 0x7151, 0x1b16, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x48, 0x0, 0x0, 0xe7, 0x54, 0x7f}}]}}]}}, 0x0)

1.572122699s ago: executing program 1 (id=580):
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000023b7007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r0, 0x0, 0x0}, 0x10)

1.509089108s ago: executing program 1 (id=581):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000003c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_pressure(r1, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0)
write$cgroup_pressure(r2, &(0x7f0000000340)={'some', 0x20, 0x5, 0x20, 0xe}, 0x2f)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x20040000)
close(0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendto$packet(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x40042, &(0x7f0000000140)={0x11, 0x18, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14)

520.666635ms ago: executing program 1 (id=585):
syz_usb_connect$uac1(0x0, 0xa6, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902940003010000000904000000010100000a2401ff03040201021324060400060900000000000000010000000009240300ff010000000924050100f8431cfd09240300050306040007240504"], 0x0)

459.190381ms ago: executing program 2 (id=587):
syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x5}, @hci_rp_read_def_err_data_reporting={{0x10}, {0x6, 0xf9}}}}, 0x8)

453.47641ms ago: executing program 0 (id=588):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup(r1)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb81002600080045f40029006400000106907800"], 0x3b)

440.919002ms ago: executing program 2 (id=589):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r2}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r0}, &(0x7f00000005c0), &(0x7f0000000600)=r1}, 0x20)

338.723333ms ago: executing program 2 (id=590):
mount$9p_fd(0x0, 0x0, 0x0, 0x420, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000019200)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0})
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
socket(0x1d, 0x2, 0x6)
r3 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002980)=[{{0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x480e0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000)
r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r4, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10)
accept(r4, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)

258.583944ms ago: executing program 0 (id=591):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
fspick(0xffffffffffffff9c, 0x0, 0x0)

205.968289ms ago: executing program 0 (id=592):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{}]}]}}, 0x0, 0x32, 0x0, 0xa}, 0x28)

136.66269ms ago: executing program 0 (id=593):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000780)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000340)="c1fc0a0869fd0e76753a00000400", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

136.452576ms ago: executing program 0 (id=594):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val={0x1c, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x7, 0xb, 0x0, 0x0, 0x0, 0x18, {[@window={0xe, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e)

0s ago: executing program 0 (id=595):
syz_mount_image$hpfs(&(0x7f000000a000), &(0x7f0000009ec0)='./bus\x00', 0x3200041, &(0x7f00000002c0)={[{@check_strict}, {@umask}, {@err_ro}, {@check_none}, {@check_none}]}, 0x1, 0x9e28, &(0x7f0000026280)="$eJwUk1MUnocSAFM3tW27ndq2bdv21P0/G6ltu0mbJrVtm6mNlPfcPWdf92F25u4BDh/giAHeM8B7BzhygPcNcNQARw/w/gE+MMAHB/jQAB8e4CMDfHSAjw3w8QE+McAnB/jUAJ8e4DMDfHaAzw3w+QG+MMAXB/jSAF8e4CsDfHWArw3w9QG+McA3B/jWAN8e4DsDfHeA7w3w/QF+MMAPB/jRAD8e4CcD/HSAnw3w8wF+McAxA/xygF8N8OsBfjPAbwf43QC/H+APA/xxgD8N8OcB/jLAXwf42wB/H+AfAxw7wD8H+NcA/x7gPwP8d4D/DXBIgOMEOG6A4wU4foATBDhhgBMFOHGAQwOcJMBJA5wswMkDnCLAKQOcKsCpA5wmwGkDnC7A6QOcIcAZA5wpwJkDnCXAWQOcLcDZA5wjwDkDnCvAuQOcJ8B5A5wvwPkDXCDABQNcKMCFA1wkwEUDXCzAxQNcIsAlA1wqQAJcOsBlAlw2wOUCXD7AFQJcMcCVAlw5wFUCXDXA1QJcPcA1AlwzwLUCXDvAdQJcN8D1Alw/wA0C3DDAjQLcOMBNAtw0wM0C3DzALQLcMsCtAtw6wG0C3DbA7QLcPsAdAtwxwJ0C3DnAXQLcNcDdAtw9wD0C3DPAvQLcO8B9Atw3wP0C3D/AAwI8MMCDAjw4wEMCPDTAwwI8PMAjAjwywKMCPDrAYwI8NsDjAjw+wBMCPDHAkwI8OUADPCXAUwM8LcDTAzwjwDMDPCvAswMcBBgEGAYYBRgHmASYBpgFmAdYBFgGWAVYB9gE2AbYBdgHOCzAcwI8N8DzAjw/wAsCvDDAiwK8OMBLArw0wMsCvDzAKwK8MsCrArw6wGsCvDbA6wK8PsAbArwxwJsCvDnAWwK8NcDbArw9wDsCvDPAuwK8O8DhAY4I8J4A7w1wZID3BTgqwNEB3h/gAwE+GOBDAT4c4CMBPhrgYwE+HuATAT4Z4FMBPh3gMwE+G+BzAT4f4AsBvhjgSwG+HOArAb4a4GsBvh7gGwG+GeBbAb4d4DsBvhvgewG+H+AHAX4Y4EcBfhzgJwF+GuBnAX4e4BcBjgnwywC/CvDrAL8J8NsAvwvw+wB/CPDHAH8K8OcAfwnw1wB/C/D3AP8IcGyAfwb4V4B/B/hPgP8G+F+AQ0IcJ8RxQxwvxPFDnCDECUOcKMSJQxwa4iQhThriZCFOHuIUIU4Z4lQhTh3iNCFOG+J0IU4f4gwhzhjiTCHOHOIsIc4a4mwhzh7iHCHOGeJcIc4d4jwhzhvifCHOH+ICIS4Y4kIhLhziIiEuGuJiIS4e4hIhLhniUiES4tIhLhPisiEuF+LyIa4Q4oohrhTiyiGuEuKqIa4W4uohrhHimiGuFeLaIa4T4rohrhfi+iFuEOKGIW4U4sYhbhLipiFuFuLmIW4R4pYhbhXi1iFuE+K2IW4X4vYh7hDijiHuFOLOIe4S4q4h7hbi7iHuEeKeIe4V4t4h7hPiviHuF+L+IR4Q4oEhHhTiwSEeEuKhIR4W4uEhHhHikSEeFeLRIR4T4rEhHhfi8SGeEOKJIZ4U4skhGuIpIZ4a4mkhnh7iGSGeGeJZIZ4d4iDEIMQwxCjEOMQkxDTELMQ8xCLEMsQqxDrEJsQ2xC7EPsRhIZ4T4rkhnhfi+SFeEOKFIV4U4sUhXhLipSFeFuLlIV4R4pUhXhXi1SFeE+K1IV4X4vUh3hDijSHeFOLNId4S4q0h3hbi7SHeEeKdId4V4t0hDg9xRIj3hHhviCNDvC/EUSGODvH+EB8I8cEQHwrx4RAfCfHREB8L8fEQnwjxyRCfCvHpEJ8J8dkQnwvx+RBfCPHFEF8K8eUQXwnx1RBfC/H1EN8I8c0Q3wrx7RDfCfHdEN8L8f0QPwjxwxA/CvHjED8J8dMQPwvx8xC/CHFMiF+G+FWIX4f4TYjfhvhdiN+H+EOIP4b4U4g/h/hLiL+G+FuIv4f4R4hjQ/wzxL9C/DvEf0L8N8T/QhwS4TgRjhvheBGOH+EEEU4Y4UQRThzh0AgniXDSCCeLcPIIp4hwygininDqCKeJcNoIp4tw+ghniHDGCGeKcOYIZ4lw1ghni3D2COeIcM4I54pw7gjniXDeCOeLcP4IF4hwwQgXinDhCBeJcNEIF4tw8QiXiHDJCJeKkAiXjnCZCJeNcLkIl49whQhXjHClCFeOcJUIV41wtQhXj3CNCNeMcK0I145wnQjXjXC9CNePcIMIN4xwowg3jnCTCDeNcLMIN49wiwi3jHCrCLeOcJsIt41wuwi3j3CHCHeMcKcId45wlwh3jXC3CHePcI8I94xwrwj3jnCfCPeNcL8I94/wgAgPjPCgCA+O8JAID43wsAgPj/CICI+M8KgIj47wmAiPjfC4CI+P8IQIT4zwpAhPjtAIT4nw1AhPi/D0CM+I8MwIz4rw7AgHEQYRhhFGEcYRJhGmEWYR5hEWEZYRVhHWETYRthF2EfYRDovwnAjPjfC8CM+P8IIIL4zwoggvjvCSCC+N8LIIL4/wigivjPCqCK+O8JoIr43wugivj/CGCG+M8KYIb47wlghvjfC2CG+P8I4I74zwrgjvjnB4hCMivCfCeyMcGeF9EY6KcHSE90f4QIQPRvhQhA9H+EiEj0b4WISPR/hEhE9G+FSET0f4TITPRvhchM9H+EKEL0b4UoQvR/hKhK9G+FqEr0f4RoRvRvhWhG9H+E6E70b4XoTvR/hBhB9G+FGEH0f4SYSfRvhZhJ9H+EWEYyL8MsKvIvw6wm8i/DbC7yL8PsIfIvwxwp8i/DnCXyL8NcLfIvw9wj8iHBvhnxH+FeHfEf4T4b8R/hfhkBjHiXHcGMeLcfwYJ4hxwhgninHiGIfGOEmMk8Y4WYyTxzhFjFPGOFWMU8c4TYzTxjhdjNPHOEOMM8Y4U4wzxzhLjLPGOFuMs8c4R4xzxjhXjHPHOE+M88Y4X4zzx7hAjAvGuFCMC8e4SIyLxrhYjIvHuESMS8a4VIzEuHSMy8S4bIzLxbh8jCvEuGKMK8W4coyrxLhqjKvFuHqMa8S4Zoxrxbh2jOvEuG6M68W4fowbxLhhjBvFuHGMm8S4aYybxbh5jFvEuGWMW8W4dYzbxLhtjNvFuH2MO4w/ZMj/+e4U484x7hLjrjHuFuPuMe4R454x7hXj3jHuE+O+Me4X4/4xHhDjgTEeFOPBMR4S46ExHhbj4TEeEeORMR4V49ExHhPjsTEeF+PxMZ4Q44kxnhTjyTEa4ykxnhrjaTGeHuMZMZ4Z41kxnh3jIMYgxjDGKMY4xiTGNMYsxjzGIsYyxirGOsYmxjbGLsY+xmExnhPjuTGeF+P5MV4Q44UxXhTjxTFeEuOlMV4W4+UxXhHjlTFeFePVMV4T47UxXhfj9THeEOONMd4U480x3hLjrTHeFuPtMd4R450x3hXj3TEOj3FEjPfEeG+MI2O8L8ZRMY6O8f4YH4jxwRgfivHhGB+J8dEYH4vx8RifiPHJGJ+K8ekYn4nx2Rifi/H5GF+I8cUYX4rx5RhfifHVGF+L8fUY34jxzRjfivHtGN+J8d0Y34vx/Rg/iPHDGD+K8eMYP4nx0xg/i/HzGL+IcUyMX8b4VYxfx/hNjN/G+F2M38f4Q4w/xvhTjD/H+EuMv8b4W4y/x/hHjGNj/DPGv2L8O8Z/Yvw3xv9iHJLgOAmOm+B4CY6f4AQJTpjgRAlOnODQBCdJcNIEJ0tw8gSnSHDKBKdKcOoEp0lw2gSnS3D6BGdIcMYEZ0pw5gRnSXDWBGdLcPYE50hwzgTnSnDuBOdJcN4E50tw/gQXSHDBBBdKcOEEF0lw0QQXS3DxBJdIcMkEl0qQBJdOcJkEl01wuQSXT3CFBFdMcKUEV05wlQRXTXC1BFdPcI0E10xwrQTXTnCdBNdNcL0E109wgwQ3THCjBDdOcJMEN01wswQ3T3CLBLdMcKsEt05wmwS3TXC7BLdPcIcEd0xwpwR3TnCXBHdNcLcEd09wjwT3THCvBPdOcJ8E901wvwT3T/CABA9M8KAED07wkAQPTfCwBA9P8IgEj0zwqASPTvCYBI9N8LgEj0/whARPTPCkBE9O0ARPSfDUBE9L8PQEz0jwzATPSvDsBAcJBgmGCUYJxgkmCaYJZgnmCRYJlglWCdYJNgm2CXYJ9gkOS/CcBM9N8LwEz0/wggQvTPCiBC9O8JIEL03wsgQvT/CKBK9M8KoEr07wmgSvTfC6BK9P8IYEb0zwpgRvTvCWBG9N8LYEb0/wjgTvTPCuBO9OcHiCIxK8J8F7ExyZ4H0JjkpwdIL3J/hAgg8m+FCCDyf4SIKPJvhYgo8n+ESCTyb4VIJPJ/hMgs8m+FyCzyf4QoIvJvhSgi8n+EqCryb4WoKvJ/hGgm8m+FaCbyf4ToLvJvhegu8n+EGCHyb4UYIfJ/hJgp8m+FmCnyf4RYJjEvwywa8S/DrBbxL8NsHvEvw+wR8S/DHBnxL8OcFfEvw1wd8S/D3BPxIcm+CfCf6V4N8J/pPgvwn+l+CQFMdJcdwUx0tx/BQnSHHCFCdKceIUh6Y4SYqTpjhZipOnOEWKU6Y4VYpTpzhNitOmOF2K06c4Q4ozpjhTijOnOEuKs6Y4W4qzpzhHinOmOFeKc6c4T4rzpjhfivOnuECKC6a4UIoLp7hIioumuFiKi6e4RIpLprhUiqS4dIrLpLhsisuluHyKK6S4YoorpbhyiqukuGqKq6W4eoprpLhmimuluHaK66S4borrpbh+ihukuGGKG6W4cYqbpLhpipuluHmKW6S4ZYpbpbh1itukuG2K26W4fYo7pLhjijuluHOKu6S4a4q7pbh7inukuGeKe6W4d4r7pLhvivuluH+KB6R4YIoHpXhwioekeGiKh6V4eIpHpHhkikeleHSKx6R4bIrHpXh8iiekeGKKJ6V4coqmeEqKp6Z4Woqnp3hGimemeFaKZ6c4SDFIMUwxSjFOMUkxTTFLMU+xSLFMsUqxTrFJsU2xS7FPcViK56R4bornpXh+ihekeGGKF6V4cYqXpHhpipeleHmKV6R4ZYpXpXh1itekeG2K16V4fYo3pHhjijeleHOKt6R4a4q3pXh7inekeGeKd6V4d4rDUxyR4j0p3pviyBTvS3FUiqNTvD/FB1J8MMWHUnw4xUdSfDTFx1J8PMUnUnwyxadSfDrFZ1KSZ1N8LsXnU3whxRdTfCnFl1N8JcVXU3wtxddTfCPFN1N8K8W3U3wnxXdTfC/F91P8IMUPU/woxY9T/CTFT1P8LMXPU/wixTEpfpniVyl+neI3KX6b4ncpfp/iDyn+mOJPKf6c4i8p/pribyn+nuIfKY5N8c8U/0rx7xT/SfHfFP9LcUiG42Q4bobjZTh+hhNkOGGGE2U4cYZDM5wkw0kznCzDyTOcIsMpM5wqw6kznCbDaTOcLsPpM5whwxkznCnDmTOcJcNZM5wtw9kznCPDOTOcK8O5M5wnw3kznC/D+TNcIMMFM1wow4UzXCTDRTNcLMPFM1wiwyUzXCpDMlw6w2UyXDbD5TJcPsMVMlwxw5UyXDnDVTJcNcPVMlw9wzUyXDPDtTJcO8N1Mlw3w/UyXD/DDTLcMMONMtw4w00y3DTDzTLcPMMtMtwyw60y3DrDbTLcNsPtMtw+wx0y3DHDnTLcOcNdMtw1w90y3D3DPTLcM8O9Mtw7w30y3DfD/TLcP8MDMjwww4MyPDjDQzI8NMPDMjw8wyMyPDLDozI8OsNjMjw2w+MyPD7DEzI8McOTMjw5QzM8JcNTMzwtw9MzPCPDMzM8K8OzMxxkGGQYZhhlGGeYZJhmmGWYZ1hkWGZYZVhn2GTYZthl2Gc4LMNzMjw3w/MyPD/DCzK8MMOLMrw4w0syvDTDyzK8PMMrMrwyw6syvDrDazK8NsPrMrw+wxsyvDHDmzK8OcNbMrw1w9syvD3DOzK8M8O7Mrw7w+EZjsjwngzvzXBkhvdlOCrD0Rnen+EDGT6Y4UMZPpzhIxk+muFjGT6e4RMZPpnhUxk+neEzGT6b4XMZPp/hCxm+mOFLGb6c4SsZvprhaxm+nuEbGb6Z4VsZvp3hOxm+m+F7Gb6f4QcZfpjhRxl+nOEnGX6a4WcZfp7hFxmOyfDLDL/K8OsMv8nw2wy/y/D7DH/I8McMf8rw5wx/yfDXDH/L8PcM/8hwbIZ/ZvhXhn9n+E+G/2b4X4ZDchwnx3FzHC/H8XOcIMcJc5wox4lzHJrjJDlOmuNkOU6e4xQ5TpnjVDlOneM0OU6b43Q5Tp/jDDnOmONMOc6c4yw5zprjbDnOnuMcOc6Z41w5zp3jPDnOm+N8Oc6f4wI5LpjjQjkunOMiOS6a42I5Lp7jEjkumeNSOZLj0jkuk+OyOS6X4/I5rpDjijmulOPKOa6S46o5rpbj6jmukeOaOa6V49oTDxnyfxbr5rhejuvnuEGOG+a4UY4b57hJjpvmuFmOm+e4RY5b5rhVjlvnuE2O2+a4XY7b57hDjjvmuFOOO+e4S4675rhbjrvnuEeOe+a4V45757hPjvvmuF+O++d4QI4H5nhQjgfneEiOh+Z4WI6H53hEjkfmeFSOR+d4TI7H5nhcjsfneEKOJ+Z4Uo4n52iOp+R4ao6n5Xh6jmfkeGaOZ+V4do6DHIMcwxyjHOMckxzTHLMc8xyLHMscqxzrHJsc2xy7HPsch+V4To7n5nhejufneEGOF+Z4UY4X53hJjpfmeFmOl+d4RY5X5nhVjlfneE2O1+Z4XY7X53hDjjfmeFOON+d4S4635nhbjrfneEeOd+Z41///NWbY2OE5jvi/y0OGDPn/jsxxyJAhQ0blODrH+3N8IMcH/+/+kCFDHs7xkRwfzfGxHB/P8Ykcn8zxqRyfzvGZHJ/N8bkcn8/xhRxfzPGlHF/O8ZUcX83xtRxfz/GNHN/M8a0c387xnRzfzfG9HN/P8YMcP8zxoxw/zvGTHD/N8bMcP8/xixzH5Phljl/l+HWO3+T4bY7f5fh9jj/k+GOOP+X4c46/5Phrjr/l+HuOf+Q4Nsc/c/wrx79z/CfHf3P87/9MChynwHELHK/A8QucoMAJC5yowIkLHFrgJAVOWuBkBU5e4BQFTlngVAVOXeA0BU5b4HQFTl/gDAXOWOBMBc5c4CwFzlrgbAXOXuAcBc5Z4FwFzl3gPAXOW+B8Bc5f4AIFLljgQgUuXOAiBS5a4GIFLl7gEgUuWeBSBVLg0gUuU+CyBW40UzN2+QJXKHDFAlcqcOUCVylw1QJXK3D1AtcocM0C1ypw7QLXKXDdAtcrcP0CNyhww//fK3DjAjcpcNMCNytw8wK3KHDLArcqcOsCtylw2wK3K3D7AncocMcCdypw5wJ3KXDXAncrcPcC9yhwzwL3KnDvAvcpcN8C9ytw/wIPKPDAAg8q8OACDynw0AIPK/DwAo8o8MgCjyrw6AKPKfDYAo8r8PgCTyjwxAJPKvDkAi3wlAJPLfC0Ak8v8IwCzyzwrALPLnBQYFBgWGBUYFxgUmBaYFZgXmBRYFlgVWBdYFNgW2BXYF/gsALPKfDcAs8r8PwCLyjwwgIvKvDiAi8p8NICLyvw8gKvKPDKAq8q8OoCrynw2gKvK/D6Am8o8MYCbyrw5gJvKfh/1v8fby/wjgLvLPCuAu8ucHiBIwq8p8B7CxxZ4H0FjipwdIH3F/hAgQ8W+FCBDxf4SIGPFvhYgY8X+ESBTxb4VIFPF/hMgc8W+FyBzxf4QoEvFvhSMXTIywW+UuCrBb5W4OsFvlHgmwW+VeDbBb5T4LsFvlfg+wV+UOCHBX5U4McFflLgpwV+VuDnBX5R4JgCvyzwqwK/LvCbAr8t8LsCvy/whwJ/LPCnAn8u8JcCfy3wtwJ/L/CPAscW+GeBfxX4d4H/FPhvgf8VOKTEcUoct8TxShy/xAlKnLDEiUqcuMShJU5S4qQlTlbi5CVOUeKUJU5V4tQlTlPitCVOV+L0Jc5Q4owlzlTizCXOUuKsJc5W4uwlzlHinCXOVeLcJc5T4rwlzlfi/CUuUOKCJS5U4sIlLlLioiUuVuLiJS5R4pIlLlUiJS5d4jIlLlviciUuX+IKJa5Y4kolrlziKiWuWuJqJa5e4holrlniWiWuXeI6Ja5b4nolrl/iBiVuWOJGJW5c4iYlblriZiVuXuIWJW5Z4lYlbl3iNiVuW+J2JW5f4g4l7ljiTiXuXOIuJe5a4m4l7l7iHiXuWeJeJe5d4j4l7lvifiXuX+IBJR5Y4kElHlziISUeWuJhJR5e4hElHlniUSUeXeIxJR5b4nElHl/iCSWeWOJJJZ5coiWeUuKpJZ5W4uklnlHimSWeVeLZJQ5KDEoMS4xKjEtMSkxLzErMSyxKLEusSqxLbEpsS+xK7EscVuI5JZ5b4nklnl/iBSVeWOJFJV5c4iUlXlriZSVeXuIVJV5Z4lUlXl3iNSVeW+J1JV5f4g0l3ljiTSXeXOItJd5a4m0l3l7iHSXeWeJdJd5d4vASR5R4T4n3ljiyxPtKHFXi6BLvL/GBEh8s8aESHy7xkRIfLfGxEh8v8YkSnyzxqRKfLvGZEp8t8bkSny/xhRJfLPGlEl8u8ZUSXy3xtRJfL/GNEt8s8a0S3y7xnRLfLfG9Et8v8YMSPyzxoxI/LvGTEj8t8bMSPy/xixLHlPhliV+V+HWJ35T4bYnflfh9iT+U+GOJP5X4c4m/lPhrib+V+HuJf5Q4tsQ/S/yrxL9L/KfEf0v8r8QhFY5T4bgVjlfh+BVOUOGEFU5U4cQVDq1wkgonrXCyCievcIoKp6xwqgqnrnCaCqetcLoKp69whgpnrHCmCmeucJYKZ61wtgpnr3COCuescK4K565wngrnrXC+CuevcIEKF6xwoQoXrnCRChetcLEKF69wiQqXrHCpCqlw6QqXqXDZCpercPkKV6hwxQpXqnDlClepcNUKV6tw9QrXqHDNCteqcO0K16lw3QrXq3D9CjeocMMKN6pw4wo3qXDTCjercPMKt6hwywq3qnDrCrepcNsKt6tw+wp3qHDHCneqcOcKd6lw1wp3q3D3CveocM8K96pw7wr3qXDfCvercP8KD6jwwAoPqvDgCg+p8NAKD6vw8AqPqPDICo+q8OgKj6nw2AqPq/D4Ck+o8MQKT6rw5Aqt8JQKT63wtApPr/CMCs+s8KwKz65wUGFQYVhhVGFcYVJhWmFWYV5hUWFZYVVhXWFTYVthV2Ff4bAKz6nw3ArPq/D8Ci+o8MIKL6rw4govqfDSCi+r8PIKr6jwygqvqvDqCq+p8NoKr6vw+gpvqPDGCm+q8OYKb6nw1gpvq/D2Cu+o8M4K76rw7gqHVziiwnsqvLfCkRXeV+GoCkdXeH+FD1T4YIUPVfhwhY9U+GiFj1X4eIVPVPhkhU9V+HSFz1T4bIXPVfh8hS9U+GKFL1X4coWvVPhqha9V+HqFb1T4ZoVvVfh2he9U+G6F71X4foUfVPhhhR9V+HGFn1T4aYWfVfh5hV9UOKbCLyv8qsKvK/ymwm8r/K7C7yv8ocIfK/ypwp8r/KXCXyv8rcLfK/yjwrEV/lnhXxX+XeE/Ff5b4X8VDqlxnBrHrXG8GsevcYIaJ6xxohonrnFojZPUOGmNk9U4eY1T1DhljVPVOHWN09Q4bY3T1Th9jTPUOGONM9U4c42z1DhrjbPVOHuNc9Q4Z41z1Th3jfPUOG+N89U4f40L1LhgjQvVuHCNi9S4aI2L1bh4jUvUuGSNS9VIjUvXuEyNy9a4XI3L17hCjSvWuFKNK9e4So2r1rhajavXuEaNa9a4Vo1r17hOjevWuF6N69e4QY0b1rhRjRvXuEmNm9a4WY2b17hFjVvWuFWNW9e4TY3b1rhdjdvXuEONO9a4U40717hLjbvWuFuNu9e4R4171rhXjXvXuE+N+9a4X43713hAjQfWeFCNB9d4SI2H1nhYjYfXeESNR9Z4VI1H13hMjcfWeFyNx9d4Qo0n1nhSjSfXaI2n1HhqjafVeHqNZ9R4Zo1n1Xh2jYMagxrDGqMa4xqTGtMasxrzGosayxqrGusamxrbGrsa+xqH1XhOjefWeF6N59d4QY0X1nhRjRfXeEmNl9Z4WY2X13hFjVfWeFWNV9d4TY3X1nhdjdfXeEONN9Z4U40313hLjbfWeFuNt9d4R4131nhXjXfXOLzGETXeU+O9NY6s8b4aR9U4usb7a3ygxgdrfKjGh2t8pMZHa3ysxsdrfKLGJ2t8qsana3ymxmdrfK7G52t8ocYXa3ypxpdrfKXGV2t8rcbXa3yjxjdrfKvGt2t8p8Z3a3yvxvdr/KDGD2v8qMaPa/ykxk9r/KzGz2v8osYxNX5Z41c1fl3jNzV+W+N3NX5f4w81/ljjTzX+XOMvNf5a4281/l7jHzWOrfHPGv+q8e8a/6nx3xr/q3FIg+M0OG6D4zU4foMTNDhhgxM1OHGDQxucpMFJG5yswckbnKLBKRucqsGpG5ymwWkbnK7B6RucocEZG5ypwZkbnKXBWRucrcHZG5yjwTkbnKvBuRucp8F5G5yvwfkbXKDBBRtcqMGFG1ykwUUbXKzBxRtcosElG1yqQRpcusFlGly2weUaXL7BFRpcscGVGly5wVUaXLXB1RpcvcE1GlyzwbUaXLvBdRpct8H1Gly/wQ0a3LDBjRrcuMFNGty0wc0a3LzBLRrcssGtGty6wW0a3LbB7RrcvsEdGtyxwZ0a3LnBXRrctcHdGty9wT0a3LPBvRrcu8F9Gty3wf0a3L/BAxo8sMGDGjy4wUMaPLTBwxo8vMEjGjyywaMaPLrBYxo8tsHjGjy+wRMaPLHBkxo8uUEbPKXBUxs8rcHTGzyjwTMbPKvBsxscNBg0GDYYNRg3mDSYNpg1mDdYNFg2WDVYN9g02DbYNdg3OKzBcxo8t8HzGjy/wQsavLDBixq8uMFLGry0wcsavLzBKxq8ssGrGry6wWsavLbB6xq8vsEbGryxwZsavLnBWxq8tcHbGry9wTsavLPBuxq8u8HhDY5o8J4G721wZIP3NTiqwdEN3t/gAw0+2OBDDT7c4CMNPtrgYw0+3uATDT7Z4FMNPt3gMw0+2+BzDT7f4AsNvtjgSw2+3OArDb7a4GsNvt7gGw2+2eBbDb7d4DsNvtvgew2+3+AHDX7Y4EcNftzgJw1+2uBnDX7e4BcNjmnwywa/avDrBr9p8NsGv2vw+wZ/aPDHBn9q8OcGf2nw1wZ/a/D3Bv9ocGyDfzb4V4N/N/hPg/82+F+DQ1ocp8VxWxyvxfFbnKDFCVucqMWJWxza4iQtTtriZC1O3uIULU7Z4lQtTt3iNC1O2+J0LU7f4gwtztjiTC3O3OIsLc7a4mwtzt7iHC3O2eJcLc7d4jwtztvifC3O3+ICLS7Y4kItLtziIi0u2uJiLS7e4hItLtniUi3S4tItLtPisi0u1+LyLa7Q4ootrtTiyi2u0uKqLa7W4uotrtHimi2u1eLaLa7T4rotrtfi+i1u0OKGLW7U4sYtbtLipi1u1uLmLW7R4pYtbtXi1i1u0+K2LW7X4vYt7tDiji3u1OLOLe7S4q4t7tbi7i3u0eKeLe7V4t4t7tPivi3u1+L+LR7Q4oEtHtTiwS0e0uKhLR7W4uEtHtHikS0e1eLRLR7T4rEtHtfi8S2e0OKJLZ7U4skt2uIpLZ7a4mktnt7iGS2e2eJZLZ7d4qDFoMWwxajFuMWkxbTFrMW8xaLFssWqxbrFpsW2xa7FvsVhLZ7T4rktntfi+S1e0OKFLV7U4sUtXtLipS1e1uLlLV7R4pUtXtXi1S1e0+K1LV7X4vUt3tDijS3e1OLNLd7S4q0t3tbi7S3e0eKdLd7V4t0tDm9xRIv3tHhviyNbvK/FUS2ObvH+Fh9o8cEWH2rx4RYfafHRFh9r8fEWn2jxyRafavHpFp9p8dkWn2sZ+v9uXmjxxRZfavHlFl9p8dUWX2vx9RbfaPHNFt9q8e0W32nx3Rbfa/H9Fj9o8cMWP2rx4xY/afHTFj9r8fMWv2hxTItftvhVi1+3+E2L37b4XYvft/hDiz+2+FOLP7f4S4u/tvhbi7+3+EeLY1v8s8W/Wvy7xX9a/LfF/1oc0uE4HY7b4Xgdjt/hBB1O2OFEHU7c4dAOJ+lw0g4n63DyDqfocMoOp+pw6g6n6XDaDqfrcPoOZ+hwxg5n6nDmDmfpcNYOZ+tw9g7n6HDODufqcO4O5+lw3g7n63D+DhfocMEOF+pw4Q4X6XDRDhfrcPEOl+hwyQ6X6pAOl+5wmQ6X7XC5DpfvcIUOV+wYOmTIEFfucJUOV+1wtQ5X73CNDtfscK0O1+5wnQ7X7XC9DtfvcIMON+xwow437nCTDjftcLMON+9wiw637HCrDrfucJsOt+1wuw6373CHDnfscKcOd+5wlw537XC3DnfvcI8O9+xwrw737nCfDvftcL8O9+/wgA4P7PCgDg/u8JAOD+3wsA4P7/CIDo/s8KgOj+7wmA6P7fC4Do/v8IQOT+zwpA5P7tAOT+nw1A5P6/D0Ds/o8MwOz+rw7A4HHQYdhh1GHcYdJh2mHWYd5h0WHZYdVh3WHTYdth12HfYdDuvwnA7P7fC8Ds/v8IIOL+zwog4v7vCSDi/t8LIOL+/wig6v7PCqDq/u8JoOr+3wug6v7/CGDm/s8KYOb+7wlg5v7fC2Dm/v8I4O7+zwrg7v7nB4hyM6vKfDezsc2eF9HY7qcHSH93f4QIcPdvhQhw93+EiHj3b4WIePd/hEh092+FSHT3f4TIfPdvhch893+EKHL3b4Uocvd/hKh692+FqHr3f4RodvdvhWh293+E6H73b4Xofvd/hBhx92+FGHH3f4SYefdvhZh593+EWHYzr8ssOvOvy6w286/LbD7zr8vsMfOvyxw586/LnDXzr8tcPfOvy9wz86HNvhnx3+1eHfHf7T4b8d/tfhkB7H6XHcHsfrcfweJ+hxwh4n6nHiHof2OEmPk/Y4WY+T9zhFj1P2OFWPU/c4TY/T9jhdj9P3OEOPM/Y4U48z9zhLj7P2OFuPs/c4R49z9jhXj3P3OE+P8/Y4X4/z97hAjwv2uFCPC/e4SI+L9rhYj4v3uESPS/a4VI/0uHSPy/S4bI/L9bh8jyv0uGKPK/W4co+r9Lhqj6v1uHqPa/S4Zo9r9bh2j+v0uG6P6/W4fo8b9Lhhjxv1uHGPm/S4aY+b9bh5j1v0uGWPW/W4dY/b9Lhtj9v1uH2PO/S4Y4879bhzj7v0uGuPu/W4e4979Lhnj3v1uHeP+/S4b4/79bh/jwf0eGCPB/V4cI+H9Hhoj4f1eHiPR/R4ZI9H9Xh0j8f0eGyPx/V4fI8n9Hhijyf1eHKP9nhKj6f2eFqPp/d4Ro9n9nhWj2f3OOgx6DHsMeox7jHpMe0x6zHvseix7LHqse6x6bHtseux73FYj+f0eG6P5/V4fo8X9Hhhjxf1eHGPl/R4aY+X9Xh5j1f0eGWPV/V4dY/X9Hhtj9f1eH2PN/R4Y4839Xhzj7f0eGuPt/V4e4939Hhnj3f1eHePw3sc0eM9Pd7b48ge7+txVI+j/8fCOQTxfTAKMHWb2kptd2vbtm3bWyO1/z8btZkyaGrbtm2+eTPfeW87e94BjhzgqAGOHuCYAT40wLEDfHiAjwzw0QE+NsDHB/jEAJ8c4FMDfHqAzwzw2QE+N8DnB/jCAF8c4EsDfHmArwzw1QG+NsDXB/jGAN8c4FsDfHuA7wzw3QG+N8D3B/jBAD8c4EcD/HiAnwzw0wF+NsDPB/jFAL8c4FcD/HqA3wzw2wF+N8DvB/jDAH8c4E8D/HmAvwzw1wH+NsDfB/jHAP8c4F8D/HuA/wzw3wH+N8AhAY4T4LgBjhfg+AFOEOCEAU4U4MQBThLg0AAnDXCyACcPcIoApwxwqgCnDnCaAKcNcLoApw9whgBnDHCmAGcOcJYAZw1wWICzBTh7gHMEOGeAcwU4d4DzBDhvgPMFOH+ACwS4YIALBbhwgIsEuGiAiwW4eIBLBLhkgAS4VIBLB7hMgMsGuFyAywe4QoArBrhSgCsHuEqAqwa4WoCrB7hGgGsGuFaAawe4ToDrBrhegOsHuEGAGwa4UYAbB7hJgJsGuFmAmwe4RYBbBrhVgFsHuE2A2wa4XYDbB7hDgDsGuFOAOwe4S4C7BrhbgLsHuEeAewa4V4B7B7hPgPsGuF+A+wd4QIAHBnhQgAcHeEiAhwZ4WICHB3hEgEcGeFSARwd4TIDHBnhcgMcHeEKAJwZ4UoAGeHKApwR4aoCnBXh6gGcEeGaAZwV4doDnBDg8wHMDPC/A8wO8IMALA7wowIsDvCTASwO8LMDLA7wiwCsDHAQYBBgGGAUYB5gEmAaYBZgHWARYBlgFWAfYBNgG2AXYB3hVgFcHeE2A1wZ4XYDXB3hDgDcGeFOANwd4S4C3BnhbgLcHeEeAdwZ4V4B3BzgiwHsCvDfA+wK8P8AHAnwwwJEBjgpwdIBjAnwowLEBPhzgIwE+GuBjAT4e4BMBPhngUwE+HeAzAT4b4HMBPh/gCwG+GOBLAb4c4CsBvhrgawG+HuAbAb4Z4FsBvh3gOwG+G+B7Ab4f4AcBfhjgRwF+HOAnAX4a4GcBfh7gFwF+GeBXAX4d4DcBfhvgdwF+H+APAf4Y4E8B/hzgLwH+GuBvAf4e4B8B/hngXwH+HeA/Af4b4H8BDglxnBDHDXG8EMcPcYIQJwxxohAnDnGSEIeGOGmIk4U4eYhThDhliFOFOHWI04Q4bYjThTh9iDOEOGOIM4U4c4izhDhriMNCnC3E2UOcI8Q5Q5wrxLlDnCfEeUOcL8T5Q1wgxAVDXCjEhUNcJMRFQ1wsxMVDXCLEJUMkxKVCXDrEZUJcNsTlQlw+xBVCXDHElUJcOcRVQlw1xNVCXD3ENUJcM8S1Qlw7xHVCXDfE9UJcP8QNQtwwxI1C3DjETULcNMTNQtw8xC1C3DLErULcOsRtQtw2xO1C3D7EHULcMcSdQtw5xF1C3DXE3ULcPcQ9QtwzxL1C3DvEfULcN8T9Qtw/xANCPDDEg0I8OMRDQjw0xMNCPDzEI0I8MsSjQjw6xGNCPDbE40I8PsQTQjwxxJNCNMSTQzwlxFNDPC3E00M8I8QzQzwrxLNDPCfE4SGeG+J5IZ4f4gUhXhjiRSFeHOIlIV4a4mUhXh7iFSFeGeIgxCDEMMQoxDjEJMQ0xCzEPMQixDLEKsQ6xCbENsQuxD7Eq0K8OsRrQrw2xOtCvD7EG0K8McSbQrw5xFtCvDXE20K8PcQ7QrwzxLtCvDvEESHeE+K9Id4X4v0hPhDigyGODHFUiKNDHBPiQyGODfHhEB8J8dEQHwvx8RCfCPHJEJ8K8ekQnwnx2RCfC/H5EF8I8cUQXwrx5RBfCfHVEF8L8fUQ3wjxzRDfCvHtEN8J8d0Q3wvx/RA/CPHDED8K8eMQPwnx0xA/C/HzEL8I8csQvwrx6xC/CfHbEL8L8fsQfwjxxxB/CvHnEH8J8dcQfwvx9xD/CPHPEP8K8e8Q/wnx3xD/C3FIhONEOG6E40U4foQTRDhhhBNFOHGEk0Q4NMJJI5wswskjnCLCKSOcKsKpI5wmwmkjnC7C6SOcIcIZI5wpwpkjnCXCWSMcFuFsEc4e4RwRzhnhXBHOHeE8Ec4b4XwRzh/hAhEuGOFCES4c4SIRLhrhYhEuHuESES4ZIREuFeHSES4T4bIRLhfh8hGuEOGKEa4U4coRrhLhqhGuFuHqEa4R4ZoRrhXh2hGuE+G6Ea4X4foRbhDhhhFuFOHGEW4S4aYRbhbh5hFuEeGWEW4V4dYRbhPhthFuF+H2Ee4Q4Y4R7hThzhHuEuGuEe4W4e4R7hHhnhHuFeHeEe4T4b4R7hfh/hEeEOGBER4U4cERHhLhoREeFuHhER4R4ZERHhXh0REeE+GxER4X4fERnhDhiRGeFKERnhzhKRGeGuFpEZ4e4RkRnhnhWRGeHeE5EQ6P8NwIz4vw/AgviPDCCC+K8OIIL4nw0ggvi/DyCK+I8MoIBxEGEYYRRhHGESYRphFmEeYRFhGWEVYR1hE2EbYRdhH2EV4V4dURXhPhtRFeF+H1Ed4Q4Y0R3hThzRHeEuGtEd4W4e0R3hHhnRHeFeHdEY6I8J4I743wvgjvj/CBCB+McGSEoyIcHeGYCB+KcGyED0f4SISPRvhYhI9H+ESET0b4VIRPR/hMhM9G+FyEz0f4QoQvRvhShC9H+EqEr0b4WoSvR/hGhG9G+FaEb0f4ToTvRvhehO9H+EGEH0b4UYQfR/hJhJ9G+FmEn0f4RYRfRvhVhF9H+E2E30b4XYTfR/hDhD9G+FOEP0f4S4S/RvhbhL9H+EeEf0b4V4R/R/hPhP9G+F+EQ2IcJ8ZxYxwvxvFjnCDGCWOcKMaJY5wkxqExThrjZDFOHuMUMU4Z41QxTh3jNDFOG+N0MU4f4wwxzhjjTDHOHOMsMc4a47AYZ4tx9hjniHHOGOeKce4Y54lx3hjni3H+GBeIccEYF4px4RgXiXHRGBeLcfEYl4hxyRiJcakYl45xmRiXjXG5GJePcYUYV4xxpRhXjnGVGFeNcbUYV49xjRjXjHGtGNeOcZ0Y141xvRjXj3GDGDeMcaMYN45xkxg3jXGzGDePcYsYt4xxqxi3jnGbGLeNcbsYt49xhxh3jHGnGHeOcZcYd41xtxh3j3GPGPeMca8Y945xnxj3jXG/GPeP8YAYD4zxoBgPjvGQGA+N8bAYD4/xiBiPjPGoGI+O8ZgYj43xuBiPj/GEGE+M8aQYjfHkGE+J8dQYT4vx9BjPiPHMGM+K8ewYz4lxeIznxnhejOfHeEGMF8Z4UYwXx3hJjJfGeFmMl8d4RYxXxjiIMYgxjDGKMY4xiTGNMYsxj7GIsYyxirGOsYmxjbGLsY/xqhivjvGaGK+N8boYr4/xhhhvjPGmGG+O8ZYYb43xthhvj/GOGO+M8a4Y745xRIz3xHhvjPfFeH+MD8T4YIwjYxwV4+gYx8T4UIxjY3w4xkdifDTGx2J8PMYnYnwyxqdifDrGZ2J8NsbnYnw+xhdifDHGl2J8OcZXYnw1xtdifD3GN2J8M8a3Ynw7xndifDfG92J8P8YPYvwwxo9i/DjGT2L8NMbPYvw8xi9i/DLGr2L8OsZvYvw2xu9i/D7GH2L8McafYvw5xl9i/DXG32L8PcY/Yvwzxr9i/DvGf2L8N8b/YhyS4DgJjpvgeAmOn+AECU6Y4EQJTpzgJAkOTXDSBCdLcPIEp0hwygSnSnDqBKdJcNoEp0tw+gRnSHDGBGdKcOYEZ0lw1gSHJThbgrMnOEeCcyY4V4JzJzhPgvMmOF+C8ye4QIILJrhQggsnuEiCiya4WIKLJ7hEgksmSIJLJbh0gsskuGyCyyW4fIIrJLhigisluHKCqyS4aoKrJbh6gmskuGaCayW4doLrJLhugusluH6CGyS4YYIbJbhxgpskuGmCmyW4eYJbJLhlglsluHWC2yS4bYLbJbh9gjskuGOCOyW4c4K7JLhrgrsluHuCeyS4Z4J7Jbh3gvskuG+C+yW4f4IHJHhgggcleHCChyR4aIKHJXh4gkckeGSCRyV4dILHJHhsgscleHyCJyR4YoInJWiCJyd4SoKnJnhagqcneEaCZyZ4VoJnJ3hOgsMTPDfB8xI8P8ELErwwwYsSvDjBSxK8NMHLErw8wSsSvDLBQYJBgmGCUYJxgkmCaYJZgnmCRYJlglWCdYJNgm2CXYJ9glcleHWC1yR4bYLXJXh9gjckeGOCNyV4c4K3JHhrgrcleHuCdyR4Z4J3JXh3giMSvCfBexO8L8H7E3wgwQcTHJngqARHJzgmwYcSHJvgwwk+kuCjCT6W4OMJPpHgkwk+leDTCT6T4LMJPpfg8wm+kOCLCb6U4MsJvpLgqwm+luDrCb6R4JsJvpXg2wm+k+C7Cb6X4PsJfpDghwl+lODHCX6S4KcJfpbg5wl+keCXCX6V4NcJfpPgtwl+l+D3Cf6Q4I8J/pTgzwn+kuCvCf6W4O8J/pHgnwn+leDfCf6T4L8J/pfgkBTHSXHcFMdLcfwUJ0hxwhQnSnHiFCdJcWiKk6Y4WYqTpzhFilOmOFWKU6c4TYrTpjhditOnOEOKM6Y4U4ozpzhLirOmOCzF2VKcPcU5UpwzxblSnDvFeVKcN8X5Upw/xQVSXDDFhVJcOMVFUlw0xcVSXDzFJVJcMkVSXCrFpVNcJsVlU1wuxeVTXCHFFVNcKcWVU1wlxVVTXC3F1VNcI8U1U1wrxbVTXCfFdVNcL8X1U9wgxQ1T3CjFjVPcJMVNU9wsxc1T3CLFLVPcKsWtU9wmxW1T3C7F7VPcIcUdU9wpxZ1T3CXFXVPcLcXdU9wjxT1T3CvFvVPcJ8V9U9wvxf1TPCDFA1M8KMWDUzwkxUNTPCzFw1M8IsUjUzwqxaNTPCbFY1M8LsXjUzwhxRNTPClFUzw5xVNSPDXF01I8PcUzUjwzxbNSPDvFc1IcnuK5KZ6X4vkpXpDihSlelOLFKV6S4qUpXpbi5SlekeKVKQ5SDFIMU4xSjFNMUkxTzFLMUyxSLFOsUqxTbFJsU+xS7FO8KsWrU7wmxWtTvC7F61O8IcUbU7wpxZtTvCXFW1O8LcXbU7wjxTtTvCvFu1MckeI9Kd6b4n0p3p/iAyk+mOLIFEelODrFMSk+lOLYFB9O8ZEUH03xsRQfT/GJFJ9M8akUn07xmRSfTfG5FJ9P8YUUX0zxpRRfTvGVFF9N8bUUX0/xjRTfTPGtFN9O8Z0U303xvRTfT/GDFD9M8aMUP07xkxQ/TfGzFD9P8YsUv0zxqxS/TvGbFL9N8bsUv0/xhxR/TPGnFH9O8ZcUf03xtxR/T/GPFP9M8a8U/07xnxT/TfG/FIdkOE6G42Y4XobjZzhBhhNmOFGGE2c4SYZDM5w0w8kynDzDKTKcMsOpMpw6w2kynDbD6TKcPsMZMpwxw5kynDnDWTKcNcNhGc6W4ewZzpHhnBnOleHcGc6T4bwZzpfh/BkukOGCGS6U4VsZLpLhohkuluHiGS6R4ZIZkuFSGS6d4TIZLpvhchkun+EKGa6Y4UoZrpzhKhmumuFqGa6e4RoZrpnhWhmuneE6Ga6b4XoZrp/hBhlumOFGGW6c4SYZbprhZhlunuEWGW6Z4VYZbp3hNhlum+F2GW6f4Q4Z7pjhThnunOEuGe6a4W4Z7p7hHhnumeFeGe6d4T4Z7pvhfhnun+EBGR6Y4UEZHpzhIRkemuFhGR6e4REZHpnhURkeneExGR6b4XEZHp/hCRmemOFJGZrhyRmekuGpGZ6W4ekZnpHhmRmeleHZGZ6T4fAMz83wvAzPz/CCDC/M8KIML87wkgwvzfCyDC/P8IoMr8xwkGGQYZhhlGGcYZJhmmGWYZ5hkWGZYZVhnWGTYZthl2Gf4VUZXp3hNRlem+F1GV6f4Q0Z3pjhTRnenOEtGd6a4W0Z3p7hHRnemeFdGd6d4YgM78nw3gzvy/D+DB/I8MEMR2Y4KsPRGY7J8KEMx2b4cIaPZPhoho9l+HiGT2T4ZIZPZfh0hs9k+GyGz2X4fIYvZPhihi9l+HKGr2T4aoavZfh6hm9k+Ob/Gn47w3cyfDfD9zJ8P8MPMvwww48y/DjDTzL8NMPPMvw8wy8y/DLDrzL8OsNvMvw2w+8y/D7DHzL8McOfMvw5w18y/DXD3zL8PcM/Mvwzw78y/DvDfzL8N8P/MhyS4zg5jpvjeDmOn+MEOU6Y40Q5TpzjJDkOzXHSHCfLcfIcp8hxyhynynHqHKfJcdocp8tx+hxnyHHGHGfKceYcZ8lx1hyH5ThbjrPnOEeOc+Y4V45z5zhPjvPmOF+O8+e4QI4L5rhQjgvnuEiOi+a4WI6L57hEjkvmSI5L5bh0jsvkuGyOy+W4fI4r5LhijivluHKOq+S4ao6r5bh6jmvkuGaOa+W4do7r5LhujuvluH6OG+S4YY4b5bhxjpvkuGmOm+W4eY5b5LhljlvluHWO2+S4bY7b5bh9jjvkuGOOO+W4c4675LhrjrvluHuOe+S4Z4575bh3jvvkuG+O++W4f44H5HhgjgfleHCOh+R4aI6H5Xh4jkfkeGSOR+V4dI7H5HhsjsfleHyOJ+R4Yo4n5WiOJ+d4So6n5nhajqfneEaOZ+Z4Vo5n53hOjsNzPDfH83I8P8cLcrwwx4tyvDjHS3K8NMfLcrw8xytyvDLHQY5BjmGOUY5xjkmOaY5ZjnmORY5ljlWOdY5Njm2OXY59jlfleHWO1+R4bY7X5Xh9jjfkeGOON+V4c4635HhrjrfleHuOd+R4Z4535Xh3jiNyvCfHe3O8L8f7c3wgxwdzHJnjqBxH5zgmx4dyHJvjwzk+kuOjOT6W4+M5PpHjkzk+lePTOT6T47M5Ppfj8zm+kOOLOb6U48s5vpLjqzm+luPrOb6R45s5vpXj2zm+k+O7Ob6X4/s5fpDjhzl+lOPHOX6S46c5fpbj5zl+keOXOX6V49c5fpPjtzl+l+P3Of6Q4485/pTjzzn+kuOvOf6W4+85/pHjnzn+lePfOf6T4785/pfjkALHKXDcAscrcPwCJyhwwgInKnDiAicpcGiBkxY4WYGTFzhFgVMWOFWBUxc4TYHTFjhdgdMXOEOBMxY4U4EzFzhLgbMWOKzA2QqcvcA5CpyzwLkKnLvAeQqct8D5Cpy/wAUKXLDAhQpcuMBFCly0wMUKXLzAJQpcskAKXKrApQtcpsBlC1yuwOULXKHAFQtcqcCVC1ylwFULXK3A1Qtco8A1C1yrwLULXKfAdQtcr8D1C9ygwA0L3KjAjQvcpMBNC9yswM0L3KLALQvcqsCtC9ymwG0L3K7A7QvcocAdC9ypwJ0L3KXAXQvcrcDdC9yjwD0L3KvAvQvcp8B9C9yvwP0LPKDAAws8qMCDCzykwEMLPKzAwws8osAjCzyqwKMLPKbAYws8rsDjCzyhwBMLPKlACzy5wFMKPLXA0wo8vcAzCjyzwLMKPLvAcwocXuC5BZ5X4PkFXlDghQVeVODFBV5S4KUFXlbg5QVeUeCVBQ4KDAoMC4wKjAtMCkwLzArMCywKLAusCqwLbApsC+wK7Au8qsCrC7ymwGsLvK7A6wu8ocAbC7ypwJsLvKXAWwu8rcDbC7yjwDsLvKvAuwscUeA9Bd5b4H0F3l/gAwU+WODIAkcVOLrAMQU+VODYAh8u8JECHy3wsQIfL/CJAp8s8KkCny7wmQKfLfC5Ap8v8IUCXyzwpQJfLvCVAl8t8LUCXy/wjQLfLPCtAt8u8J0C3y3wvQLfL/CDAj8s8KMCPy7wkwI/LfCzAj8v8IsCvyzwqwK/LvCbAr8t8LsCvy/whwJ/LPCnAn/+fz9D8dcCfyvw9wL/KPDPAv8q8O8C/ynw3wL/K3BIieOUOG6J45U4fokTlDhhiROVOHGJk5Q4tMRJS5ysxMlLnKJkWPC//8LUJU5T4rQlTlfi9CXOUOKMJc5U4swlzlLirCUOK3G2EmcvcY4S5yxxrhLnLnGeEuctcb4S5y9xgRIXLHGhEhcucZESFy1xsRIXL3GJEpcskRKXKnHpEpcpcdkSlytx+RJXKHHFElcqceUSVylx1RJXK3H1Etcocc0S1ypx7RLXKXHdEtcrcf0SNyhxwxI3KnHjEjcpcdMSNytx8xK3KHHLErcqcesStylx2xK3K3H7EncocccSdypx5xJ3KXHXEncrcfcS9yhxzxL3KnHvEvcpcd8S9ytx/xIPKPHAEg8q8eASDynx0BIPK/HwEo8o8cgSjyrx6BKPKfHYEo8r8fgSTyjxxBJPKtESTy7xlBJPLfG0Ek8v8YwSzyzxrBLPLvGcEoeXeG6J55V4fokXlHhhiReVeHGJl5R4aYmXlXh5iVeUeGWJgxKDEsMSoxLjEpMS0xKzEvMSixLLEqsS6xKbEtsSuxL7Eq8q8eoSrynx2hKvK/H6Em8o8cYSbyrx5hJvKfHWEm8r8fYS7yjxzhLvKvHuEkeUeE+J95Z4X4n3l/hAiQ+WOLLEUSWOLnFMiQ+VOLbEh0t8pMRHS3ysxMdLfKLEJ0t8qsSnS3ymxGdLfK7E50t8ocQXS3ypxJdLfKXEV0t8rcTXS3yjxDdLfKvEt0t8p8R3S3yvxPdL/KDED0v8qMSPS/ykxE9L/KzEz0v8osQvS/yqxK9L/KbEb0v8rsTvS/yhxB9L/KnEn0v8pcRfS/ytxN9L/KPEP0v8q8S/S/ynxH9L/K/EIRWOU+G4FY5X4fgVTlDhhBVOVOHEFU5S4dAKJ61wsgonr3CKCqescKoKp65wmgqnrXC6CqevcIYKZ6xwpgpnrnCWCmetcFiFs1U4e4VzVDhnhXNVOHeF81Q4b4XzVTh/hQtUuGCFC1W4cIWLVLhohYtVuHiFS1S4ZIVUuFSFS1e4TIXLVrhchctXuEKFK1a4UoUrV7hKhatWuFqFq1e4RoVrVrhWhWtXuE6F61a4XoXrV7hBhRtWuFGFG1e4SYWbVrhZhZtXuEWFW1a4VYVbV7hNhdtWuF2F21e4Q4U7VrhThTtXuEuFu1a4W4W7V7hHhXtWuFeFe1e4T4X7VrhfhftXeECFB1Z4UIUHV3hIhYdWeFiFh1d4RIVHVnhUhUdXeEyFx1Z4XIXHV3hChSdWeFKFVnhyhadUeGqFp1V4eoVnVHhmhWdVeHaF51Q4vMJzKzyvwvMrvKDCCyu8qMKLK7ykwksrvKzCyyu8osIrKxxUGFQYVhhVGFeYVJhWmFWYV1hUWFZYVVhX2FTYVthV2Fd4VYVXV3hNhddWeF2F11d4Q4U3VnhThTdXeEuFt1Z4W4W3V3hHhXdWeFeFd1c4osJ7Kry3wvsqvL/CByp8sMKRFY6qcHSFYyp8qMKxFT5c4SMVPlrhYxU+XuETFT5Z4VMVPl3hMxU+W+FzFT5f4QsVvljhSxW+XOErFb5a4WsVvl7hGxW+WeFbFb5d4TsVvlvhexW+X+EHFX5Y4UcVflzhJxV+WuFnFX5e4RcVflnhVxV+XeE3FX5b4XcVfl/hDxX+WOFPFf5c4S8V/lrhbxX+XuEfFf5Z4V8j8O8K/6nw3wr/q3BIjePUOG6N49U4fo0T1DhhjRPVOHGNk9Q4tMZJa5ysxslrnOL/2RCcqsapa5ymxmlrnK7G6WucocYZa5ypxplrnKXGWWscVuNsNc5e4xw1zlnjXDXOXeM8Nc5b43w1zl/jAjUuWONCNS5c4yI1LlrjYjUuXuMSNS5ZIzUuVePSNS5T47I1Llfj8jWuUOOKNa5U48o1rlLjqjWuVuPqNa5R45o1rlXj2jWuU+O6Na5X4/o1blDjhjVuVOPGNW5S46Y1blbj5jVuUeOWNW5V49Y1blPjtjVuV+P2Ne5Q44417lTjzjXuUuOuNe5W4+417lHjnjXuVePeNe5T47417lfj/jUeUOOBNR5U48E1HlLjoTUeVuPhNR5R45E1HlXj0TUeU+OxNR5X4/E1nlDjiTWeVKM1nlzjKTWeWuNpNZ5e4xk1nlnjWTWeXeM5NQ6v8dwaz6vx/BovqPHCGi+q8eIaL6nx0hovq/HyGq+o8coaBzUGNYY1RjXGNSY1pjVmNeY1FjWWNVY11jU2NbY1djX2NV5V49U1XlPjtTVeV+P1Nd5Q44013lTjzTXeUuOtNd5W4+013lHjnTXeVePdNY6o8Z4a763xvhrvr/GBGh+scWSNo2ocXeOYGh+qcWyND9f4SI2P1vhYjY/X+ESNT9b4VI1P1/hMjc/W+FyNz9f4Qo0v1vhSjS/X+EqNr9b4Wo2v1/hGjW/W+FaNb9f4To3v1vheje/X+EGNH9b4UY0f1/hJjZ/W+FmNn9f4RY1f1vhVjV/X+E2N39b4XY3f1/hDjT/W+FONP9f4S42/1vhbjb/X+EeNf9b4V41/1/hPjf/W+F+NQxocp8FxGxyvwfEbnKDBCRucqMGJG5ykwaENTtrgZA1O3uAUDU7Z4FQNTt3gNA1O2+B0DU7f4AwNztjgTA3O3OAsDc7a4LAGZ2tw9gbnaHDOBudqcO4G52lw3gbna3D+BhdocMEGF2pw4QYXaXDRBhdrcPEGl2hwyQZpcKkGl25wmQaXbXC5BpdvcIUGV2xwpQZXbnCVBldtcLUGV29wjQbXbHCtBtducJ0G121wvQbXb3CDBjdscKMGN25wkwY3bXCzBjdvcIsGt2xwqwa3bnCbBrdtcLsGt29whwZ3bHCnBnducJcGd21wtwZ3b3CPBvdscK8G925wnwb3bXC/Bvdv8IAGD2zwoAYPbvCQBg9t8LAGD2/wiAaPbPCoBo9u8JgGj23wuAaPb/CEBk9s8KQGbfDkBk9p8NQGT2vw9AbPaPDMBs9q8OwGz2lweIPnNnheg+c3eEGDFzZ4UYMXN3hJg5c2eFmDlzd4RYNXNjhoMGgwbDBqMG4waTBtMGswb7BosGywarBusGmwbbBrsG/wqgavbvCaBq9t8LoGr2/whgZvbPCmBm9u8JYGb23wtgZvb/COBu9s8K4G725wRIP3NHhvg/c1eH+DDzT4YIMjGxzV4OgGxzT4UINjG3y4wUcafLTBxxp8vMEnGnyywacafLrBZxp8tsHnGny+wRcafLHBlxp8ucFXGny1wdcafL3BNxp8s8G3Gny7wXcafLfB9xp8v8EPGvywwY8a/LjBTxr8tMHPGvy8wS8a/LLBrxr8usFvGvy2we8a/L7BHxr8scGfGvy5wV8a/LXB3xr8vcE/Gvyzwb8a/LvBfxr8t8H/GhzS4jgtjtvieC2O3+IELU7Y4kQtTtziJC0ObXHSFidrcfIWp2hxyhananHqFqdpcdoWp2tx+hZnaHHGFmdqceYWZ2lx1haHtThbi7O3OEeLc7Y4V4tztzhPi/O2OF+L87e4QIsLtrhQiwu3uEiLi7a4WIuLt7hEi0u2SItLtbh0i8u0uGyLy7W4fIsrtLhiiyu1uHKLq7S4aourtbh6i2u0uGaLa7W4dovrtLhui+u1uH6LG7S4YYsbtbhxi5u0uGmLm7W4eYtbtLhli1u1uHWL27S4bYvbtbh9izu0uGOLO7W4c4u7tLhri7u1uHuLe7S4Z4t7tbh3i/u0uG+L+7W4f4sHtHhgiwe1eHCLh7R4aIuHtXh4i0e0eGSLR7V4dIvHtHhsi8e1eHyLJ7R4YosntWiLJ7d4Sountnhai6e3eEaLZ7Z4Votnt3hOi8NbPLfF81o8v8ULWrywxYtavLjFS1q8tMXLWry8xStavLLFQYtBi2GLUYtxi0mLaYtZi3mLRYtli1WLdYtNi22LXYt9i1e1eHWL17R4bYvXtXh9ize0eGOLN7V4c4u3tHhri7e1eHuLd7R4Z4t3tXh3iyNavKfFe1u8r8X7W3ygxQdbHNniqBZHtzimxYdaHNviwy0+0uKjLT7W4uMtPtHiky0+1eLTLT7T4rMtPtfi8y2+0OKLLb7U4sstvtLiqy2+1uLrLb7R4pstvtXi2y2+0+K7Lb7X4vstftDihy1+1OLHLX7S4qctftbi5y1+0eKXLX7V4tctftPity1+1+L3Lf7Q4o8t/tTizy3+0uKvLf7W4u8t/tHiny3+1eLfLf7T4r8t/tfikA7H6XDcDsfrcPwOJ+hwwg4n6nDiDifpcGiHk3Y4WYeTdzhFh1N2OFWHU3c4TYfTdjhdh9N3OEOHM3Y4U4czdzhLh7N2OKzD2TqcvcM5Opyzw7k6nLvDeTqct8P5Opy/wwU6XLDDhTpcuMNFOly0w8U6XLzDJTpcskM6XKrDpTtcpsNlO1yuw+U7XKHDFTtcqcOVO1ylw1U7XK3D1Ttco8M1O1yrw7U7XKfDdTtcr8P1O9ygww073KjDjTvcpMNNO9ysw8073KLDLTvcqsOtO9ymw2073K7D7TvcocMdO9ypw5073KXDXTvcrcPdO9yjwz073KvDvTvcp8N9O9yvw/07PKDDAzs8qMODOzykw0M7PKzDwzs8osMjOzyqw6M7PKbDYzs8rsPjOzyhwxM7PKlDOzy5w1M6PLXD0zo8vcMzOjyzw7M6PLvDczoc3uG5HZ7X4fkdXtDhhR1e1OHFHV7S4aUdXtbh5R1e0eGVHQ46DDoMO4w6jDtMOkw7zDrMOyw6LDusOqw7bDpsO+w67Du8qsOrO7ymw2s7vK7D6zu8ocMbO7ypw5s7vKXDWzu8rcPbO7yjwzs7vKvDuzsc0eE9Hd7b4X0d3t/hAx0+2OHIDkd1OLrDMR0+1OHYDh/u8JEOH+3wsQ4f7/CJDp/s8KkOn+7wmQ6f7fC5Dp/v8IUOX+zwpQ5f7vCVDl/t8LUOX+/wjQ7f7PCtDt/u8J0O3+3wvW7skPc7/KDDDzv8qMOPO/ykw087/KzDzzv8osMvO/yqw687/KbDbzv8rsPvO/yhwx87/KnDnzv8pcNfhw/xtw5/7/CPDv/s8K8O/+7wnw7/7fC/Dof0OE6P4/Y4Xo/j9zhBjxP2OFGPE/c4SY9De5y0x8l6nLzHKXqcssepepy6x2l6nLbH6XqcvscZepyxx5l6nLnHWXqctcdhPc7W4+w9ztHjnD3O1ePcPc7T47w9ztfj/D0u0OOCPS7U48I9LtLjoj0u1uPiPS7R45I90uNSPS7d4zI9Ltvjcj0u3+MKPa7Y40o9rtzjKj2u2uNqPa7e4xo9rtnjWj2u3eM6Pa7b43o9rt/jBj1u2ONGPW7c4yY9btrjZj1u3uMWPW7Z41Y9bt3jNj1u2+N2PW7f4w497tjjTj3u3OMuPe7a42497t7jHj3u2eNePe7d4z497tvjfj3u3+MBPR7Y40E9HtzjIT0e2uNhPR7e4xE9HtnjUT0e3eMxPR7b43E9Ht/jCT2e2ONJPdrjyT2e0uOpPZ7W4+k9ntHjmT2e1ePZPZ7T4/Aez+3xvB7P7/GCHi/s8aIeL+7xkh4v7fGyHi/v8Yoer+xx0GPQY9hj1GPcY9Jj2mPWY95j0WPZY9Vj3WPTY9tj12Pf41U9Xt3jNT1e2+N1PV7f4w093tjjTT3e3OMtPd7a42093t7jHT3e2eNdPd7d44ge7+nx3h7v6/H+Hh/o8cEeR/Y4qsfRPY7p+T+W7akJ04NhtvDEtm1zxbZt27ZXNNHEtvHcNmKPY9u27V1vffsndFddB33QDh/giAGOHOCoAY4e4JgBjh3gEwN8coBPDfDpAT4zwGcH+NwAnx/gCwN8cYAvDfDlAb4ywFcH+NoAXx/gGwN8c4BvDfDtAb4zwHcH+N4A3x/gBwP8cIAfDfDjAX4ywE8H+NkAPx/gFwP8coBfDfDrAX4zwG8H+N0Avx/gDwP8cYA/DfDnAf4ywF8H+NsAfx/gHwP8c4B/DfDvAf4zwH8H+N8AhwQ4ToDjBjhegOMHOEGAEwY4UYATBzhJgJMGOFmAkwc4RYBTBjhVgFMHOE2A0wY4XYDTBzhDgDMGOFOAMwc4S4CzBjhbgLMHOEeAcwY4V4BzBzhPgPMGOF+A8we4QIALBrhQgAsHuEiAiwa4WICLB7hEgEsGuFSASwdIgMsEuGyAywW4fIArBLhigCsFuHKAqwS4aoCrBbh6gGsEuGaAawW4doDrBLhugOsFuH6AGwS4YYAbBbhxgJsEuGmAmwW4eYBbBLhlgFsFuHWA2wS4bYDbBbh9gDsEuGOAOwW4c4C7BLhrgLsFuHuAewS4Z4B7Bbh3gPsEuG+A+wW4f4AHBHhggAcFeHCAhwR4aICHBXh4gEcEeGSARwV4dIDHBHhsgMcFeHyAJwR4YoAnBXhygKcEaICnBnhagKcHeEaAZwY4NMCzAjw7wHMCPDfA8wIcFuD5AV4Q4IUBXhTgxQFeEuClAV4W4OUBXhHglQFeFeDVAV4T4LUBXhfg9QHeEOCNAd4U4M0B3hLgrQHeFuDtAd4R4J0B3hXgIMAgwDDAKMA4wCTANMAswDzAIsAywCrAOsAmwDbALsA+wLsDvCfAewO8L8D7A3wgwAcDfCjAhwN8JMBHA3wswMcDHB7giABHBjgqwNEBjglwbIBPBPhkgE8F+HSAzwT4bIDPBfh8gC8E+GKALwX4coCvBPhqgK8F+HqAbwT4ZoBvBfh2gO8E+G6A7wX4foAfBPhhgB8F+HGAnwT4aYCfBfh5gF8E+GWAXwX4dYDfBPhtgN8F+H2APwT4Y4A/BfhzgL8E+GuAvwX4e4B/BPhngH8F+HeA/wT4b4D/BeM5JMRxQhw3xPFCHD/ECUKcMMSJQpw4xElCnDTEyUKcPMQpQpwyxKlCnDrEaUKcNsTpQpw+xBlCnDHEmUKcOcRZQpw1xNlCnD3EOUKcM8S5Qpw7xHlCnDfE+UKcP8QFQlwwxIVCXDjERUJcNMTFQlw8xCVCXDLEpUJcOkRCXCbEZUNcLsTlQ1whxBVDXCnElUNcJcRVQ1wtxNVDXCPENUNcK8S1Q1wnxHVDXC/E9UPcIMQNQ9woxI1D3CTETUPcLMTNQ9wixC1D3CrErUPcJsRtQ9wuxO1D3CHEHUPcKcSdQ9wlxF1D3C3E3UPcI8Q9Q9wrxL1D3CfEfUPcL8T9QzwgxANDPCjEg0M8JMRDQzwsxMNDPCLEI0M8KsSjQzwmxGNDPC7E40M8IcQTQzwpxJNDPCVEQzw1xNNCPD3EM0I8M8ShIZ4V4tkhnhPiuSGeF+KwEM8P8YIQLwzxohAvDvGSEC8N8bIQLw/xihCvDPGqEK8O8ZoQrw3xuhCvD/GGEG8M8aYQbw7xlhBvDfG2EG8P8Y4Q7wzxrhAHIQYhhiFGIcYhJiGmIWYh5iEWIZYhViHWITYhtiF2IfYh3h3iPSHeG+J9Id4f4gMhPhjiQyE+HOIjIT4a4mMhPh7i8BBHhDgyxFEhjg5xTIhjQ3wixCdDfCrEp0N8JsRnQ3wuxOdDfCHEF0N8KcSXQ3wlxFdDfC3E10N8I8Q3Q3wrxLdDfCfEd0N8L8T3Q/wgxA9D/CjEj0P8JMRPQ/wsxM9D/CLEL0P8KsSvQ/wmxG9D/C7E70P8IcQfQ/wpxJ9D/CXEX0P8LcTfQ/wjxD9D/CvEv0P8J8R/Q/wvxCERjhPhuBGOF+H4EU4Q4YQRThThxBFOEuGkEU4W4eQRThHhlBFOFeHUEU4T4bQRThfh9BHOEOGMEc4U4cwRzhLhrBHOFuHsEc4R4ZwRzhXh3BHOE+G8Ec4X4fwRLhDhghEuFOHCES4S4aIRLhbh4hEuEeGSES4V4dIREuEyES4b4XIRLh/hChGuGOFKEa4c4SoRrhrhahGuHuEaEa4Z4VoRrh3hOhGuG+F6Ea4f4QYRbhjhRhFuHOEmEW4a4WYRbh7hFhFuGeFWEW4d4TYRbhvhdhFuH+EOEe4Y4U4R7hzhLhHuGuFuEe4e4R4R7hnhXhHuHeE+Ee4b4X4R7h/hAREeGOFBER4c4SERHhrhYREeHuERER4Z4VERHh3hMREeG+FxER4f4QkRnhjhSRGeHOEpERrhqRGeFuHpEZ4R4ZkRDo3wrAjPjvCcCM+N8LwIh0V4foQXRHhhhBdFeHGEl0R4aYSXRXh5hFdEeGWEV0V4dYTXRHhthNdFeH2EN0R4Y4Q3RXhzhLdEeGuEt0V4e4R3RHhnhHdFOIgwiDCMMIowjjCJMI0wizCPsIiwjLCKsI6wibCNsIuwj/DuCO+J8N4I74vw/ggfiPDBCB+K8OEIH4nw0Qgfi/DxCIdHOCLCkRGOinB0hGMiHBvhExE+GeFTET4d4TMRPhvhcxE+H+ELEb4Y4UsRvhzhKxG+GuFrEb4e4RsRvhnhWxG+HeE7Eb4b4XsRvh/hBxF+GOFHEX4c4ScRfhrhZxF+HuEXEX4Z4VcRfh3hNxF+G+F3EX4f4Q8R/hjhTxH+HOEvEf4a4W8R/h7hHxH+GeFfEf4d4T8R/hvhfxEOiXGcGMeNcbwYx49xghgnjHGiGCeOcZIYJ41xshgnj3GKGKeMcaoYp45xmhinjXG6GKePcYYYZ4xxphhnjnGWGGeNcbYYZ49xjhjnjHGuGOeOcZ4Y541xvhjnj3GBGBeMcaEYF45xkRgXjXGxGBePcYkYl4xxqRiXjpEYl4lx2RiXi3H5GFeIccUYV4px5RhXiXHVGFeLcfUY14hxzRjXinHtGNeJcd0Y14tx/Rg3iHHDGDeKceMYN4lx0xg3i3HzcYcM+V9vW8a4VYxbx7hNjNvGuF2M28e4Q4w7xrhTjDvHuEuMu8a4W4y7x7hHjHvGuFeMe8e4T4z7xrhfjPvHeECMB8Z4UIwHx3hIjIfGeFiMh8d4RIxHxnhUjEfHeEyMx8Z4XIzHx3hCjCfGeFKMJ8d4SozGeGqMp8V4eoxnxHhmjENjPCvGs2M8J8ZzYzwvxmExnh/jBTFeGONFMV4c4yUxXhrjZTFeHuMVMV4Z41UxXh3jNTFeG+N1MV4f4w0x3hjjTTHeHOMtMd4a420x3h7jHTHeGeNdMQ5iDGIMY4xijGNMYkxjzGLMYyxiLGOsYqxjbGJsY+xi7GO8O8Z7Yrw3xvtivD/GB2J8MMaHYnw4xkdifDTGx2J8PMbhMY6IcWSMo2IcHeOYGMfG+ESMT8b4VIxPx/hMjM/G+FyMz8f4QowvxvhSjC/H+EqMr8b4Woyvx/hGjG/G+FaMb8f4TozvxvhejO/H+EGMH8b4UYwfx/hJjJ/G+FmMn8f4RYxfxvhVjF/H+E2M38b4XYzfx/hDjD/G+FOMP8f4S4y/xvhbjL/H+EeMf8b4V4x/x/hPjP/G+F+MQxIcJ8FxExwvwfETnCDBCROcKMGJE5wkwUkTnCzByROcIsEpE5wqwakTnCbBaROcLsHpE5whwRkTnCnBmROcJcFZE5wtwdkTnCPBOROcK8G5E5wnwXkTnC/B+RNcIMEFE1wowYUTXCTBRRNcLMHFE1wiwSUTXCrBpRMkwWUSXDbB5RJcPsEVElwxwZUSXDnBVRJcNcHVElw9wTUSXDPBtRJcO8F1Elw3wfUSXD/BDRLcMMGNEtw4wU0S3DTBzRLcPMEtEtwywa0S3DrBbRLcNsHtEtw+wR0S3DHBnRLcOcFdEtw1wd0S3D3BPRLcM8G9Etw7wX0S3DfB/RLcP8EDEjwwwYMSPDjBQxI8NMHDEjw8wSMSPDLBoxI8OsFjEjw2weMSPD7BExI8McGTEjw5wVMSNMFTEzxt2KSenuAZCZ6Z4NAEz0rw7ATPSfDcBM9LcFiC5yd4QYIXJnhRghcneEmClyZ4WYKXJ3hFglcmeFWCVyd4TYLXJnhdgtcneEOCNyZ4U4I3J3hLgrcmeFuCtyd4R4J3JnhXgoMEgwTDBKME4wSTBNMEswTzBIsEywSrBOsEmwTbBLsE+wTvTvCeBO9N8L4E70/wgQQfTPChBB9O8JEEH03wsQQfT3B4giMSHJngqARHJzgmwbEJPpHgkwk+leDTCT6T4LMJPpfg8wm+kOCLCb6U4MsJvpLgqwm+luDrCb6R4JsJvpXg2wm+k+C7Cb6X4PsJfpDghwl+lODHCX6S4KcJfpbg5wl+keCXCX6V4NcJfpPgtwl+l+D3Cf6Q4I8J/pTgzwn+kuCvCf6W4O8J/pHgnwn+leDfCf6T4L8J/pfgkBTHSXHcFMdLcfwUJ0hxwhQnSnHiFCdJcdIUJ0tx8hSnSHHKFKdKceoUp0lx2hSnS3H6FGdIccYUZ0px5hRnSXHWFGdLcfYU50hxzhTnSnHuFOdJcd4U50tx/hQXSHHBFBdKceEUF0lx0RQXS3HxFJdIcckUl0px6RRJcZkUl01xuRSXT3GFFFdMcaUUV05xlRRXTXG1FFdPcY0U10xxrRTXTnGdFNdNcb0U109xgxQ3THGjFDdOcZMUN01xsxQ3T3GLFLdMcasUt05xmxS3TXG7FLdPcYcUd0xxpxR3TnGXFHdNcbcUd09xjxT3THGvFPdOcZ8U901xvxT3T/GAFA9M8aAUD07xkBQPTfGwFA9P8YgUj0zxqBSPTvGYFI9N8bgUj0/xhBRPTPGkFE9O8ZQUTfHUFE9L8fQUz0jxzBSHpnhWimeneE6K56Z4XorDUjw/xQtSvDDFi1K8OMVLUrw0xctSvDzFK1K8MsWrUrw6xWtSvDbF61K8PsUbUrwxxZtSvDnFW1K8NcXbUrw9xTtSvDPFu1IcpBikGKYYpRinmKSYppilmKdYpFimWKVYp9ik2KbYpdineHeK96R4b4r3pXh/ig+k+GCKD6X4cIqPpPhoio+l+HiKw1MckeLIFEelODrFMSmOTfGJFJ9M8akUn07xmRSfTfG5FJ9P8YUUX0zxpRRfTvGVFF9N8bUUX0/xjRTfTPGtFN9O8Z0U303xvRTfT/GDFD9M8aMUP07xkxQ/TfGzFD9P8YsUv0zxqxS/TvGbFL9N8bsUv0/xhxR/TPGnFH9O8ZcUf03xtxR/T/GPFP9M8a8U/07xnxT/TfG/FIdkOE6G42Y4XobjZzhBhhNmOFGGE2c4SYaTZjhZhpNnOEWGU2Y4VYZTZzhNhtNmOF2G02c4Q4YzZjhThjNnOEuGs2Y4W4azZzhHhnNmOFeGc2c4T4bzZjhfhvNnuECGC2a4UIYLZ7hIhotmuFiGi2e4RIZLZrhUhktnSIbLZLhshstluHyGK2S4YoYrZbhyhqtkuGqGq2W4eoZrZLhmhmtluHaG62S4bobrZbh+hhtkuGGGG2W4cYabZLhphptluHmGW2S4ZYZbZbh1httkuG2G22W4fYY7ZLhjhjtluHOGu2S4a4a7Zbh7hntkuGeGe2W4d4b7ZLhvhvtluH/2v4GBB2Z4UIYHZ3hIhodmeFiGh2d4RIZHZnhUhkdneEyGx2Z4XIbHZ3hChidmeFKGJ2d4SoZmeGqGp2V4eoZnZHhmhkMzPCvDszM8J8NzMzwvw2EZnp/hBRlemOFFGV6c4SUZXprhZRlenuEVGV6Z4VUZXp3hNRlem+F1GV6f4Q0Z3pjhTRnenOEtGd6a4W0Z3p7hHRnemeFdGQ4yDDIMM4wyjDNMMkwzzDLMMywyLDOsMqwzbDJsM+wy7DO8O8N7Mrw3w/syvD/DBzJ8MMOHMnw4w0cyfDTDxzJ8PMPhGY7IcGSGozIcneGYDMdm+ESGT2b4VIZPZ/hMhs9m+FyGz2f4QoYvZvhShi9n+EqGr2b4WoavZ/hGhm9m+FaGb2f4TobvZvhehu9n+EGGH2b4UYYfZ/hJhp9m+FmGn2f4RYZfZvhVhl9n+E2G32b4XYbfZ/hDhj9m+FOGP2f4S4a/Zvhbhr9n+EeGf2b4V4Z/Z/hPhv9m+F+GQ3IcJ8dxcxwvx/FznCDHCXOcKMeJc5wkx0lznCzHyXOcIscpc5wqx6lznCbHaXOcLsfpc5whxxlznCnHmXOcJcdZc5wtx9lznCPHOXOcK8e5c5wnx3lznC/H+XNcIMcFc1wox4VzXCTHRXNcLMfFc1wixyVzXCrHpXMkx2VyXDbH5XJcPscVclwxx5VyXDnHVXJcNcfVclw9xzVyXDPHtXJcO8d1clw3x/VyXD/HDXLcMMeNctw4x01y3DTHzXLcPMctctwyx61y3DrHbXLcNsftctw+xx1y3DHHnXLcOcddctw1x91y3D3HPXLcM8e9ctw7x31y3DfH/XLcP8cDcjwwx4NyPDjHQ3I8NMfDcjw8xyNyPDLHo3I8Osdjcjw2x+NyPD7HE3I8MceTcjw5x1NyNMdTczwtx9NzPCPHM3McmuNZOZ6d4zk5npvjeTkOy/H8HC/I8cIcL8rx4hwvyfHSHC/L8fIcr8jxyhyvyvHqHK/J8docr8vx+hxvyPHGHG/K8eYcb8nx1hxvy/H2HO/I8c4c78pxkGOQY5hjlGOcY5JjmmOWY55jkWOZY5VjnWOTY5tjl2Of49053pPjvTnel+P9OT6Q44M5PpTjwzk+kuOjOT6W4+M5Ds9xRI4jcxyV4+gcx+Q4Nscncnwyx6dyfDrHZ3J8Nsfncnw+xxdyfDHHl3J8OcdXcnw1x9dyfD3HN3J8M8e3cnw7x3dyfDfH93J8P8cPcvwwx49y/DjHT3L8NMfPcvw8xy9y/DLHr3L8Osdvcvw2x+9y/D7HH3L8Mcefcvw5x19y/DXH33L8Pcc/cvwzx79y/DvHf3L8N8f/chxS4DgFjlvgeAWOX+AEBU5Y4EQFTlzgJAVOWuBkBU5e4BQFTlngVAVOXeA0BU5b4HQFTl/gDAXOWOBMBc5c4CwFzlrgbAXOXuAcBc5Z4FwFzl3gPAXOW+B8Bc5f4AIFLljgQgUuXOAiBS5a4GIFLl7gEgUuWeBSBS5dIAUuU+CyBS5X4PIFrlDgigWuVODKBa5S4KoFrlbg6gWuUeCaBa5V4NoFrlPgugWuV+D6BW5Q4IYFblTgxgVuUuCmBW5W4OYFblHglgVuVeDWBW5T4LYFblfg9gXuUOCOBe5U4M4F7lLgrgXuVuDuBe5R4J4F7lXg3gXuU+C+Be5X4P4FHlDggQUeVODBBR5S4KEFHlbg4QUeUeCRBR5V4NEFHlPgsQUeV+DxBZ5Q4IkFnlTgyQWeUqAFnlrgaQWeXuAZBZ5Z4NACzyrw7ALPKfDcAs8rcFiB5xd4QYEXFnhRgRcXeEmBlxZ4WYGXF3hFgVcWeFWBVxd4TYHXFnhdgdcXeEOBNxZ4U4E3F3hLgbcWeFuBtxd4R4F3FnhXgYMCgwLDAqMC4wKTAtMCswLzAosCy4KJhgwZYl1gU2BbYFdgX+DdBd5T4L0F3lfg/QU+UOCDBT5U4MMFPlLgowU+VuDjBQ4vcESBIwscVeDoAscUOLbAJwp8ssCnCny6wGcKfLbA5wp8vsAXCnyxwJcKfLnAVwp8tcDXCny9wDcKfLPAtwp8u8B3Cny3wPcKfL/AD8b/vyP9/yx+XOAnBX5a4GcFfl7gFwV+WeBXBX5d4DcFflvgdwV+X+APBf5Y4E8F/lzgLwX+WuBvBf5e4B8F/lngXwX+XeA/Bf5b4H8FDilxnBLHLXG8EscvcYISJyxxohInLnGSEictcbISJy9xihKnLHGqEqcucZoSpy1xuhKnL3GGEmcscaYSZy5xlhJnLXG2EmcvcY4S5yxxrhLnLnGeEuctcb4S5y9xgRIXLHGhEhcucZESFy1xsRIXL3GJEpcscakSly6REpcpcdkSlytx+RJXKHHFElcqceUSVylx1RJXK3H1Etcocc0S1ypx7RLXKXHdEtcrcf0SNyhxwxI3KnHjEjcpcdMSNytx8xK3KHHLErcqcesStylx2xK3K3H7EncocccSdypx5xJ3KXHXEncrcfcS9yhxzxL3KnHvEvcpcd8S9ytx/xIPKPHAEg8q8eASDynx0BIPK/HwEo8o8cgSjyrx6BKPKfHYEo8r8fgSTyjxxBJPKvHkEk8p0RJPLfG0Ek8v8YwSzyxxaIlnlXh2ieeUeG6J55U4rMTzS7ygxAtLvKjEi0u8pMRLS7ysxMtLvKLEK0u8qsSrS7ymxGtLvK7E60u8ocQbS7ypxJtLvKXEW0u8rcTbS7yjxDtLvKvEQYlBiWGJUYlxiUmJaYlZiXmJRYlliVWJdYlNiW2JXYl9iXeXeE+J95Z4X4n3l/hAiQ+W+FCJD5f4SImPlvhYiY+XOLzEESWOLHFUiaNLHFPi2BKfKPHJEp8q8ekSnynx2RKfK/H5El8o8cUSXyrx5RJfKfHVEl8r8fVJ/r/tEt8q8e0S3ynx3RLfK/H9Ej8o8cMSPyrx4xI/KfHTEj8r8fMSvyjxyxK/KvHrEr8p8dsSvyvx+xJ/KPHHEn8q8ecSfynx1xJ/K/H3kqF/lPhniX+V+HeJ/5T4b4n/lTikwnEqHLfC8Socv8IJKpywwokqnLjCSSqctMLJKpy8wikqnLLCqSqcusJpKpy2wukqnL7CGSqcscKZKpy5wlkqnLXC2SqcvcI5KpyzwrkqnLvCeSqct8L5Kpy/wgUqXLDChSpcuMJFKly0wsUqXLzCJSpcssKlKly6QipcpsJlK1yuwuUrXKHCFStcqcKVK1ylwlUrXK3C1Stco8I1K1yrwrUrXKfCdStcr8L1K9ygwg0r3KjCjSvcpMJNK9ysws0r3KLCLSvcqsKtK9ymwm0r3K7C7SvcocIdK9ypwp0r3KXCXSvcrcLdK9yjwj0r3KvCvSvcp8J9K9yvwv0rPKDCAys8qMKDKzykwkMrPKzCwys8osIjKzyqwqMrPKbCYys8rsLjKzyhwhMrPKnCkys8pUIrPLXC0yo8vcIzKjyzwqEVnlXh2RWeU+G5FZ5X4bAKz6/wggovrPCiCi+u8JIKL63wsgovr/CKCq+s8KoKr67wmgqvrfC6Cq+v8IYKb6zwpgpvrvCWCm+t8LYKb6/wjgrvrPCuCgcVBhWGFUYVxhUmFaYVZhXmFRYVlhVWFdYVNhW2FXYV9hXeXeE9Fd5b4X0V3l/hAxU+WOFDFT5c4SMVPlrhYxU+XuHwCkdUOLLCURWOrnBMhWMrfKLCJyt8qsKnK3ymwmcrfK7C5yt8ocIXK3ypwpcrfKXCVyt8rcLXK3yjwjcrfKvCtyt8p8J3K3yvwvcr/KDCDyv8qMKPK/ykwk8r/KzCzyv8osIvK/yqwq8r/KbCbyv8rsLvK/yhwh8r/KnCnyv8pcJfK/ytwt8r/KPCPyv8q8K/K/ynwn8r/K/CITWOU+O4NY5X4/g1TlDjhDVOVOPENU5S46Q1Tlbj5DVOUeOUNU5V49Q1TlPjtDVOV+P0Nc5Q44w1zlTjzDXOUuOsNc5W4+w1zlHjnDXOVePcNc5T47w1zlfj/DUuUOOCNS5U48I1LlLjojUuVuPiNS5R45I1LlXj0jVS4zI1LlvjcjUuX+MKNa5Y40o1rlzjKjWuWuNqNa5e4xo1rlnjWjWuXeM6Na5b43o1rl/jBjVuWONGNW5c4yY1blrjZjVuXuMWNW5Z41Y1bl3jNjVuW+N2NW5f4w417ljjTjXuXOMuNe5a42417l7jHjXuWeNeNe5d4z417lvjfjXuX+MBNR5Y40E1HlzjITUeWuNhNR5e4xE1HlnjUTUeXeMxNR5b43E1Hl/jCTWeWONJNZ5c4yk1WuOpNZ5W4+k1nlHjmTUOrfGsGs+u8Zwaz63xvBqH1Xh+jRfUeGGNF9V4cY2X1HhpjZfVeHmNV9R4ZY1X1Xh1jdfUeG2N19V4fY031HhjjTfVeHONt9R4a4231Xh7jXfUeGeNd9U4qDGoMawxqjGuMakxrTGrMa+xqLGssaqxrrGpsa2xq7Gv8e4a76nx3hrvq/H+Gh+o8cEaH6rx4RofqfHRGh+r8fEah9c4osaRNY6qcXSNY2ocW+MTNT5Z41M1Pl3jMzU+W+NzNT5f4ws1vljjSzW+XOMrNb5a42s1vl7jGzW+WeNbNb5d4zs1vlvjezW+X+MHNX5Y40c1flzjJzV+WuNnNX5e4xc1flnjVzV+XeM3NX5b43c1fl/jDzX+WONPNf5c4y81/lrjbzX+XuMfNf5Z4181/l3jPzX+W+N/NQ5pcJwGx21wvAbHb3CCBidscKIGJ25wkgYnbXCyBidvcIoGp2xwqganbnCaBqdtcLoGp29whgZnbHCmBmducJYGZ21wtgZnb3COBudscK4G525wngbnbXC+BudvcIEGF2xwoQYXbnCRBhdtcLEGF29wiQaXbHCpBpdukAaXaXDZBpdrcPkGV2hwxQZXanDlBldpcNUGV2tw9QbXaHDNBtdqcO0G12lw3QbXa3D9BjdocMMGN2pw4wY3aXDTBjdrcPMGt2hwywa3anDrBrdpcNsGt2tw+wZ3aHDHBndqcOcGd2lw1wZ3a3D3BvdocM8G92pw7wb3aXDfBvdrcP8GD2jwwAYPavDgBg9p8NAGD2vw8AaPaPDIBo9q8OgGj2nw2AaPa/D4Bk9o8MQGT2rw5AZPadAGT23wtAZPb/CMBs9scGiDZzV4doPnNHhug+c1OKzB8xu8oMELG7yowYsbvKTBSxu8rMHLG7yiwSsbvKrBqxu8psFrG7yuwesbvKHBGxu8qcGbG7ylwVsbvK3B2xu8o8E7G7yrwUGDQYNhg1GDcYNJg2mDWYN5g0WDZYNVg3WDTYNtg12DfYN3N3hPg/c2eF+D9zf4QIMPNvhQgw83+EiDjzb4WIOPNzi8wRENjmxwVIOjGxzT4NgGn2jwyQafavDpBp9p8NkGn2vw+QZfaPDFBl9q8OUGX2nw1QZfa/D1Bt9o8M0G32rw7QbfafDdBt9r8P0GP2jwwwY/avDjBj9p8NMGP2vw8wa/aPDLBr9q8OsGv2nw2wa/a/D7Bn9o8McGf2rw5wZ/afDXBn9r8PcG/2jwzwb/avDvBv9p8N8G/2twSIvjtDhui+O1OH6LE7Q4YYsTtThxi5O0OGmLk7U4eYtTtDhli1O1OHWL07Q4bYvTtTh9izO0OGOLM7U4c4uztDhri7O1OHuLc7Q4Z4tztTh3i/O0OG+L87U4f4sLtLhgiwu1uHCLi7S4aIuLtbh4i0u0uGSLS7W4dIu0uEyLy7a4XIvLt7hCiyu2uFKLK7e4Sourtrhai6u3uEaLa7a4Votrt7hOi+u2uF6L67e4QYsbtrhRixu3uEmLm7a4WYubt7hFi1u2uFWLW7e4TYvbtrhdi9u3uEOLO7a4U4s7t7hLi7u2uFuLu7e4R4t7trhXi3u3uE+L+7a4X4v7t3hAiwe2eFCLB7d4SIuHtnhYi4e3eESLR7Z4VItHt3hMi8e2eFyLx7d4QosntnhSiye3eEqLtnhqi6e1eHqLZ7R4ZotDWzyrxbNbPKfFc1s8r8VhLZ7f4gUtXtjiRS1e3OIlLV7a4mUtXt7iFS1e2eJVLV7d4jUtXtvidS1e3+INLd7Y4k0t3tziLS3e2uJtLd7e4h0t3tniXS0OWgxaDFuMWoxbTFpMW8xazFssWixbrFqsW2xabFvsWuxbvLvFe1q8t8X7Wry/xQdafLDFh1p8uMVHWny0xcdafLzF4S2OaHFki6NaHN3imBbHtvhEi0+2+FT7f16eafHZFp9r8fkWX2jxxRZfavHlFl9p8dUWX2vx9RbfaPHNFt9q8e0W32nx3Rbfa/H9Fj9o8cMWP2rx4xY/afHTFj9r8fMWv2jxyxa/avHrFr9p8dsWv2vx+xZ/aPHHFn9q8ecWf2nx1xZ/a/H3Fv9o8c8W/2rx7xb/afHfFv/7X54Ox+lw3A7H63D8DifocMIOJ+pw4g4n6XDSDifrcPIOp+hwyg6n6nDqDqfpcNoOp+tw+g5n6HDGDmfqcOYOZ+lw1g5n63D2DufocM4O5+pw7g7n6XDeDufrcP4OF+hwwQ4X6nDhDhfpcNEOF+tw8Q6X6HDJDpfqcOkO6XCZDpftcLkOl+9whQ5X7HClDlfucJUOV+1wtQ5X73CNDtfscK0O1+5wnQ7X7XC9DtfvcIMON+xwow437nCTDjftcLMON+9wiw637HCrDrfucJsOt+1wuw6373CHDnfscKcOd+5wlw537XC3DnfvcI8O9+xwrw737nCfDvftcL8O9+/wgA4P7PCgDg/u8JAOD+3wsA4P7/CIDo/s8KgOj+7wmA6P7fC4Do/v8IQOT+zwpA5P7vCUDu3w1A5P6/D0Ds/o8MwOh3Z4Vodnd3hOh+d2eF6Hwzo8v8MLOryww4s6vLjDSzq8tMPLOry8wys6vLLDqzq8usNrOry2w+s6vL7DGzq8scObOry5w1s6vLXD2zq8vcM7Oryzw7s6HHQYdBh2GHUYd5h0mHaYdZh3WHRYdlh1WHfYdNh22HXYd3h3h/d0eG+H93V4f4cPdPhghw91+HCHj3T4aIePdfh4h8M7HNHhyA5HdTi6wzEdju3wiQ6f7PCpDp/u8JkOn+3wuQ6f7/CFDl/s8KUOX+7wlQ5f7fC1Dl/v8I0O3+zwrQ7f7vCdDt/t8L0O3+/wgw4/7PCjDj/u8JMOP+3wsw4/7/CLDr/s8KsOv+7wmw6/7fC7Dr/v8IcOf+zwpw5/7vCXDn/t8LcOf+/wjw7/7PCvDv/u8J8O/+3wvw6H9DhOj+P2OF6P4/c4QY8T9jhRjxP3OEmPk/Y4WY+T9zhFj1P2OFWPU/c4TY/T9jhdj9P3OEOPM/Y4U48z9zhLj7P2OFuPs/c4R49z9jhXj3P3OE+P8/Y4X4/z97hAjwv2uFCPC/e4SI+L9rhYj4v3uESPS/a4VI9L90iPy/S4bI/L9bh8jyv0uGKPK/W4co+r9Lhqj6v1uHqPa/S4Zo9r9bh2j+v0uG6P6/W4fo8b9Lhhjxv1uHGPm/S4aY+b9bh5j1v0uGWPW/W4dY/b9Lhtj9v1uH2PO/S4Y4879bhzj7v0uGuPu/W4e4979Lhnj3v1uHeP+/S4b4/79bh/jwf0eGCPB/V4cI+H9Hhoj4f1eHiPR/R4ZI9H9Xh0j8f0eGyPx/V4fI8n9Hhijyf1eHKPp/Roj6f2eFqPp/d4Ro9n9ji0x7N6PLvHc3o8t8fzehzW4/k9XtDjhT1e1OPFPV7S46U9Xtbj5T1e0eOVPV7V49U9XtPjtT1e1+P1Pd7Q44093tTjzT3e0uOtPd7W4+093tHjnT3e1eOgx6DHsMeox7jHpMe0x6zHvMeix7LHqse6x6bHtseux77Hu3u8p8d7e7yvx/t7fKDHB3t8qMeHe3ykx0d7fKzHx3sc3uOIHkf2OKrH0T2O6XFsz/9j4R678D4YZounSNoUSW3b7a5t27Zt79q2bTvX30ZtG6ltpMxZ9zrPfIb5vZs1Pj3AZwb47ACfG+DzA3xhgC8O8KUBvjzAVwb46gBfG+DrA3xjgG8O8K0Bvj3Adwb47gDfG+D7A/xggB8O8KMBjh7gxwP8ZICfDvCzAX4+wC8G+OUAvxrg1wP8ZoDfDvC7AX4/wB8G+OMAfxrgzwP8ZYC/DvC3Af4+wD8GOGaAfw7wrwH+PcB/BvjvAP8b4NgBDglwnADHDXC8AMcPcGiAwwKcIMAJAxwe4EQBThzgJAFOGuCIAEcGOFmAkwc4RYBTBjhVgFMHOE2A0wY4XYDTBzhDgDMGOFOAMwc4S4CzBjhbgLMHOEeAcwY4V4BzBzhPgPMGOF+A8we4QIALBrhQgAsHuEiAiwa4WIAEuHiASwS4ZIBLBbh0gMsEuGyAywW4fIArBLhigCsFuHKAqwS4aoCrBbh6gGsEuGaAawW4doDrBLhugOsFuH6AGwS4YYAbBbhxgJsEuGmAmwW4eYBbBLhlgFsFuHWA2wS4bYDbBbh9gDsEuGOAOwW4c4C7BLhrgLsFuHuAewS4Z4B7Bbh3gPsEuG+A+wW4f4AHBHhggAcFeHCAhwR4aICHBXh4gEcEeGSARwV4dIDHBHhsgMcFeHyABnhCgCcGeFKAJwd4SoCnBnhagKcHeEaAZwZ4VoBnB3hOgOcGeF6A5wd4QYAXBnhRgBcHeEmAlwZ4WYCXB3hFgFcGeFWAVwd4TYDXBnhdgNcHeEOANwZ4U4A3B3hLgLcGeFuAtwd4R4B3BnhXgHcHeE+A9wZ4X4D3B/hAgA8G+FCADwf4SICPBvhYgKMCHAQYBBgGGAUYB5gEmAaYBZgHWARYBlgFWAfYBNgG2AXYB/h4gE8E+GSATwX4dIDPBPhsgM8F+HyALwT4YoAvBfhygK8E+GqArwX4eoBvBPhmgG8F+HaA7wT4boDvBfh+gB8E+GGAHwU4OsCPA/wkwE8D/CzAzwP8IsAvhw3xqwC/DvCbAL8N8LsAvw/whwB/DPCnAH8O8JcAfw3wtwB/D/CPAMcE+GeAfwX4d4D/BPhvgP8FODbAISGOE+K4IY4X4vghDg1xWIgThDhhiMNDnCjEiUOcJMRJQxwR4sgQJwtx8hCnCHHKEKcKceoQpwlx2hCnC3H6EGcIccYQZwpx5hBnCXHWEGcLcfYQ5whxzhDnCnHuEOcJcd4Q5wtx/hAXCHHBEBcKceEQFwlx0RAXC5EQFw9xiRCXDHGpEJcOcZkQlw1xuRCXD3GFEFcMcaUQVw5xlRBXDXG1EFcPcY0Q1wxxrRDXDnGdENcNcb0Q1w9xgxA3DHGjEDcOcZMQNw1xsxA3D3GLELcMcasQtw5xmxC3DXG7ELcPcYcQdwxxpxB3DnGXEHcNcbcQdw9xjxD3DHGvEPcOcZ8Q9w1xvxD3D/GAEA8M8aAQDw7xkBAPDfGwEA8P8YgQjwzxqBCPDvGYEI8N8bgQjw/REE8I8cQQTwrx5BBPCfHUEE8L8fQQzwjxzBDPCvHsEM8J8dwQzwvx/BAvCPHCEC8K8eIQLwnx0hAvC/HyEK8I8coQrwrx6hCvCfHaEK8L8foQbwjxxhBvCvHmEG8J8dYQbwvx9hDvCPHOEO8K8e4Q7wnx3hDvC/H+EB8I8cEQHwrx4RAfCfHREB8LcVSIgxCDEMMQoxDjEJMQ0xCzEPMQixDLEKsQ6xCbENsQuxD7EB8P8YkQnwzxqRCfDvGZEJ8N8bkQnw/xhRBfDPGlEF8O8ZUQXw3xtRBfD/GNEN8M8a0Q3w7xnRDfDfG9EN8P8YMQPwzxoxBHh/hxiJ+E+GmIn4X4eYhfhPhliF+F+HWI34T4bYjfhfh9iD+E+GOIP4X4c4i/hPhriL+F+HuIf4Q4JsQ/Q/wrxL9D/CfEf0P8L8SxIQ6JcJwIx41wvAjHj3BohMMinCDCCSMcHuFEEU4c4SQRThrhiAhHRjhZhJNHOEWEU0Y4VYRTRzhNhNNGOF2E00c4Q4QzRjhThDNHOEuEs0Y4W4SzRzhHhHNGOFeEc0c4T4TzRjhfhPNHuECEC0a4UIQLR7hIhItGuFiERLh4hEtEuGSES0W4dITLRLhshMtFuHyEK0S4YoQrRbhyhKtEuGqEq0W4eoRrRLhmhGsN/b/NRoTrRrhehOtHuEGEG0a4UYQbR7hJhJtGuFmEm0e4RYRbRrhVhFtHuE2E20a4XYTbR7hDhDtGuFOEO0e4S4S7RrhbhLtHuEeEe0a4V4R7R7hPhPtGuF+E+0d4QIQHRnhQhAdHeEiEh0Z4WISHR3hEhEdGeFSER0d4TITHRnhchMdHaIQnRHhihCdFeHKEp0R4aoSnRXh6hGdEeGaEZ0V4doTnRHhuhOdFeH6EF0R4YYQXRXhxhJdEeGmEl0V4eYRXRHhlhFdFeHWE10R4bYTXRXh9hDdEeGOEN0V4c4S3RHhrhLdFeHuEd0R4Z4R3RXh3hPdEeG+E90V4f4QPRPhghA9F+HCEj0T4aISPRTgqwkGEQYRhhFE0csSQIZhEmEaYRZhHWERYRlhFWEfYRNhG2EXYR/h4hE9E+GSET0X4dITPRPhshM9F+HyEL0T4YoQvRfhyhK9E+GqEr0X4eoRvRPhmhG9F+HaE70T4boTvRfh+hB9E+GGEH0U4OsKPI/wkwk8j/CzCzyP8IsIvI/wqwq8j/CbCbyP8LsLvI/whwh8j/CnCnyP8JcJfI/wtwt8j/CPCMRH+GeFf0f/9/0f4b4T/RTg2wiExjhPjuDGOF+P4MQ6NcVjMmLH/Pw6PcaIYJ45xkhgnjXFEjCNjnCzGyWOcIsYpY5wqxqljnCbGaWOcLsbpY5whxhljnCnGmWOcJcZZY5wtxtljnCPGOWOcK8a5Y5wnxnljnC/G+WNcIMYFY1woxoVjXCTGRWNcLEZiXDzGJWJcMsalYlw6xmViXDbG5WJcPsYVYlwxxpViXDnGVWJcNcbVYlw9xjViXDPGtWJcO8Z1Ylw3xvViXD/GDWLcMMaNYtw4xk1i3DTGzWLcPMYtYtwyxq1i3DrGbWLcNsbtYtw+xh1i3DHGnWLcOcZdYtw1xt1i3D3GPWLcM8a9Ytw7xn1i3DfG/WLcP8YDYjwwxoNiPDjGQ2I8NMbDYjw8xiNiPDLGo2I8OsZjYjw2xuNiPD5GYzwhxhNjPCnGk2M8JcZTYzwtxtNjPCPGM2M8K8azYzwnxnNjPC/G82O8IMYLY7woxotjvCTGS2O8LMbLY7wixitjvCrGq2O8JsZrY7wuxutjvCHGG2O8KcabY7wlxltjvC3G22O8I8Y7Y7wrxrtjvCfGe2O8L8b7Y3wgxgdjfCjGh2N8JMZHY3wsxlExDmIMYgxjjGKMY0xiTGPMYsxjLGIsY6xirGNsYmxj7GLsY3w8xidifDLGp2J8OsZnYnw2xudifD7GF2J8McaXYnw5xldifDXG12J8PcY3YnwzxrdifDvGd2J8N8b3Ynw/xg9i/DDGj2IcHePHMX4S46cxfhbj5zF+EeOXMX4V49cxfhPjtzF+F+P3Mf4Q448x/hTjzzH+EuOvMf4W4+8x/hHjmBj/jPGvGP+O8Z8Y/43xvxjHxjgkwXESHDfB8RIcP8GhCQ5LcIIEJ0xweIITJThxgpMkOGmCIxIcmeBkCU6e4BQJTpngVAlOneA0CU6b4HQJTp/gDAnOmOBMCc6c4CwJzprgbAnOnuAcCc6Z4FwJzp3gPAnOm+B8Cc6f4AIJLpjgQgkunOAiCS6a4GIJkuDiCS6R4JIJLpXg0gkuk+CyCS6X4PIJrpDgigmulODKCa6S4KoJrpbg6gmukeCaCa6V4NoJrpPgugmul+D6CW6Q4IYJbpTgxglukuCmCW6W4OYJbpHglgluleDWCW6T4LYJbpfg9gnukOCOCe6U4M4J7pLgrgnuluDuCe6R4J4J7pXg3gnuk+C+Ce6X4P4JHpDggQkelODBCR6S4KEJHpbg4QkekeCRCR6V4NEJHpPgsQkel+DxCZrgCQmemOBJCZ6c4CkJnprgaQmenuAZCZ6Z4FkJnp3gOQmem+B5CZ6f4AUJXpjgRQlenOAlCV6a4GUJXp7gFQlemeBVCV6d4DUJXpvgdQlen+ANCd6Y4E0J3pzgLQnemuBtCd6e4B0J3pngXQneneA9Cd6b4H0J3p/gAwk+mOBDCT6c4CMJPprgYwmOSnCQYJBgmGCUYJxgkmCaYJZgnmCRYJlglWCdYJNgm2CXYJ/g4wk+keCTCT6V4NMJPpPgswk+l+DzCb6Q4IsJvpTgywm+kuCrCb6W4OsJvpHgmwm+leDbCb6T4LsJvpfg+wl+kOCHCX6U4OgEP07wkwQ/TfCzBD9P8IsEv0zwqwS/TvCbBL9N8LsEv0/whwR/TPCnBH9O8JcEf03wtwR/T/CPBMck+GeCfyX4d4L/JPhvgv8lODbBISmOk+K4KY6X4vgpDk1xWIoTpDhhisNTnCjFiVOcJMVJUxyR4sgUJ0tx8hSnSHHKFKdKceoUp0lx2hSnS3H6FGdIccYUZ0px5hRnSXHWFGdLcfYU50hxzhTnSnHuFOdJcd4U50tx/hQXSHHBFBdKceEUF0lx0RQXS5EUF09xiRSXTHGpFJdOcZkUl01xuRSXT3GFFFdMcaUUV05xlRRXTXG1FFdPcY0U10xxrRTXTnGdFNdNcb0U109xgxQ3THGjFDdOcZMUN01xsxQ3T3GLFLdMcasUt05xmxS3TXG7FLdPcYcUd0xxpxR3TnGXFHdNcbcUd09xjxT3THGvFPdOcZ8U901xvxT3T/GAFA9M8aAUD07xkBQPTfGwFA9P8YgUj0zxqBSPTvGYFI9N8bgUj0/RFE9I8cQUT0rx5BRPSfHUFE9L8fQUz0jxzBTPSvHsFM9J8dwUz0vx/BQvSPHCFC9K8eIUL0nx0hQvS/HyFK9I8coUr0rx6hSvSfHaFK9L8foUb0jxxhRvSvHmFG9J8dYUb0vx9hTvSPHOFO9K8e4U70nx3hTvS/H+FB9I8cEUH0rx4RQfSfHRFB9LcVSKgxSDFMMUoxTjFJMU0xSzFPMUixTLFKsU6xSbFNsUuxT7FB9P8YkUn0zxqRSfTvGZFJ9N8bkUn0/xhRRfTPGlFF9O8ZUUX03xtRRfT/GNFN9M8a0U307xnRTfTfG9FN9P8YMUP0zxoxRHp/hxip+k+GmKn6X4eYpfpPhlil+l+HWK36T4bYrfpfh9ij+k+GOKP6X4c4q/pPhrir+l+HuKf6Q4JsU/U/wrxb9T/CfFf1P8L8WxKQ7JcJwMx81wvAzHz3BohsMynCDDCTMcnuFEGU6c4SQZTprhiAxHZjhZhpNnOEWGU2Y4VYZTZzhNhtNmOF2G02c4Q4YzZjhThjNnOEuGs2Y4W4azZzhHhnNmOFeGc2c4T4bzZjhfhvNnuECGC2a4UIYLZ7hIhotmuFiGZLh4hktkuGSGS2W4dIbLZLhshstluHyGK2S4YoYrZbhyhqtkuGqGq2W4eoZrZLhmhmtluHaG62S4bobrZbh+hhtkuGGGG2W4cYabZLhphptluHmGW2S4ZYZbZbh1httkuG2G22W4fYY7ZLhjhjtluHOGu2S4a4a7Zbh7hntkuGeGe2W4d4b7ZLhvhvtluH+GB2R4YIYHZXhwhodkeGiGh2V4eIZHZHhkhkdleHSGx2R4bIbHZXh8hmZ4QoYnZnhShidneEqGp2Z4WoanZ3hGhmdmeFaGZ2d4TobnZnhehudneEGGF2Z4UYYXZ3hJhpdmeFmGl2d4RYZXZnhVhldneE2G12Z4XYbXZ3hDhjdmeFOGN2d4S4a3ZnhbhrdneEeGd2Z4V4Z3Z3hPhvdmeF+G92f4QIYPZvhQhg9n+EiGj2b4WIajMhxkGGQYZhhlGGeYZJhmmGWYZ1hkWGZYZVhn2GTYZthl2Gf4eIZPZPhkhk9l+HSGz2T4bIbPZfh8hi9k+GKGL2X4coavZPhqhq9l+HqGb2T4ZoZvZfh2hu9k+G6G72X4foYfZPhhhh9lODrDjzP8JMNPM/wsw88z/CLDLzP8KsOvM/wmw28z/C7D7zP8IcMfM/wpw58z/CXDXzP8LcPfM/wjwzEZ/pnhXxn+neE/Gf6b4X8Zjs1wSI7j5DhujuPlOH6OQ3McluMEOU6Y4/AcJ8px4hwnyXHSHEfkODLHyXKcPMcpcpwyx6lynDrHaXKcNsfpcpw+xxlynDHHmXKcOcdZcpw1x9lynD3HOXKcM8e5cpw7x3lynDfH+XKcP8cFclwwx4VyXDjHRXJcNMfFciTHxXNcIsclc1wqx6VzXCbHZXNcLsflc1whxxVzXCnHlXNcJcdVc1wtx9VzXCPHNXNcK8e1c1wnx3VzXC/H9XPcIMcNc9wox41z3CTHTXPcLMfNc9wixy1z3CrHrXPcJsdtc9wux+1z3CHHHXPcKcedc9wlx11z3C3H3XPcI8c9c9wrx71z3CfHfXPcL8f9czwgxwNzPCjHg3M8JMdDczwsx8NzPCLHI3M8Ksejczwmx2NzPC7H43M0xxNyPDHHk3I8OcdTcjw1x9NyPD3HM3I8M8ezcjw7x3NyPDfH83I8P8cLcrwwx4tyvDjHS3K8NMfLcrw8xytyvDLHq3K8Osdrcrw2x+tyvD7HG3K8Mcebcrw5x1tyvDXH23K8Pcc7crwzx7tyvDvHe3K8N8f7crw/xwdyfDDHh3J8OMdHcnw0x8dyHJXjIMcgxzDHKMc4xyTHNMcsxzzHIscyxyrHOscmxzbHLsd++JAh/zPxRI5P5vhUjk/n+EyOz+b4XI7P5/hCji/m+FKOL+f4So6v5vhajq/n+EaOb+b4Vo5v5/hOju/m+F6O7+f4QY4f5vhRjqNz/DjHT3L8NMfPcvw8xy9y/DLHr3L8Osdvcvw2x+9y/D7HH3L8Mcefcvw5x19y/DXH33L8Pcc/chyT4585/pXj3zn+k+O/Of6X49gchxQ4ToHjFjhegeMXOLTAYQVOUOCEBQ4vcKICJy5wkgInLXBEgSMLnKzAyQucosApC5yqwKkLnKbAaQucrsDpC5yhwBkLnKnAmQucpcBZC5ytwNkLnKPAOQucq8C5C5ynwHkLnK/A+QtcoMAFC1yowIULXKTARQtcrEAKXLzAJQpcssClCly6wGUKXLbA5QpcvsAVClyxwJUKXLnAVQpctcDVCly9wDUKXLPAtQpcu8B1Cly3wPUKXL/ADQrcsMCNCty4wE0K3LTAzQrcvMAtCtyywK0K3LrAbQrctsDtCty+wB0K3LHAnQrcucBdCty1wN0K3L3APQrcs8C9Cty7wH0K3LfA/Qrcv8ADCjywwIMKPLjAQwo8tMDDCjy8wCMKPLLAowo8usBjCjy2wOMKPL5ACzyhwBMLPKnAkws8pcBTCzytwNMLPKPAMws8q8CzCzynwHMLPK/A8wu8oMALC7yowIsLvKTASwu8rMDLC7yiwCsLvKrAqwu8psBrC7yuwOsLvKHAGwu8qcCbC7ylwFsLvK3A2wu8o8A7C7yrwLsLvKfAewu8r8D7C3ygwAcLfKjAhwt8pMBHC3yswFEFDgoMCgwLjAqMC0wKTAvMCswLLAosC6wKrAtsCmwL7ArsC3y8wCcKfLLApwp8usBnCny2wOcKfL7AFwp8scCXCny5wFcKfLXA1wp8vcA3CnyzwLcKfLvAdwp8t8D3Cny/wA8K/LDAjwocXeDHBX5S4KcFflbg5wV+UeCXBX5V4NcFflPgtwV+V+D3Bf5Q4I8F/lTgzwX+UuCvBf5W4O8F/lHgmAL/LPCvAv8u8J8C/y3wvwLHFjikxHFKHLfE8Uocv8ShJQ4rcYISJyxxeIkTlThxiZOUOGmJI0ocWeJkJU5e4hQlTlniVCVOXeI0JU5b4nQlTl/iDCXOWOJMJc5c4iwlzlribCXOXuIcJc5Z4lwlzl3iPCXOW+J8Jc5f4gIlLljiQiUuXOIiJS5a4mIlUuLiJS5R4pIlLlXi0iUuU+KyJS5X4vIlrlDiiiWuVOLKJa5S4qolrlbi6iWuUeKaJa5V4tolrlPiuiWuV+L6JW5Q4oYlblTixiVuUuKmJW5W4uYlblHiliVuVeLWJW5T4rYlblfi9iXuUOKOJe5U4s4l7lLiriXuVuLuJe5R4p4l7lXi3iXuU+K+Je5X4v4lHlDigSUeVOLBJR5S4qElHlbi4SUeUeKRJR5V4tElHlPisSUeV+LxJVriCSWeWOJJJZ5c4iklnlriaSWeXuIZJZ5Z4lklnl3iOSWeW+J5JZ5f4gUlXljiRSVeXOIlJV5a4mUlXl7iFSVeWeJVJV5d4jUlXlvidSVeX+INJd5Y4k0l3lziLSXeWuJtJd5e4h0l3lniXSXeXeI9Jd5b4n0l3l/iAyU+WOJDJT5c4iMlPlriYyWOKnFQYlBiWGJUYlxiUmJaYlZiXmJRYlliVWJdYlNiW2JXYl/i4yU+UeKTJT5V4tMlPlPisyU+V+LzJb5Q4oslvlTiyyW+UuKrJb5W4uslvlHimyW+VeLbJb5T4rslvlfi+yV+UOKHJX5U4ugSPy7xkxI/LfGzEj8v8YsSvyzxqxK/LvGbEr8t8bsSvy/xhxJ/LPGnEn8u8ZcSfy3xtxJ/L/GPEseU+GeJf5X4d4n/lPhvif+VOLbEIRWOU+G4FY5X4fgVDq1wWIUTVDhhhcMrnKjCiSucpMJJKxxR4cgKJ6tw8gqnqHDKCqeqcOoKp6lw2gqnq3D6CmeocMYKZ6pw5gpnqXDWCmercPYK56hwzgrnqnDuCuepcN4K56tw/goXqHDBCheqcOEKF6lw0QoXq5AKF69wiQqXrHCpCpeucJkKl61wuQqXr3CFClescKUKV65wlQpXrXC1ClevcI0K16xwrQrXrnCdCtetcL0K169wgwo3rHCjCjeucJMKN61wswo3r3CLCrescKsKt65wmwq3rXC7CrevcIcKd6xwpwp3rnCXCnetcLcKd69wjwr3rHCvCveucJ8K961wvwr3r/CACg+s8KAKD67wkAoPrfCwCg+v8IiK0aOGDPGoCo+u8JgKj63wuAqPr9AKT6jwxApPqvDkCk+p8NQKT6vw9ArPqPDMCs+q8OwKz6nw3ArPq/D8Ci+o8MIKL6rw4govqfDSCi+r8PIKr6jwygqvqvDqCq+p8NoKr6vw+gpvqPDGCm+q8OYKb6nw1gpvq/D2Cu+o8M4K76rw7grvqfDeCu+r8P4KH6jwwQofqvDhCh+p8NEKH6twVIWDCoMKwwqjCuMKkwrTCrMK8//1e8iQIWWFVYV1hU2FbYVdhX2Fj1f4RIVPVvhUhU9X+EyFz1b4XIXPV/hChS9W+FKFL1f4SoWvVvhaha9X+EaFb1b4VoVvV/hOhe9W+F6F71f4QYUfVvhRhaMr/LjCTyr8tMLPKvy8wi8q/LLCryr8usJvKvy2wu8q/L7CHyr8scKfKvy5wl8q/LXC3yr8vcI/KhxT4Z8V/lXh3xX+U+G/Ff5X4dgKh9Q4To3j1jhejePXOLTGYTVOUOOENQ6vcaIaJ65xkhonrXFEjSNrnKzGyWucosYpa5yqxqlrnKbGaWucrsbpa5yhxhlrnKnGmWucpcZZa5ytxtlrnKPGOWucq8a5a5ynxnlrnK/G+WtcoMYFa1yoxoVrXKTGRWtcrEZqXLzGJWpcssalaly6xmVqXLbG5WpcvsYValyxxpVqXLnGVWpctcbValy9xjVqXLPGtWpcu8Z1aly3xvVqXL/GDWrcsMaNaty4xk1q3LTGzWrcvMYtatyyxq1q3LrGbWrctsbtaty+xh1q3LHGnWrcucZdaty1xt1q3L3GPWrcs8a9aty7xn1q3LfG/Wrcv8YDajywxoNqPLjGQ2o8tMbDajy8xiNqPLLGo2o8usZjajy2xuNqPL5GazyhxhNrPKnGk2s8pcZTazytxtNrPKPGM2s8q8azazynxnNrPK/G82u8oMYLa7yoxotrvKTGS2u8rMbLa7yixitrvKrGq2u8psZra7yuxutrvKHGG2u8qcaba7ylxltrvK3G22u8o8Y7a7yrxrtrvKfGe2u8r8b7a3ygxgdrfKjGh2t8pMZHa3ysxlE1DmoMagxrjGqMa0xqTGvMasxrLGosa6xqrGtsamxr7Grsa3y8xidqfLLGp2p8usZnany2xudqfL7GF2p8scaXany5xldqfLXG12p8vcY3anyzxrdqfLvGd2p8t8b3any/xg9q/LDGj2ocXePHNX5S46c1flbj5zV+UeOXNX5V49c1flPjtzV+V+P3Nf5Q4481/lTjzzX+UuOvNf5W4+81/lHjmBr/rPGvGv+u8Z8a/63xvxrH1jikwXEaHLfB8Rocv8GhDQ5rcIIGJ2xweIMTNThxg5M0OGmDIxoc2eBkDU7e4BQNTtngVA1O3eA0DU7b4HQNTt/gDA3O2OBMDc7c4CwNztrgbA3O3uAcDc7Z4FwNzt3gPA3O2+B8Dc7f4AINLtjgQg0u3OAiDS7a4GIN0uDiDS7R4JINLtXg0g0u0+CyDS7X4PINrtDgig2u1ODKDa7S4KoNrtbg6g2u0eCaDa7V4NoNrtPgug2u1+D6DW7Q4IYNbtTgxg1u0uCmDW7W4OYNbtHglg1u1eDWDW7T4LYNbtfg9g3u0OCODe7U4M4N7tLgrg3u1uDuDe7R4J4N7tXg3g3u0+C+De7X4P4NHtDggQ0e1ODBDR7S4KENHtbg4Q0e0eCRDR7V4NENHtPgsQ0e1+DxDdrgCQ2e2OBJDZ7c4CkNntrgaQ2e3uAZDZ7Z4FkNnt3gOQ2e2+B5DZ7f4AUNXtjgRQ1e3OAlDV7a4GUNXt7gFQ1e2eBVDV7d4DUNXtvgdQ1e3+ANDd7Y4E0N3tzgLQ3e2uBtDd7e4B0N3tngXQ3e3eA9Dd7b4H0N3t/gAw0+2OBDDT7c4CMNPtrgYw2OanDQYNBg2GDUYNxg0mDaYNZg3mDRYNlg1WDdYNNg22DXYN/g4w0+0eCTDT7V4NMNPtPgsw0+1+DzDb7Q4IsNvtTgyw2+0uCrDb7W4OsNvtHgmw2+1eDbDb7T4LsNvtfg+w1+MBQ/bPCjBkc3+HGDnzT4aYOfNfh5g180+GWDXzX4dYPfNPhtg981+H2DPzT4Y4M/Nfhzg780+GuDvzX4e4N/NDimwT8b/KvBvxv8p8F/G/yvwbENDmlxnBbHbXG8FsdvcWiLw1qcoMUJWxze4kQtTtziJC1O2uKIFke2OFmLk7c4RYtTtjhVi1O3OE2L07Y4XYvTtzhDizO2OFOLM7c4S4uztjhbi7O3OEeLc7Y4V4tztzhPi/O2OF+L87e4QIsLtrhQiwu3uEiLi7a4WIu0uHiLS/wzjku2uFSLS7e4TIvLtrhci8u3uEKLK7a4Uosrt7hKi6u2uFqLq7e4RotrtrhWi2u3uE6L67a4Xovrt7hBixu2uFGLG7e4SYubtrhZi5u3uEWLW7a4VYtbt7hNi9u2uF2L27e4Q4s7trhTizu3uEuLu7a4W4u7t7hHi3u2uFeLe7e4T4v7trhfi/u3eECLB7Z4UIsHt3hIi4e2eFiLh7d4RItHtnhUi0e3eEyLx7Z4XIvHt2iLJ7R4YosntXhyi6e0eGqLp7V4eotntHhmi2e1eHaL57R4bovntXh+ixe0eGGLF7V4cYuXtHhpi5e1eHmLV7R4ZYtXtXh1i9e0eG2L17V4fYs3tHhjize1eHOLt7R4a4u3tXh7i3e0eGeLd7V4d4v3tHhvi/e1eH+LD7T4YIsPtfhwi4+0+GiLj7U4qsVBi0GLYYtRi3GLSYtpi1mLeYtFi2WLVYt1i02LbYtdi32Lj7f4RItPtvhUi0+3+EyLz7b4XIvPt/hCiy+2+FKLL7f4Souvtvhai6+3+EaLb7b4Votvt/hOi++2+F6L77f4QYsftvhRi6Nb/LjFT1r8tMXPWvy8xS9a/LLFr1r8usVvWvy2xe9a/L7FH1r8scWfWvy5xV9a/LXF31r8vcU/WhzT4p8t/tXi3y3+0+K/Lf7X4tgWh3Q4Tofjdjheh+N3OLTDYR1O0OGEHQ7vcKIOJ+5wkg4n7XBEhyM7nKzDyTucosMpO5yqw6k7nKbDaTucrsPpO5yhwxk7nKnDmTucpcNZO5ytw9k7nKPDOTucq8O5O5ynw3k7nK/D+TtcoMMFO1yow4U7XKTDRTtcrEM6XLzDJTpcssOlOly6w2U6XLbD5TpcvsMVOlyxw5U6XLnDVTpctcPVOly9wzU6XLPDtTpcu8N1Oly3w/U6XL/DDTrcsMONOty4w0063LTDzTrcvMMtOtyyw6063LrDbTrctsPtOty+wx063LHDnTrcucNdOty1w9063L3DPTrcs8O9Oty7w3063LfD/Trcv8MDOjyww4M6PLjDQzo8tMPDOjy8wyM6PLLDozo8usNjOjy2w+M6PL5DOzyhwxM7PKnDkzs8pcNTOzytw9M7PKPDMzs8q8OzOzynw3M7PK/D8zu8oMMLO7yow4s7vKTDSzu8rMPLO7yiwys7vKrDqzu8psNrO7yuw+s7vKHDGzu8qcObO7ylw1s7vK3D2zu8o8M7O7yrw7s7vKfDezu8r8P7O3ygwwc7fKjDhzt8pMNHO3ysw1EdDjoMOgw7jDqMO0w6TDvMOsw7LDosO6w6rDtsOmw77DrsO3y8wyc6fLLDpzp8usNnOny2w+c6fL7DFzp8scOXOny5w1c6fLXD1zp8vcM3Onyzw7c6fLvDdzp8t8P3Ony/ww86/LDDjzoc3eHHHX7S4acdftbh5x1+0eGXHX7V4dcdftPhtx1+1+H3Hf7Q4Y8d/tThzx3+0uGvHf72P89D8I8Ox3T4Z4d/dfh3h/90+G+H/3U4tsMhPY7T47g9jtfj+D0O7XFYjxP0OGGPw3ucqMeJe5ykx0l7HNHjyB4n63HyHqfoccoep+px6h6n6XHaHqfrcfoeZ+hxxh5n6nHmHmfpcdYeZ+tx9h7n6HHOHufqce4e5+lx3h7n63H+HhfoccEeF+px4R4X6XHRHhfrkR4X73GJHpfscakel+5xmR6X7XG5HpfvcYUeV+xxpR5X7nGVHlftcbUeV+9xjR7X7HGtHtfucZ0e1+1xvR7X73GDHjfscaMeN+5xkx437XGzHjfvcYset+xxqx637nGbHrftcbset+9xhx537HGnHnfucZced+1xtx5373GPHvfsca8e9+5xnx737XG/Hvfv8YAeD+zxoB4P7vGQHg/t8bAeD+/xiB6P7PGoHo/u8Zgej+3xuB6P79EeT+jxxB5P6vHkHk/p8dQeT+vx9B7P6PHMHs/q8ewez+nx3B7P6/H8Hi/o8cIeL+rx4h4v6fHSHi/r8fIer+jxyh6v6vHqHq/p8doer+vx+h5v6PHGHm/q8eYeb+nx1h5v6/H2Hu/o8c4e7+rx7h7v6fHeHu/r8f4eH+jxwR4f6vHhHh/p8dEeH+txVI+DHv9fAAAA//8ao8kY")

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:58714' (ED25519) to the list of known hosts.
syzkaller login: [   56.051979][ T5800] cgroup: Unknown subsys name 'net'
[   56.182076][ T5800] cgroup: Unknown subsys name 'cpuset'
[   56.188752][ T5800] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   58.429153][ T5800] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   63.210795][   T56] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   63.214722][   T56] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   63.225097][   T56] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   63.229177][   T56] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   63.232458][   T56] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   63.239765][   T56] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   63.243881][ T5818] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   63.255546][ T5818] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   63.258844][ T5818] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   63.277937][ T5825] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   63.281053][ T5825] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   63.284227][ T5825] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   63.287009][ T5825] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   63.291457][ T5825] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   63.295439][ T5825] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   63.589662][ T5815] chnl_net:caif_netlink_parms(): no params data found
[   63.672070][ T5822] chnl_net:caif_netlink_parms(): no params data found
[   63.734289][ T5819] chnl_net:caif_netlink_parms(): no params data found
[   63.782012][ T5815] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.784765][ T5815] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.787991][ T5815] bridge_slave_0: entered allmulticast mode
[   63.791951][ T5815] bridge_slave_0: entered promiscuous mode
[   63.820159][ T5815] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.822832][ T5815] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.825416][ T5815] bridge_slave_1: entered allmulticast mode
[   63.829607][ T5815] bridge_slave_1: entered promiscuous mode
[   63.875721][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.878556][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.881225][ T5822] bridge_slave_0: entered allmulticast mode
[   63.884903][ T5822] bridge_slave_0: entered promiscuous mode
[   63.911121][ T5815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.914461][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.916473][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.918748][ T5822] bridge_slave_1: entered allmulticast mode
[   63.921478][ T5822] bridge_slave_1: entered promiscuous mode
[   63.941378][ T5815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.988812][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.991490][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.994161][ T5819] bridge_slave_0: entered allmulticast mode
[   63.998594][ T5819] bridge_slave_0: entered promiscuous mode
[   64.024058][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.026736][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.029927][ T5819] bridge_slave_1: entered allmulticast mode
[   64.033501][ T5819] bridge_slave_1: entered promiscuous mode
[   64.038256][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.055165][ T5815] team0: Port device team_slave_0 added
[   64.059447][ T5815] team0: Port device team_slave_1 added
[   64.071451][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.098105][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.100194][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   64.108949][ T5815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.126783][ T5819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.130944][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.133033][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   64.140925][ T5815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.153684][ T5819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.157363][ T5822] team0: Port device team_slave_0 added
[   64.173921][ T5822] team0: Port device team_slave_1 added
[   64.214367][ T5819] team0: Port device team_slave_0 added
[   64.229477][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.232003][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   64.241940][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.247275][ T5819] team0: Port device team_slave_1 added
[   64.254933][ T5815] hsr_slave_0: entered promiscuous mode
[   64.258152][ T5815] hsr_slave_1: entered promiscuous mode
[   64.261455][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.263457][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   64.273581][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.329413][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.331527][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   64.339845][ T5819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.370474][ T5822] hsr_slave_0: entered promiscuous mode
[   64.373036][ T5822] hsr_slave_1: entered promiscuous mode
[   64.375423][ T5822] debugfs: 'hsr0' already exists in 'hsr'
[   64.377613][ T5822] Cannot create hsr debugfs directory
[   64.380216][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.382546][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   64.391274][ T5819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.519313][ T5819] hsr_slave_0: entered promiscuous mode
[   64.522230][ T5819] hsr_slave_1: entered promiscuous mode
[   64.524995][ T5819] debugfs: 'hsr0' already exists in 'hsr'
[   64.527136][ T5819] Cannot create hsr debugfs directory
[   64.719863][ T5815] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   64.739675][ T5815] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   64.747348][ T5815] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   64.770681][ T5815] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   64.824912][ T5822] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   64.836129][ T5822] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   64.851106][ T5822] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   64.857406][ T5822] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   64.949657][ T5819] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   64.956666][ T5819] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   64.965886][ T5819] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   64.977834][ T5819] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   65.014419][ T5815] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.052402][ T5815] 8021q: adding VLAN 0 to HW filter on device team0
[   65.065287][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.080678][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.083497][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.105531][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.108295][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.130818][ T5822] 8021q: adding VLAN 0 to HW filter on device team0
[   65.149452][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.152110][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.173070][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.175709][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.234891][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.289853][ T5819] 8021q: adding VLAN 0 to HW filter on device team0
[   65.300251][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.302943][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.308271][ T5204] Bluetooth: hci0: command tx timeout
[   65.308275][   T56] Bluetooth: hci2: command tx timeout
[   65.326120][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.328934][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.381348][ T5819] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   65.388917][   T56] Bluetooth: hci1: command tx timeout
[   65.449544][ T5815] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.521572][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.527424][ T5815] veth0_vlan: entered promiscuous mode
[   65.537274][ T5815] veth1_vlan: entered promiscuous mode
[   65.590515][ T5815] veth0_macvtap: entered promiscuous mode
[   65.596144][ T5815] veth1_macvtap: entered promiscuous mode
[   65.605855][ T5822] veth0_vlan: entered promiscuous mode
[   65.612653][ T5822] veth1_vlan: entered promiscuous mode
[   65.620309][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.639758][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.649197][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.671552][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.681973][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.684900][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.692712][ T5822] veth0_macvtap: entered promiscuous mode
[   65.700101][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.715577][ T5822] veth1_macvtap: entered promiscuous mode
[   65.720332][ T5819] veth0_vlan: entered promiscuous mode
[   65.749077][ T5819] veth1_vlan: entered promiscuous mode
[   65.795464][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.813740][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.822368][ T5819] veth0_macvtap: entered promiscuous mode
[   65.829249][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.832209][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.840714][ T5848] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.854899][ T5848] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.857695][ T5848] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.862801][ T5819] veth1_macvtap: entered promiscuous mode
[   65.874692][ T5848] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.891154][ T1015] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.897361][ T1015] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.912954][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.929874][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.971232][ T5815] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   65.980961][ T5848] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.984035][ T5848] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.999134][ T5848] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.033551][ T5848] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.074470][ T1015] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.076742][ T1015] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.086119][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.089821][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.107108][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.111726][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.138593][ T1015] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.140861][ T1015] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.222121][ T5886] binder: 5885:5886 unknown command 0
[   66.224261][ T5886] binder: 5885:5886 ioctl c0306201 200000000080 returned -22
[   66.229934][ T5886] binder: 5885:5886 ioctl c0306201 2000000003c0 returned -14
[   66.319858][ T5868] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   66.323047][ T5894] xt_l2tp: unknown flags: 10
[   66.472341][ T5868] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[   66.475397][ T5868] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   66.481795][ T5868] usb 2-1: config 0 descriptor??
[   66.695429][ T5868] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor
[   66.712419][ T5906] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11'.
[   66.896170][ T5868] [drm:udl_init] *ERROR* Selecting channel failed
[   66.907741][ T5868] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 3
[   66.913403][ T5868] [drm] Initialized udl on minor 3
[   66.916933][ T5868] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[   66.922048][ T5868] udl 2-1:0.0: [drm] Cannot find any crtc or sizes
[   66.929418][ T5855] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[   66.932297][ T5855] udl 2-1:0.0: [drm] Cannot find any crtc or sizes
[   66.941404][ T5868] usb 2-1: USB disconnect, device number 2
[   66.971974][ T5911] loop0: detected capacity change from 0 to 512
[   66.994111][ T5911] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[   67.016051][ T5911] EXT4-fs error (device loop0): ext4_quota_enable:7132: comm syz.0.13: Bad quota inum: 31, type: 1
[   67.021666][ T5911] EXT4-fs warning (device loop0): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=31). Please run e2fsck to fix.
[   67.029058][ T5911] EXT4-fs (loop0): mount failed
[   67.196794][ T5920] capability: warning: `syz.0.16' uses 32-bit capabilities (legacy support in use)
[   67.370400][ T5930] netlink: 'syz.0.20': attribute type 3 has an invalid length.
[   67.387789][ T5204] Bluetooth: hci0: command tx timeout
[   67.389374][ T5825] Bluetooth: hci2: command tx timeout
[   67.444105][ T5934] capability: warning: `syz.0.22' uses deprecated v2 capabilities in a way that may be insecure
[   67.474640][ T5934] loop0: detected capacity change from 0 to 128
[   67.480099][ T5825] Bluetooth: hci1: command tx timeout
[   67.486233][ T5934] =======================================================
[   67.486233][ T5934] WARNING: The mand mount option has been deprecated and
[   67.486233][ T5934]          and is ignored by this kernel. Remove the mand
[   67.486233][ T5934]          option from the mount to silence this warning.
[   67.486233][ T5934] =======================================================
[   67.520158][ T5934] EXT4-fs (loop0): Test dummy encryption mode enabled
[   67.540809][ T5934] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   67.555753][ T5934] ext4 filesystem being mounted at /14/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   67.574025][ T5941] loop2: detected capacity change from 0 to 64
[   67.592192][ T5822] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   67.918356][ T5868] usb 1-1: new full-speed USB device number 2 using dummy_hcd
[   67.984784][ T5951] loop1: detected capacity change from 0 to 32768
[   67.991025][ T5951] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.30 (5951)
[   68.008028][ T5951] BTRFS info (device loop1): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[   68.011083][ T5951] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[   68.078398][ T5951] BTRFS info (device loop1): enabling ssd optimizations
[   68.080634][ T5951] BTRFS info (device loop1): turning on async discard
[   68.081177][ T5868] usb 1-1: config 0 interface 0 altsetting 250 endpoint 0x81 has invalid wMaxPacketSize 0
[   68.088499][ T5951] BTRFS info (device loop1): enabling free space tree
[   68.096784][ T5868] usb 1-1: config 0 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[   68.105987][ T5868] usb 1-1: config 0 interface 0 has no altsetting 0
[   68.112665][ T5868] usb 1-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00
[   68.120714][ T5868] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   68.140999][ T5868] usb 1-1: config 0 descriptor??
[   68.166409][ T5815] BTRFS info (device loop1): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[   68.633614][ T5868] uclogic 0003:28BD:0042.0001: interface is invalid, ignoring
[   68.816383][ T5282] usb 1-1: USB disconnect, device number 2
[   69.239538][ T5993] loop1: detected capacity change from 0 to 764
[   69.252114][ T5993] rock: directory entry would overflow storage
[   69.254133][ T5993] rock: sig=0x5850, size=36, remaining=22
[   69.444884][ T5996] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   69.468655][ T5825] Bluetooth: hci2: command 0x040f tx timeout
[   69.478492][ T5825] Bluetooth: hci0: command tx timeout
[   69.547684][ T5825] Bluetooth: hci1: command tx timeout
[   69.559796][ T6003] loop1: detected capacity change from 0 to 1024
[   69.569426][ T6003] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   69.572216][ T6003] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   69.585118][ T6003] EXT4-fs (loop1): revision level too high, forcing read-only mode
[   69.596584][ T6003] EXT4-fs (loop1): orphan cleanup on readonly fs
[   69.599787][ T6003] EXT4-fs error (device loop1): ext4_free_blocks:6706: comm syz.1.46: Freeing blocks not in datazone - block = 0, count = 4096
[   69.605211][ T6003] EXT4-fs (loop1): Remounting filesystem read-only
[   69.613445][ T6003] EXT4-fs (loop1): 1 orphan inode deleted
[   69.628652][ T6003] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   69.674700][ T5815] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   69.674800][ T6012] loop0: detected capacity change from 0 to 128
[   69.691825][ T6012] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   69.696542][ T6012] ext4 filesystem being mounted at /17/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   69.706908][ T6012] EXT4-fs warning (device loop0): __ext4_ioctl:1551: Setting inode version is not supported with metadata_csum enabled.
[   69.748146][ T5822] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   69.883011][    T9] usb 3-1: new full-speed USB device number 2 using dummy_hcd
[   69.935899][ T6027] loop1: detected capacity change from 0 to 1024
[   69.974777][ T6027] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   70.042268][    T9] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[   70.046824][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   70.050295][    T9] usb 3-1: Product: syz
[   70.051869][    T9] usb 3-1: Manufacturer: syz
[   70.053608][    T9] usb 3-1: SerialNumber: syz
[   70.057785][    T9] usb 3-1: config 0 descriptor??
[   70.075014][ T6025] loop0: detected capacity change from 0 to 40427
[   70.086803][ T6025] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[   70.089280][ T6025] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[   70.132905][ T5815] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   70.178774][ T6025] F2FS-fs (loop0): sanity_check_inode: inode (ino=3) has device alias flag, but the feature is off
[   70.184533][ T6025] F2FS-fs (loop0): Failed to read root inode
[   70.269485][    T9] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[   70.666906][ T6052] loop0: detected capacity change from 0 to 32768
[   70.680235][ T6052] XFS (loop0): logbuf size must be greater than or equal to log stripe size
[   70.718341][   T24] usb 2-1: new full-speed USB device number 3 using dummy_hcd
[   70.879368][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[   70.882438][   T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[   70.891199][   T24] usb 2-1: New USB device found, idVendor=0b05, idProduct=18c6, bcdDevice= 0.00
[   70.893768][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   70.903476][   T24] usb 2-1: config 0 descriptor??
[   70.905465][ T6050] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[   71.324151][   T24] hid (null): report_id 57294 is invalid
[   71.330125][   T24] asus 0003:0B05:18C6.0002: collection stack underflow
[   71.334907][   T24] asus 0003:0B05:18C6.0002: item 0 1 0 12 parsing failed
[   71.338409][   T24] asus 0003:0B05:18C6.0002: Asus hid parse failed: -22
[   71.341107][   T24] asus 0003:0B05:18C6.0002: probe with driver asus failed with error -22
[   71.539515][ T5282] usb 2-1: USB disconnect, device number 3
[   71.553707][ T5825] Bluetooth: hci0: command tx timeout
[   71.555821][ T5825] Bluetooth: hci2: command 0x040f tx timeout
[   71.559778][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   71.562345][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   71.628323][ T5825] Bluetooth: hci1: command tx timeout
[   72.109013][    T9] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[   72.123021][    T9] usb 3-1: USB disconnect, device number 2
[   72.850553][ T6074] process 'syz.2.68' launched '/dev/fd/3' with NULL argv: empty string added
[   72.951435][ T6081] loop2: detected capacity change from 0 to 8
[   73.321475][ T6088] loop0: detected capacity change from 0 to 32768
[   73.333033][ T6088] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   73.350318][ T6088] XFS (loop0): Ending clean mount
[   73.383079][ T5822] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   73.627655][   T56] Bluetooth: hci2: command 0x040f tx timeout
[   73.765712][ T6098] loop0: detected capacity change from 0 to 32768
[   73.796495][ T6098] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   73.830527][ T6098] XFS (loop0): Ending clean mount
[   73.924276][ T5822] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   74.021246][ T6118] loop1: detected capacity change from 0 to 4096
[   74.044543][ T6118] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512).
[   74.058181][ T6118] ntfs3(loop1): ino=3, mi_enum_attr
[   74.078505][ T6118] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[   74.081247][ T6118] ntfs3(loop1): Failed to load $Extend (-22).
[   74.083230][ T6118] ntfs3(loop1): Failed to initialize $Extend.
[   74.147012][ T6128] loop0: detected capacity change from 0 to 1024
[   74.420866][ T6124] loop2: detected capacity change from 0 to 40427
[   74.439259][ T6124] F2FS-fs (loop2): invalid crc value
[   74.560652][ T6124] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[   74.573556][ T6124] F2FS-fs (loop2): Start checkpoint disabled!
[   74.584608][ T6124] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0
[   74.592964][ T6124] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[   74.678467][ T6124] F2FS-fs (loop2): ino:10, start:0, end:8192, need to trigger GC to reclaim enough free segment when checkpoint is enabled
[   74.935187][   T29] kworker/u9:1: attempt to access beyond end of device
[   74.935187][   T29] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   74.944743][   T29] CPU: 0 UID: 0 PID: 29 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT(full) 
[   74.944757][   T29] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   74.944763][   T29] Workqueue: writeback wb_workfn (flush-7:2)
[   74.944779][   T29] Call Trace:
[   74.944783][   T29]  <TASK>
[   74.944788][   T29]  dump_stack_lvl+0x189/0x250
[   74.944802][   T29]  ? __pfx_dump_stack_lvl+0x10/0x10
[   74.944812][   T29]  ? __pfx_queue_work_on+0x10/0x10
[   74.944820][   T29]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   74.944830][   T29]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   74.944844][   T29]  f2fs_handle_critical_error+0x37c/0x540
[   74.944859][   T29]  f2fs_write_end_io+0x886/0xb60
[   74.944875][   T29]  __submit_merged_bio+0x27a/0x6a0
[   74.944888][   T29]  __submit_merged_write_cond+0x255/0x530
[   74.944901][   T29]  f2fs_write_data_pages+0x261d/0x3000
[   74.944923][   T29]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   74.944965][   T29]  ? f2fs_write_meta_pages+0x357/0x450
[   74.944977][   T29]  ? __lock_acquire+0xab9/0xd20
[   74.944987][   T29]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   74.944994][   T29]  do_writepages+0x32e/0x550
[   74.945007][   T29]  ? reacquire_held_locks+0x127/0x1d0
[   74.945014][   T29]  ? writeback_sb_inodes+0x384/0x1010
[   74.945028][   T29]  __writeback_single_inode+0x145/0xff0
[   74.945038][   T29]  ? do_raw_spin_unlock+0x4d/0x240
[   74.945050][   T29]  writeback_sb_inodes+0x6c7/0x1010
[   74.945071][   T29]  ? __pfx_writeback_sb_inodes+0x10/0x10
[   74.945099][   T29]  ? rcu_is_watching+0x15/0xb0
[   74.945113][   T29]  wb_writeback+0x43b/0xaf0
[   74.945126][   T29]  ? queue_io+0x311/0x590
[   74.945137][   T29]  ? __pfx_wb_writeback+0x10/0x10
[   74.945150][   T29]  ? _raw_spin_unlock_irq+0x23/0x50
[   74.945161][   T29]  wb_workfn+0x409/0xef0
[   74.945176][   T29]  ? __pfx_wb_workfn+0x10/0x10
[   74.945186][   T29]  ? __lock_acquire+0xab9/0xd20
[   74.945198][   T29]  ? process_scheduled_works+0x9ef/0x17b0
[   74.945209][   T29]  ? _raw_spin_unlock_irq+0x23/0x50
[   74.945217][   T29]  ? process_scheduled_works+0x9ef/0x17b0
[   74.945224][   T29]  ? process_scheduled_works+0x9ef/0x17b0
[   74.945233][   T29]  process_scheduled_works+0xae1/0x17b0
[   74.945254][   T29]  ? __pfx_process_scheduled_works+0x10/0x10
[   74.945269][   T29]  worker_thread+0x8a0/0xda0
[   74.945289][   T29]  kthread+0x711/0x8a0
[   74.945316][   T29]  ? __pfx_worker_thread+0x10/0x10
[   74.945324][   T29]  ? __pfx_kthread+0x10/0x10
[   74.945334][   T29]  ? _raw_spin_unlock_irq+0x23/0x50
[   74.945343][   T29]  ? lockdep_hardirqs_on+0x9c/0x150
[   74.945351][   T29]  ? __pfx_kthread+0x10/0x10
[   74.945361][   T29]  ret_from_fork+0x4bc/0x870
[   74.945371][   T29]  ? __pfx_ret_from_fork+0x10/0x10
[   74.945382][   T29]  ? __switch_to_asm+0x39/0x70
[   74.945388][   T29]  ? __switch_to_asm+0x33/0x70
[   74.945393][   T29]  ? __pfx_kthread+0x10/0x10
[   74.945403][   T29]  ret_from_fork_asm+0x1a/0x30
[   74.945417][   T29]  </TASK>
[   75.036047][   T29] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[   75.079514][   T33] audit: type=1400 audit(1762394360.815:2): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=":/" pid=6162 comm="syz.0.102"
[   75.300183][ T6167] loop2: detected capacity change from 0 to 4096
[   75.707329][ T6179] loop0: detected capacity change from 0 to 1024
[   75.711943][ T5825] Bluetooth: hci2: command 0x040f tx timeout
[   75.747754][   T33] audit: type=1800 audit(1762394361.475:3): pid=6179 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.109" name="file2" dev="loop0" ino=22 res=0 errno=0
[   76.097753][ T5282] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   76.126286][ T6195] loop0: detected capacity change from 0 to 32768
[   76.154764][ T6195] JBD2: journal file too short
[   76.156743][ T6195] (syz.0.115,6195,1):ocfs2_journal_init:973 ERROR: Linux journal layer error
[   76.160885][ T6195] (syz.0.115,6195,1):ocfs2_check_volume:2347 ERROR: Could not initialize journal!
[   76.164418][ T6195] (syz.0.115,6195,1):ocfs2_check_volume:2432 ERROR: status = -22
[   76.167297][ T6195] (syz.0.115,6195,1):ocfs2_mount_volume:1764 ERROR: status = -22
[   76.181212][ T6195] (syz.0.115,6195,1):ocfs2_fill_super:1177 ERROR: status = -22
[   76.258016][ T5282] usb 3-1: Using ep0 maxpacket: 32
[   76.265754][ T5282] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   76.274290][ T5282] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   76.279672][ T5282] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[   76.284608][ T5282] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   76.294813][ T5282] usb 3-1: config 0 descriptor??
[   76.693842][ T6223] loop1: detected capacity change from 0 to 40427
[   76.697065][ T6223] F2FS-fs (loop1): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288)
[   76.705792][ T6223] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[   76.715721][ T6223] F2FS-fs (loop1): Image doesn't support compression
[   76.736844][ T6223] F2FS-fs (loop1): build fault injection rate: 690
[   76.741494][ T6223] F2FS-fs (loop1): build fault injection type: 0x35f7
[   76.753841][ T5282] savu 0003:1E7D:2D5A.0003: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0
[   76.760769][ T6223] F2FS-fs (loop1): invalid crc value
[   76.813089][ T6223] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   76.817225][ T6223] F2FS-fs (loop1): Start checkpoint disabled!
[   76.825262][ T6223] F2FS-fs (loop1): f2fs_disable_checkpoint() finish, err:0
[   76.831020][ T6223] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[   76.833192][ T6223] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[   76.867073][ T1015] kworker/u10:4: attempt to access beyond end of device
[   76.867073][ T1015] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   76.874992][ T1015] CPU: 1 UID: 0 PID: 1015 Comm: kworker/u10:4 Not tainted syzkaller #0 PREEMPT(full) 
[   76.875006][ T1015] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   76.875012][ T1015] Workqueue: writeback wb_workfn (flush-7:1)
[   76.875028][ T1015] Call Trace:
[   76.875032][ T1015]  <TASK>
[   76.875036][ T1015]  dump_stack_lvl+0x189/0x250
[   76.875051][ T1015]  ? __pfx_dump_stack_lvl+0x10/0x10
[   76.875061][ T1015]  ? __pfx_queue_work_on+0x10/0x10
[   76.875069][ T1015]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   76.875080][ T1015]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   76.875095][ T1015]  f2fs_handle_critical_error+0x37c/0x540
[   76.875110][ T1015]  f2fs_write_end_io+0x886/0xb60
[   76.875128][ T1015]  __submit_merged_bio+0x27a/0x6a0
[   76.875149][ T1015]  __submit_merged_write_cond+0x255/0x530
[   76.875170][ T1015]  f2fs_write_data_pages+0x261d/0x3000
[   76.875201][ T1015]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   76.875216][ T1015]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[   76.875243][ T1015]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[   76.875254][ T1015]  ? look_up_lock_class+0x74/0x170
[   76.875269][ T1015]  ? trace_f2fs_writepages+0x7f/0x200
[   76.875280][ T1015]  ? f2fs_write_node_pages+0x478/0x6e0
[   76.875293][ T1015]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[   76.875311][ T1015]  ? __lock_acquire+0xab9/0xd20
[   76.875331][ T1015]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   76.875345][ T1015]  do_writepages+0x32e/0x550
[   76.875362][ T1015]  ? reacquire_held_locks+0x127/0x1d0
[   76.875370][ T1015]  ? writeback_sb_inodes+0x384/0x1010
[   76.875387][ T1015]  __writeback_single_inode+0x145/0xff0
[   76.875397][ T1015]  ? do_raw_spin_unlock+0x4d/0x240
[   76.875410][ T1015]  writeback_sb_inodes+0x6c7/0x1010
[   76.875433][ T1015]  ? __pfx_writeback_sb_inodes+0x10/0x10
[   76.875465][ T1015]  ? rcu_is_watching+0x15/0xb0
[   76.875479][ T1015]  wb_writeback+0x43b/0xaf0
[   76.875494][ T1015]  ? queue_io+0x311/0x590
[   76.875505][ T1015]  ? __pfx_wb_writeback+0x10/0x10
[   76.875519][ T1015]  ? _raw_spin_unlock_irq+0x23/0x50
[   76.875531][ T1015]  wb_workfn+0x409/0xef0
[   76.875548][ T1015]  ? __pfx_wb_workfn+0x10/0x10
[   76.875559][ T1015]  ? __lock_acquire+0xab9/0xd20
[   76.875598][ T1015]  ? process_scheduled_works+0x9ef/0x17b0
[   76.875612][ T1015]  ? _raw_spin_unlock_irq+0x23/0x50
[   76.875620][ T1015]  ? process_scheduled_works+0x9ef/0x17b0
[   76.875631][ T1015]  ? process_scheduled_works+0x9ef/0x17b0
[   76.875640][ T1015]  process_scheduled_works+0xae1/0x17b0
[   76.875664][ T1015]  ? __pfx_process_scheduled_works+0x10/0x10
[   76.875681][ T1015]  worker_thread+0x8a0/0xda0
[   76.875691][ T1015]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   76.875704][ T1015]  ? __kthread_parkme+0x7b/0x200
[   76.875718][ T1015]  kthread+0x711/0x8a0
[   76.875730][ T1015]  ? __pfx_worker_thread+0x10/0x10
[   76.875738][ T1015]  ? __pfx_kthread+0x10/0x10
[   76.875748][ T1015]  ? _raw_spin_unlock_irq+0x23/0x50
[   76.875756][ T1015]  ? lockdep_hardirqs_on+0x9c/0x150
[   76.875765][ T1015]  ? __pfx_kthread+0x10/0x10
[   76.875775][ T1015]  ret_from_fork+0x4bc/0x870
[   76.875785][ T1015]  ? __pfx_ret_from_fork+0x10/0x10
[   76.875797][ T1015]  ? __switch_to_asm+0x39/0x70
[   76.875803][ T1015]  ? __switch_to_asm+0x33/0x70
[   76.875808][ T1015]  ? __pfx_kthread+0x10/0x10
[   76.875818][ T1015]  ret_from_fork_asm+0x1a/0x30
[   76.875834][ T1015]  </TASK>
[   76.875838][ T1015] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[   76.980819][ T5282] usb 3-1: USB disconnect, device number 3
[   77.374039][ T6234] loop1: detected capacity change from 0 to 256
[   77.376895][ T6234] exfat: Deprecated parameter 'namecase'
[   77.378623][ T6234] exfat: Deprecated parameter 'namecase'
[   77.385921][ T6234] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d)
[   77.492691][ T6241] loop1: detected capacity change from 0 to 2048
[   77.506564][ T6241] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   77.697181][ T6251] netlink: 48 bytes leftover after parsing attributes in process `syz.1.132'.
[   78.586308][ T6263] loop1: detected capacity change from 0 to 1024
[   78.612414][ T6263] EXT4-fs: Ignoring removed oldalloc option
[   78.617297][ T6263] EXT4-fs: Ignoring removed bh option
[   78.659042][ T6263] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   78.678994][ T5815] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   78.820892][ T6270] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   78.823116][ T6270] IPv6: NLM_F_CREATE should be set when creating new route
[   79.147575][   T54] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   79.208262][ T6301] netlink: 68 bytes leftover after parsing attributes in process `syz.2.154'.
[   79.307797][   T54] usb 1-1: Using ep0 maxpacket: 16
[   79.313646][   T54] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   79.319758][   T54] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   79.326611][   T54] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   79.333995][   T54] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   79.340441][   T54] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   79.350205][   T54] usb 1-1: config 0 descriptor??
[   79.689401][ T6319] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   79.780508][   T54] HID 045e:07da: Invalid code 65791 type 1
[   79.791727][   T54] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0004/input/input4
[   79.813013][   T54] microsoft 0003:045E:07DA.0004: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0
[   79.970531][   T54] usb 1-1: USB disconnect, device number 3
[   80.102689][ T6344] loop1: detected capacity change from 0 to 1024
[   80.185138][ T6349] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   80.239487][ T6353] loop1: detected capacity change from 0 to 512
[   80.243009][ T6353] EXT4-fs: Ignoring removed nobh option
[   80.246091][ T6353] EXT4-fs (loop1): Test dummy encryption mode enabled
[   80.254269][ T6353] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.168: iget: bad i_size value: -3674898675588399094
[   80.265859][ T6353] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.168: couldn't read orphan inode 15 (err -117)
[   80.281778][ T6353] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   80.401532][ T6353] fscrypt: AES-256-XTS using implementation "xts(ecb(aes-fixed-time))"
[   80.443606][ T5815] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   81.252671][ T6439] loop2: detected capacity change from 0 to 128
[   81.321383][ T6441] ubi31: attaching mtd0
[   81.332936][ T6441] ubi31: scanning is finished
[   81.338782][ T6441] ubi31: empty MTD device detected
[   81.601507][ T6441] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB)
[   81.607052][ T6441] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[   81.619175][ T6441] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1
[   81.626386][ T6441] ubi31: VID header offset: 64 (aligned 64), data offset: 128
[   81.633456][ T6441] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[   81.638253][ T6441] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23
[   81.644193][ T6441] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1780272792
[   81.648779][ T6441] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[   81.652384][ T6445] ubi31: background thread "ubi_bgt31d" started, PID 6445
[   81.813004][ T6447] loop2: detected capacity change from 0 to 1024
[   81.869946][ T6447] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   82.051990][ T5819] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   82.530002][ T6454] loop0: detected capacity change from 0 to 16384
[   82.587868][ T6464] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   82.614898][ T6465] pim6reg1: entered promiscuous mode
[   82.617009][ T6465] pim6reg1: entered allmulticast mode
[   82.650018][ T6454] syz.0.189 (6454) used greatest stack depth: 19560 bytes left
[   82.724937][ T6460] loop1: detected capacity change from 0 to 32768
[   82.789936][ T6460] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[   82.913037][ T5815] ocfs2: Unmounting device (7,1) on (node local)
[   83.023073][ T6479] loop2: detected capacity change from 0 to 2048
[   83.046807][ T6479] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   83.129781][ T5819] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   84.583704][ T6497] syz.0.206 uses obsolete (PF_INET,SOCK_PACKET)
[   84.860899][ T6507] loop0: detected capacity change from 0 to 24
[   84.878437][ T6507] MTD: Attempt to mount non-MTD device "/dev/loop0"
[   84.889567][ T6507] romfs: Mounting image 'rom 637cf1fa' through the block layer
[   84.910467][ T6507] romfs: read error for inode 0x70040
[   85.172515][ T6499] loop2: detected capacity change from 0 to 32768
[   85.176230][ T6499] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.208 (6499)
[   85.192860][ T6499] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   85.196627][ T6499] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[   85.321830][ T6499] BTRFS info (device loop2): enabling ssd optimizations
[   85.325607][ T6499] BTRFS info (device loop2): turning on async discard
[   85.335206][ T6499] BTRFS info (device loop2): enabling free space tree
[   85.645632][ T5819] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   85.888056][ T5881] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   86.088648][ T5881] usb 1-1: Using ep0 maxpacket: 32
[   86.148767][ T5881] usb 1-1: config 0 has an invalid interface number: 196 but max is 0
[   86.158071][ T5881] usb 1-1: config 0 has no interface number 0
[   86.165089][ T5881] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528
[   86.186508][ T5881] usb 1-1: config 0 interface 196 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   86.209985][ T5881] usb 1-1: config 0 interface 196 has no altsetting 0
[   86.218949][ T5881] usb 1-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a
[   86.225655][ T5881] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[   86.233196][ T5881] usb 1-1: Product: syz
[   86.235965][ T5881] usb 1-1: Manufacturer: syz
[   86.238743][ T5881] usb 1-1: SerialNumber: syz
[   86.245512][ T5881] usb 1-1: config 0 descriptor??
[   86.248991][ T6543] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   86.346677][ T6554] netlink: 4 bytes leftover after parsing attributes in process `syz.2.222'.
[   86.588301][ T5881] ipheth 1-1:0.196: Unable to find endpoints
[   86.617426][ T5881] usb 1-1: USB disconnect, device number 4
[   86.736113][ T6556] loop1: detected capacity change from 0 to 512
[   86.750514][ T6556] EXT4-fs: Ignoring removed orlov option
[   86.764874][ T6556] EXT4-fs: old and new quota format mixing
[   86.930395][   T10] cfg80211: failed to load regulatory.db
[   87.576190][ T6573] loop2: detected capacity change from 0 to 512
[   87.657924][ T6573] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   87.664527][ T6573] ext4 filesystem being mounted at /72/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   87.771566][ T5819] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   87.771628][ T6582] loop0: detected capacity change from 0 to 47
[   87.910011][ T6590] loop1: detected capacity change from 0 to 64
[   87.945258][ T6592] loop2: detected capacity change from 0 to 1024
[   87.964874][   T33] audit: type=1800 audit(1762394373.695:4): pid=6590 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.239" name="file1" dev="loop1" ino=5 res=0 errno=0
[   87.976516][ T6592] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   88.546276][ T6601] netlink: 'syz.1.241': attribute type 1 has an invalid length.
[   88.592598][ T6603] netlink: 24 bytes leftover after parsing attributes in process `syz.1.242'.
[   88.865632][ T5819] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   89.024282][ T6611] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   89.084613][ T6615] loop0: detected capacity change from 0 to 2
[   89.108635][ T6615] jffs2: rp_size unrepresentable
[   89.405924][ T6625] loop0: detected capacity change from 0 to 8
[   89.420882][ T6625] SQUASHFS error: zlib decompression failed, data probably corrupt
[   89.423480][ T6625] SQUASHFS error: Failed to read block 0x9b: -5
[   89.425499][ T6625] SQUASHFS error: Unable to read metadata cache entry [99]
[   89.430374][ T6625] SQUASHFS error: Unable to read inode 0x127
[   89.744912][ T6646] loop0: detected capacity change from 0 to 164
[   89.868383][ T6642] loop2: detected capacity change from 0 to 32768
[   89.876052][ T6642] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.259 (6642)
[   89.904291][ T6642] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   89.907263][ T6642] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[   89.993833][ T6642] BTRFS info (device loop2): enabling ssd optimizations
[   90.000461][ T6642] BTRFS info (device loop2): turning on async discard
[   90.007627][ T6642] BTRFS info (device loop2): enabling free space tree
[   90.067302][ T5819] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   90.076018][ T6673] netlink: 8 bytes leftover after parsing attributes in process `syz.0.267'.
[   90.135860][ T6676] netlink: 28 bytes leftover after parsing attributes in process `syz.0.269'.
[   90.147079][ T6676] netlink: 28 bytes leftover after parsing attributes in process `syz.0.269'.
[   90.161176][ T6676] netlink: 24 bytes leftover after parsing attributes in process `syz.0.269'.
[   90.228444][ T6680] netlink: 12 bytes leftover after parsing attributes in process `syz.2.270'.
[   90.267290][ T6684] loop2: detected capacity change from 0 to 1024
[   91.469444][ T6704] netlink: 'syz.2.281': attribute type 10 has an invalid length.
[   91.479804][ T6704] team0: Port device netdevsim0 added
[   91.726917][ T6708] loop2: detected capacity change from 0 to 40427
[   91.737959][ T6708] F2FS-fs (loop2): invalid crc value
[   91.789858][ T6708] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   91.794301][ T6708] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   91.820801][ T5819] syz-executor: attempt to access beyond end of device
[   91.820801][ T5819] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   91.827009][ T5819] CPU: 0 UID: 0 PID: 5819 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[   91.827029][ T5819] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   91.827037][ T5819] Call Trace:
[   91.827043][ T5819]  <TASK>
[   91.827049][ T5819]  dump_stack_lvl+0x189/0x250
[   91.827073][ T5819]  ? __pfx_dump_stack_lvl+0x10/0x10
[   91.827089][ T5819]  ? __pfx_queue_work_on+0x10/0x10
[   91.827103][ T5819]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   91.827116][ T5819]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   91.827135][ T5819]  f2fs_handle_critical_error+0x37c/0x540
[   91.827159][ T5819]  f2fs_write_end_io+0x886/0xb60
[   91.827186][ T5819]  __submit_merged_bio+0x27a/0x6a0
[   91.827210][ T5819]  __submit_merged_write_cond+0x255/0x530
[   91.827234][ T5819]  f2fs_write_data_pages+0x261d/0x3000
[   91.827282][ T5819]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   91.827349][ T5819]  ? __lock_acquire+0xab9/0xd20
[   91.827369][ T5819]  ? do_raw_spin_lock+0x121/0x290
[   91.827395][ T5819]  ? do_raw_spin_unlock+0x4d/0x240
[   91.827412][ T5819]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   91.827426][ T5819]  do_writepages+0x32e/0x550
[   91.827491][ T5819]  ? do_raw_spin_unlock+0x4d/0x240
[   91.827512][ T5819]  filemap_fdatawrite+0x199/0x240
[   91.827531][ T5819]  ? __pfx_filemap_fdatawrite+0x10/0x10
[   91.827595][ T5819]  ? do_raw_spin_unlock+0x4d/0x240
[   91.827617][ T5819]  f2fs_sync_dirty_inodes+0x31f/0x830
[   91.827644][ T5819]  f2fs_write_checkpoint+0x93e/0x2440
[   91.827657][ T5819]  ? __lock_acquire+0xab9/0xd20
[   91.827692][ T5819]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[   91.827750][ T5819]  kill_f2fs_super+0x2cc/0x6d0
[   91.827770][ T5819]  ? __pfx_kill_f2fs_super+0x10/0x10
[   91.827796][ T5819]  ? shrinker_free+0x2ce/0x3e0
[   91.827813][ T5819]  deactivate_locked_super+0xbc/0x130
[   91.827831][ T5819]  cleanup_mnt+0x425/0x4c0
[   91.827847][ T5819]  ? lockdep_hardirqs_on+0x9c/0x150
[   91.827865][ T5819]  task_work_run+0x1d4/0x260
[   91.827886][ T5819]  ? __pfx_task_work_run+0x10/0x10
[   91.827902][ T5819]  ? __x64_sys_umount+0x122/0x160
[   91.827921][ T5819]  ? exit_to_user_mode_loop+0x40/0x130
[   91.827936][ T5819]  exit_to_user_mode_loop+0xe9/0x130
[   91.827948][ T5819]  do_syscall_64+0x2bd/0xfa0
[   91.827964][ T5819]  ? lockdep_hardirqs_on+0x9c/0x150
[   91.827980][ T5819]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   91.827993][ T5819]  ? exc_page_fault+0xab/0x100
[   91.828011][ T5819]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   91.828024][ T5819] RIP: 0033:0x7f83043902f7
[   91.828038][ T5819] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[   91.828048][ T5819] RSP: 002b:00007fff315a2e28 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[   91.828062][ T5819] RAX: 0000000000000000 RBX: 00007f8304411d7d RCX: 00007f83043902f7
[   91.828071][ T5819] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff315a2ee0
[   91.828079][ T5819] RBP: 00007fff315a2ee0 R08: 0000000000000000 R09: 0000000000000000
[   91.828087][ T5819] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff315a3f70
[   91.828095][ T5819] R13: 00007f8304411d7d R14: 000000000001664a R15: 00007fff315a3fb0
[   91.828120][ T5819]  </TASK>
[   91.935762][ T5819] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[   92.948231][ T6723] [U] 
[   93.385307][ T6748] xt_TCPMSS: Only works on TCP SYN packets
[   93.485185][ T6750] loop2: detected capacity change from 0 to 4096
[   93.504056][ T6750] ntfs3(loop2): Failed to initialize $Extend/$ObjId.
[   93.507720][ T5282] usb 2-1: new full-speed USB device number 4 using dummy_hcd
[   93.678181][ T5282] usb 2-1: config 0 has too many interfaces: 229, using maximum allowed: 32
[   93.681232][ T5282] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 229
[   93.695488][ T5282] usb 2-1: New USB device found, idVendor=0458, idProduct=500f, bcdDevice= 0.00
[   93.701537][ T5282] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=31
[   93.706335][ T5282] usb 2-1: SerialNumber: syz
[   93.750446][ T5282] usb 2-1: config 0 descriptor??
[   93.967670][    T9] usb 2-1: USB disconnect, device number 4
[   94.054607][ T6757] loop2: detected capacity change from 0 to 8192
[   94.096004][ T6757] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting.
[   94.112994][ T6757] ldm_validate_privheads(): Cannot find PRIVHEAD 1.
[   94.115609][ T6757]  loop2: unable to read partition table
[   94.122304][ T6757] loop_reread_partitions: partition scan of loop2 () failed (rc=-5)
[   94.132705][ T5264] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting.
[   94.136349][ T5264] ldm_validate_privheads(): Cannot find PRIVHEAD 1.
[   94.148844][ T5264]  loop2: unable to read partition table
[   94.250268][ T6746] syz.0.297 (6746): drop_caches: 2
[   94.317016][ T6763] loop0: detected capacity change from 0 to 1024
[   94.512045][ T6768] Illegal XDP return value 1796160000 on prog  (id 26) dev N/A, expect packet loss!
[   94.558425][ T6770] loop2: detected capacity change from 0 to 16
[   94.566942][ T6770] erofs (device loop2): mounted with root inode @ nid 36.
[   94.885103][ T6772] loop1: detected capacity change from 0 to 32768
[   94.902551][ T6772] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   94.959902][ T6772] XFS (loop1): Ending clean mount
[   95.028745][ T5815] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   95.466110][ T6809] loop1: detected capacity change from 0 to 32768
[   95.474262][ T6809] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.324 (6809)
[   95.492567][ T6809] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[   95.495512][ T6809] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[   95.562054][ T6809] BTRFS info (device loop1): enabling ssd optimizations
[   95.564079][ T6809] BTRFS info (device loop1): turning on async discard
[   95.566313][ T6809] BTRFS info (device loop1): enabling free space tree
[   95.614323][ T5815] BTRFS info (device loop1): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[   95.968506][ T6846] loop1: detected capacity change from 0 to 1024
[   95.972136][ T6846] hfsplus: failed to load extents file
[   96.037982][   T24] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   96.086643][ T6854] loop1: detected capacity change from 0 to 512
[   96.089342][ T6854] EXT4-fs: Ignoring removed orlov option
[   96.091801][ T6854] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   96.095909][ T6854] EXT4-fs (loop1): orphan cleanup on readonly fs
[   96.102581][ T6854] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.338: bg 0: block 248: padding at end of block bitmap is not set
[   96.109801][ T6854] Quota error (device loop1): write_blk: dquota write failed
[   96.112082][ T6854] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[   96.115157][ T6854] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.338: Failed to acquire dquot type 1
[   96.124550][ T6854] EXT4-fs (loop1): 1 truncate cleaned up
[   96.130341][ T6854] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   96.149634][ T5815] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   96.198660][   T24] usb 3-1: Using ep0 maxpacket: 16
[   96.202157][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 26232, setting to 64
[   96.210379][   T24] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55
[   96.213449][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   96.215811][   T24] usb 3-1: Product: syz
[   96.216964][   T24] usb 3-1: Manufacturer: syz
[   96.218776][   T24] usb 3-1: SerialNumber: syz
[   96.222379][   T24] usb 3-1: config 0 descriptor??
[   96.239609][   T24] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[   96.281733][ T6864] tmpfs: Bad value for 'mpol'
[   96.459034][ T5848] usb 3-1: Failed to submit usb control message: -71
[   96.460063][   T10] usb 3-1: USB disconnect, device number 4
[   96.461424][ T5848] usb 3-1: unable to send the bmi data to the device: -71
[   96.461445][ T5848] usb 3-1: unable to get target info from device
[   96.461452][ T5848] usb 3-1: could not get target info (-71)
[   96.461610][ T5848] usb 3-1: could not probe fw (-71)
[   97.318770][ T6885] binder: 6883:6885 ioctl 4018620d 0 returned -22
[   97.523172][ T6895] loop1: detected capacity change from 0 to 128
[   97.559560][ T6897] binder: 6896:6897 ioctl c0306201 200000004a40 returned -22
[   98.430707][ T6924] loop0: detected capacity change from 0 to 32768
[   98.554197][ T6927] netlink: 36 bytes leftover after parsing attributes in process `syz.0.367'.
[   98.766703][ T6940] loop2: detected capacity change from 0 to 512
[   98.775594][ T6939] MPI: mpi too large (113288 bits)
[   98.779394][ T6940] FAT-fs (loop2): bogus number of FAT sectors
[   98.791975][ T6940] FAT-fs (loop2): Can't find a valid FAT filesystem
[   98.867421][ T6940] orangefs: client-core tried to read wrong size
[   98.868650][ T6944] iommufd_mock iommufd_mock0: Adding to iommu group 0
[   98.971081][ T6949] loop1: detected capacity change from 0 to 512
[   99.012317][ T6951] loop2: detected capacity change from 0 to 512
[   99.015577][ T6951] EXT4-fs: Ignoring removed mblk_io_submit option
[   99.020258][ T6949] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.377: inode has both inline data and extents flags
[   99.030394][ T6949] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.377: couldn't read orphan inode 15 (err -117)
[   99.044086][ T6951] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   99.053798][ T6949] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   99.075861][ T6951] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   99.119621][ T6951] EXT4-fs error (device loop2): xattr_find_entry:337: inode #15: comm syz.2.378: corrupted xattr entries
[   99.129307][ T5815] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   99.140308][ T6942] loop0: detected capacity change from 0 to 32768
[   99.141092][ T6951] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   99.151641][ T6951] EXT4-fs (loop2): 1 orphan inode deleted
[   99.154338][ T6951] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   99.169927][ T6942] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[   99.194643][ T5819] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   99.226766][ T5822] ocfs2: Unmounting device (7,0) on (node local)
[   99.409938][ T6967] loop2: detected capacity change from 0 to 4096
[   99.419324][ T6967] EXT4-fs (loop2): Test dummy encryption mode enabled
[   99.428318][ T6967] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[   99.431339][ T6967] System zones: 0-5
[   99.439568][ T6967] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   99.496044][ T5819] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   99.593247][ T6975] sd 0:0:0:0: PR command failed: 1026
[   99.595074][ T6979] loop0: detected capacity change from 0 to 2048
[   99.595673][ T6975] sd 0:0:0:0: Sense Key : Illegal Request [current] 
[   99.607806][ T6975] sd 0:0:0:0: Add. Sense: Invalid command operation code
[   99.610312][ T6979] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   99.860547][ T6990] netlink: 4 bytes leftover after parsing attributes in process `syz.2.389'.
[   99.866996][ T6990] netlink: 4 bytes leftover after parsing attributes in process `syz.2.389'.
[  100.311600][ T7000] loop1: detected capacity change from 0 to 256
[  100.319047][ T7000] exFAT-fs (loop1): failed to read boot sector
[  100.327771][ T7000] exFAT-fs (loop1): failed to recognize exfat type
[  100.379028][ T6996] loop0: detected capacity change from 0 to 40427
[  100.382373][ T6996] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  100.384678][ T6996] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  100.388488][ T6996] F2FS-fs (loop0): invalid crc value
[  100.420638][ T7005] loop1: detected capacity change from 0 to 256
[  100.425478][ T6996] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  100.432842][ T6996] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  100.435415][ T6996] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  100.453809][ T7005] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d)
[  101.047577][   T33] audit: type=1800 audit(1762394386.425:5): pid=7010 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.395" name="file1" dev="loop0" ino=10 res=0 errno=0
[  101.327638][   T24] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  101.340573][ T7028] netlink: 36 bytes leftover after parsing attributes in process `syz.2.404'.
[  101.483863][   T24] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[  101.494519][   T24] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  101.506247][   T24] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[  101.511164][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  101.514943][ T7033] netlink: 'syz.2.406': attribute type 12 has an invalid length.
[  101.517908][   T24] usb 2-1: Product: syz
[  101.520039][   T24] usb 2-1: Manufacturer: syz
[  101.524235][   T24] usb 2-1: SerialNumber: syz
[  101.538224][   T24] usb 2-1: config 0 descriptor??
[  101.543499][ T7016] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  101.549018][ T7016] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  101.601035][ T7035] netem: change failed
[  101.765156][ T7016] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  101.768020][ T7016] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  102.173820][   T24] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00
[  102.266089][ T7054] loop2: detected capacity change from 0 to 1024
[  102.378545][   T24] dm9601 2-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID
[  102.391088][   T24] usb 2-1: USB disconnect, device number 5
[  102.407044][ T7058] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  102.412470][ T7058] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  102.572128][ T7065] netlink: 16 bytes leftover after parsing attributes in process `syz.2.421'.
[  102.575844][ T7065] netlink: 16 bytes leftover after parsing attributes in process `syz.2.421'.
[  102.998526][   T33] audit: type=1326 audit(1762394388.725:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7079 comm="syz.1.428" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f516318efc9 code=0x7ffc0000
[  103.021679][   T33] audit: type=1326 audit(1762394388.735:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7079 comm="syz.1.428" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f516318efc9 code=0x7ffc0000
[  103.129510][   T33] audit: type=1326 audit(1762394388.855:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7079 comm="syz.1.428" exe="/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7f516318efc9 code=0x7ffc0000
[  103.167400][   T33] audit: type=1326 audit(1762394388.865:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7079 comm="syz.1.428" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f516318efc9 code=0x7ffc0000
[  103.348780][   T33] audit: type=1326 audit(1762394388.875:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7079 comm="syz.1.428" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f516318efc9 code=0x7ffc0000
[  103.383594][ T5822] syz-executor: attempt to access beyond end of device
[  103.383594][ T5822] loop0: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  103.416319][ T5822] CPU: 0 UID: 0 PID: 5822 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  103.416333][ T5822] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  103.416339][ T5822] Call Trace:
[  103.416342][ T5822]  <TASK>
[  103.416346][ T5822]  dump_stack_lvl+0x189/0x250
[  103.416361][ T5822]  ? __pfx_dump_stack_lvl+0x10/0x10
[  103.416371][ T5822]  ? __pfx_queue_work_on+0x10/0x10
[  103.416380][ T5822]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  103.416390][ T5822]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  103.416404][ T5822]  f2fs_handle_critical_error+0x37c/0x540
[  103.416426][ T5822]  f2fs_write_end_io+0x886/0xb60
[  103.416443][ T5822]  __submit_merged_bio+0x27a/0x6a0
[  103.416453][ T5822]  ? up_write+0x1c4/0x420
[  103.416465][ T5822]  __submit_merged_write_cond+0x44c/0x530
[  103.416478][ T5822]  f2fs_sync_node_pages+0x1479/0x15e0
[  103.416498][ T5822]  ? __pfx_f2fs_sync_node_pages+0x10/0x10
[  103.416521][ T5822]  ? f2fs_write_checkpoint+0xdad/0x2440
[  103.416531][ T5822]  ? up_write+0x1c4/0x420
[  103.416565][ T5822]  f2fs_write_checkpoint+0xdde/0x2440
[  103.416575][ T5822]  ? __lock_acquire+0xab9/0xd20
[  103.416596][ T5822]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  103.416630][ T5822]  kill_f2fs_super+0x2cc/0x6d0
[  103.416642][ T5822]  ? __pfx_kill_f2fs_super+0x10/0x10
[  103.416658][ T5822]  ? shrinker_free+0x2ce/0x3e0
[  103.416670][ T5822]  deactivate_locked_super+0xbc/0x130
[  103.416681][ T5822]  cleanup_mnt+0x425/0x4c0
[  103.416691][ T5822]  ? lockdep_hardirqs_on+0x9c/0x150
[  103.416702][ T5822]  task_work_run+0x1d4/0x260
[  103.416715][ T5822]  ? __pfx_task_work_run+0x10/0x10
[  103.416723][ T5822]  ? __x64_sys_umount+0x122/0x160
[  103.416735][ T5822]  ? exit_to_user_mode_loop+0x40/0x130
[  103.416744][ T5822]  exit_to_user_mode_loop+0xe9/0x130
[  103.416752][ T5822]  do_syscall_64+0x2bd/0xfa0
[  103.416761][ T5822]  ? lockdep_hardirqs_on+0x9c/0x150
[  103.416784][ T5822]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  103.416793][ T5822]  ? exc_page_fault+0xab/0x100
[  103.416803][ T5822]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  103.416810][ T5822] RIP: 0033:0x7fbbd67902f7
[  103.416819][ T5822] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  103.416825][ T5822] RSP: 002b:00007ffd98382cb8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  103.416834][ T5822] RAX: 0000000000000000 RBX: 00007fbbd6811d7d RCX: 00007fbbd67902f7
[  103.416839][ T5822] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd98382d70
[  103.416843][ T5822] RBP: 00007ffd98382d70 R08: 0000000000000000 R09: 0000000000000000
[  103.416848][ T5822] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd98383e00
[  103.416852][ T5822] R13: 00007fbbd6811d7d R14: 0000000000018ca5 R15: 00007ffd98383e40
[  103.416866][ T5822]  </TASK>
[  103.416928][ T5822] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  104.073458][ T7090] loop2: detected capacity change from 0 to 1024
[  104.099297][ T7090] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  104.111912][ T7090] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters
[  104.150224][ T5819] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  105.163934][ T7115] loop2: detected capacity change from 0 to 32768
[  105.199225][ T7115] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  105.210749][ T7131] loop1: detected capacity change from 0 to 64
[  105.222818][ T7131] syz.1.440: attempt to access beyond end of device
[  105.222818][ T7131] loop1: rw=2049, sector=268435468, nr_sectors = 2 limit=64
[  105.229631][ T7115] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50.
[  105.249310][ T7115] XFS (loop2): Starting recovery (logdev: internal)
[  105.281773][ T7115] XFS (loop2): Ending recovery (logdev: internal)
[  105.318918][ T5819] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  105.599335][ T7141] warning: `syz.1.444' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  105.717955][ T7143] loop1: detected capacity change from 0 to 4096
[  105.725579][ T7143] NILFS (loop1): invalid segment: Checksum error in segment payload
[  105.732087][ T7143] NILFS (loop1): trying rollback from an earlier position
[  105.753878][ T7143] NILFS (loop1): recovery complete
[  105.877162][ T7153] loop1: detected capacity change from 0 to 128
[  106.065839][ T7163] netlink: 'syz.2.454': attribute type 29 has an invalid length.
[  106.119293][ T7165] netlink: 24 bytes leftover after parsing attributes in process `syz.1.455'.
[  106.377890][ T7173] syz.0.459 (7173) used greatest stack depth: 18232 bytes left
[  106.382738][ T7178] loop2: detected capacity change from 0 to 8192
[  108.132005][ T7215] loop2: detected capacity change from 0 to 512
[  108.135105][ T7215] EXT4-fs: Ignoring removed mblk_io_submit option
[  108.153179][ T7215] EXT4-fs: Ignoring removed mblk_io_submit option
[  108.155528][ T7215] EXT4-fs (loop2): Test dummy encryption mode enabled
[  108.165320][ T7215] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  108.170383][ T7215] EXT4-fs error (device loop2): __ext4_iget:5443: inode #2: block 134217728: comm syz.2.473: invalid block
[  108.173896][ T7215] EXT4-fs (loop2): Remounting filesystem read-only
[  108.175922][ T7215] EXT4-fs (loop2): get root inode failed
[  108.177649][ T7215] EXT4-fs (loop2): mount failed
[  108.771067][ T7223] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 0, id = 0
[  108.823950][ T7225] loop1: detected capacity change from 0 to 1024
[  108.828627][ T7225] ext4: Unknown parameter 'subj_type'
[  109.083553][    T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  109.237562][    T9] usb 2-1: Using ep0 maxpacket: 16
[  109.241355][    T9] usb 2-1: unable to get BOS descriptor or descriptor too short
[  109.246385][    T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  109.249798][    T9] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  109.252415][    T9] usb 2-1: config 1 has no interface number 1
[  109.254210][    T9] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x5 has an invalid bInterval 0, changing to 7
[  109.259214][    T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  109.261862][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  109.266254][    T9] usb 2-1: Product: ช㘦鸚䭊敫倵嚀蓉㢩챵썺瓌㽍霹燜⶜☍但䐹楨굨෺ឈ抟ꂨ곥ﶡ谵생㹛膺′䵪┵ᄦ৴ﯕ茸워㋘
[  109.271520][    T9] usb 2-1: Manufacturer: 孟檠믭쪍﷼畸䭋⩙莢㟄끜ࣃ㔙ꊊ붔堓镀皒슉맒繆慬몬β튺ٜꦑ쏴初巕ⴘ⠜ꂍ
[  109.275990][    T9] usb 2-1: SerialNumber: 㩠倐랔紀圙䶨迪䟊ᑦ읲袶ﻜু힓관驖ᬾ⽣襵ⳮ䙈믄ʸ叔统
[  109.380683][ T7231] loop2: detected capacity change from 0 to 32768
[  109.390945][ T7231] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  109.420160][ T7231] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  109.431188][ T7231] XFS (loop2): Starting recovery (logdev: internal)
[  109.443198][ T7231] XFS (loop2): Ending recovery (logdev: internal)
[  109.483413][ T5819] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  109.510934][    T9] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor
[  109.587012][    T9] usb 2-1: USB disconnect, device number 6
[  109.639656][ T5828] udevd[5828]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  109.765941][ T7241] loop2: detected capacity change from 0 to 32768
[  109.775799][ T7241] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.480 (7241)
[  109.788042][ T7241] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  109.791303][ T7241] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[  109.808895][ T7241] BTRFS info (device loop2): enabling ssd optimizations
[  109.811214][ T7241] BTRFS info (device loop2): turning on async discard
[  109.813234][ T7241] BTRFS info (device loop2): enabling free space tree
[  109.836155][ T5819] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  109.985954][ T7262] loop2: detected capacity change from 0 to 512
[  110.008567][ T7262] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  110.036484][ T7262] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #17: comm syz.2.482: inode has both inline data and extents flags
[  110.044911][ T7262] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.482: couldn't read orphan inode 17 (err -117)
[  110.076953][ T7262] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  110.118494][ T5819] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  110.180457][ T7271] loop2: detected capacity change from 0 to 512
[  110.191334][ T7271] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  110.196514][ T7271] EXT4-fs (loop2): 1 truncate cleaned up
[  110.199239][ T7271] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  110.212759][ T7271] EXT4-fs (loop2): shut down requested (1)
[  110.246790][ T5819] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  110.293561][ T7274] netlink: 'syz.2.486': attribute type 1 has an invalid length.
[  110.825864][ T7288] Zero length message leads to an empty skb
[  111.922474][ T7290] loop1: detected capacity change from 0 to 262144
[  111.949920][ T7290] BTRFS: device fsid f14e9105-5c88-4782-b968-4539b9a731cb devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.494 (7290)
[  112.010281][ T7278] loop2: detected capacity change from 0 to 262144
[  112.015261][ T7290] BTRFS info (device loop1): first mount of filesystem f14e9105-5c88-4782-b968-4539b9a731cb
[  112.019696][ T7290] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm
[  112.075371][ T7278] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  112.085292][ T7278] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  112.172393][ T7290] BTRFS info (device loop1): enabling ssd optimizations
[  112.174940][ T7290] BTRFS info (device loop1): turning on async discard
[  112.177734][ T7290] BTRFS info (device loop1): enabling free space tree
[  112.277318][ T5815] BTRFS info (device loop1): last unmount of filesystem f14e9105-5c88-4782-b968-4539b9a731cb
[  113.882439][ T7329] loop0: detected capacity change from 0 to 4096
[  113.892000][ T7329] ntfs3(loop0): Different NTFS sector size (2048) and media sector size (512).
[  113.894479][ T7329] ntfs3(loop0): RAW NTFS volume: Filesystem size 8192.00 Gb > volume size 0.00 Gb. Mount in read-only.
[  113.900514][ T7329] ntfs3(loop0): NTFS 8192.00 Gb is too big to use 32 bits per cluster.
[  113.903888][ T7329] ntfs3(loop0): try to read out of volume at offset 0x1ffe00
[  114.047564][ T5881] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  114.169369][ T7350] loop1: detected capacity change from 0 to 1024
[  114.203350][ T5881] usb 3-1: Using ep0 maxpacket: 32
[  114.206412][ T5881] usb 3-1: config 0 has an invalid interface number: 77 but max is 0
[  114.210023][ T5881] usb 3-1: config 0 has no interface number 0
[  114.212034][ T5881] usb 3-1: config 0 interface 77 has no altsetting 0
[  114.223215][ T5881] usb 3-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=ea.48
[  114.226773][ T5881] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  114.230855][ T5881] usb 3-1: Product: syz
[  114.232341][ T5881] usb 3-1: Manufacturer: syz
[  114.234052][ T5881] usb 3-1: SerialNumber: syz
[  114.243272][ T5881] usb 3-1: config 0 descriptor??
[  114.255282][ T5881] redrat3 3-1:0.77: Couldn't find all endpoints
[  114.316503][ T7356] loop1: detected capacity change from 0 to 256
[  114.325367][ T7356] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  114.338166][ T7356] exFAT-fs (loop1): valid_size(150994954) is greater than size(10)
[  114.459906][ T5881] usb 3-1: USB disconnect, device number 5
[  114.524035][ T7365] loop1: detected capacity change from 0 to 256
[  114.571161][ T7365] FAT-fs (loop1): Directory bread(block 64) failed
[  114.573623][ T7365] FAT-fs (loop1): Directory bread(block 65) failed
[  114.576139][ T7365] FAT-fs (loop1): Directory bread(block 66) failed
[  114.597584][ T7365] FAT-fs (loop1): Directory bread(block 67) failed
[  114.600125][ T7365] FAT-fs (loop1): Directory bread(block 68) failed
[  114.602498][ T7365] FAT-fs (loop1): Directory bread(block 69) failed
[  114.604895][ T7365] FAT-fs (loop1): Directory bread(block 70) failed
[  114.612030][ T7365] FAT-fs (loop1): Directory bread(block 71) failed
[  114.614768][ T7365] FAT-fs (loop1): Directory bread(block 72) failed
[  114.617095][ T7365] FAT-fs (loop1): Directory bread(block 73) failed
[  114.967620][    T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  114.975151][ T7371] loop0: detected capacity change from 0 to 40427
[  114.995955][ T7371] F2FS-fs (loop0): Image doesn't support compression
[  115.005195][ T7371] F2FS-fs (loop0): build fault injection rate: 690
[  115.019310][ T7371] F2FS-fs (loop0): build fault injection type: 0x35f7
[  115.023906][ T7371] F2FS-fs (loop0): invalid crc value
[  115.101240][ T7371] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  115.108447][ T7371] F2FS-fs (loop0): Start checkpoint disabled!
[  115.113350][ T7371] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0
[  115.115925][ T7371] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  115.127962][    T9] usb 2-1: Using ep0 maxpacket: 32
[  115.140767][    T9] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86
[  115.145110][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[  115.154558][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[  115.167591][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11
[  115.172505][ T1190] kworker/u10:9: attempt to access beyond end of device
[  115.172505][ T1190] loop0: rw=1, sector=45096, nr_sectors = 8 limit=40427
[  115.175791][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024
[  115.182124][ T1190] kworker/u10:9: attempt to access beyond end of device
[  115.182124][ T1190] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  115.185168][    T9] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[  115.188977][ T1190] CPU: 1 UID: 0 PID: 1190 Comm: kworker/u10:9 Not tainted syzkaller #0 PREEMPT(full) 
[  115.188989][ T1190] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  115.188994][ T1190] Workqueue: writeback wb_workfn (flush-7:0)
[  115.189015][ T1190] Call Trace:
[  115.189019][ T1190]  <TASK>
[  115.189023][ T1190]  dump_stack_lvl+0x189/0x250
[  115.189038][ T1190]  ? __pfx_dump_stack_lvl+0x10/0x10
[  115.189048][ T1190]  ? __pfx_queue_work_on+0x10/0x10
[  115.189056][ T1190]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  115.189066][ T1190]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  115.189080][ T1190]  f2fs_handle_critical_error+0x37c/0x540
[  115.189096][ T1190]  f2fs_write_end_io+0x886/0xb60
[  115.189113][ T1190]  __submit_merged_bio+0x27a/0x6a0
[  115.189127][ T1190]  __submit_merged_write_cond+0x255/0x530
[  115.189141][ T1190]  f2fs_write_data_pages+0x261d/0x3000
[  115.189166][ T1190]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  115.189180][ T1190]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  115.189210][ T1190]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  115.189228][ T1190]  ? trace_f2fs_writepages+0x7f/0x200
[  115.189239][ T1190]  ? f2fs_write_node_pages+0x478/0x6e0
[  115.189252][ T1190]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  115.189266][ T1190]  ? __lock_acquire+0xab9/0xd20
[  115.189276][ T1190]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  115.189284][ T1190]  do_writepages+0x32e/0x550
[  115.189297][ T1190]  ? reacquire_held_locks+0x127/0x1d0
[  115.189305][ T1190]  ? writeback_sb_inodes+0x384/0x1010
[  115.189319][ T1190]  __writeback_single_inode+0x145/0xff0
[  115.189330][ T1190]  ? do_raw_spin_unlock+0x4d/0x240
[  115.189342][ T1190]  writeback_sb_inodes+0x6c7/0x1010
[  115.189365][ T1190]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  115.189397][ T1190]  ? rcu_is_watching+0x15/0xb0
[  115.189411][ T1190]  wb_writeback+0x43b/0xaf0
[  115.189452][ T1190]  ? queue_io+0x311/0x590
[  115.189475][ T1190]  ? __pfx_wb_writeback+0x10/0x10
[  115.189496][ T1190]  ? _raw_spin_unlock_irq+0x23/0x50
[  115.189514][ T1190]  wb_workfn+0x409/0xef0
[  115.189536][ T1190]  ? __pfx_wb_workfn+0x10/0x10
[  115.189547][ T1190]  ? __lock_acquire+0xab9/0xd20
[  115.189560][ T1190]  ? process_scheduled_works+0x9ef/0x17b0
[  115.189572][ T1190]  ? _raw_spin_unlock_irq+0x23/0x50
[  115.189580][ T1190]  ? process_scheduled_works+0x9ef/0x17b0
[  115.189587][ T1190]  ? process_scheduled_works+0x9ef/0x17b0
[  115.189596][ T1190]  process_scheduled_works+0xae1/0x17b0
[  115.189636][ T1190]  ? __pfx_process_scheduled_works+0x10/0x10
[  115.189671][ T1190]  worker_thread+0x8a0/0xda0
[  115.189682][ T1190]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  115.189695][ T1190]  ? __kthread_parkme+0x7b/0x200
[  115.189709][ T1190]  kthread+0x711/0x8a0
[  115.189721][ T1190]  ? __pfx_worker_thread+0x10/0x10
[  115.189729][ T1190]  ? __pfx_kthread+0x10/0x10
[  115.189739][ T1190]  ? _raw_spin_unlock_irq+0x23/0x50
[  115.189748][ T1190]  ? lockdep_hardirqs_on+0x9c/0x150
[  115.189757][ T1190]  ? __pfx_kthread+0x10/0x10
[  115.189767][ T1190]  ret_from_fork+0x4bc/0x870
[  115.189777][ T1190]  ? __pfx_ret_from_fork+0x10/0x10
[  115.189789][ T1190]  ? __switch_to_asm+0x39/0x70
[  115.189794][ T1190]  ? __switch_to_asm+0x33/0x70
[  115.189800][ T1190]  ? __pfx_kthread+0x10/0x10
[  115.189810][ T1190]  ret_from_fork_asm+0x1a/0x30
[  115.189826][ T1190]  </TASK>
[  115.191835][ T1190] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  115.193387][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  115.316399][    T9] usb 2-1: Product: syz
[  115.318146][    T9] usb 2-1: Manufacturer: syz
[  115.320616][    T9] usb 2-1: SerialNumber: syz
[  115.324807][    T9] usb 2-1: config 0 descriptor??
[  115.742200][    T9] iforce 2-1:0.0: usb_submit_urb failed: -71
[  115.744395][    T9] input input7: Device does not respond to id packet M
[  115.748286][    T9] iforce 2-1:0.0: usb_submit_urb failed: -71
[  115.761550][    T9] input input7: Device does not respond to id packet P
[  115.764476][    T9] iforce 2-1:0.0: usb_submit_urb failed: -71
[  115.766735][    T9] input input7: Device does not respond to id packet B
[  115.774789][    T9] iforce 2-1:0.0: usb_submit_urb failed: -71
[  115.777080][    T9] input input7: Device does not respond to id packet N
[  115.785086][    T9] iforce 2-1:0.0: usb_submit_urb failed: -71
[  115.795269][    T9] iforce 2-1:0.0: usb_submit_urb failed: -71
[  115.798189][    T9] iforce 2-1:0.0: usb_submit_urb failed: -71
[  115.800820][    T9] iforce 2-1:0.0: usb_submit_urb failed: -71
[  115.820988][    T9] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input7
[  115.844257][    T9] usb 2-1: USB disconnect, device number 7
[  115.910479][ T7403] loop0: detected capacity change from 0 to 512
[  115.934763][ T7403] EXT4-fs (loop0): 1 truncate cleaned up
[  115.938339][ T7403] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  115.967129][ T5822] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  116.034408][ T7398] loop2: detected capacity change from 0 to 32768
[  116.047828][ T7398] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.531 (7398)
[  116.058628][ T7398] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  116.061603][ T7398] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[  116.070136][ T7407] loop0: detected capacity change from 0 to 4096
[  116.075195][ T7407] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512).
[  116.097208][ T7398] BTRFS info (device loop2): enabling ssd optimizations
[  116.099739][ T7398] BTRFS info (device loop2): turning on async discard
[  116.101996][ T7398] BTRFS info (device loop2): enabling free space tree
[  116.160397][ T5819] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  116.202105][ T7425] kAFS: unparsable volume name
[  116.581987][ T7431] loop2: detected capacity change from 0 to 32768
[  116.608085][ T7431] OCFS2: ERROR (device loop2): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode #70: OCFS2_VALID_FL not set
[  116.618254][ T7431] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  116.621834][ T7431] OCFS2: File system is now read-only.
[  116.623491][ T7431] (syz.2.538,7431,1):ocfs2_read_locked_inode:597 ERROR: status = -30
[  116.626610][ T7431] (syz.2.538,7431,1):_ocfs2_get_system_file_inode:144 ERROR: status = -30
[  116.630286][ T7431] (syz.2.538,7431,1):ocfs2_init_global_system_inodes:465 ERROR: status = -30
[  116.632799][ T7431] (syz.2.538,7431,1):ocfs2_init_global_system_inodes:467 ERROR: Unable to load system inode 3, possibly corrupt fs?
[  116.632811][ T7431] (syz.2.538,7431,1):ocfs2_init_global_system_inodes:476 ERROR: status = -30
[  116.641452][ T7431] (syz.2.538,7431,1):ocfs2_initialize_super:2198 ERROR: status = -30
[  116.644161][ T7431] (syz.2.538,7431,1):ocfs2_fill_super:1177 ERROR: status = -30
[  116.714125][ T7435] loop1: detected capacity change from 0 to 65536
[  116.773139][ T7435] XFS (loop1): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[  116.804042][ T7435] XFS (loop1): Ending clean mount
[  116.814975][ T7435] XFS (loop1): Metadata CRC error detected at xfs_agfl_read_verify+0x126/0x1f0, xfs_agfl block 0x3 
[  116.818334][ T7435] XFS (loop1): Unmount and run xfs_repair
[  116.820028][ T7435] XFS (loop1): First 128 bytes of corrupted metadata buffer:
[  116.822114][ T7435] 00000000: 58 41 46 4c 00 00 00 00 d6 f6 9d bd 8c 5d 46 be  XAFL.........]F.
[  116.824686][ T7435] 00000010: b8 8e 92 c0 ae 88 ce b2 00 00 00 00 00 00 00 00  ................
[  116.827219][ T7435] 00000020: 35 fc 5c 25 ff 00 ff ff 00 00 00 05 00 00 00 06  5.\%............
[  116.829953][ T7435] 00000030: 00 00 00 07 00 00 00 08 ff ff ff ff ff ff ff ff  ................
[  116.832488][ T7435] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  116.835206][ T7435] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  116.837918][ T7435] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  116.841254][ T7435] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  116.844603][ T7435] XFS (loop1): metadata I/O error in "xfs_alloc_read_agfl+0x202/0x410" at daddr 0x3 len 1 error 74
[  116.848594][ T7435] XFS (loop1): page discard on page ffffea000077ce80, inode 0x47, pos 21504.
[  116.875719][ T5815] XFS (loop1): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[  116.879782][ T5815] XFS (loop1): Uncorrected metadata errors detected; please run xfs_repair.
[  117.023600][ T7445] loop2: detected capacity change from 0 to 32768
[  117.052391][ T7445] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  117.061866][ T7445] XFS (loop2): Corruption warning: Metadata has LSN (2:16) ahead of current LSN (1:80). Please unmount and run xfs_repair (>= v4.3) to resolve.
[  117.067417][ T7445] XFS (loop2): Metadata CRC error detected at xfs_inobt_read_verify+0x42/0xe0, xfs_inobt block 0x18 
[  117.073955][ T7445] XFS (loop2): Unmount and run xfs_repair
[  117.075864][ T7445] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[  117.078372][ T7445] 00000000: 49 41 42 33 00 00 00 01 ff ff ff ff ff ff ff ff  IAB3............
[  117.081054][ T7445] 00000010: 00 00 00 00 00 00 00 18 00 00 00 02 00 00 00 10  ................
[  117.083646][ T7445] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb  ...^T.Lr......N.
[  117.086229][ T7445] 00000030: 00 00 00 00 f0 ea ad a5 00 00 11 40 00 00 40 37  ...........@..@7
[  117.089382][ T7445] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00  ................
[  117.092640][ T7445] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  117.095913][ T7445] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  117.098763][ T7445] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  117.101409][ T7445] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x290/0x470" at daddr 0x18 len 8 error 74
[  117.104865][ T7445] XFS (loop2): Failed to read root inode 0x1140, error 117
[  117.109171][ T7445] XFS (loop2): Uncorrected metadata errors detected; please run xfs_repair.
[  117.223226][ T7459] loop1: detected capacity change from 0 to 512
[  117.256065][ T7459] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  117.353288][ T5815] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  117.639177][   T24] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  117.807709][   T24] usb 2-1: Using ep0 maxpacket: 8
[  117.811229][   T24] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  117.813704][   T24] usb 2-1: config 0 has no interface number 0
[  117.816019][   T24] usb 2-1: config 0 interface 1 has no altsetting 0
[  117.821668][   T24] usb 2-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=70.2f
[  117.825014][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  117.828160][   T24] usb 2-1: Product: syz
[  117.830065][   T24] usb 2-1: Manufacturer: syz
[  117.831908][   T24] usb 2-1: SerialNumber: syz
[  117.836405][   T24] usb 2-1: config 0 descriptor??
[  118.044546][   T24] i2c-cp2615 2-1:0.1: probe with driver i2c-cp2615 failed with error -22
[  118.263178][   T24] usb 2-1: USB disconnect, device number 8
[  118.793004][    T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  118.887384][ T7484] netlink: 'syz.1.554': attribute type 2 has an invalid length.
[  118.891855][ T7484] netlink: 'syz.1.554': attribute type 7 has an invalid length.
[  118.947645][    T9] usb 3-1: Using ep0 maxpacket: 16
[  118.951484][    T9] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[  118.954668][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  118.964416][    T9] usb 3-1: config 0 descriptor??
[  118.973553][    T9] gspca_main: sonixj-2.14.0 probing 0471:0327
[  119.088832][ T7486] loop1: detected capacity change from 0 to 32768
[  119.091668][ T7486] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.555 (7486)
[  119.100973][ T7486] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  119.105427][ T7486] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm
[  119.150163][ T7486] BTRFS info (device loop1): enabling ssd optimizations
[  119.153922][ T7486] BTRFS info (device loop1): turning on async discard
[  119.156429][ T7486] BTRFS info (device loop1): enabling free space tree
[  119.179179][ T7486] BTRFS error (device loop1): target device  is invalid!
[  119.213782][ T5815] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  119.488520][ T7511] loop0: detected capacity change from 0 to 512
[  119.506596][ T7511] FAT-fs (loop0): bogus number of FAT sectors
[  119.509183][ T7511] FAT-fs (loop0): Can't find a valid FAT filesystem
[  119.647643][ T7516] loop1: detected capacity change from 0 to 8192
[  119.651982][ T7516] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  119.821596][ T7528] can0: slcan on pty22.
[  119.831505][ T7529] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  119.879352][ T7526] can0 (unregistered): slcan off pty22.
[  119.944682][ T7533] loop1: detected capacity change from 0 to 2048
[  119.964079][ T7533] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  119.978022][    T9] gspca_sonixj: reg_w1 err -71
[  119.998238][    T9] sonixj 3-1:0.0: probe with driver sonixj failed with error -71
[  120.009740][    T9] usb 3-1: USB disconnect, device number 6
[  120.076135][ T7541] loop0: detected capacity change from 0 to 512
[  120.084746][ T7541] EXT4-fs: Ignoring removed nomblk_io_submit option
[  120.090782][ T7541] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  120.094059][ T7541] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  120.114013][ T7541] Quota error (device loop0): do_insert_tree: Free block already used in tree: block 1
[  120.118606][ T7541] Quota error (device loop0): qtree_write_dquot: Error -5 occurred while creating quota
[  120.123547][ T7541] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.574: Failed to acquire dquot type 1
[  120.128726][ T7541] EXT4-fs (loop0): Remounting filesystem read-only
[  120.131262][ T7541] EXT4-fs (loop0): 1 truncate cleaned up
[  120.134792][ T7541] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  120.162139][ T5822] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  120.378112][ T7546] loop0: detected capacity change from 0 to 32768
[  120.380893][ T7546] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.575 (7546)
[  120.391704][ T7546] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  120.394776][ T7546] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm
[  120.416451][ T7546] BTRFS info (device loop0): enabling ssd optimizations
[  120.418722][ T7546] BTRFS info (device loop0): turning on async discard
[  120.421208][ T7546] BTRFS info (device loop0): enabling free space tree
[  120.446519][ T5822] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  120.879726][    T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  121.027727][    T9] usb 3-1: Using ep0 maxpacket: 8
[  121.037849][    T9] usb 3-1: config 0 has an invalid interface number: 72 but max is 0
[  121.046418][    T9] usb 3-1: config 0 has no interface number 0
[  121.057382][    T9] usb 3-1: New USB device found, idVendor=0403, idProduct=7151, bcdDevice=1b.16
[  121.064024][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  121.073383][    T9] usb 3-1: Product: syz
[  121.077349][    T9] usb 3-1: Manufacturer: syz
[  121.083352][    T9] usb 3-1: SerialNumber: syz
[  121.101083][    T9] usb 3-1: config 0 descriptor??
[  121.114036][    T9] hub 3-1:0.72: bad descriptor, ignoring hub
[  121.121840][    T9] hub 3-1:0.72: probe with driver hub failed with error -5
[  121.135186][    T9] ftdi_sio 3-1:0.72: FTDI USB Serial Device converter detected
[  121.157364][    T9] ftdi_sio ttyUSB0: unknown device type: 0x1b16
[  121.386527][ T7579] loop0: detected capacity change from 0 to 164
[  121.394814][ T7579] iso9660: Unknown parameter '18446744073709551615'
[  121.470469][    T9] usb 3-1: USB disconnect, device number 7
[  121.475239][    T9] ftdi_sio 3-1:0.72: device disconnected
[  121.607712][ T7581] loop0: detected capacity change from 0 to 128
[  121.614278][ T7581] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  121.624662][ T7581] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  121.707066][ T7581] overlayfs: failed to create directory ./bus/work (errno: 28); mounting read-only
[  122.120237][   T24] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  122.287713][   T24] usb 2-1: Using ep0 maxpacket: 16
[  122.292285][   T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  122.295997][   T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  122.301940][   T24] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  122.304701][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  122.307118][   T24] usb 2-1: Product: syz
[  122.310236][   T24] usb 2-1: Manufacturer: syz
[  122.311876][   T24] usb 2-1: SerialNumber: syz
[  122.388343][ T7607] loop0: detected capacity change from 0 to 128
[  122.401265][ T7607] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  122.405323][ T7607] hpfs: filesystem error: improperly stopped
[  122.407233][ T7607] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  122.412151][ T7607] hpfs: You really don't want any checks? You are crazy...
[  122.414668][ T7607] hpfs: hpfs_map_sector(): read error
[  122.416413][ T7607] hpfs: code page support is disabled
[  122.420077][ T7607] ==================================================================
[  122.423012][ T7607] BUG: KASAN: use-after-free in strcmp+0x6f/0xc0
[  122.425403][ T7607] Read of size 1 at addr ffff8881af2098a6 by task syz.0.595/7607
[  122.429452][ T7607] 
[  122.430307][ T7607] CPU: 1 UID: 0 PID: 7607 Comm: syz.0.595 Not tainted syzkaller #0 PREEMPT(full) 
[  122.430319][ T7607] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  122.430325][ T7607] Call Trace:
[  122.430330][ T7607]  <TASK>
[  122.430334][ T7607]  dump_stack_lvl+0x189/0x250
[  122.430349][ T7607]  ? __virt_addr_valid+0x1c8/0x5c0
[  122.430359][ T7607]  ? rcu_is_watching+0x15/0xb0
[  122.430368][ T7607]  ? __kasan_check_byte+0x12/0x40
[  122.430376][ T7607]  ? __pfx_dump_stack_lvl+0x10/0x10
[  122.430386][ T7607]  ? rcu_is_watching+0x15/0xb0
[  122.430394][ T7607]  ? lock_release+0x4b/0x3e0
[  122.430402][ T7607]  ? __virt_addr_valid+0x1c8/0x5c0
[  122.430412][ T7607]  ? __virt_addr_valid+0x4a5/0x5c0
[  122.430422][ T7607]  print_report+0xca/0x240
[  122.430433][ T7607]  ? strcmp+0x6f/0xc0
[  122.430443][ T7607]  kasan_report+0x118/0x150
[  122.430451][ T7607]  ? strcmp+0x6f/0xc0
[  122.430463][ T7607]  strcmp+0x6f/0xc0
[  122.430474][ T7607]  hpfs_get_ea+0x114/0xdb0
[  122.430483][ T7607]  ? __pfx_bit_wait_io+0x10/0x10
[  122.430494][ T7607]  ? __pfx_submit_bio_noacct_nocheck+0x10/0x10
[  122.430506][ T7607]  ? __pfx_hpfs_get_ea+0x10/0x10
[  122.430516][ T7607]  ? __pfx_wake_bit_function+0x10/0x10
[  122.430528][ T7607]  ? __bread_gfp+0x2ff/0x3c0
[  122.430537][ T7607]  ? hpfs_map_sector+0x14f/0x380
[  122.430546][ T7607]  ? hpfs_map_fnode+0x27e/0x6a0
[  122.430555][ T7607]  ? set_normalized_timespec64+0xf0/0x1a0
[  122.430566][ T7607]  ? __lock_acquire+0xab9/0xd20
[  122.430574][ T7607]  hpfs_read_inode+0x19d/0x1010
[  122.430585][ T7607]  ? __pfx_hpfs_read_inode+0x10/0x10
[  122.430594][ T7607]  ? inode_set_ctime_to_ts+0x126/0x2f0
[  122.430603][ T7607]  ? __pfx_inode_set_ctime_to_ts+0x10/0x10
[  122.430612][ T7607]  ? do_raw_spin_unlock+0x4d/0x240
[  122.430622][ T7607]  ? hpfs_init_inode+0x216/0x350
[  122.430632][ T7607]  hpfs_fill_super+0x129d/0x2040
[  122.430643][ T7607]  ? __pfx_hpfs_fill_super+0x10/0x10
[  122.430651][ T7607]  ? __pfx_snprintf+0x10/0x10
[  122.430657][ T7607]  ? set_blocksize+0x21e/0x500
[  122.430668][ T7607]  ? sb_set_blocksize+0x104/0x180
[  122.430679][ T7607]  ? setup_bdev_super+0x4c1/0x5b0
[  122.430689][ T7607]  get_tree_bdev_flags+0x40e/0x4d0
[  122.430700][ T7607]  ? __pfx_hpfs_fill_super+0x10/0x10
[  122.430706][ T7607]  ? __pfx_get_tree_bdev_flags+0x10/0x10
[  122.430718][ T7607]  vfs_get_tree+0x92/0x2b0
[  122.430728][ T7607]  do_new_mount+0x302/0xa10
[  122.430739][ T7607]  ? apparmor_capable+0x137/0x1b0
[  122.430748][ T7607]  ? __pfx_do_new_mount+0x10/0x10
[  122.430759][ T7607]  ? ns_capable+0x8a/0xf0
[  122.430767][ T7607]  ? kmem_cache_free+0x19b/0x690
[  122.430779][ T7607]  __se_sys_mount+0x313/0x410
[  122.430787][ T7607]  ? __pfx___se_sys_mount+0x10/0x10
[  122.430794][ T7607]  ? do_syscall_64+0xbe/0xfa0
[  122.430803][ T7607]  ? __x64_sys_mount+0x20/0xc0
[  122.430810][ T7607]  do_syscall_64+0xfa/0xfa0
[  122.430819][ T7607]  ? lockdep_hardirqs_on+0x9c/0x150
[  122.430828][ T7607]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  122.430836][ T7607]  ? exc_page_fault+0xab/0x100
[  122.430845][ T7607]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  122.430853][ T7607] RIP: 0033:0x7fbbd679076a
[  122.430861][ T7607] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  122.430868][ T7607] RSP: 002b:00007fbbd49f5e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  122.430877][ T7607] RAX: ffffffffffffffda RBX: 00007fbbd49f5ef0 RCX: 00007fbbd679076a
[  122.430882][ T7607] RDX: 000020000000a000 RSI: 0000200000009ec0 RDI: 00007fbbd49f5eb0
[  122.430887][ T7607] RBP: 000020000000a000 R08: 00007fbbd49f5ef0 R09: 0000000003200041
[  122.430893][ T7607] R10: 0000000003200041 R11: 0000000000000246 R12: 0000200000009ec0
[  122.430899][ T7607] R13: 00007fbbd49f5eb0 R14: 0000000000009e28 R15: 00002000000002c0
[  122.430909][ T7607]  </TASK>
[  122.430913][ T7607] 
[  122.545601][ T7607] The buggy address belongs to the physical page:
[  122.547533][ T7607] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x19cb pfn:0x1af209
[  122.550167][ T7607] flags: 0x57ff00000000000(node=1|zone=2|lastcpupid=0x7ff)
[  122.552643][ T7607] raw: 057ff00000000000 dead000000000100 dead000000000122 0000000000000000
[  122.555241][ T7607] raw: 00000000000019cb 0000000000000000 00000000ffffffff 0000000000000000
[  122.557496][ T7607] page dumped because: kasan: bad access detected
[  122.559256][ T7607] page_owner tracks the page as freed
[  122.560765][ T7607] page last allocated via order 0, migratetype Movable, gfp_mask 0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), pid 7290, tgid 7289 (syz.1.494), ts 111404251516, free_ts 112443728069
[  122.565553][ T7607]  post_alloc_hook+0x240/0x2a0
[  122.566883][ T7607]  get_page_from_freelist+0x2365/0x2440
[  122.568452][ T7607]  __alloc_frozen_pages_noprof+0x181/0x370
[  122.570062][ T7607]  alloc_pages_mpol+0x232/0x4a0
[  122.571402][ T7607]  folio_alloc_mpol_noprof+0x39/0x70
[  122.572917][ T7607]  shmem_alloc_and_add_folio+0x447/0xf60
[  122.574523][ T7607]  shmem_get_folio_gfp+0x59d/0x1660
[  122.576158][ T7607]  shmem_write_begin+0xf7/0x2b0
[  122.577943][ T7607]  generic_perform_write+0x2c5/0x900
[  122.579949][ T7607]  shmem_file_write_iter+0xf8/0x120
[  122.581743][ T7607]  vfs_write+0x5c9/0xb30
[  122.583224][ T7607]  ksys_write+0x145/0x250
[  122.584721][ T7607]  do_syscall_64+0xfa/0xfa0
[  122.586148][ T7607]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  122.588244][ T7607] page last free pid 5815 tgid 5815 stack trace:
[  122.590566][ T7607]  free_unref_folios+0xdb3/0x14f0
[  122.592369][ T7607]  folios_put_refs+0x584/0x670
[  122.594106][ T7607]  shmem_undo_range+0x49e/0x14b0
[  122.595892][ T7607]  shmem_evict_inode+0x272/0xa70
[  122.597666][ T7607]  evict+0x504/0x9c0
[  122.599063][ T7607]  __dentry_kill+0x209/0x660
[  122.600708][ T7607]  dput+0x19f/0x2b0
[  122.602053][ T7607]  __fput+0x68e/0xa70
[  122.603527][ T7607]  task_work_run+0x1d4/0x260
[  122.605236][ T7607]  exit_to_user_mode_loop+0xe9/0x130
[  122.607184][ T7607]  do_syscall_64+0x2bd/0xfa0
[  122.608894][ T7607]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  122.611151][ T7607] 
[  122.612040][ T7607] Memory state around the buggy address:
[  122.614104][ T7607]  ffff8881af209780: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  122.616963][ T7607]  ffff8881af209800: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  122.619900][ T7607] >ffff8881af209880: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  122.622666][ T7607]                                ^
[  122.624068][ T7607]  ffff8881af209900: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  122.626444][ T7607]  ffff8881af209980: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  122.629166][ T7607] ==================================================================
[  122.642602][ T7607] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  122.645266][ T7607] CPU: 1 UID: 0 PID: 7607 Comm: syz.0.595 Not tainted syzkaller #0 PREEMPT(full) 
[  122.648599][ T7607] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  122.652289][ T7607] Call Trace:
[  122.653547][ T7607]  <TASK>
[  122.654681][ T7607]  dump_stack_lvl+0x99/0x250
[  122.656417][ T7607]  ? __asan_memcpy+0x40/0x70
[  122.658191][ T7607]  ? __pfx_dump_stack_lvl+0x10/0x10
[  122.660050][ T7607]  ? __pfx__printk+0x10/0x10
[  122.661702][ T7607]  vpanic+0x237/0x6d0
[  122.663179][ T7607]  ? __pfx_vpanic+0x10/0x10
[  122.664841][ T7607]  ? preempt_schedule_common+0x83/0xd0
[  122.666846][ T7607]  ? preempt_schedule+0xae/0xc0
[  122.668643][ T7607]  panic+0xb9/0xc0
[  122.670004][ T7607]  ? __pfx_panic+0x10/0x10
[  122.671608][ T7607]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  122.673835][ T7607]  ? strcmp+0x6f/0xc0
[  122.675284][ T7607]  check_panic_on_warn+0x89/0xb0
[  122.677045][ T7607]  ? strcmp+0x6f/0xc0
[  122.678502][ T7607]  end_report+0x78/0x160
[  122.680013][ T7607]  kasan_report+0x129/0x150
[  122.681610][ T7607]  ? strcmp+0x6f/0xc0
[  122.683103][ T7607]  strcmp+0x6f/0xc0
[  122.684351][ T7607]  hpfs_get_ea+0x114/0xdb0
[  122.685779][ T7607]  ? __pfx_bit_wait_io+0x10/0x10
[  122.687337][ T7607]  ? __pfx_submit_bio_noacct_nocheck+0x10/0x10
[  122.689273][ T7607]  ? __pfx_hpfs_get_ea+0x10/0x10
[  122.690665][ T7607]  ? __pfx_wake_bit_function+0x10/0x10
[  122.692264][ T7607]  ? __bread_gfp+0x2ff/0x3c0
[  122.693639][ T7607]  ? hpfs_map_sector+0x14f/0x380
[  122.695190][ T7607]  ? hpfs_map_fnode+0x27e/0x6a0
[  122.696549][ T7607]  ? set_normalized_timespec64+0xf0/0x1a0
[  122.698186][ T7607]  ? __lock_acquire+0xab9/0xd20
[  122.699607][ T7607]  hpfs_read_inode+0x19d/0x1010
[  122.701314][ T7607]  ? __pfx_hpfs_read_inode+0x10/0x10
[  122.702834][ T7607]  ? inode_set_ctime_to_ts+0x126/0x2f0
[  122.704504][ T7607]  ? __pfx_inode_set_ctime_to_ts+0x10/0x10
[  122.706491][ T7607]  ? do_raw_spin_unlock+0x4d/0x240
[  122.708177][ T7607]  ? hpfs_init_inode+0x216/0x350
[  122.709751][ T7607]  hpfs_fill_super+0x129d/0x2040
[  122.711485][ T7607]  ? __pfx_hpfs_fill_super+0x10/0x10
[  122.713114][ T7607]  ? __pfx_snprintf+0x10/0x10
[  122.714569][ T7607]  ? set_blocksize+0x21e/0x500
[  122.716190][ T7607]  ? sb_set_blocksize+0x104/0x180
[  122.717761][ T7607]  ? setup_bdev_super+0x4c1/0x5b0
[  122.719232][ T7607]  get_tree_bdev_flags+0x40e/0x4d0
[  122.720703][ T7607]  ? __pfx_hpfs_fill_super+0x10/0x10
[  122.722227][ T7607]  ? __pfx_get_tree_bdev_flags+0x10/0x10
[  122.723832][ T7607]  vfs_get_tree+0x92/0x2b0
[  122.725124][ T7607]  do_new_mount+0x302/0xa10
[  122.726446][ T7607]  ? apparmor_capable+0x137/0x1b0
[  122.727915][ T7607]  ? __pfx_do_new_mount+0x10/0x10
[  122.729370][ T7607]  ? ns_capable+0x8a/0xf0
[  122.730552][ T7607]  ? kmem_cache_free+0x19b/0x690
[  122.732020][ T7607]  __se_sys_mount+0x313/0x410
[  122.733419][ T7607]  ? __pfx___se_sys_mount+0x10/0x10
[  122.735230][ T7607]  ? do_syscall_64+0xbe/0xfa0
[  122.736535][ T7607]  ? __x64_sys_mount+0x20/0xc0
[  122.737866][ T7607]  do_syscall_64+0xfa/0xfa0
[  122.739099][ T7607]  ? lockdep_hardirqs_on+0x9c/0x150
[  122.740538][ T7607]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  122.742189][ T7607]  ? exc_page_fault+0xab/0x100
[  122.743504][ T7607]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  122.745179][ T7607] RIP: 0033:0x7fbbd679076a
[  122.746467][ T7607] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  122.752183][ T7607] RSP: 002b:00007fbbd49f5e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  122.754760][ T7607] RAX: ffffffffffffffda RBX: 00007fbbd49f5ef0 RCX: 00007fbbd679076a
[  122.757216][ T7607] RDX: 000020000000a000 RSI: 0000200000009ec0 RDI: 00007fbbd49f5eb0
[  122.759436][ T7607] RBP: 000020000000a000 R08: 00007fbbd49f5ef0 R09: 0000000003200041
[  122.761758][ T7607] R10: 0000000003200041 R11: 0000000000000246 R12: 0000200000009ec0
[  122.764150][ T7607] R13: 00007fbbd49f5eb0 R14: 0000000000009e28 R15: 00002000000002c0
[  122.766459][ T7607]  </TASK>
[  122.768032][ T7607] Kernel Offset: disabled
[  122.769528][ T7607] Rebooting in 86400 seconds..

VM DIAGNOSIS:
02:00:07  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000000 RBX=ffffc900046b0000 RCX=0000000000000001 RDX=ffffc900046b7468
RSI=dffffc0000000000 RDI=ffffc900046b7f38 RBP=1ffff920008d6e85 RSP=ffffc900046b72f8
R8 =ffffc900046b7f38 R9 =0000000000000000 R10=ffffc900046b7478 R11=fffff520008d6e91
R12=1ffff920008d6e86 R13=1ffff920008d6e87 R14=ffffc900046b8000 R15=dffffc0000000000
RIP=ffffffff8173bc43 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88818eb3d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055d18e8bb000 CR3=0000000111bb8000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000000000d RBX=000000000000000d RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000004d9a RDI=0000000000004d9b RBP=00000000000003f8 RSP=ffffc90004846ef0
R8 =ffff888103718237 R9 =1ffff110206e3046 R10=dffffc0000000000 R11=ffffffff8514d8e0
R12=dffffc0000000000 R13=ffffffff997d7955 R14=ffffffff99aeaf20 R15=0000000000000000
RIP=ffffffff8514d95c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fbbd49f66c0 ffffffff 00c00000
GS =0000 ffff8882a9f3d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fbbd67736a0 CR3=0000000110fbe000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000000ff XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000021 000000000000302e
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffffff00 ffffffffffff0000 XMM09=0000000000000021 000000000000302e
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
