last executing test programs:

4m16.953067118s ago: executing program 0 (id=761):
syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000080)='./file0\x00', 0x210011, &(0x7f0000000400)=ANY=[], 0x1, 0xf04, &(0x7f00000079c0)="$eJzs3U9sHNX9APA367+JTbwGfmDgR0ihFYGCHZJITW9BoB4Rl95BIaERhqKGHoiAmB4QlRBFQpwqDlRcKJVSpCKBKlWop7anVr31hHqhUpVKQT20SImr2G/Wuy/72PXYnrV3Px/p67dv3ux8v2M7zszs7NsAjKzG2tfjxxeKEN759O1HX36q+Pjasrtaaxxa+1rEXjOEMNHWL5LtfR4XXLn80qlubRGOrn0t++GxS63nzoQQVsKh8Flohg+Xlr/84N1HDn/02vQtb55/5pUd2v2WdD8AAGAYXfzT8t/u+8cfH5j/6uLBk2Gqtbw8Pm/G/kw87j8SD5TL4+VG6OwXbdFuMllvLEYjWW8sWW88yTOeyTeRbGcis95kj3xjbcu67ScAAADsReV5bTMUjcWOfqOxuLh+3n/N53OTxeJzZ5fPnBtQoQAAAEBl/76wdtOtEEIIIYQQQgghhjhW5wZ9BQIAAAAYNel8YddZ2d6Zulpba/aX/9LDje7Ph21Q9+//1+efHnD+LkY8//uv+osDAEB1w3o0We5XeRxdzmOQziM4ljxvs8f/jWQ745usMzev4F6ZbzBXZ/p93a1y9W/25zgoufrT+TB3q1z96Tydu1Wu/qma66gqV3+XKz+7Uq7+fTXXUVWu/v0111FVrv6ZmuuoKlf/bM11VJWr/4aa66gqV/+BmuuoKlf/XrmtNld/s+Y6qsrVP19zHVXl6r+x5jqqytV/U811VJWr/+aa6xiUO2Nbfh8OZtab6XJOt1fO8QAAAGDU/df8f0IIIUR7rN8CMfg6hBBCCCG2NS4M+gIEAAAAMHDl+wLKd72vRuX4WI/x8fbx6Y0VyvGJHs+f7DE+1WMcAAAACOG3r5+57a1iY767rc6HV84btS98fDVUmMconY9ws/m3Ou/ZVvPvlXnLAAAAGC3F9z67ev+j770w/9XFgyfbzn6vxvPdch7Q8Xht4JPYL+8LmE36RXkOfbIzTyOzXnp94Ibc9h7f4o4CAADACCvP35uhaCy2nXc3Q6OxuLhxPr4QJoozZ5dPH4n98vNZ/jA3MXVt+UM11w0AAAD0b+N8v/v5f/k5vgthslh87uzymXPr/dnW8olG+3WBuY3lRft1gWay/Ghm+bHYLz+/8wdz+9aWL5764fJT273zAAAAMCLOvXj+mSeXl0//yAMPPPCg9WDQf5kAAIDt9sUXb0/8+Njs79bf/78x/93V+OBQ7Dfj3H5/jsvL+wTK9wFc9379JzrzzOXWe75zvWay3liMqaTu6bbthLX5BjufN5/L1+zczmQm30ySbzbJl85TMJ6sX3SZSzB0mZ+wXG8uWZ7Owzie5CiS/Hd3yQUAAAClpReefX7p3IvnHzz77JNPn3769HPHjp747okTRx76zkNLa/f1L7Xf3Q8AAADsRRs3/Q66EgAAAAAAAAAAAAAAAAAAABhddXyc2KD3EQAAAEbdvy6EEFaEyET5AYODrkPs5lidGnwNwx3Bv0MhhBBCbDGc94mVEFZX00+aBwAAANhZVy6/dKq9vc5Ksa35WltrrjdXY96ynX3wr/PXolzt0sOd10v2b2s1jLq6f//l3635p7qOv//q9uafDht/+0Jff/8anRs42dHb12/ee5d+udDKH0K4fbzP/On+P95vxk6Hk/z3hv7yr76X5H+io9foN/99Sf79fea/bv+f7zdjp/tj/oXYP3xPv/k7d7H8LS33o99fgG8n+/9U6Dd/sv/NPhMmHoj5AWAUtf43X70w2EK2WXmUUB5Pz8R+ub/xcDOkdz9s9vi/kWxnfMuVd263PA66NfanW3V05i1ttv7y+zIb2xsq1pnaK3eV5Orfrp/jTsvVP1FzHVXl6p+suY6qcvV3P3vffXL1T9dcR1W5+vu+EDFgufr3ynXlXP0zNddRVa7+2ZrrqCpX/2b/Hx+UXP0Haq6jqlz9czXXUVWu/oqX1WqXq3++5jqqytV/Y811VJWr/6aa66gqV//NNdcxKHfENnc+XJ5/zsWxst9M+lNdvpd9vxgCAAAA7Kh/7sp5INquHAy8FiGEEEIIIYY//rO6btB1CCF2LlZXB3n1gUHb2XczA7Bb+fs/2vz8R5uf/2jz8+frlK/EF0m/NNZjfLzH+ESP8clkPP19neoxflOy3dXyumZ0c4/x/4t7kBs/0OP5t/YYX+gxfluP8dt7jN/RYxwAAIDRcEtsnR8CAADA8Hr5V5+88Zt7n7g8/9XFgyfD5HXzzh+J/an42vrrsZ/Oe1+aiK/5/yT2fxHb38f278n67j8BAACAnVd+TozX/wEAAGB4lZ9T6vwfAAAAhtd8bJ3/AwAAwPC6MbbO/wEAAGCIFdPdF8e2vC5wd2z7ndcPANj9/j+2d8b2YGzviu03YlseB9wT22/WVB8AsH1+/v2fnnir2Jjv/1gyfiUuL9vrrKxfKSganTP574vt/th+q8960s8D6Dd/6UCfeXYq/9wW8wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAw6Ox9vX48YUihHc+ffvRn02+8Zdry+5qrXFo7WsRe80QwkTreeXoRv/XccUrl1861d5ejW0RjoYiFK3l4bFLrUwzIYSVcCh8Fprhw6XlLz9495HDH702fcub5595ZQe/BR37BwAAAMPofwEAAP//fccg7g==")
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a0ac28, &(0x7f0000000200)=ANY=[], 0xb, 0x0, &(0x7f0000000000))
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000000c0)='./bus\x00', 0xd680, 0x0, 0xbe, 0x0, &(0x7f00000007c0))
rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000a00)='./bus/file0\x00')

4m16.158280979s ago: executing program 0 (id=766):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
syz_io_uring_setup(0x54d, &(0x7f0000000040)={0x0, 0x735a, 0x100, 0x805, 0x350}, 0x0, 0x0, &(0x7f0000000000))
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

4m15.56650767s ago: executing program 0 (id=772):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff})
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4)
getsockopt$sock_buf(r0, 0x1, 0x1a, 0x0, &(0x7f0000000200))

4m15.322566092s ago: executing program 0 (id=775):
syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000140)='./file2\x00', 0x0, &(0x7f00000003c0)=ANY=[], 0x1, 0x1f3, &(0x7f0000001880)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000580)=""/174, 0xff56)

4m15.006363098s ago: executing program 0 (id=778):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480), 0x4, 0x3fa, &(0x7f00000004c0)="$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")
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x183cc9, 0x0, 0x82, 0x0, &(0x7f0000000600))
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x743900, 0x2)
renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', r0, &(0x7f00000004c0)='./file0\x00', 0x2)

4m14.694150035s ago: executing program 0 (id=780):
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000380)={{{@in=@private=0xa010101, @in6=@loopback, 0x4e24, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa417}, {0x0, 0x0, 0xa}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4002, 0x32}, 0x0, @in=@multicast2, 0x0, 0x3, 0x0, 0xfd}}, 0xe4)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@private2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in6=@loopback, 0x0, 0x6c}}}, 0xe8)
close(r0)

4m14.060909477s ago: executing program 32 (id=780):
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000380)={{{@in=@private=0xa010101, @in6=@loopback, 0x4e24, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa417}, {0x0, 0x0, 0xa}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4002, 0x32}, 0x0, @in=@multicast2, 0x0, 0x3, 0x0, 0xfd}}, 0xe4)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@private2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in6=@loopback, 0x0, 0x6c}}}, 0xe8)
close(r0)

3m19.850540272s ago: executing program 2 (id=1130):
r0 = syz_io_uring_setup(0xf00, &(0x7f0000000740)={0x0, 0x3238, 0x400, 0x0, 0x9a, 0x0, 0x0}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0, &(0x7f00000001c0)=<r3=>0x0)
r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1a3, 0x911180, 0x245dda35716126dc, {0x0, r4}})
io_uring_enter(r0, 0x1, 0x21, 0x1, 0x0, 0x0)

3m18.868839783s ago: executing program 2 (id=1139):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180))
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x202081, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x0, 0x305, &(0x7f0000000200)="$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")
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x3e}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x2d1, 0xfffffffffffffd85, &(0x7f00000000c0)="b9ff0303000d698cb89e40f086dd6000000e00008700630677", 0x0, 0x100, 0x2000000, 0x0, 0x0, &(0x7f0000000440)}, 0x28)

3m18.378536618s ago: executing program 2 (id=1143):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0)
r1 = dup(r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r1, 0x0)
ioctl$BLKROGET(r0, 0x125e, &(0x7f0000000000))

3m17.36732946s ago: executing program 2 (id=1151):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000000080)=ANY=[], 0x1, 0x629f, &(0x7f0000004a00)="$eJzs3U9vHGcdB/Df7D//KW2jHqoSIeS2AVpK87eEQIG2Bzj0wgHlihK5bhWRAkoCSquIuMqFAy8ChMQREEdOvIAeuHLjBRApQQJ66qCxn8cZL96s43R31n4+H8md+c0z432m3x3vbmZmnwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4u3v//BMFRGXfpEWHIv4XPQjehErTb0WEStrx/L6g4h4Lraa49mIGC5FVLnx6YjXIuLjpyLu3b+13iw6u89+fO9Pf//dj574wd/+MDz1nz/f6L8+ab2bN3/977/cPvj+AgAAQInquq6r9DH/ePp83+u6UwDAXOTX/zrJy9ULV28uWH/UarVafQjrtnpvt9tFRGy2t2neMzgdDwCHzGZ80nUX6JD8izaIiCe67gSw0KquO8BM3Lt/a71K+Vbt14O17fZ8Lciu/Dernfs7Jk2nGb/GZF7PrzvRj2cm9GdlTn1YJDn/3nj+l7bbR2m9Wec/L5PyH23f+lScnH9/PP8xRyf/3p75lyrnP3ik/PvyBwAAAACABZb//f9Yx+d/lx5/V/blYed/1+bUBwAAAAAAAAD4rD3u+H87KuP/AQAAwKJqPqs3fvPUg2WTvoutWX6xinhybH2gMOlmmdWu+wEAAAAAAAAAAAAAJRlsX8N7sYoYRsSTq6t1XTc/beP1o3rc7Q+70vcfStb1H3kAANj28VNj9/JXEcsRcTF9199wdXW1rpdXVuvVemUpv58dLS3XK63PtXnaLFsa7eMN8WBUN79subVd27TPy9Pax39f81ijur+Pjs1Hh4EDQERsvxrd84p0xNT109H1uxwOB8f/0eP4Zz+6fp4CAAAAs1fXdV2lr/M+ns7597ruFAAwF/n1f/y8gFqtVqvV6qNXt9V7u90uImKzvU3znsFw/ABwyGzGJ113gQ7Jv2iDiHiu604AC63qugPMxL37t9arlG/Vfj1I47vna0F25b9ZbW2Xt99rOs34NSbzen7diX48M6E/z86pD4sk598bz//SdvsorTfr/OdlUv7Nfh7roD9dy/n3x/Mfc3Ty7+2Zf6ly/oNHyr8vfwAAAAAAWGD53/+PLdT539FBd2eqh53/XZvZowIAAAAAAADAbN27f2s93/eaz/9/YY/13P95NOX8K/kXKeef7v/fufDmpbH1+q35u289yP9f92+t//7GPz+fp/vNfynPVOmZVaVnRJUeqRqk6QF3bII7w/6oeaRh1esP0jU/9fDduBJXYyNO71q3l46HB+1ndrU3PR1utdf97fazu9oHO+15+3O72ofpSqd6JbefjPX4aVyNd7bam7alKfu/PKW9ntKe8+87/ouU8x+0fpr8V1N7NTZt3P2o93/HfXu61+O8eeWLvzo9+92Z6k70d/atrdm/Fzroz9b/kydG8fPrG9dO3rx848a1M5Emu5aejTT5jOX8h+kn5//Si9vt+e9++3i9+9HokfNfFHdiMDH/F1vzzf6+POe+dSHnP0o/Of93Uvvex/9hzn/y8f9KB/0BAAAAAAAAAAAAAACAh6nreusW0Tcj4ny6/6erezMBgPnKr/91kpfPq+4fdPs/7t6PrvqvVs+5rhasP3OtP61n/XhvL9T+qg9U/3fB+rNwdVu9tzfaRUT8tb1N857hl3v9MgBgkX0aEf/ouhN0Rv4Fy9/310xPdN0ZYK6uf/Dhjy9fvbpx7XrXPQEAAAAAAAAADiqP/7nWGv/5RF3Xt8fW2zX+61ux9rjjfw7yzM4AoxMGqu4/+j49TC+ivzXWeboF4vmYNP73cGfuYeN/D6Y83nBK+2hK+9KU9uUp7Xve6NGS83++Nd75iYg4Pjb8egnjv46PeV+CnP8Lredzk/9XxtZr51//9jDn39uV/6kb7//s1PUPPnz1yvuX39t4b+Mn586cOX3u/PkLFy6cevfK1Y3T2//tsMezlfPPY1+7DrQsOf+cufzLkvP/UqrlX5ac/5dTLf+y5Pzz+z35lyXnnz/7yL8sOf+XUy3/suT8v5pq+Zcl5/9KquVflpz/11It/7Lk/F9NtfzLkvM/mWr5lyXnfyrV+8x/Zdb9Yj5y/vkMl+O/LDn/fGWD/MuS8z+bavmXJed/LtXyL0vO/7VUy78sOf+vp1r+Zcn5n0+1/MuS8/9GquVflpz/hVTLvyw5/2+mWv5lyfl/K9XyL0vO//VUy78sOf9vp1r+Zcn5fyfV8i9Lzv+7qZZ/WXL+b6Ra/mV58P3/ZsyYMZNnuv7LBAAAAAAAAAAAAACMm8flxF3vIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwP3bgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhb17i5Hrru8AfmZvXjuQGAipk5qwdowxzia7vsQXWhcTrg235lrSS2zXu3YWfIvXLkka1Y4CJRJGRRVtk4e2gKI2LxVWlQdaBZQH1KpSJdI+0BdEhcpDVAUUkKrSCrLVzPn//zszOzuz9o7XM+d8PlLyy86cmXPmzH9m92vnuwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAvQ3vm/58JcuySqWSX7A2y95QnavH1tYueffVPT4AAABg+X5R+/dr16UL9i/hRnXb/NPN33lhbm5uLvvk4J8Of3luLl0xlmXDq7Ksdl108QcPVuq3CZ7KRisDdV8PdNj9YIfrhzpcP9zh+pEO16/qcP1oh+sXnIAFVmeVdGebav+5Nj+l2fXZcO26TS1u9VRl1UD13KXbZpXabeaGj2Qz2bFsOpts2D7ftlLb/sUN1X19OIv7Gqjb1/rqCvnJE4fjMVTCOd7UsK/5+4x+9N5s7Kc/eeLwX5959cZWs+NpaLi//Di3bKwe52fDJfmxVrJV6ZzE4xyoO871LZ6TwYbjrNRuV/3v5uN8bYnHOTh/mCuq+TkfzQZq//1y7TwNVbIW52l9uOxnt2RZdn7+sJu3WbCvbCBb03DJwPzzM5qvyOp9VJfSm7OhS1qnG5awTqtzalPjOm1+TcTnf0O43dAix1D/NP3oyZG65/3nc5ezTqPqo17stdK8Brv9WumVNRjXxcu1B/10yzW4KTz+JzYvvgZbrp0WazA97ro1uLHTGhwYGawdc3oSKrXbzK/BbQ3bD9b2VKnNVza3X4MTZ46fmph97PHbZo4fOjp9dPrEjm3bJnfs2rVnz56JIzPHpifzf1/m2e59a7KB9BrYGM5dfA28s2nb+qU699WRBe+/l/s6HG3zOlzbtG23X4dDzQ+usjIvyIVrOn9t3Fc96aMXBrJFXmO152fr8l+H6XHXvQ6H6l6HLb+ntHgdDi3hdVjd5tTWpf3MMlT3T6tjWPx7wfLW4Nq6Ndj880jzGuz2zyO9sgZHw7r43tbFvxesD8f79Pil/jwyuGANpocb3nuql6Sf90f31EardXlT9YprRrKzs9Onb3/00Jkzp7dlYayIt9Stleb1uqbuMWUL1uvAJa/X/TM3P31Ti8vXhnM1elv1X6OLPlfVbXbe3v65qn13a30+Gy7dnoXRZSt9Plt9N6+ez5Ese/bbT97zzSeefd+i57OaNz87sfyfxVMurXv/HV7k/Tfm/tfz/aW7empweCh//Q6mszPc8H7c+FQN1d67KrV9vzaxtPfj4fDPSr8fX9/m/Xhd07bdfj8ebn5w8f240ulPO5an+fkcDevk2GT79+PqNuu2X+qaHGr7fnxLmJVw/t8VkkLKRXVrZ7F1m/Y1NDQcHtdQ3EPjOt3RsP1wyGbVfT2//fLW6ZZb8vsaTI9u3kqt07Gmbbu9TtOffS22Tiud/vTt8jQ/n6NhXVy/o/06rW7z0s7lv3eujv9Z99450mkNDg+OVI95OC3C2vt9Nrc6rsHbs8PZyexYNlW7dqS2niq1fY3fsbQ1OBL+Wen3ynVt1uCWpm27vQbT97HF1l5laOGD74Lm53M0rItn7mi/BqvbvH93d3923RIuSdvU/eza/Odri/2Z101Np+lKrZWhcJzf3t3+z2ar2xzbc6k5s/15ujVcck2L89T8+l3sNTWVrcx5WheO89U9i5+n6vFUt/ny3iWup/1Zlp175M7an/eGv1/5u7PffaHh711a/Z3OuUfu/PEbj/zjpRw/AP3v9Xysyb/X1f3N1FL+/h8AAADoCzH3D4SZyP8AAABQGDH3x/8rPJH/AQAAoDBi7h8KMylJ/l/3/ldnXj+XpWb+XBCvT6fhrny72HGdDF+Pzc2rXn7nc9P//Q/nlrbvgSzLfn7XH7Tcft1d8bhyY+E4L36g8fIFXrhtSfs+eP+5tN/6/vpXwv3Hx7PUZdCqgjuZZdmL132xtp+xBy/U5kt3HazNe84//VR1m9f25l/H27/ylnz7vwjl3/1HDjXc/pVwHn4Y5uRHWp+PeLuvX3jX+t0PzO8v3q6y8draw37mofx+4+/J+dJT+fbxPC92/N/8wvNfr27/6DtaH/+5gdbH/3y43+fC/N+35dvXPwfVr+PtPheOP+4v3u72r32r5fFf/Hy+/akP5tsdDDPuf0v4etMHX52pP1+PVg41PK7sQ/l2cf+T3/3j2vXx/uL9Nx//6IELDeejeX289G/5/Uw0bR8vj/uJ/r5p/9X7qV+fcf/P/9HBhvPcaf8X73nlbdX7bd7/rU3bnXpka23/8/fX+Bub/vJzX2y5v3g8+//2VMPj2X93eB2H/T/zUFiP4fr/u5jfX/NvVzh4d+P7T9z+K2vPNTye6MM/zfd/8T1Ha3PV6Oo117zhjdeef3v13GXZy6vy++u0/6N/dbLh+L96Q34+4vWxo9+8/8XE/Z/+zPiJk7NnZ6bSWX3iutrvzvlofjzxeK8L763NXx84eebh6dNjk2OTWTZW3F+hd9m+FuaP83G+/dZzC95Bt94fns+b/vzFNZv/9Qvx8n+/L7/8wkfy71vvDNt9KVy+Njx/l7b/hZ7ZcEPt9V15KRzh3MLfF7wc6zf9154lbRgef/PPBXG9n3rrw7XzUL2u9n0jvq6Xefzfn8rv5xvhvM6F38y88Yb5/dVvH383woV789f7ss9feJuLz+vfhOf7Yz/M7z8eV3y83w8/x3xrXeP7XVwf3zg30Hz/td/icT68n2Tn8+vjVvF8X3jthpaHF38PSXb+xtrXf5Lu58ZLepiLmX1sduLYzImzj06cmZ49MzH72OMHjp88e+LMgdrv8jzwqU63n39/WlN7f5qa3rUzq71bnczHFXa1j//U/Yendk9unpo+cujskTP3n5o+ffTw7Ozh6anZzYeOHJn+TKfbz0zt27Z9747d28ePzkzt27N374694zMnTlYPIz+oDnZNfnr8xOkDtZvM7tu5d9sdd+ycHD9+cmp63+7JyfGznW5f+940Xr3174+fnj526MzM8enx2ZnHp/dt27tr1/aOvw3w+Kkjs2MTp8+emDg7O316In8sY2dqF1e/93W6PcU0+x/5z7PNKvkv4ss+ceuu9PtZq557ctG7yjdp+gWir4bfRfPPbzq1Zylfx9w/HGZSkvwPAAAAZRBz/0iYifwPAAAAhRFz/6owE/kfAAAACiPm/tEwk5Lk/8L1/9edW9L+9f/1/+vPl/5/yfr/9/Za/z9/v9D/747l9u/1/wP9f/1//X/9f/1/uqDX+v8x96/OslLmfwAAACiDmPvXhJnI/wAAAFAYMfdfE2Yi/wMAAEBhxNz/hjCTkuR//X/9f/1//X/9/9b71//vT/r/7en/d6D/P5GVq/9/vpvHr/+v/89Cvdb/j7n/jWEmJcn/AAAAUAYx918bZiL/AwAAQGHE3H9dmIn8DwAAAIURc//aMJOS5H/9f/1//X/9f/3/1vvX/+9P+v/t6f93oP/v8//1//X/6ape6//H3P+mMJOS5H8AAAAog5j73xxmIv8DAABA7xm6vJvF3P+WMJMF+f8ydwAAAABcdTH3X581FcFL8vf/+v/6/73f/1+VrtP/1//PerL/P5jp//eOq9L/f3YiPX/6//r/mf6//r/+v/4/Sa/1/2u5PxvN3hpmUpL8DwAAAGUQc/8NYSbyPwAAABRGzP2/FGYi/wMAAEBhxNy/LsykJPlf/79/+/8j4TbF7//7/H/9/17v//v8/17i8//b0//vQP9f/1//X/+fruq1/n/M/TeGmZQk/wMAAEAZxNx/U5iJ/A8AAACFEXP/L4eZyP8AAABQGDH3rw8zKUn+1//v8f5/bI6W+vP/9f/1//X/9f+XTv+/Pf3/DvT/9f/1//X/6ape6//H3P+2MJOS5H8AAAAog5j7bw4zkf8BAACgMGLuf3uYifwPAAAAhRFz/1iYSUnyv/5/j/f/8x78SKvP/7/c/n/1rvX/9f/1//X/i0r/vz39/w70//X/u9L/nzun/6//T67X+v8x928IMylJ/gcAAIAyiLl/Y5iJ/A8AAACFEXP/LWEm8j8AAAAURsz9m8JMSpL/9f/7ov+fdbP/7/P/9f/1//X/i0z/vz39/w70//X/ff6//j9d1Wv9/5j73xFmUpL8DwAAAGUQc//mMBP5HwAAAAoj5v53hpnI/wAAAFAYMfdvCTMpSf7X/9f/1//X/9f/b71//f/+pP/fnv5/B/r/+v9XoP8/p/+v/19ivdb/j7n/XWEmJcn/AAAAUAYx928NM5H/AQAAoDBi7r81zET+BwAAgMKIuX88zKQk+V//X/9f/1//X/+/9f71//uT/n97+v8d6P/r//v8f/1/uqrX+v8x998WZlKS/A8AAABlEHP/7WEm8j8AAAAURsz9E2Em8j8AAAAURsz9k2EmJcn/+v/6//r/+v+X1P9/+/z96v/n9P97i/5/e/r/Hej/6/9f9f7/sP4/hdJr/f+Y+7eFmZQk/wMAAEAZxNy/PcxE/gcAAIDCiLl/R5iJ/A8AAACFEXP/zjCTkuR//X/9f/1//X+f/996//r//Un/v73u9//jQ9T/1//X//f5//r/LNRr/f+Y++8IMylJ/gcAAIAyiLl/V5iJ/A8AAACFEXP/7jAT+R8AAAAKI+b+PWEmJcn/+v/6//r/+v/6/633r//fn/T/2/P5/x3o/+v/6//r/7NM9/5h/Ve91v+PuX9vmElJ8j8AAACUQcz97w4zkf8BAACgMGLu/5UwE/kfAAAACiPm/l8NMylJ/tf/b+ieVx+u/r/+v/6//n+N/n9/0v9vT/+/A/1//X/9f/1/umrR/n+I3ivd/4+5f1+YSUnyPwAAAJRBzP2/FmYi/wMAAEBhxNz/njAT+R8AAAAKI+b+/WEmJcn/+v8+/1//X/9f/7/1/le6/z8S71f/f1n0/9vT/+9A/1//X/9f/5+u6rXP/4+5/71hJiXJ/wAAAFAGMfffGWYi/wMAAEBhxNz/vjAT+R8AAAAKI+b+94eZlCT/6//r//dL//8a/X/9/6bHU7T+v8//7w79//b0/zvQ/9f/1//X/6ereq3/H3P/B8JMSpL/AQAAoAxi7v9gmIn8DwAAAIURc/+HwkzkfwAAACiMmPs/HGZSkvyv/6//3y/9/0z/X/+/6fHo/+v/t6L/357+fwf6//r/+v/6/3RVr/X/Y+7/9TCTkuR/AAAAKIOY++8KM5H/AQAAoDBi7v9ImIn8DwAAAIURc/9Hw0xKkv/1//X/9f/1//X/W+9f/78/6f+312f9/19cGy7vVv9/qNMB6P/r/69g/795PV6R/v8PFuv/z61qvr3+P1dCr/X/Y+7/WJhJSfI/AAAAlEHM/R8PM5H/AQAAoDBi7v9EmIn8DwAAAIURc/9vhJmUJP/r/1ePY769rP9f1P7/gP6//r/+f0no/7fXZ/1/n//fRP+/t4/f5//r/7NQr/X/Y+6/O8ykJPkfAAAAyiDm/nvCTOR/AAAAKIyY++8NM5H/AQAAoDBi7r8vzKQk+V//3+f/l6P/7/P/M/1//f+S0P9vT/+/A/1//f9e6///p/4//a3X+v8x998fZlKS/A8AAABlEHP/A2Em8j8AAAAURsz9vxlmIv8DAABAYcTc/8kwk5Lkf/3/fun/j/Vp//9J/f8r2P+/+dp8O/1//X/m6f+3p//fgf6//n+v9f99/j99rtf6/zH3PxhmsvT8P7rkLQEAAICrIub+3wozKcnf/wMAAEAZxNz/22Em8j8AAAAURsz9vxNmUpL8r//fL/1/n/+f6f/7/P+mx6P/r//fysr1/+M7j/6//r/+f6T/r/+v/0+zXuv/x9z/u2EmJcn/AAAAUAYx9z8UZiL/AwAAQF9o9f9kN4u5/0CYifwPAAAAhRFz/8Ewk5Lkf/1//X/9/x7t///Zxn/53nc+fnCb/r/+v/7/JVnRz/+vvvh9/r/+v/5/ov+v/6//T7Ne6//H3H8ozKQk+R8AAADKIOb+3wszkf8BAACgMGLuPxxmIv8DAABAYcTcPxVmUpL8r/+v/6//36P9/z7+/P94PvT/G3Wt/x/fdPX/W8r792kVXdn+/wPzPXH9/0vt/4+0vFT/X/+/n49f/1//n4V6rf8fc/90mElJ8j8AAACUQcj9A0fyOX+F/A8AAACFEXP/0TAT+R8AAAAKI+b+h8NMSpL/9f/1//X/9f99/n/r/bfr/1eGfP5/r0r9+5/VXij6/016p//fmv6//n8/H7/+v/4/C/Va/z/m/pkwk5LkfwAAACiDmPs/FWYi/wMAAEBhxNz/6TAT+R8AAAAKI+b+Y2EmJcn/+v/6//r/+v/6/63337Of/6//39Zy+/f6/4H+f7n7//+j/6//r/9Pd/Ra/z/m/uNhJiXJ/wAAAPD/7N1Jk2V1Wsfxk1hQWQFGuHPhxgiXRvgGWOhaX4BGuHFjhOECB1ScKZxHFBRnRXAeQAVBRAVnEVREcQYVZ3tueqLp7qgOMp/nqRxOnpuZdfPec/7/z2fBY2dncq8EkcWvkm+fHuTuvyNusf8BAACgGbn7vyRusf8BAACgGbn7vzRu6WT/6/9vpP+/Xinr/w+//9X9f77iBfb/n6n/P+n19f/L6P8/72b9/3no/6fp/1cY7/9vGYahr/7f8//1//p/1mRu/X/u/i+LWzrZ/wAAANCD3P1fHrfY/wAAANCM3P13xi32PwAAADQjd/9XxC2d7P8j/f/O0Gf/nxmv5/97/r/+X/8/m/7f8//PZ7P9/z1vfefT/5+6/3/0/lUvO9P+v8Xn/98y9sFt9/M3atvv/5T9/+WTvl7/T4vm1v/n7v/KuKWT/Q8AAAA9yN3/VXGL/Q8AAADNyN1/V9xi/wMAAEAzcvd/ddzSyf5f3/P/r+x9fKH9f9H/6//3PqD/1//r/xfL8/+n9fT8/ztfvvWO15/8lKfO8vod9f+jtt3PL/39e/6//p/j5tb/5+7/mrilk/0PAAAAPcjd/7Vxi/0PAAAAzcjd/3Vxi/0PAAAAzcjd//VxSyf7f339/6Kf/1820v9/ov5f/3/48/X/+/T/+v910P9P66n/P8/r6//1//p//T/rNbf+P3f/N8Qtnex/AAAA6EHu/m+MW+x/AAAAaEbu/rvjFvsfAAAAlutIyJa7/2rc0sn+1/9feP+fibDn/+v/9f/6f/3/Buj/p+n/V9D/6//1//p/1mpu/X/u/nvilk72PwAAAPQgd/83xS32PwAAADQjd/83xy32PwAAADQjd/+3xC2d7H/9/xae/6//1/8f+Xz9/z79v/5/HfT/0/T/K+j/b7Sfv1n/r//X/3PQGfv/Nye+ba+l/8/d/61xSyf7HwAAAHqQu//b4hb7HwAAAJqRu//b4xb7HwAAAJqRu/874pZO9r/+X/+v/9f/n7v/P/633h79/zj9/2bo/6fNpv/fuTT6Yf3/4vt/z//X/+v/OWRuz//P3f+dcUsn+x8AAAB6kLv/u+KWif1/5t/MBwAAALYqd/93xy1+/g8AAACLl9VZ7v7viVs62f/6f/2//l//7/n/468/1f8/deD96f/nRf8/bTb9/wn0//r/Jb9//b/+n+Pm1v/n7v/euKWT/Q8AAAA9yN1/b9xi/wMAAEAzcvd/X9xi/wMAAEAzcvd/f9zSyf4f7/+v//f6/9PR/x9+/731/2lT/X/+GfX/k/3/Z3n+f5/0/9M23/9f1v8f/vPr/y/Qtt9/4/3/lVVfr/9nzNz6/9z998Utnex/AAAA6EHu/vvjFvsfAAAAmpG7/wfiFvsfAAAAmpG7/wfjlk72v+f/6//1/57/32j/f6HP/x823v9f0v+fkv5/muf/r6D/1//r/z3/n7WaW/+fu/+BuKWT/Q8AAAA9eOCNYW/3/9Aw2P8AAACwRAf/3YGj/0JpyN3/w3GL/Q8AAACzdvkMn5u7/0filkP7f73t3Zzo//X/+n/9v/5//PXP2v+vejCy5/9vhv5/mv5/Bf3/RfTzlxrr/x886evn0P/frf9nZg71/89c//i2+v/c/T8at/j5PwAAADQjd/+PxS32PwAAADQjd/+Pxy32PwAAADQjd/9PxC2d7P8L7/8nglj9v/5f/6//b6n/X0X/vxn6/2n6/xX0/57/7/n/+n/W6nr/f/j74bb6/9z9Pxm3dLL/AQAAoAe5+38qbrH/AQAAoBm5+x+MW+x/AAAAaEbu/p+OWzrZ/57/r//X/+v/9f/jr6//Xyb9/zT9/wr6f/2//l//z1odev7/Advq/3P3PxS3dLL/AQAAoAe5+x+OW+x/AAAAaEbu/p+JW+x/AAAAaEbu/p+NWzrZ//r/i+3/8+P6f/3/oP/X/+v/N6Lb/n9n7Fei407o/1/4oqufc/gj+n/9/8L7//xerf/X/7Nds+j/r13/p8vc/T8Xt3Sy/wEAAKAHuft/Pm6x/wEAAKAZuft/IW6x/wEAAKAZuft/MW454/7/pLW+q83R/3v+v/5f/6//H399/f8yddv/n5Ln/6+g/2+m//f8f/0/8zCL/v/Af87d/0txi5//AwAAQDNy9/9y3GL/AwAAQDNy9/9K3GL/AwAAQDNy9/9q3NLJ/tf/6//1//p//f/465+3/98dxun/N0P/P03/v4L+X/+v/9f/s1Zz6/9z9z8St3Sy/wEAAKAHufsfjVvsfwAAAGhG7v5fi1vsfwAAAGhG7v5fj1s62f/6/+31/5f1//p//X+T/f9J9P+bof+ftrn+P79fzLD/f2ziDYz1/9cu6//1//p//T/nNLf+P3f/b8Qtnex/AAAA6EHu/sfiFvsfAAAAmpG7//G4xf4HAACAZuTu/824pZP9r//3/H/9v/5f/z/++vr/ZdL/T/P8/xU8/1//r//X/7NWc+v/c/c/Ebd0sv8BAACgB7n7n4xb7H8AAABoRu7+34pb7H8AAABoRu7+p+KWTva//l//r//X/19I/39V/3+U/n8zLq7/H/T/+n/9/wr6f/3/qv7/tlV/Epqzqf7/zfh+v6r/z93/23FLJ/sfAAAAepC7/+m4xf4HAACAZuTu/524xf4HAACAZuTu/924pZP9r//X/+v/9f+e/z/++vr/ZfL8/2k99v9jv0afSP+v/9f/e/4/a7Wp/v+k3v/of87d/3txSyf7HwAAAHqQu/+ZuMX+BwAAgGbk7n82brH/AQAAoBm5+38/bulk/+v/9f+H+/9h0P/r//X/+zbQ/+8O+v+10/9P67H/P8vr6/8b7f9vGhrq/6+c+PX6f+Zobv1/7v4/iFs62f8AAADQg9z9fxi32P8AAADQjNz9fxS32P8AAADQjNz9fxy3tLT/P3Zy+rb8/v/ykS/U/w/D8Mpdnv+v/594ff3/bPr/+quq/18f/f80/f8K+v82+3/P/9f/szVz6/9z9/9J3NLS/gcAAIDO5e7/07jF/gcAAIBm5O7/s7jF/gcAAIBm5O5/Lm7pZP8vv/8/+oX6/+GGnv+v/9/7QBP9/86Jr6//1/+37Eb7+4d249c0/b/+X/8/2s/vnPDPPYP+X/+v/2fE3Pr/3P1/Hrd0sv8BAACgB7n7n49b7H8AAABoRu7+F+IW+x8AAACakbv/L+KWTva//l//31z/f1Mf/f+u5//r//X/o+by/P/bb//sl/T/+v8W+/8p+n/9v/6fo+bW/+fu/8u4pZP9DwAAAD3I3f9XcYv9DwAAAM3I3f9i3GL/AwAAQDNe3As5d4e/HoYu9//x/v/mYb9Q3TfW/0ejpv8/QP9/+P17/v/43x+bff7/ya+/sf7/M/T/B+n/N2Mu/b/n/5/v/ev/9f9Lfv9n6v8/9fjX6/9p0dz6/9z9L8Utnex/AAAA6EHu/r+JW+x/AAAAaEbu/r+NW+x/AAAAaEbu/pfjlk72v+f/6//1//p/z/8ff339/zLp/6fp/1fQ/994P5/fVfX/y33+/yfo/1mfufX/ufv/Lm7ZG36fdts5/98EAAAAZiR3/9/HLZ38/B8AAAB6kLv/H+IW+x8AAACakbv/H+OWTva//l//v6T+f7iq/9f/6//1/9P0/9P0/yv00//vjn1w2/38jdr2+2+m//f8f9Zobv1/7v5/ils62f8AAADQtjf2/pi7/5/jFvsfAAAAmpG7/1/iFvsfAAAAmpG7/5W4pZP9r//X/y+p/z/f8/+/QP9/5PX1//r/lun/81f0cfr/Ffrp/0dtu59f+vvX/+v/OW5u/X/u/lfjlk72PwAAAPQgd/+/xi32PwAAADQjd/+/xS32PwAAADQjd/+/xy1N7P9LKz9D/99X/78z9Nj/e/6//l//35Pl9P8Pj/4i7fn/+n/9/3Lfv/5f/89xc+v/c/e/tnOpwf0PAAAA7frcT//iV0/7ua/t/XF3+I+4xf4HAACAZuTu/8+4xf4HAACAZuTu/6+4pZP9r//vq//v8/n/+n/9v/6/Jxvr/5+L/2KGz/+fMv/+f/+fR/T/+v8lvn/9v/6f4+bW/+fu/++45cDwW/2/ogcAAABs1C1n+/Tc/f8Tt3Ty838AAADoQe7+/41bju3/a6f8t9oBAACAedod/i9u6eTn//r/mff/wwX1//F5+v99+n/9/9jr6/+XaTnP/x838/7/2o7n/+v/J+j/9f/6f46aW/+fu//pJ4Yu9z8AAAA06tDvKPz/3h93h7fFLfY/AAAANCN3/9vjFvsfAAAAmpG7/x1xSyf7/4z9/z36/3Hzev7/lfq/PP+/8/7/3t3R19f/6/9bpv+fNv/n/+v/9f/Lff/6f/0/x52h/98bpBfd/+fuf2fc0sn+BwAAgB7k7n9X3GL/AwAAQDNy9787brH/AQAAoBm5+98Tt3Sy/z3/fwv9/32Xh+FC+/9TPP9f/99H/3/C67fT/3/yrVef//wvfPwR/T/XbbL/z78X9P/6f/3/Pv2//l//z1Fze/5/7v73xi2d7H8AAADoQe7+1+MW+x8AAACakbv/fXHLW/v/2W29KwAAAGCdcve/P27p5Of/+v8Wn/+/zP4//1pvof+/urz+P5vi3vt/z//X/x/n+f/T9P8r6P/1//p//T9rNbf+P3f/B+KWTvY/AAAA9CB3/wfjltz/O2f+rXsAAABgZnL3fyhu8fN/AAAAaEbu/jfilk72v/5f/z+X/j95/v/1r/P8/336f/3/Wej/p+n/V9D/6//1//p/1mpu/X/u/g/HLZ3sfwAAAOhB7v434xb7HwAAAJqRu/8jcYv9DwAAAM3I3f/RuOXY/m/zNwT0//p//b/+X/8//vr6/2XS/0/T/6+g/9f/N9v/X1n5/vX/XIS59f+5+z8eAAD//+WKZqU=")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, 0x0)

3m15.82766055s ago: executing program 2 (id=1164):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x7}, '\x00', "5193bb672965593497c186a80e00", '\x00\x00=*', "1202000000040030"}, 0x38)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0xce21, 0x4, @empty, 0x4}, 0x1c)

3m15.014643842s ago: executing program 2 (id=1171):
r0 = socket(0xa, 0x1, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e23, 0x4a3, @local, 0x4ef}}}, 0x108)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000005c0)=ANY=[@ANYBLOB="03000000000000000a004e230000000cff010000000000000000000000000001f8ffffff000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003"], 0x210)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000180)={0x3, {{0xa, 0x4e20, 0xbe, @mcast1, 0xbfd}}, {{0xa, 0x4624, 0x9, @empty, 0xfffffe01}}}, 0x108)

3m14.570576745s ago: executing program 33 (id=1171):
r0 = socket(0xa, 0x1, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e23, 0x4a3, @local, 0x4ef}}}, 0x108)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000005c0)=ANY=[@ANYBLOB="03000000000000000a004e230000000cff010000000000000000000000000001f8ffffff000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003"], 0x210)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000180)={0x3, {{0xa, 0x4e20, 0xbe, @mcast1, 0xbfd}}, {{0xa, 0x4624, 0x9, @empty, 0xfffffe01}}}, 0x108)

1m16.480821094s ago: executing program 5 (id=2007):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="08000000040000000400000008"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000200), &(0x7f0000000240)=r0}, 0x20)

1m16.294980714s ago: executing program 5 (id=2010):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="736d27bd7000fbdbdf250c00000008000300", @ANYRES32=r2, @ANYBLOB="05000800030000000800090005ac0f00080037"], 0x38}, 0x1, 0x0, 0x0, 0x8800}, 0x80)

1m16.050383036s ago: executing program 5 (id=2012):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x42, 0x800000, 0x8, 0x7})
write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x6)

1m15.926786663s ago: executing program 5 (id=2014):
syz_mount_image$minix(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800000, &(0x7f0000000040)=ANY=[], 0xa, 0x238, &(0x7f0000000100)="$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")
r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents(r0, &(0x7f0000001fc0)=""/184, 0x20002078)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

1m15.424191569s ago: executing program 5 (id=2017):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r2=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x2c, r1, 0x1, 0x70bd28, 0x1, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x2c}}, 0x4000080)

1m14.643975939s ago: executing program 5 (id=2021):
pipe2(&(0x7f0000001cc0)={<r0=>0xffffffffffffffff}, 0x800)
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @dev={0xac, 0x14, 0x14, 0xc}}, 0x8)
close_range(r0, 0xffffffffffffffff, 0x0)

1m13.992821413s ago: executing program 34 (id=2021):
pipe2(&(0x7f0000001cc0)={<r0=>0xffffffffffffffff}, 0x800)
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @dev={0xac, 0x14, 0x14, 0xc}}, 0x8)
close_range(r0, 0xffffffffffffffff, 0x0)

3.982051585s ago: executing program 6 (id=2414):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x2c, 0x6, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x81c0, 0x0)

2.546805029s ago: executing program 3 (id=2423):
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000480), 0x4)
recvmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000001e40)=""/174, 0xae}], 0x1, &(0x7f0000001fc0)=""/65, 0x41}, 0x1}], 0x1, 0x40002122, 0x0)
sendmsg$tipc(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x1, {0x1, 0x1, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8008001}, 0x4800)

2.3267614s ago: executing program 3 (id=2424):
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57)
setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @multicast1}, 0xc)

2.244552795s ago: executing program 3 (id=2425):
r0 = semget$private(0x0, 0x4000000009, 0x0)
semop(r0, &(0x7f00000002c0)=[{0x0, 0xec7b, 0x1000}], 0x1)
semtimedop(r0, &(0x7f0000000140)=[{0x1, 0x3c, 0x1800}, {0x4, 0xac1b}], 0x2, 0x0)
semctl$IPC_RMID(r0, 0x0, 0x0)

2.048772425s ago: executing program 1 (id=2427):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x94b, 0x4)
syz_emit_ethernet(0x6e, &(0x7f0000000100)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00\'$', 0x38, 0x3a, 0xff, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9379, {0x6, 0x6, ':yE', 0x2, 0x3a, 0x0, @private2={0xfc, 0x2, '\x00', 0x5}, @mcast2, [], "8029335287b7a081"}}}}}}}, 0x0)
recvmmsg(r0, &(0x7f0000000ac0), 0x40000000000007f, 0x2000, 0x0)

1.95571527s ago: executing program 3 (id=2429):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x200000000)
write$vhost_msg_v2(r0, &(0x7f0000000a40)={0x2, 0x0, {&(0x7f0000000940)=""/224, 0xe0, 0x0, 0x1, 0x2}}, 0x48)
write$vhost_msg_v2(r0, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000480)=""/187, 0xbb, 0x0, 0x2, 0x3}}, 0x48)

1.877748714s ago: executing program 1 (id=2430):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
r1 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={<r2=>0x0}, &(0x7f0000000000)=0x8)
setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000000)={r2, 0x4}, 0x8)

1.736941841s ago: executing program 3 (id=2431):
syz_mount_image$jfs(&(0x7f00000001c0), &(0x7f0000005d40)='./file0\x00', 0x4000, &(0x7f0000001e40)=ANY=[@ANYBLOB="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"/2303], 0xff, 0x5e9b, &(0x7f000000bc00)="$eJzs3U9vHGcdB/Df/vH6T2kbVagKEQc3hdJSmv8JlH9NOXCAA0ioZxK5bhVIASUB0SoirnJAXICXAJdeOPQt8AL6GhAvgEg2px4og8Z+nmQ8XmcdEu/s+vl8JGfmN8+O95l8PZ5dz8w+AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADED77/k7O9iLjym7TgWMTnYhDRj1iu69WoZy7nxw8j4nhsN8fzETFYjKjX3/7n2YgLEfHJMxGbW7fX6sXnDtiPi2du3fjsh9/7x+//dPf4z97+6Uft9h9//vzHf7gTcexHr3/82Z0ns+0AAABQiqqqql56m38ivb/vd90pAGAq8vG/SvJytVqtVj/R+o/92eqPutC6qRrvTrOIiI3mOvVrBqfjAWDObMSnXXeBDsm/aMOIeKrrTgAzrdd1BzgUm1u313op317zeLC6057/Trkr/43e/fs79ptO0r7GZFo/X3djEM/t05/lKfVhluT8++38r+y0j9LjDjv/adkv/9HOrU/FyfkP2vm37Mr/zxExt/n3x+Zfqpz/8FHy3xjM8f4vfwAAAAAAjr789/9jHZ//XXz8TTmQh53/XZ1SHwAAAAAAAADgSXvc8f/uM/4fAAAAzKz6vXrtL888WLbfZ7HVy9/qRTzdejxQmNXGhwMCAAAAAAAAAAAAANMxjFhJ1/UvRMTTKytVVdVfTe36UT3u+vOu9O2HknX9Sx4AAHZ88kzrXv5exFJEvJU+629hZWWlqpaWV6qVankxv54dLS5Vy433tXlaL1scHeAF8XBU1d9sqbFe06T3y5Pa29+vfq5RNThAx6ajw8ABICJ2jkabjkhHTFU9G12/ymE+2P+PHvs/B9H1zykAAABw+Kqqqnrp47xPpHP+/a47BQBMRT7+t88LqNVqtVqtPnp1UzXenWYRERvNderXDIbjB4A5sxGfdt0FOiT/og0j4njXnQBmWq/rDnAoNrdur/VSvr3m8WB1pz1fC7Ir/43e9np5/XHTSdrXmEzr5+tuDOK5ffrz/JT6MEty/v12/ld22vMQ/4ed/7Tsl3+9ncc66E/Xcv6Ddv4tRyf//tj8S5XzHz5S/gP5AwAAAADADMt//z/m/G/eZAAAAAAAAACYO5tbt9fyfa/5/P8Xxzyu15xz/+eRkfPvHTh/9/8eJTn/fjv/1gU5g8b8vTcf5P/vrdtrH9361xfydObzXxiM6ude6PUHw3TNT7XwTlyL67EeZ/Y8frir/eye9oVd7ecmtJ/f0z6q25dz+6lYi1/G9Xj7fvvihAujlia0VxPac/4D+3+Rcv7Dxled/0pq77WmtXsf9vfs983puOe5/Lf/vLR375q+uzG4v21N9fad7KA/2/8nT43i1zfXb5z67dVbt26cjTTZtfRcpMkTlvNfSF85/5df3GnPv/eb++u9D0ePnP+suBvDffN/sTFfb+8rU+5bF3L+o/SV889HoPH7/zznv//+/2oH/QEAAAAAAAAAAAAAAICHqapq+xbRyxFxKd3/09W9mQDAdOXjf5Xk5Wq1Wq1Wq49e3VSN90aziIi/N9epXzP8btw3AwBm2X8j4p9dd4LOyL9g+fP+6umXuu4MMFU33//g51evX1+/cbPrngAAAAAAAAAA/688/udqY/zn7euAWuNG7xr/9c1YndvxP/ujwfZY52mDXoiHj/99Mh4+/vdwwvMtTGgfTWhfnNC+NKF97I0eDTn/F1LGOf8TacNKGv/15Q7607Wc/8k01nPO/yutxzXzr/46z/n3d+V/+tZ7vzp98/0PXrv23tV3199d/8XZM5cunL944fzFi6ffuXZ9/czOvx32+HDl/PPY164DLUvOP2cu/7Lk/L+cavmXJef/UqrlX5acf369J/+y5Pzzex/5lyXn/0qq5V+WnP9XUy3/suT8X021/MuS8/9aquVflpz/a6mWf1ly/qdSLf+y5PxPp1r+Zcn55zNc8i9Lzj9f2SD/suT8z6Va/mXJ+Z9PtfzLkvO/kGr5lyXnfzHV8i9Lzv9SquVflpz/11Mt/7Lk/L+RavmXJef/eqrlX5ac/zdTLf+y5Py/lWr5lyXn/+1Uy78sOf/vpFr+Zcn5fzfV8i9Lzv+NVMu/LA8+/9+MGTNm8kzXv5kAAAAAAAAAAAAAgLZpXE7c9TYCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPA/duBAAAAAAADI/7URqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrADBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFvXuLkbO87wf+7sleGxL8D2figG1OBhZ21ydwiMEkIX9KeqAkpE1Lahx7bZz4VO+ak1DZFNoSBalI7QW9aJpEaRSprUBVpKYSjZAaqb1rrhpxE7USF76AykFJ1VSBrd6Z53k8Mzs7sz6MPfM+nw/CP+/MOzPPvPPO7H7X+s4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAjdZ/YuZPhoqiKP+v/bGmKC4u/76q2Fl+Ob/tQq8QAAAAOFvv1f7820vSCTuXcaGGbf7l2n/73sLCwkLxxXdPvP9nCwvpjHVFMbKyKGrnRf/6i58vNG4TPF+MDw03fD3cdO7Fi25+pMvyRrucP9bl/BVdzl/Z5fzxLucv2gGLrKr/PqZ2ZTfU/rqmvkuLy4qx2nk3tLnU80Mrh4fj73JqhmqXWRjbVxwoDhYzxdSiywzV/iuK19eXt/VAEW9ruOG21hZFcfKnz+6JaxgK+/iGounGahofu3fuK9a9+9Nn93xn7u2r282uu2HRSoti44ZynS8UxalfVxVDxcq0T+I6hxvWubbNOkea1jlUu1z599Z1nlzmOuP9Hg/r/FGHda4Npz11fVEU88WS27R6vhguVrfcatrf4/UjoryO8qH8UDF6WsfJ+mUcJ+Vl3rq++ThpPSbj/l8f9snoEmtofDje+cqKRfv9TI+T8l73w7FaXvdD5Y2Ojzf+arXpWC23efbGpY+Bto9dm2MgHcsNx8CGbsfA8IqR2jEwfGrNG5qOgelFlxkuhmq3deLGzsfA5Nyho5OzTz9z+4FDu/fP7J85PD21bcvmrVs2b906ue/AwZmp+p+nt0sHyOpiOB2DG8JrTTwGb27ZtvGQXPjmuXsejPfJ86C875+9qVzQxcPFEsd4uc0LG8/+eZC+7zc8D0YbngdtX1PbPA9Gl/E8KLc5uXF53zNHG/5vt4ZevRauaTgGLuT3w/I2H71l6dfCtWFdL956ut8PRxYdA/FuDYXnXnlK+nlv/K6wXxYfF9eUZ1y0ojg+O3Psjqd2z80dmy7COC8ubXisWo+X1Q33qVh0vAyf9vGy829+edM1bU5fE/bV+G2dH6tymy0TnR+r2qt7+/3ZdOqmIoxz7Hzvz3bfzcr9mbJEh/1ZbvPC7Wf/s2DKJQ2vf2PdXv9Gxkbrr38jaW+MNb3+LX5oRmorK4qTty/v9W8s/H++X/8u65PXv3JfPXpH52Og3ObFydM9BkY7vv5dH+ZQWM8tITGMN+T+92vnz9cP04bHsutxMzo6Fo6b0XiLzcfN5kWXKa+tvO2NU2d23Gy8vvmxavq5pYLHTbmv/nyq83FTbvPG9Nm/dqyKf2147VjR7RgYG1lRrncsHQT117uFVfEYuKPYUxwpDhZ702XKR7m8rYlNyzsGVoT/z/drx1V9cgyU++qVTZ2PgXKbH24+tz87bQynpG0afnZq/f3CUpn/mtFT19e628515i/X+cktnX83VG7z9pbTzRmd99Nt4ZSL2uyn1ufPUsf03uL87KerwjoPbu38u6lym8u2LfN42lkUxZvTb9Z+3xV+v/v3x//9e02/9233O+U3p998cPLhH5/O+gEAOHPv1/6cX1H/WbPhX6yX8+//AAAAwECIuX84zET+BwAAgMqIuX8kzET+BwAAgMqIuX80zCST/P/4Xdtffe+5Ir0b4EIQz4+74aF76tvFjvd8+Hrdwinl6R//9tirX31uebc9XBTFLx/8cNvtH78nrqvuaFznR5tPX+Sq65Z1+489cmq7xvdPOLm9fv3x/iz3MIhd5dcnN9Wud93T07X5xoNFbT48/+Lz9euvfx23P7G5vv1fhjct2blvqOnyG8N6bghzXXhPmYd2ntoP5YyXe3Xttf986edO3V683NCGD9bu5it/UL/e+B5RL19a3z7e76XW/09f++6r5fZP3dh+/c8Nt1//iXC9b4X5ix317Rv3+Vcb1v9HYf3x9uLl7vjWD9qu/7Ur69u/Fo6Lb4TZuv77/vQj77V7vOLt7Ly7frl4+1P/vaV2uXh98fpb1z/+3HTT/mi9/jferV/Pjid+NtK4fTw93k702N3Nx/dQeHybeuRFUXz3j4um/Vx8rH65f2xZf7y+o3e3X/9tLes8OnRd7fKn7s+apvv19b/e1Pb+xvXs/Ls1Tffn5fvD/nt38ofl9Z54OByP4fz//VH9+lrfy/S1+5tfb+L231hTf97G65tsWf/LLeufv67cd93X/8C79fW/du/KpvXv/FQ4nh6oz27r3/9XlzRd/pvfqT8ex56cOHxk9viBvQ17tfF5vHJ81eqLLv7ABy8Jr6WtX+86Mvf4zLF1U+umimLdAL5lYK/X/60w/6s+5s/9LdT9+Gf14+6lT9e/b9388/rXL4fTHwuPZ/z++PW/GGs6Xlsf9/l76/Ns139rWMdyXfm1/7xuWRue+MLrx//hD99u/bkg3p+jl4/X7t8r66+onTf0Rv381terbv7j8ubn9U9Gp2rz+2G/LoR3Zt5wRf32Wq8/vjfJS5+pP3/jT3Lx8kXL+4msGWm+H2e7/p+En2N+cFXz6188Pr7/XPO7ORdriqFyCfPh9aGYr58ft4r7+6WTV7S9vfg+PMX81aezzCXNPj07efDA4eNPTc7NzM5Nzj79zK5DR44fnttVe+/SXV/qdvlTz+/Vtef33pltW4ras/1IffTYhV7/0Uf27L1z6qa9M/t2H98398jRmWP798zO7pnZO3vT7n37Zp7sdvkDe3dMb9q++c5NE/sP7N1x1/btm7dPHDh8pFxGfVFdbJv68sThY7tqF5ndsWX79NatW6YmDh3ZO7PjzqmpiePdLl/73jRRXvqJiWMzB3fPHTg0MzF74JmZHdPbt23b1PXdHw8d3Te7bvLY8cOTx2dnjk3W78u6udrJ5fe+bpcnD7NHwutdi6Hw0/nnb9uW3h+39O2vLHlV9U2afzwt3gnvBRW/v3X7Oub+sTCTTPI/AAAA5CDm/vDG/6fOkP8BAACgMmLuXxlmIv8DAABAZcTcPx5mkkn+1//X/9f/1//X/9f/7yX9f/3/TvT/9f8Hef36//r/dNdv/f+Y+1cVRZb5HwAAAHIQc//qMBP5HwAAACoj5v6LwkzkfwAAAKiMmPsvDjPJI/+Ptf5V/1//X/+/sf8ft9X/L/T/9f/PkP6//n8n+v/6/4O8/j7s/6/S/6ff9Fv/P+b+D4SZ5JH/AQAAIAsx938wzET+BwAAgMqIuf+SMBP5HwAAACoj5v41YSaZ5H+f/6//r//v8//1//uh/39RegWuQP+/aRfr/+v/d6L/r/8/yOvvw/6/z/+n7/Rb/z/m/v8XZpJJ/gcAAIAcxNz/oTAT+R8AAAAqI+b+S8NM5H8AAACojJj7LwszyST/6//r/+v/6//r//dD/9/n/58p/X/9/0L//4xd6P78oK9f/1//n+76rf8fc//lYSaZ5H8AAADIQcz9V4SZyP8AAABQGTH3XxlmIv8DAABAZcTcf1WYSSb5X/9f/1//X/9f/1//v5f0//X/O9H/1/8f5PXr/+v/012/9f9j7r86zCST/A8AAAA5iLn/mjAT+R8AAAAqI+b+D4eZyP8AAABQGTH3rw0zyST/6//r/+v/6//r/+v/99Jg9f+HlzxH/79O/7+Z/r/+v/6//j+d9Vv/P+b+j4SZZJL/AQAAIAcx918bZiL/AwAAQGXE3H9dmIn8DwAAAJURc/+6MJNM8r/+v/6//r/+v/6//n8vDVb/f2n6/3X6/830//X/9f/1/+ms3/r/MfevDzPJJP8DAABADmLu3xBmIv8DAABAZcTcf32YifwPAAAAlRFz/w1hJpnkf/1//X/9f/1//X/9/17S/9f/70T/X/9/kNev/7+8/v+KbldEpfVb/z/m/hvDTDLJ/wAAAJCDmPtvCjNpyP9DPfvXBAAAAOB8iLn/5jAT//4PAAAAlRFz/8Ywk0zyv/6//r/+v/6//r/+fy/p/y/q/7/1P4X+f6T/r/8/yOvX//f5/3TXb/3/mPtvCTPJJP8DAABADmLuvzXMRP4HAACAyoi5/7YwE/kfAAAAKiPm/okwk0zyv/6//r/+v/6//r/+fy9Vtf+fXkd9/r/+v/6//r/+v/4/S+q3/n/M/beHmWSS/wEAACAHMfffEWYi/wMAAEBlxNw/GWYi/wMAAEBlxNw/FWaSSf7X/9f/1//X/9f/1//vpar2/8/i8//1/xvo/+v/D/L69f/1/+mu3/r/MfdPh5lkkv8BAAAgBzH3bwozkf8BAACgMmLu3xxmIv8DAABAZcTcvyXMJJP8r/+v/6//r/+v/6//30v6//r/nVS//3+k+Q0A9P/PqQu9fv1//X+aDbc5rd/6/zH3bw0zyST/AwAAQA5i7t8WZiL/AwAAQGXE3H9nmIn8DwAAAJURc/9dYSaZ5H/9f/1//X/9f/1//f9e0v/X/++k+v1/n//fSxd6/fr/+v9012/9/5j7t4eZZJL/AQAAIAcx9380zET+BwAAgMqIuf/uMBP5HwAAAAZKu88hjGLu/1iYSSb5X/+/6v3/hZX6//r/+v+d16//31v6//r/nej/6/8P8vr1//X/6a7f+v8x9+8IM8kk/wMAAEAOYu6/J8xE/gcAAIDKiLn/3jAT+R8AAAAqI+b+nWEmmeR//f+q9/99/r/+v/5/t/Xr//eW/r/+fyf6/4PZ/w8/tuj/n5/+//hSl2/s/5fHkP4//ajf+v8x998XZpJJ/gcAAIAcxNz/8TAT+R8AAAAqI+b+T4SZyP8AAABQGTH3fzLMJJP8r/+v/6//r/+v/6//30v6//r/nej/D2b/P9L/9/n/+v9002/9/5j77w8zyST/AwAAQA5i7v9UmIn8DwAAAJURc///DzOR/wEAAKAyYu5/IMwkk/yv/6//r/+v/6//r//fS/r/+v+d6P/r/w/y+vX/9f/prt/6/zH3/0qYSSb5HwAAAHIQc/+DYSbyPwAAAFRGzP2fDjOR/wEAAKAyYu7/1TCTTPK//v/56f8Pp+vX/9f/1//X/9f/P5f0/weo/z/U+uzT/9f/H+z16//r/9Ndv/X/Y+7/tTCTTPI/AAAA5CDm/l8PM5H/AQAAoDJi7v+NMBP5HwAAACoj5v6Hwkwyyf/6/z7/X/9f/1//X/+/l/T/9f870f/X/x/k9ev/6//TXb/1/2Pu/80wk0zyPwAAAOQg5v6Hw0zkfwAAAKiMmPs/E2Yi/wMAAEBlxNz/2TCTTPK//r/+v/6//r/+v/5/L+n/D2z/f2Wh/9+V/r/+v/6//j+d9Vv/P+b+R8JMMsn/AAAAkIOY+z8XZiL/AwAAQGXE3P9bYSbyPwAAAFRGzP2/HWaSSf7X/9f/1//X/9f/1//vJf3/xf3/8jXsQvb/VyxnQ5//vyz6//r/+v/6/3TWb/3/mPs/H2aSSf4HAACAHMTc/zthJvI/AAAAVEbM/b8bZiL/AwAAQGXE3P9omEkm+V//X/9f/1//X/9f/7+X9P8H9vP/9f+XQf9f/1//X/+fzvqt/x9z/xfCTDLJ/wAAAJCDmPt/L8xE/gcAAIDKiLl/V5iJ/A8AAACVEXP/Y2EmmeR//X/9f/1//X/9f/3/XtL/1//vRP9f/3+Q16//r/9Pd/3W/4+5f3eYSSb5HwAAAHIQc/8Xw0zkfwAAAKiMmPv3hJnI/wAAAFAZMffvDTPJJP/r/+v/6//r/+v/6//3kv6//n8n+v/6/4O8fv1//X+667f+f8z9M2EmmeR/AAAAyEHM/fvCTOR/AAAAqIyY+/eHmcj/AAAAUBkx9z8eZpJJ/tf/1//X/9f/1//X/+8l/X/9/070//X/B3n9+v/6/3TXb/3/mPsPhJlkkv8BAAAgBzH3fynMRP4HAACAyoi5/8thJvI/AAAAVEbM/QfDTDLJ//r/+v/6//r/+v/6/72k/6//34n+v/7/IK9f/1//n+76rf8fc/+hMJNM8j8AAADkIOb+w2Em8j8AAABURsz9R8JM5H8AAACojJj7j4aZZJL/9f/1//X/9f/1//X/e0n/X/+/E/1//f9BXr/+v/4/3fVb/z/m/t8PM8kk/wMAAEAOYu4/FmYi/wMAAEBlxNw/G2Yi/wMAAEBlxNw/F2aSSf7X/9f/1//X/9f/1//vJf1//f9O9P/1/wd5/fr/+v9012/9/5j7j4eZZJL/AQAAIAcx9z8RZiL/AwAAQGXE3P9kmIn8DwAAwP+xd5e7np1VHMf/pRkgIQ3XwhVwCVwDr7gFpLgWd5fi7u7u7u4uheIaSsJZax06svecU3b/z37W5/NmBWYy88AkTX+ZfLOZRu7+e8ctTfa//l//r/8/7f9vvNfJf3+k/v+k89P/6//1/2ei/9f/H/T/53bsfn7v79f/6/9ZN1r/n7v/PnFLk/0PAAAAHeTuv2/cYv8DAADANHL33y9usf8BAABgGrn7r49bmux//b/+X//v+//6f/3/lvT/+v8l+n/9/57fr//X/7NutP4/d//945Ym+x8AAAA6yN3/gLjF/gcAAIBp5O5/YNxi/wMAAMA0cvc/KG5psv/1//p//b/+X/+v/9+S/l//v0T/r//f8/v1//p/1o3W/+fuf3Dc0mT/AwAAQAe5+x8St9j/AAAAMI3c/Q+NW+x/AAAAmEbu/ofFLU32v/5f/6//1//r//X/W9L/6/+X6P/1/3t+v/5f/8+60fr/3P0Pj1ua7H8AAADoIHf/I+IW+x8AAACmkbv/kXGL/Q8AAADTyN3/qLilyf7X/+v/9f/6f/2//n9L+n/9/xL9v/5/z+/X/+v/Wbd5/3+PG/57r7b/z91/Q9zSZP8DAABAB7n7Hx232P8AAAAwjdz9j4lb7H8AAACYRu7+x8YtTfa//l//f9r/33LN1P3/9Zf+een/b/1O/b/+fwv6f/3/Ev3/qP3/1f0/of/X/+v/WbN5/7/S+1/8n3P3Py5uabL/AQAAoIPc/Y+PW+x/AAAAmEbu/ifELfY/AAAATCN3/xPjlib7X/+v//f9f/2//l//vyX9v/5/if5/1P7f9/9va/9/96t4v/6fDkbr/3P3PyluabL/AQAAoIPc/U+OW+x/AAAAmEbu/qfELfY/AAAATCN3/1Pjlib7X/+v/9f/6//1//r/Len/9f9L9P/6/z2/3/f/9f+sG63/z93/tLilyf4HAACADnL3Pz1usf8BAABgGrn7nxG32P8AAAAwjdz9z4xbmux//b/+X/+v/79N/f+1+n/9/zL9v/5/if5f/7/n9+v/9f+sG63/z93/rLilyf4HAACADnL3Pztusf8BAABgGrn7nxO32P8AAAAwjdz9z41bmux//b/+X/+v//f9f/3/lvT/0/X/1+j/T+n/9f/6f/0/y0br/3P3Py9uabL/AQAAoIPc/c+PW+x/AAAAmEbu/hfELfY/AAAATCN3/41xS5P9r//X/+v/9f/6f/3/lvT/0/X/vv//P/T/+n/9v/6fZaP1/7n7Xxi3rA2/Cys/DgAAAAwjd/+L4pYmf/8PAAAAHeTuf3HcYv8DAADANHL3vyRuabL/9f/6f/2//l//r//fkv5f/79E/3/5/v/OV/j99P9jvV//r/9n3Wj9f+7+l8YtTfY/AAAAdJC7/2Vxi/0PAAAA08jd//K4xf4HAACAaeTuf0Xc0mT/X6n/v/kuJz+u/786+v/Lv1//r//X/+v/9f/6/yX6f9//3/P79f/6f9aN1v/n7n9l3NJk/wMAAEAHuftfFbfY/wAAADCN3P2vjlvsfwAAAJhG7v7XxC1N9r/v/+v/9f/6f/2//n9L+n/9/xL9v/5/z+/X/+v/WTda/5+7/7VxS5P9DwAAAB3k7n9d3GL/AwAAwDRy978+brH/AQAAYBq5+98QtzTZ//p//f/R+/876P+T/j/+XPX/+v8z0P/r/w/6/3M7dj+/9/fr//X/rBut/8/d/8a4pcn+BwAAgA5y978pbrH/AQAAYBq5+98ct9j/AAAAMI3c/W+JW5rsf/2//v/o/b/v/xf9f/y56v/1/2eg/9f/H/T/53bsfn7v79f/6/9ZN1r/n7v/rXFLk/0PAAAAHeTuf1vcYv8DAADANHL3vz1usf8BAABgGrn73xG3NNn/+n/9v/5f/6//1/9vSf+v/1+i/9f/7/n9+n/9P+tG6/9z978zbmmy/wEAAKCD3P3vilvsfwAAAJhG7v53xy32PwAAAEwjd/974pYm+1//v/f+/543xQv0//p//b/+f0j6f/3/Ev2//n/P79f/6/9ZN1r/n7v/vXFLk/0PAAAAHeTuf1/cYv8DAADANHL3vz9usf8BAABgGrn7PxC3NNn/Pfr/C5f8tHn6f9//1//r//X/Y9P/6/+X6P/1/3t+v/5f/8+60fr/3P0fjFua7H8AAADoIHf/h+IW+x8AAACmkbv/w3GL/Q8AAADTyN3/kbilyf7v0f9fqkH/n/+zbt/+/5a76v/1/0X/r/8/6P/1/yv0//r/Pb9f/6//Z91o/X/u/o/GLU32PwAAAHSQu/9jcYv9DwAAANPI3f/xuMX+BwAAgGnk7v9E3HC36473pNuV/n/a/t/3//X/+n/9/xD0//r/Jfp//f+e36//1/+zbrT+P3f/J+MWf/8PAAAA08jd/6m4xf4HAACAaeTu/3TcYv8DAADANHL3fyZuabL/9f/6f/2//l//r//fkv5f/79E/6//3/P79f/6f9aN1v/n7v9s3NJk/wMAAEAHufs/F7fY/wAAADCN3P2fj1vsfwAAAJhG7v4vxC1N9r/+X/+v//+/9f8XLv719f/6f/2//l//v0z/r//f8/v1//p/1o3W/+fu/2Lc0mT/AwAAQAe5+78Ut9j/AAAAMI3c/V+OW+x/AAAAmEbu/q/ELU32v/5f/6//9/1//b/+f0v6f/3/Ev2//n/P79f/6/9ZN1r/n7v/q3FLk/0PAAAAHeTu/1rcYv8DAADANHL3fz1usf8BAABgGrn7vxG3NNn/M/f/Sz9N/39C/6//P+j/9f8b0//r/5fo//X/e37/mfr/y/xLpf6fDkbr/3P3fzNuabL/AQAAoIPc/d+KW+x/AAAAmEbu/m/HLfY/AAAATCN3/3filib7f+b+f4n+/4T+X/9/0P/r/zem/9f/L9H/6//3/H7f/9f/s260/j93/3fjlib7HwAAADrI3f+9uMX+BwAAgGnk7v9+3GL/AwAAwDRy9/8gbmmy//X/+n/9v/5f/6//35L+X/+/RP+v/9/z+/X/+n/Wjdb/5+7/YdzSZP8DAABAB7n7fxS32P8AAAAwjdz9P45b7H8AAACYRu7+n8QtTfa//l//r/8fqv+/48W/jv5f/6//X6b/1/8f9P/ndux+fu/v1//r/1k3Wv+fu/+ncUuT/Q8AAAAd5O7/Wdxi/wMAAMA0cvf/PG6x/wEAAGAauft/Ebc02f/6f/2//v/c/f+1B9//v9V79P/6/8vR/+v/l+j/9f97fr/+X//PutH6/9z9v4xbmux/AAAA6CB3/6/iFvsfAAAAppG7/9dxi/0PAAAA08jd/5u4pcn+1//r//X/Q33/X/+v/9f/n5H+X/9/0P+f27H7+b2/X/+v/2fdaP1/7v6b4pYm+x8AAAA6yN3/27jF/gcAAIBp5O7/Xdxi/wMAAMA0cvffHLc02f/6f/3/lP3/nfT/+n/9/yj0//r/Jfp//f+e36//1/+zbrT+P3f/7+OWJvsfAAAAOsjd/4e4xf4HAACAaeTu/2PcYv8DAADANHL3/yluabL/9f/6/yn7f9//1//vrf+/9vQfwPr/s9H/6/8PM/T/153+/vr//bxf/6//Z91o/X/u/j/HLU32PwAAAHSQu/8vcYv9DwAAANPI3f/XuMX+BwAAgGnk7v9b3DLV/v/3FVs2/b/+X/+v/9f/D9D/+/7/uen/9f+HGfr/w+nvr//fz/v1//p/1o3W/+fu/3vcMtX+BwAAgN5y9/8jbrH/AQAAYBq5+/8Zt9j/AAAAMI3c/f+KW5rsf/2//l//r//X/+v/t6T/1/8v0f/r//f8fv2//p91o/X/ufv/EwAA//9cXC6B")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x60843, 0x15)
ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000080)={0xfc6, 0xfffffffffffffff7, 0x6976})
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a5a438, &(0x7f0000006900)=ANY=[@ANYRES32=0x0, @ANYRESHEX=0x0, @ANYRES8, @ANYRESHEX, @ANYRESHEX, @ANYBLOB="0d9435a8af712ba22db08aad61bf52901d77aded910bc7949acdf1a626f568d38938f8ec34f72c1e0b3e6540dc1e44beac32958b12631708d0a5635580b2f9fef13a977211e5d519ab9531321cfb53a9b413ea91f290924482d4007a70a19759dd63f9fc81f2c63fe27bce5e7dddf01fa5c3f09ef226ee04045b0cf0661e3d5a67446c4d93db12c2ac7a15f0265fd7eade1a72cbd696413a03174375c955f8c82a9774c2c8ac5046d59c86dbd5165e6e447586", @ANYBLOB="4c07f18b4a72a428cdf1fcc6a889d51c7d395bfc15396c272d41b4a79dba0739c1c7461ae19481932aa4c03054c8b2442a4c1e4311032bebb0cb70495acfcf1f08735df868c705", @ANYBLOB="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", @ANYRES16, @ANYRES32, @ANYBLOB="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", @ANYRESDEC, @ANYRESHEX, @ANYRES8], 0xb, 0x0, &(0x7f0000000000))

1.668862184s ago: executing program 1 (id=2433):
creat(&(0x7f0000000300)='./bus\x00', 0x15d)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setrlimit(0x7, &(0x7f0000000200)={0x5, 0xb})
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0x2, 0x0, 0x7, 0x1}}, 0x20)

1.435898867s ago: executing program 1 (id=2435):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendto$inet6(r0, &(0x7f0000000140)="d4", 0x1, 0x20000800, &(0x7f0000000240)={0xa, 0x4a20, 0x7fffffff, @local, 0x4}, 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00', 0xfffffffd}, 0x1c)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8)

1.254077286s ago: executing program 4 (id=2436):
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100"})
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000140)={0x3, "5c9a6b023e38129d8aef7813b7621985faa1aa3ec8617cfda933fbb4d9aaa083"})
ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f00000002c0)=0x3)

1.185367599s ago: executing program 1 (id=2437):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8)
sendto$inet6(r0, &(0x7f0000001300)="86", 0x1, 0x10, &(0x7f0000000240)={0xa, 0x4e1c, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x9, 0x10}, 0x8)

1.066528035s ago: executing program 4 (id=2438):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CQM={0x10, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x1000000}, @NL80211_ATTR_CQM_RSSI_THOLD={0x4}]}]}, 0x2c}}, 0x0)

1.006558278s ago: executing program 6 (id=2439):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "810000cc2bf91fef0000e6b925e66d00ffffff"})
r1 = syz_open_pts(r0, 0x0)
ioctl$TCGETS2(r1, 0x802c542a, &(0x7f0000000040))

951.632741ms ago: executing program 1 (id=2440):
sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000600)=ANY=[@ANYBLOB="000000f900331e9cb944d73bffaa"], 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x4000000)
r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000000)={0x14, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000000200)=ANY=[])

883.306935ms ago: executing program 4 (id=2441):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xb, 0x16, &(0x7f0000000440)=ANY=[@ANYBLOB="61154c00000000006113500000000000bfa00000000000001503000008004e002d3501000000000095000000000000006916000000000000bf67000000000000350605000fff07346706000005000000160302000ee60060bf650000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf5400000000000007"], 0x0}, 0x94)
r0 = socket$inet6(0xa, 0x80803, 0x87)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@empty, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x547b31180522e14c}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@broadcast}, 0x0, @in6=@private1}}, 0xe4)
connect$inet6(r0, &(0x7f00000000c0), 0x1c)

825.064638ms ago: executing program 6 (id=2442):
syz_mount_image$squashfs(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x800084, &(0x7f0000000280)=ANY=[], 0x2, 0x1be, &(0x7f0000000480)="$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")
mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000146000/0x4000)=nil)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x115)
getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000)

684.037445ms ago: executing program 4 (id=2443):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x400)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000380)={0x1, 0x0, [{0x1c5}]})

621.095439ms ago: executing program 6 (id=2444):
r0 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0)
read$midi(r0, 0x0, 0x43)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x84000, 0x0)

341.493053ms ago: executing program 6 (id=2445):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, r1, 0x701, 0x74bd2b, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), r0)

174.143542ms ago: executing program 4 (id=2446):
r0 = socket$inet(0x2, 0x2, 0x1)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00')
preadv(r1, &(0x7f0000000700)=[{&(0x7f0000004900)=""/170, 0xaa}], 0x1, 0x17e, 0x9)

82.466036ms ago: executing program 6 (id=2447):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@loopback, 0x8000, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x3, 0x800000, 0x0, 0x4000000000000001, 0xfffffffffffffffb}, {0x0, 0x1, 0x2}, 0x800}}, 0xb8}}, 0x2c000010)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x4004)

72.302067ms ago: executing program 3 (id=2448):
r0 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xc8, 0x0, 0xc000000)
setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x100]}}, 0x5c)
setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000240)=0x2, 0x4)

0s ago: executing program 4 (id=2449):
r0 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0xffffffffffffff2d, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xffe0, 0xfff2}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_PORT_DST_MIN={0x6, 0x59, 0x4e24}, @TCA_FLOWER_KEY_IPV4_DST_MASK={0x8, 0xd, 0xffffffff}, @TCA_FLOWER_KEY_UDP_DST={0x6}, @TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x88e5}, @TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @multicast1}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20041890}, 0x0)

kernel console output (not intermixed with test programs):

 0 has an invalid interface number: 1 but max is 0
[  316.941441][   T23] usb 5-1: config 0 has no interface number 0
[  316.958033][   T23] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  316.975438][   T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  316.988965][T10571] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  316.990139][   T23] usb 5-1: Product: syz
[  317.014327][   T23] usb 5-1: Manufacturer: syz
[  317.019087][   T23] usb 5-1: SerialNumber: syz
[  317.057473][   T23] usb 5-1: config 0 descriptor??
[  317.067043][T10571] XFS (loop3): Ending clean mount
[  317.087722][T10571] XFS (loop3): Quotacheck needed: Please wait.
[  317.139987][ T5812] usbhid 2-1:0.0: can't add hid device: -71
[  317.147602][ T5812] usbhid: probe of 2-1:0.0 failed with error -71
[  317.182187][ T5812] usb 2-1: USB disconnect, device number 18
[  317.223182][T10571] XFS (loop3): Quotacheck: Done.
[  317.276796][   T28] audit: type=1800 audit(1776949334.788:89): pid=10571 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1630" name="bus" dev="loop3" ino=6155 res=0 errno=0
[  317.300314][   T28] audit: type=1800 audit(1776949334.788:90): pid=10571 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1630" name="file1" dev="loop3" ino=6150 res=0 errno=0
[  317.356877][ T5776] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  317.407144][   T23] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[  317.477961][   T23] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  317.507945][   T23] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[  317.535967][   T23] usb 5-1: media controller created
[  317.549284][ T1290] ieee802154 phy0 wpan0: encryption failed: -22
[  317.626755][   T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  317.839537][T10592] loop5: detected capacity change from 0 to 8192
[  318.160680][T10600] loop1: detected capacity change from 0 to 64
[  318.188465][T10600] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing
[  318.291262][    T8] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  318.526504][    T8] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  318.538961][    T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  318.550924][    T8] usb 4-1: Product: syz
[  318.559402][    T8] usb 4-1: Manufacturer: syz
[  318.571213][    T8] usb 4-1: SerialNumber: syz
[  318.578574][    T8] usb 4-1: config 0 descriptor??
[  318.593520][    T8] ch341 4-1:0.0: ch341-uart converter detected
[  318.681162][ T5812] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  318.764223][   T23] i2c i2c-1: ec100: i2c rd failed=-71 reg=33
[  318.868656][   T23] usb 5-1: USB disconnect, device number 13
[  318.885817][ T5812] usb 2-1: config 0 has an invalid interface number: 64 but max is 0
[  318.903648][ T5812] usb 2-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config
[  318.924718][ T5812] usb 2-1: config 0 has no interface number 0
[  318.947942][ T5812] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48
[  318.964364][ T5812] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  318.976060][ T5812] usb 2-1: Product: syz
[  318.980748][ T5812] usb 2-1: Manufacturer: syz
[  318.990754][ T5812] usb 2-1: SerialNumber: syz
[  319.021991][ T5812] usb 2-1: config 0 descriptor??
[  319.075867][T10615] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1645'.
[  319.270718][   T23] usb 2-1: USB disconnect, device number 19
[  319.282225][T10619] loop5: detected capacity change from 0 to 16
[  319.290894][T10619] MTD: Attempt to mount non-MTD device "/dev/loop5"
[  319.413790][    T8] usb 4-1: failed to send control message: -71
[  319.420258][    T8] ch341-uart: probe of ttyUSB0 failed with error -71
[  319.454786][    T8] usb 4-1: USB disconnect, device number 22
[  319.483377][    T8] ch341 4-1:0.0: device disconnected
[  319.639751][T10625] loop5: detected capacity change from 0 to 256
[  319.652415][T10625] exfat: Deprecated parameter 'utf8'
[  319.668506][T10625] exfat: Deprecated parameter 'utf8'
[  319.697685][T10625] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[  319.946269][T10633] loop1: detected capacity change from 0 to 256
[  319.972547][T10633] exfat: Deprecated parameter 'namecase'
[  319.999992][T10633] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[  320.231167][    T9] usb 5-1: new full-speed USB device number 14 using dummy_hcd
[  320.275160][T10639] loop1: detected capacity change from 0 to 16
[  320.293413][T10639] erofs: (device loop1): mounted with root inode @ nid 36.
[  320.316842][T10637] loop3: detected capacity change from 0 to 512
[  320.354920][T10637] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  320.409898][T10637] EXT4-fs error (device loop3): ext4_orphan_get:1430: comm syz.3.1656: bad orphan inode 131083
[  320.446439][    T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  320.451269][T10637] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  320.492048][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  320.565706][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  320.604581][    T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  320.663670][    T9] usb 5-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00
[  320.694599][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  320.721919][    T9] usb 5-1: config 0 descriptor??
[  320.801964][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  320.807645][T10629] loop5: detected capacity change from 0 to 32768
[  320.880481][T10629] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  321.030691][T10629] XFS (loop5): Ending clean mount
[  321.052367][T10629] XFS (loop5): Quotacheck needed: Please wait.
[  321.109167][T10629] XFS (loop5): Quotacheck: Done.
[  321.153049][    T9] hid-u2fzero 0003:10C4:8ACF.000F: item fetching failed at offset 0/5
[  321.168077][    T9] hid-u2fzero: probe of 0003:10C4:8ACF.000F failed with error -22
[  321.240898][ T5812] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  321.242251][ T9342] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  321.291211][  T787] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  321.357115][ T5811] usb 5-1: USB disconnect, device number 14
[  321.431009][ T5812] usb 4-1: Using ep0 maxpacket: 8
[  321.439712][ T5812] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  321.450347][ T5812] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  321.460450][ T5812] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  321.471013][ T5812] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  321.484201][ T5812] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  321.490853][  T787] usb 2-1: Using ep0 maxpacket: 32
[  321.493895][ T5812] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  321.499983][  T787] usb 2-1: too many configurations: 17, using maximum allowed: 8
[  321.517333][  T787] usb 2-1: config 0 has an invalid interface number: 2 but max is 0
[  321.526547][  T787] usb 2-1: config 0 has no interface number 0
[  321.534364][  T787] usb 2-1: config 0 has an invalid interface number: 2 but max is 0
[  321.544951][  T787] usb 2-1: config 0 has no interface number 0
[  321.554040][  T787] usb 2-1: config 0 has an invalid interface number: 2 but max is 0
[  321.563444][  T787] usb 2-1: config 0 has no interface number 0
[  321.571038][  T787] usb 2-1: config 0 has an invalid interface number: 2 but max is 0
[  321.579232][  T787] usb 2-1: config 0 has no interface number 0
[  321.586774][  T787] usb 2-1: config 0 has an invalid interface number: 2 but max is 0
[  321.595869][  T787] usb 2-1: config 0 has no interface number 0
[  321.603313][  T787] usb 2-1: config 0 has an invalid interface number: 2 but max is 0
[  321.611655][  T787] usb 2-1: config 0 has no interface number 0
[  321.619573][  T787] usb 2-1: config 0 has an invalid interface number: 2 but max is 0
[  321.628362][  T787] usb 2-1: config 0 has no interface number 0
[  321.636302][  T787] usb 2-1: config 0 has an invalid interface number: 2 but max is 0
[  321.644516][  T787] usb 2-1: config 0 has no interface number 0
[  321.655389][  T787] usb 2-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2
[  321.664773][  T787] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  321.672996][  T787] usb 2-1: Product: syz
[  321.677318][  T787] usb 2-1: Manufacturer: syz
[  321.682019][  T787] usb 2-1: SerialNumber: syz
[  321.689209][  T787] usb 2-1: config 0 descriptor??
[  321.698803][  T787] etas_es58x 2-1:0.2: Starting syz syz (Serial Number syz)
[  321.736677][ T5812] usb 4-1: GET_CAPABILITIES returned 0
[  321.746650][ T5812] usbtmc 4-1:16.0: can't read capabilities
[  321.921551][  T787] etas_es58x 2-1:0.2: could not retrieve the product info string
[  321.965171][ T5812] usb 4-1: USB disconnect, device number 23
[  322.213280][T10664] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1665'.
[  322.223174][T10664] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1665'.
[  322.238990][T10664] ip6gretap1: entered allmulticast mode
[  322.653888][T10676] loop4: detected capacity change from 0 to 1024
[  322.708093][T10676] EXT4-fs: Ignoring removed bh option
[  322.764235][T10676] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  322.831284][T10680] Bluetooth: hci4: Frame reassembly failed (-84)
[  322.860268][   T34] Bluetooth: hci4: Frame reassembly failed (-84)
[  322.877868][T10683] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  322.896936][T10676] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  323.070341][ T8098] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  323.239223][T10693] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1670'.
[  323.268468][    C1] etas_es58x 2-1:0.2: es58x_check_rx_urb: Expected sequence 0xFECA for start of frame but got 0x0000.
[  323.269680][  T787] usb 2-1: USB disconnect, device number 20
[  323.279759][    C1] etas_es58x 2-1:0.2: es58x_split_urb_try_recovery: Recovery failed
[  323.293681][    C1] etas_es58x 2-1:0.2: es58x_split_urb() returned error -EBADMSG
[  323.302908][  T787] etas_es58x 2-1:0.2: Disconnecting syz syz
[  323.306541][T10693] netlink: 528 bytes leftover after parsing attributes in process `syz.4.1670'.
[  323.319209][ T5432] etas_es58x 2-1:0.2 can0: es58x_submit_urb: USB send urb failure: -ENODEV
[  323.329046][ T5432] etas_es58x 2-1:0.2 can1: es58x_open: Could not open the network device: -ENODEV
[  324.891403][ T5773] Bluetooth: hci4: command 0x1003 tx timeout
[  324.899206][ T5780] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  324.997015][T10737] loop1: detected capacity change from 0 to 8192
[  325.300373][T10739] program syz.3.1685 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  327.205006][T10780] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1702'.
[  327.234755][T10781] loop1: detected capacity change from 0 to 24
[  327.477707][T10767] loop4: detected capacity change from 0 to 32768
[  327.498541][T10767] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10
[  327.732328][ T6494] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10
[  327.835597][T10790] loop1: detected capacity change from 0 to 512
[  327.960463][T10790] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  328.011745][T10790] ext4 filesystem being mounted at /446/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  328.525576][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  328.788473][T10803] loop3: detected capacity change from 0 to 256
[  328.874297][T10803] FAT-fs (loop3): error, clusters badly computed (0 != 128)
[  328.880974][   T28] audit: type=1800 audit(1776949346.408:91): pid=10803 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1712" name="file1" dev="loop3" ino=1048652 res=0 errno=0
[  328.924058][T10803] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  329.077087][T10804] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  329.837496][T10799] loop4: detected capacity change from 0 to 32768
[  330.154061][T10799] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  330.340890][T10799] XFS (loop4): Ending clean mount
[  330.608273][T10811] loop1: detected capacity change from 0 to 32768
[  330.619520][ T8098] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  330.660505][T10811] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  330.676456][T10840] loop5: detected capacity change from 0 to 256
[  330.721147][T10840] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  330.750468][T10840] exFAT-fs (loop5): Medium has reported failures. Some data may be lost.
[  330.862313][T10840] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  330.975032][T10811] XFS (loop1): Ending clean mount
[  331.008371][T10811] XFS (loop1): Quotacheck needed: Please wait.
[  331.198417][T10811] XFS (loop1): Quotacheck: Done.
[  331.410105][   T28] audit: type=1804 audit(1776949348.938:92): pid=10811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1714" name="/newroot/449/file0/bus" dev="loop1" ino=9291 res=1 errno=0
[  331.534561][ T5768] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  331.567198][T10833] loop3: detected capacity change from 0 to 32768
[  331.729608][T10833] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  331.876902][T10861] loop4: detected capacity change from 0 to 128
[  331.969212][T10833] XFS (loop3): Ending clean mount
[  331.986634][T10861] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  332.017436][T10833] XFS (loop3): Quotacheck needed: Please wait.
[  332.059193][T10861] ext4 filesystem being mounted at /225/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  332.202451][T10833] XFS (loop3): Quotacheck: Done.
[  332.278394][ T8098] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  332.522322][ T5776] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  333.922687][T10897] program syz.3.1744 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  334.174015][T10905] netlink: 'syz.3.1748': attribute type 4 has an invalid length.
[  334.493001][T10915] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.1752'.
[  334.534226][T10915] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.1752'.
[  334.550933][   T23] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  334.564231][T10919] loop3: detected capacity change from 0 to 128
[  334.620562][T10919] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  334.712607][T10919] ext4 filesystem being mounted at /460/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  334.772349][   T23] usb 2-1: Using ep0 maxpacket: 16
[  334.792838][   T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  334.805367][   T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  334.821792][   T23] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00
[  334.839870][   T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  334.875932][   T23] usb 2-1: config 0 descriptor??
[  335.159542][ T5776] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  335.362013][   T23] corsair 0003:1B1C:1B02.0010: unknown main item tag 0x0
[  335.369281][   T23] corsair 0003:1B1C:1B02.0010: unknown main item tag 0x0
[  335.409307][   T23] corsair 0003:1B1C:1B02.0010: unknown main item tag 0x0
[  335.427946][   T23] corsair 0003:1B1C:1B02.0010: unknown main item tag 0x0
[  335.438060][   T23] corsair 0003:1B1C:1B02.0010: unknown main item tag 0x0
[  335.488526][   T23] corsair 0003:1B1C:1B02.0010: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.1-1/input0
[  335.673982][T10938] hub 1-0:1.0: USB hub found
[  335.696691][T10938] hub 1-0:1.0: 1 port detected
[  335.853789][    T8] usb 2-1: USB disconnect, device number 21
[  336.218298][T10949] loop3: detected capacity change from 0 to 512
[  336.243990][T10949] EXT4-fs: Ignoring removed bh option
[  336.249469][T10949] EXT4-fs: inline encryption not supported
[  336.278122][T10949] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  336.319784][T10949] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1154: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  336.347406][T10949] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.1768: bg 0: block 248: padding at end of block bitmap is not set
[  336.389106][T10949] Quota error (device loop3): write_blk: dquota write failed
[  336.407550][T10949] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota
[  336.435895][T10949] EXT4-fs error (device loop3): ext4_acquire_dquot:6953: comm syz.3.1768: Failed to acquire dquot type 1
[  336.452828][T10949] EXT4-fs (loop3): 1 truncate cleaned up
[  336.460085][T10949] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback.
[  336.637471][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0008-000000000000.
[  336.652419][ T1096] Quota error (device loop3): do_check_range: Getting block 0 out of range 1-5
[  336.680930][ T1096] EXT4-fs error (device loop3): ext4_release_dquot:6989: comm kworker/u4:6: Failed to release dquot type 1
[  337.031261][T10970] ������: renamed from vlan0 (while UP)
[  337.089545][T10972] netlink: 'syz.5.1776': attribute type 8 has an invalid length.
[  337.364502][T10981] tap0: tun_chr_ioctl cmd 1074025677
[  337.384639][T10981] tap0: linktype set to 768
[  337.427629][T10979] loop5: detected capacity change from 0 to 4096
[  337.475770][T10979] ntfs3: loop5: Different NTFS sector size (4096) and media sector size (512).
[  337.646970][T10979] ntfs3: Cannot use different iocharset when remounting!
[  337.670403][T10979] ntfs3: loop5: failed to convert "076c" to cp932
[  338.320979][   T23] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  338.540052][   T23] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  338.570951][   T23] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  338.588845][   T23] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[  338.611523][T10985] loop5: detected capacity change from 0 to 32768
[  338.612606][   T23] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[  338.640323][T10985] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.1782 (10985)
[  338.670003][   T23] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0
[  338.695387][T10985] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  338.716775][   T23] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  338.720896][T10985] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm
[  338.731647][   T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  338.756131][   T23] usb 5-1: Product: syz
[  338.757063][T10985] BTRFS info (device loop5): setting nodatasum
[  338.761627][   T23] usb 5-1: Manufacturer: syz
[  338.787024][T10985] BTRFS info (device loop5): force zlib compression, level 3
[  338.790966][   T23] usb 5-1: SerialNumber: syz
[  338.802854][T10985] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_LZO (0x8)
[  338.834952][T10985] BTRFS info (device loop5): use lzo compression, level 0
[  338.857280][T10985] BTRFS info (device loop5): turning on flush-on-commit
[  338.885639][T10985] BTRFS info (device loop5): enabling auto defrag
[  338.911011][T10985] BTRFS info (device loop5): max_inline at 4096
[  338.927616][T10985] BTRFS info (device loop5): using free space tree
[  339.061675][T10995] loop1: detected capacity change from 0 to 32768
[  339.102603][T10985] BTRFS info (device loop5): enabling ssd optimizations
[  339.145060][T10997] loop3: detected capacity change from 0 to 32768
[  339.158079][T10995] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  339.158579][T10997] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10
[  339.278722][T10995] XFS (loop1): Ending clean mount
[  339.335765][T10995] XFS (loop1): Quotacheck needed: Please wait.
[  339.429126][ T5778] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10
[  339.513576][T10995] XFS (loop1): Quotacheck: Done.
[  339.596130][ T9342] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  340.045816][ T5768] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  341.361504][   T23] cdc_ncm 5-1:1.0: SET_CRC_MODE failed
[  341.383402][   T23] cdc_ncm 5-1:1.0: bind() failure
[  341.398111][   T23] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found
[  341.405272][   T23] cdc_ncm 5-1:1.1: bind() failure
[  341.419278][   T23] usb 5-1: USB disconnect, device number 15
[  341.441262][ T5772] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop5 scanned by udevd (5772)
[  341.759966][T11042] loop3: detected capacity change from 0 to 4096
[  341.858475][T11042] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  342.077223][T11053] kernel read not supported for file /!selinuxwk1�m�9ɞ*T����#j����Y��mV�vm(p�-QZ#�{�� (pid: 11053 comm: syz.4.1800)
[  342.302249][T11057] loop5: detected capacity change from 0 to 64
[  342.452452][T11059] tap0: tun_chr_ioctl cmd 3223345253
[  342.455718][T11057] syz.5.1802: attempt to access beyond end of device
[  342.455718][T11057] loop5: rw=2049, sector=268435468, nr_sectors = 2 limit=64
[  342.516387][T11057] Buffer I/O error on dev loop5, logical block 134217734, lost async page write
[  342.834542][T11064] mkiss: ax0: crc mode is auto.
[  343.034684][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  343.454150][T11061] loop4: detected capacity change from 0 to 40427
[  343.464499][T11061] F2FS-fs (loop4): invalid crc value
[  343.481695][T11061] F2FS-fs (loop4): Found nat_bits in checkpoint
[  343.601344][T11061] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[  343.688356][T11061] F2FS-fs (loop4): Start checkpoint disabled!
[  343.746771][T11061] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  343.971867][T11065] loop1: detected capacity change from 0 to 32768
[  344.087709][T11065] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  344.112414][   T12] kworker/u4:1: attempt to access beyond end of device
[  344.112414][   T12] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  344.201894][   T12] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  344.208987][   T12] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  344.330591][T11100] hub 1-0:1.0: USB hub found
[  344.358583][T11100] hub 1-0:1.0: 1 port detected
[  344.618907][T11065] XFS (loop1): Ending clean mount
[  344.654722][T11065] XFS (loop1): Quotacheck needed: Please wait.
[  344.819502][T11065] XFS (loop1): Quotacheck: Done.
[  345.121257][ T5812] usb 6-1: new full-speed USB device number 4 using dummy_hcd
[  345.254531][ T5768] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  345.333046][ T5812] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  345.344724][ T5812] usb 6-1: config 0 has no interface number 0
[  345.353470][ T5812] usb 6-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  345.365171][ T5812] usb 6-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0
[  345.377024][ T5812] usb 6-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  345.430177][ T5812] usb 6-1: config 0 interface 1 has no altsetting 0
[  345.461557][ T5812] usb 6-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00
[  345.509185][ T5812] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  345.543373][ T5812] usb 6-1: config 0 descriptor??
[  345.581812][   T23] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  345.740169][T11126] loop1: detected capacity change from 0 to 1024
[  345.781723][   T23] usb 5-1: Using ep0 maxpacket: 32
[  345.788243][   T23] usb 5-1: too many configurations: 17, using maximum allowed: 8
[  345.804166][   T23] usb 5-1: config 0 has an invalid interface number: 2 but max is 0
[  345.813351][   T23] usb 5-1: config 0 has no interface number 0
[  345.863779][   T23] usb 5-1: config 0 has an invalid interface number: 2 but max is 0
[  345.879496][   T23] usb 5-1: config 0 has no interface number 0
[  345.893843][   T23] usb 5-1: config 0 has an invalid interface number: 2 but max is 0
[  345.908095][   T23] usb 5-1: config 0 has no interface number 0
[  345.926588][   T23] usb 5-1: config 0 has an invalid interface number: 2 but max is 0
[  345.955322][   T23] usb 5-1: config 0 has no interface number 0
[  345.980380][   T23] usb 5-1: config 0 has an invalid interface number: 2 but max is 0
[  346.003746][   T23] usb 5-1: config 0 has no interface number 0
[  346.010392][ T1081] hfsplus: b-tree write err: -5, ino 25
[  346.012290][   T23] usb 5-1: config 0 has an invalid interface number: 2 but max is 0
[  346.021000][ T1081] hfsplus: b-tree write err: -5, ino 4
[  346.035452][ T1081] hfsplus: b-tree write err: -5, ino 2
[  346.041012][   T23] usb 5-1: config 0 has no interface number 0
[  346.042908][ T1081] hfsplus: b-tree write err: -5, ino 26
[  346.049087][   T23] usb 5-1: config 0 has an invalid interface number: 2 but max is 0
[  346.070973][   T23] usb 5-1: config 0 has no interface number 0
[  346.082401][   T23] usb 5-1: config 0 has an invalid interface number: 2 but max is 0
[  346.090495][   T23] usb 5-1: config 0 has no interface number 0
[  346.114058][   T23] usb 5-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2
[  346.141391][   T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  346.149505][   T23] usb 5-1: Product: syz
[  346.164108][   T23] usb 5-1: Manufacturer: syz
[  346.181713][   T23] usb 5-1: SerialNumber: syz
[  346.189860][   T23] usb 5-1: config 0 descriptor??
[  346.201280][ T5812] uclogic 0003:145F:0212.0011: pen parameters not found
[  346.208387][ T5812] uclogic 0003:145F:0212.0011: interface is invalid, ignoring
[  346.224579][   T23] etas_es58x 5-1:0.2: Starting syz syz (Serial Number syz)
[  346.302407][T11123] loop3: detected capacity change from 0 to 32768
[  346.318507][T11123] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10
[  346.469299][    T8] usb 6-1: USB disconnect, device number 4
[  346.485517][   T23] etas_es58x 5-1:0.2: could not retrieve the product info string
[  346.531503][ T6494] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10
[  347.120002][T11128] loop1: detected capacity change from 0 to 40427
[  347.146286][T11128] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  347.171340][T11128] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  347.202671][T11128] F2FS-fs (loop1): invalid crc_offset: 33558524
[  347.224623][T11140] loop5: detected capacity change from 0 to 1024
[  347.257030][T11128] F2FS-fs (loop1): Found nat_bits in checkpoint
[  347.314821][T11147] loop3: detected capacity change from 0 to 1024
[  347.467479][T11128] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  347.501309][T11128] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  347.546903][ T1081] hfsplus: b-tree write err: -5, ino 25
[  347.563015][ T1081] hfsplus: b-tree write err: -5, ino 4
[  347.587756][ T1081] hfsplus: b-tree write err: -5, ino 2
[  347.823725][T11153] loop3: detected capacity change from 0 to 256
[  347.883630][T11153] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  347.909803][T11153] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  348.251913][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  348.287048][T11163] loop3: detected capacity change from 0 to 512
[  348.313434][T11163] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  348.353802][T11163] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.1839: invalid indirect mapped block 6684672 (level 2)
[  348.393741][    C1] etas_es58x 5-1:0.2: es58x_check_rx_urb: Expected sequence 0xFECA for start of frame but got 0x0000.
[  348.404792][    C1] etas_es58x 5-1:0.2: es58x_split_urb_try_recovery: Recovery failed
[  348.412926][    C1] etas_es58x 5-1:0.2: es58x_split_urb() returned error -EBADMSG
[  348.423353][    C1] etas_es58x 5-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged?
[  348.432726][    C1] etas_es58x 5-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged?
[  348.441967][    C1] etas_es58x 5-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged?
[  348.457307][ T5812] usb 5-1: USB disconnect, device number 16
[  348.472745][ T5812] etas_es58x 5-1:0.2: Disconnecting syz syz
[  348.483531][ T5432] etas_es58x 5-1:0.2 can0: es58x_submit_urb: USB send urb failure: -ENODEV
[  348.509895][T11163] EXT4-fs (loop3): 1 truncate cleaned up
[  348.518031][ T5432] etas_es58x 5-1:0.2 can0: es58x_open: Could not open the network device: -ENODEV
[  348.540565][T11163] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  348.653226][T11169] netlink: 'syz.5.1841': attribute type 12 has an invalid length.
[  348.680995][T11169] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1841'.
[  348.722739][T11163] EXT4-fs error (device loop3): ext4_generic_delete_entry:2729: inode #2: block 13: comm syz.3.1839: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[  348.770512][T11163] EXT4-fs error (device loop3) in ext4_delete_entry:2800: Corrupt filesystem
[  348.979348][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  349.791772][T11207] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1852'.
[  350.076632][T11220] vcan0: entered allmulticast mode
[  350.085831][T11220] vcan0: left allmulticast mode
[  350.860590][T11248] loop1: detected capacity change from 0 to 1024
[  350.968949][T11253] loop5: detected capacity change from 0 to 1024
[  351.027218][T11253] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  351.347556][ T9342] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  352.086286][T11283] loop4: detected capacity change from 0 to 512
[  352.140979][T11283] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  352.204170][T11283] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[  352.286683][T11283] EXT4-fs (loop4): 1 truncate cleaned up
[  352.323683][T11283] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  352.517019][ T8098] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  352.821374][T11298] program syz.4.1881 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  353.106547][T11305] sctp: [Deprecated]: syz.5.1882 (pid 11305) Use of struct sctp_assoc_value in delayed_ack socket option.
[  353.106547][T11305] Use struct sctp_sack_info instead
[  353.224173][T11285] loop3: detected capacity change from 0 to 32768
[  353.256862][T11285] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10
[  353.286487][T11288] loop1: detected capacity change from 0 to 32768
[  353.391903][T11288] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  353.403145][T11308] loop4: detected capacity change from 0 to 1024
[  353.586771][T11288] XFS (loop1): Ending clean mount
[  353.623952][ T5772] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10
[  353.725796][ T3538] hfsplus: b-tree write err: -5, ino 25
[  353.762053][ T3538] hfsplus: b-tree write err: -5, ino 4
[  353.767712][ T3538] hfsplus: b-tree write err: -5, ino 2
[  353.814411][ T3538] hfsplus: b-tree write err: -5, ino 20
[  353.846987][ T5768] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  354.174050][T11320] loop4: detected capacity change from 0 to 1024
[  354.269109][T11322] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1888'.
[  354.467171][ T4279] hfsplus: b-tree write err: -5, ino 25
[  354.489212][ T4279] hfsplus: b-tree write err: -5, ino 4
[  354.502227][ T4279] hfsplus: b-tree write err: -5, ino 2
[  354.595435][T11328] loop4: detected capacity change from 0 to 64
[  354.703716][T11328] syz.4.1890: attempt to access beyond end of device
[  354.703716][T11328] loop4: rw=0, sector=1024, nr_sectors = 2 limit=64
[  354.751027][T11328] Buffer I/O error on dev loop4, logical block 512, async page read
[  354.759499][T11328] syz.4.1890: attempt to access beyond end of device
[  354.759499][T11328] loop4: rw=0, sector=113152, nr_sectors = 2 limit=64
[  354.822090][T11318] loop5: detected capacity change from 0 to 32768
[  354.825157][T11328] Buffer I/O error on dev loop4, logical block 56576, async page read
[  354.830878][    T8] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  354.909469][T11318] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  355.047201][T11318] XFS (loop5): Ending clean mount
[  355.072147][    T8] usb 2-1: Using ep0 maxpacket: 32
[  355.090388][    T8] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  355.090635][T11318] XFS (loop5): Quotacheck needed: Please wait.
[  355.117694][    T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  355.151708][    T8] usb 2-1: config 0 descriptor??
[  355.224645][T11318] XFS (loop5): Quotacheck: Done.
[  355.400678][    T8] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  355.446015][    T8] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  355.474324][    T8] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  355.504374][    T8] usb 2-1: media controller created
[  355.600072][    T8] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  355.669902][    T8] az6027: usb out operation failed. (-71)
[  355.695598][    T8] az6027: usb out operation failed. (-71)
[  355.703122][T11351] loop4: detected capacity change from 0 to 256
[  355.707578][    T8] stb0899_attach: Driver disabled by Kconfig
[  355.715902][    T8] az6027: no front-end attached
[  355.715902][    T8] 
[  355.739875][    T8] az6027: usb out operation failed. (-71)
[  355.762436][    T8] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  355.808636][    T8] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input28
[  355.842543][ T9342] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  355.869990][    T8] dvb-usb: schedule remote query interval to 400 msecs.
[  355.901078][    T8] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  355.931449][    T8] usb 2-1: USB disconnect, device number 22
[  356.082320][    T8] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  356.421839][T11367] loop3: detected capacity change from 0 to 512
[  356.718220][T11377] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1906'.
[  356.730930][T11377] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1906'.
[  356.750578][T11377] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1906'.
[  356.774155][T11377] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1906'.
[  356.787609][T11377] netlink: 'syz.3.1906': attribute type 6 has an invalid length.
[  357.717336][T11401] loop5: detected capacity change from 0 to 2048
[  357.762569][T11401] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  358.042405][ T1145] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  358.094771][ T1145] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28
[  358.119931][ T1145] EXT4-fs (loop5): This should not happen!! Data will be lost
[  358.119931][ T1145] 
[  358.159430][ T1145] EXT4-fs (loop5): Total free blocks count 0
[  358.181330][ T1145] EXT4-fs (loop5): Free/Dirty block details
[  358.190988][ T1145] EXT4-fs (loop5): free_blocks=2415919504
[  358.197062][ T1145] EXT4-fs (loop5): dirty_blocks=48
[  358.204358][ T1145] EXT4-fs (loop5): Block reservation details
[  358.210658][ T1145] EXT4-fs (loop5): i_reserved_data_blocks=3
[  358.239643][ T9342] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  358.968423][T11422] loop1: detected capacity change from 0 to 32768
[  359.091478][T11422] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  359.308614][T11444] loop4: detected capacity change from 0 to 512
[  359.384010][T11424] loop3: detected capacity change from 0 to 40427
[  359.388793][T11444] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  359.402179][T11424] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x7ffff
[  359.412234][T11424] F2FS-fs (loop3): heap/no_heap options were deprecated
[  359.438117][T11424] F2FS-fs (loop3): invalid crc value
[  359.478450][T11444] ext4 filesystem being mounted at /285/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  359.532660][T11424] F2FS-fs (loop3): Found nat_bits in checkpoint
[  359.564596][ T5768] ocfs2: Unmounting device (7,1) on (node local)
[  359.672936][ T8098] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  359.751037][T11424] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  359.900924][T11424] F2FS-fs (loop3): inject checkpoint error in f2fs_balance_fs of f2fs_setattr+0xf6b/0x1360
[  359.925242][T11424] F2FS-fs (loop3): Stopped filesystem due to reason: 1
[  359.990645][T11424] overlayfs: upper fs does not support tmpfile.
[  360.300986][ T5812] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  360.512578][ T5812] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  360.561240][ T5812] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  360.590917][ T5812] usb 5-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00
[  360.610280][ T5812] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  360.643660][ T5812] usb 5-1: config 0 descriptor??
[  361.076884][ T5812] playstation 0003:054C:0BA0.0012: unknown main item tag 0x0
[  361.101292][ T5812] playstation 0003:054C:0BA0.0012: unknown main item tag 0x0
[  361.108782][ T5812] playstation 0003:054C:0BA0.0012: unknown main item tag 0x0
[  361.138144][ T5812] playstation 0003:054C:0BA0.0012: unknown main item tag 0x0
[  361.157292][ T5812] playstation 0003:054C:0BA0.0012: unknown main item tag 0x0
[  361.170421][T11471] loop3: detected capacity change from 0 to 1024
[  361.172237][ T5812] playstation 0003:054C:0BA0.0012: unknown main item tag 0x0
[  361.198607][ T5812] playstation 0003:054C:0BA0.0012: unknown main item tag 0x0
[  361.212710][T11471] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  361.214952][ T5812] playstation 0003:054C:0BA0.0012: hidraw0: USB HID v0.00 Device [HID 054c:0ba0] on usb-dummy_hcd.4-1/input0
[  361.306584][ T5812] playstation 0003:054C:0BA0.0012: Invalid reportID received, expected 18 got 179
[  361.321421][ T5812] playstation 0003:054C:0BA0.0012: Failed to retrieve DualShock4 pairing info: -22
[  361.339922][ T5812] playstation 0003:054C:0BA0.0012: Failed to get MAC address from DualShock4
[  361.359439][ T5812] playstation 0003:054C:0BA0.0012: Failed to create dualshock4.
[  361.424327][ T5812] playstation: probe of 0003:054C:0BA0.0012 failed with error -22
[  361.453123][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  362.048003][T11486] loop3: detected capacity change from 0 to 256
[  362.120207][T11486] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  362.166039][T11481] loop5: detected capacity change from 0 to 32768
[  362.177510][ T5812] usb 5-1: USB disconnect, device number 17
[  362.190974][T11481] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  362.199204][T11481] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  362.229049][T11481] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms
[  362.238525][ T5830] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  362.247097][ T5830] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  362.294818][ T5830] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 47ms
[  362.303784][ T5830] gfs2: fsid=syz:syz.0: jid=0: Done
[  362.310992][T11481] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  362.476587][T11493] netlink: 'syz.1.1952': attribute type 10 has an invalid length.
[  362.555399][T11481] gfs2: fsid=syz:syz.0: found 1 quota changes
[  362.641998][T11493] veth0_vlan: left promiscuous mode
[  362.708739][T11493] veth0_vlan: entered promiscuous mode
[  362.739585][T11493] team0: Device veth0_vlan failed to register rx_handler
[  362.786697][T11481] syz.5.1947: attempt to access beyond end of device
[  362.786697][T11481] loop5: rw=12288, sector=6755399441055880, nr_sectors = 8 limit=32768
[  362.962168][ T9342] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error
[  362.962168][ T9342]   inode = 11 2339
[  362.962168][ T9342]   function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 421
[  362.984945][ T9342] gfs2: fsid=syz:syz.0: G:  s:EX n:2/923 f:qobnN t:EX d:EX/0 a:0 v:0 r:3 m:20 p:1
[  362.995066][ T9342] gfs2: fsid=syz:syz.0:  H: s:EX f:H e:0 p:9342 [syz-executor] gfs2_quota_sync+0x411/0x5a0
[  363.006258][ T9342] gfs2: fsid=syz:syz.0:  I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0
[  363.020208][ T9342] gfs2: fsid=syz:syz.0: about to withdraw this file system
[  363.041346][ T9342] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount.
[  363.050198][ T9342] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0
[  363.075248][ T9342] gfs2: fsid=syz:syz.0: File system withdrawn
[  363.080331][T11499] loop1: detected capacity change from 0 to 1024
[  363.082941][T11501] loop4: detected capacity change from 0 to 512
[  363.094412][ T9342] CPU: 0 PID: 9342 Comm: syz-executor Not tainted syzkaller #0
[  363.102010][ T9342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  363.112186][ T9342] Call Trace:
[  363.115480][ T9342]  <TASK>
[  363.118440][ T9342]  dump_stack_lvl+0x18c/0x250
[  363.123147][ T9342]  ? kobject_uevent_env+0x363/0x8b0
[  363.128374][ T9342]  ? show_regs_print_info+0x20/0x20
[  363.133598][ T9342]  ? load_image+0x420/0x420
[  363.138135][ T9342]  ? kobject_uevent_env+0x363/0x8b0
[  363.143366][ T9342]  gfs2_withdraw+0xb24/0x13d0
[  363.148082][ T9342]  ? gfs2_lm+0x240/0x240
[  363.152433][ T9342]  ? queue_delayed_work_on+0x114/0x200
[  363.157919][ T9342]  ? gfs2_consist_inode_i+0xf5/0x110
[  363.163357][ T9342]  gfs2_inode_refresh+0xc50/0x1160
[  363.168535][ T9342]  ? gfs2_inode_metasync+0xf0/0xf0
[  363.173686][ T9342]  ? gfs2_glock_nq+0xd4f/0x1420
[  363.178666][ T9342]  gfs2_instantiate+0x162/0x220
[  363.183548][ T9342]  gfs2_glock_wait+0x1d4/0x2a0
[  363.188347][ T9342]  do_sync+0x4c6/0xe50
[  363.192435][ T9342]  ? gfs2_quota_sync+0x411/0x5a0
[  363.197393][ T9342]  ? bh_get+0x760/0x760
[  363.201593][ T9342]  ? __lock_acquire+0x7d40/0x7d40
[  363.206727][ T9342]  ? do_raw_spin_lock+0x11f/0x2c0
[  363.211860][ T9342]  ? gfs2_quota_sync+0x411/0x5a0
[  363.216812][ T9342]  ? do_raw_spin_unlock+0x121/0x230
[  363.222037][ T9342]  gfs2_quota_sync+0x411/0x5a0
[  363.226837][ T9342]  gfs2_sync_fs+0x4c/0xb0
[  363.231282][ T9342]  sync_filesystem+0xea/0x220
[  363.235980][ T9342]  generic_shutdown_super+0x6f/0x2b0
[  363.241312][ T9342]  kill_block_super+0x44/0x90
[  363.246006][ T9342]  deactivate_locked_super+0x97/0x100
[  363.251396][ T9342]  cleanup_mnt+0x43b/0x4d0
[  363.255861][ T9342]  task_work_run+0x1d4/0x260
[  363.260481][ T9342]  ? task_work_cancel+0x220/0x220
[  363.265631][ T9342]  ? exit_to_user_mode_loop+0x3b/0x110
[  363.271137][ T9342]  exit_to_user_mode_loop+0xe6/0x110
[  363.276450][ T9342]  exit_to_user_mode_prepare+0xee/0x180
[  363.282031][ T9342]  syscall_exit_to_user_mode+0x1a/0x50
[  363.287506][ T9342]  do_syscall_64+0x61/0xa0
[  363.291948][ T9342]  ? clear_bhb_loop+0x40/0x90
[  363.296716][ T9342]  ? clear_bhb_loop+0x40/0x90
[  363.301425][ T9342]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  363.307348][ T9342] RIP: 0033:0x7f46f419da57
[  363.311836][ T9342] Code: a2 c7 05 9c fc 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  363.331549][ T9342] RSP: 002b:00007fff8c7aed08 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  363.340072][ T9342] RAX: 0000000000000000 RBX: 00007f46f4232048 RCX: 00007f46f419da57
[  363.348073][ T9342] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff8c7aedc0
[  363.356058][ T9342] RBP: 00007fff8c7aedc0 R08: 00007fff8c7afdc0 R09: 00000000ffffffff
[  363.364235][ T9342] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff8c7afe50
[  363.372237][ T9342] R13: 00007f46f4232048 R14: 000000000005890b R15: 00007fff8c7afe90
[  363.380765][ T9342]  </TASK>
[  363.404243][T11501] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  363.476266][T11501] EXT4-fs error (device loop4): ext4_orphan_get:1404: inode #15: comm syz.4.1957: iget: bad i_size value: 38620345925642
[  363.512241][T11501] EXT4-fs error (device loop4): ext4_orphan_get:1409: comm syz.4.1957: couldn't read orphan inode 15 (err -117)
[  363.535061][   T28] audit: type=1800 audit(1776949382.070:93): pid=11499 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1956" name="file1" dev="loop1" ino=20 res=0 errno=0
[  363.629537][T11501] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  363.848830][T11497] loop3: detected capacity change from 0 to 32768
[  363.855525][ T8098] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  364.020624][T11497] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  364.180123][T11505] loop1: detected capacity change from 0 to 4096
[  364.208332][T11505] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512).
[  364.235634][T11514] loop5: detected capacity change from 0 to 4096
[  364.252648][T11514] EXT4-fs: Ignoring removed nomblk_io_submit option
[  364.279194][T11497] XFS (loop3): Ending clean mount
[  364.300361][T11497] XFS (loop3): Quotacheck needed: Please wait.
[  364.315854][T11514] EXT4-fs (loop5): stripe (97) is not aligned with cluster size (16), stripe is disabled
[  364.354902][T11514] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  364.521102][T11497] XFS (loop3): Quotacheck: Done.
[  364.727289][ T9342] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  364.929680][T11527] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1964'.
[  364.952789][ T5776] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  364.985289][T11525] loop1: detected capacity change from 0 to 8192
[  365.068437][T11529] veth0_to_team: entered promiscuous mode
[  365.072350][T11525] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  365.106693][T11529] gretap0: entered promiscuous mode
[  365.128501][T11525] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal
[  365.147116][T11525] REISERFS (device loop1): using ordered data mode
[  365.157136][T11525] reiserfs: using flush barriers
[  365.167441][T11525] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  365.241458][T11525] REISERFS (device loop1): checking transaction log (loop1)
[  365.276426][T11525] REISERFS (device loop1): Using r5 hash to sort names
[  365.338161][T11525] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  365.481346][   T28] audit: type=1800 audit(1776949384.010:94): pid=11525 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1961" name="file1" dev="loop1" ino=2 res=0 errno=0
[  365.926159][T11542] netlink: 'syz.3.1970': attribute type 29 has an invalid length.
[  365.959818][T11542] netlink: 'syz.3.1970': attribute type 29 has an invalid length.
[  365.981976][T11544] netlink: 'syz.3.1970': attribute type 29 has an invalid length.
[  366.011086][ T5901] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  366.027616][T11542] netlink: 'syz.3.1970': attribute type 29 has an invalid length.
[  366.220931][ T5901] usb 6-1: Using ep0 maxpacket: 32
[  366.229207][ T5901] usb 6-1: config 0 has no interfaces?
[  366.244649][ T5901] usb 6-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73
[  366.262947][ T5901] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  366.276054][T11548] loop4: detected capacity change from 0 to 64
[  366.282472][ T5901] usb 6-1: Product: syz
[  366.286730][ T5901] usb 6-1: Manufacturer: syz
[  366.308279][ T5901] usb 6-1: SerialNumber: syz
[  366.327409][ T5901] usb 6-1: config 0 descriptor??
[  366.613464][ T5830] usb 6-1: USB disconnect, device number 5
[  366.755640][T11555] loop3: detected capacity change from 0 to 4096
[  366.907738][T11560] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  368.101199][T11581] loop3: detected capacity change from 0 to 512
[  368.172430][T11581] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  368.177014][T11570] loop4: detected capacity change from 0 to 40427
[  368.211223][T11570] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  368.219049][T11570] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  368.229853][T11581] ext4 filesystem being mounted at /527/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  368.230225][T11570] F2FS-fs (loop4): invalid crc value
[  368.401658][T11570] F2FS-fs (loop4): Found nat_bits in checkpoint
[  368.439156][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  368.564835][T11570] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  368.588325][T11570] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  368.712834][    T8] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  368.732329][    T9] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  368.871614][T11600] loop3: detected capacity change from 0 to 24
[  368.902195][    T8] usb 2-1: Using ep0 maxpacket: 32
[  368.914875][    T8] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  368.930668][    T9] usb 6-1: Using ep0 maxpacket: 8
[  368.943655][    T9] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  368.956567][    T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  368.965848][    T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  368.978113][    T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  368.999616][    T8] usb 2-1: config 0 descriptor??
[  369.019460][    T9] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  369.048858][    T9] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  369.061364][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  369.235843][    T8] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  369.282545][    T8] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  369.325585][    T8] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  369.344487][    T9] usb 6-1: GET_CAPABILITIES returned 0
[  369.350152][    T9] usbtmc 6-1:16.0: can't read capabilities
[  369.361776][    T8] usb 2-1: media controller created
[  369.402311][    T8] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  369.446654][    T8] az6027: usb out operation failed. (-71)
[  369.456774][    T8] az6027: usb out operation failed. (-71)
[  369.463696][    T8] stb0899_attach: Driver disabled by Kconfig
[  369.470326][    T8] az6027: no front-end attached
[  369.470326][    T8] 
[  369.511353][    T8] az6027: usb out operation failed. (-71)
[  369.518034][    T8] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  369.546776][    T8] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input29
[  369.579742][    T8] dvb-usb: schedule remote query interval to 400 msecs.
[  369.595196][T11610] loop4: detected capacity change from 0 to 512
[  369.597100][ T5812] usb 6-1: USB disconnect, device number 6
[  369.613960][    T8] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  369.664676][T11610] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  369.701231][    T8] usb 2-1: USB disconnect, device number 23
[  369.832824][    T8] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  369.992341][ T8098] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  370.373912][T11624] loop4: detected capacity change from 0 to 2048
[  370.469123][T11624] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  370.486275][T11630] loop5: detected capacity change from 0 to 16
[  370.494409][T11630] MTD: Attempt to mount non-MTD device "/dev/loop5"
[  370.548481][ T6494] udevd[6494]: incorrect cramfs checksum on /dev/loop5
[  370.624579][ T6494] udevd[6494]: incorrect cramfs checksum on /dev/loop5
[  370.922984][T11640] program syz.1.2008 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  371.001946][T11644] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2010'.
[  371.384459][T11655] loop5: detected capacity change from 0 to 64
[  371.453364][T11655] syz.5.2014: attempt to access beyond end of device
[  371.453364][T11655] loop5: rw=0, sector=1024, nr_sectors = 2 limit=64
[  371.488139][T11655] Buffer I/O error on dev loop5, logical block 512, async page read
[  371.499813][T11655] syz.5.2014: attempt to access beyond end of device
[  371.499813][T11655] loop5: rw=0, sector=113152, nr_sectors = 2 limit=64
[  371.538852][T11655] Buffer I/O error on dev loop5, logical block 56576, async page read
[  371.763604][ T9342] syz-executor: attempt to access beyond end of device
[  371.763604][ T9342] loop5: rw=0, sector=1024, nr_sectors = 2 limit=64
[  371.821145][ T9342] Buffer I/O error on dev loop5, logical block 512, async page read
[  371.851855][ T9342] syz-executor: attempt to access beyond end of device
[  371.851855][ T9342] loop5: rw=0, sector=113152, nr_sectors = 2 limit=64
[  371.891351][ T9342] Buffer I/O error on dev loop5, logical block 56576, async page read
[  371.921219][ T9342] Bad inode number on dev loop5: 2 is out of range
[  371.929444][ T9342] Bad inode number on dev loop5: 2 is out of range
[  372.133350][T11665] loop4: detected capacity change from 0 to 4096
[  372.156727][T11665] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512).
[  372.247721][ T4279] Bluetooth: hci4: Frame reassembly failed (-84)
[  372.282760][T11667] Bluetooth: hci4: Frame reassembly failed (-84)
[  372.450555][T11661] loop3: detected capacity change from 0 to 32768
[  372.469709][T11661] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.2016 (11661)
[  372.521012][T11661] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  372.579154][T11661] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  372.611433][T11661] BTRFS info (device loop3): force clearing of disk cache
[  372.634592][T11661] BTRFS info (device loop3): metadata ratio 0
[  372.664613][T11661] BTRFS info (device loop3): enabling ssd optimizations
[  372.680888][T11661] BTRFS info (device loop3): using spread ssd allocation scheme
[  372.693578][T11661] BTRFS info (device loop3): using free space tree
[  372.706266][ T3538] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  372.876761][T11661] BTRFS info (device loop3): auto enabling async discard
[  372.926713][T11661] BTRFS info (device loop3): rebuilding free space tree
[  373.006426][ T3538] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  373.156752][ T3538] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  373.324074][ T3538] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  373.816610][T11696] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  373.881860][ T5776] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  373.981296][ T3538] tipc: Disabling bearer <udp:syz2>
[  374.023086][ T3538] tipc: Left network mode
[  374.252647][ T5773] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  374.266760][ T5773] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  374.282348][ T5773] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  374.292696][ T5773] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  374.302570][ T5773] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  374.310566][ T5773] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  374.319908][ T5773] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  374.465276][T11708] loop4: detected capacity change from 0 to 256
[  374.507348][T11708] FAT-fs (loop4): Directory bread(block 64) failed
[  374.571140][T11708] FAT-fs (loop4): Directory bread(block 65) failed
[  374.577837][T11708] FAT-fs (loop4): Directory bread(block 66) failed
[  374.630974][T11708] FAT-fs (loop4): Directory bread(block 67) failed
[  374.672497][T11708] FAT-fs (loop4): Directory bread(block 68) failed
[  374.679109][T11708] FAT-fs (loop4): Directory bread(block 69) failed
[  374.730986][T11708] FAT-fs (loop4): Directory bread(block 70) failed
[  374.738449][T11708] FAT-fs (loop4): Directory bread(block 71) failed
[  374.772042][T11708] FAT-fs (loop4): Directory bread(block 72) failed
[  374.821363][T11708] FAT-fs (loop4): Directory bread(block 73) failed
[  374.823923][T11702] netdevsim0 speed is unknown, defaulting to 1000
[  375.306017][T11708] syz.4.2029: attempt to access beyond end of device
[  375.306017][T11708] loop4: rw=1, sector=1224, nr_sectors = 64 limit=256
[  375.329246][T11727] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2033'.
[  375.350421][T11708] syz.4.2029: attempt to access beyond end of device
[  375.350421][T11708] loop4: rw=1, sector=1320, nr_sectors = 36 limit=256
[  375.997930][ T3538] gretap0 (unregistering): left promiscuous mode
[  376.246720][T11751] loop4: detected capacity change from 0 to 128
[  376.306963][T11752] ax25_connect(): syz.3.2043 uses autobind, please contact jreuter@yaina.de
[  376.411129][ T5773] Bluetooth: hci2: command tx timeout
[  376.431799][T11751] syz.4.2042: attempt to access beyond end of device
[  376.431799][T11751] loop4: rw=2049, sector=138, nr_sectors = 2 limit=128
[  376.765146][T11765] A link change request failed with some changes committed already. Interface nicvf0 may have been left with an inconsistent configuration, please check.
[  377.088153][T11702] chnl_net:caif_netlink_parms(): no params data found
[  377.396008][T11784] loop1: detected capacity change from 0 to 256
[  377.457854][T11784] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  377.488988][T11784] exFAT-fs (loop1): Medium has reported failures. Some data may be lost.
[  377.519543][T11784] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  377.589125][T11784] exFAT-fs (loop1): error, found bogus dentry(18) beyond unused empty group(0) (start_clu : 5, cur_clu : 5)
[  377.611179][T11784] exFAT-fs (loop1): Filesystem has been set read-only
[  377.744739][ T3538] veth0_to_team: left promiscuous mode
[  377.792596][ T3538] hsr_slave_0: left promiscuous mode
[  377.874825][ T3538] hsr_slave_1: left promiscuous mode
[  377.923883][ T3538] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  377.934997][ T3538] batman_adv: batadv0: Removing interface: batadv_slave_0
[  377.999281][ T3538] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  378.027350][ T3538] batman_adv: batadv0: Removing interface: batadv_slave_1
[  378.076245][ T3538] bridge_slave_1: left allmulticast mode
[  378.093369][ T3538] bridge_slave_1: left promiscuous mode
[  378.099185][ T3538] bridge0: port 2(bridge_slave_1) entered disabled state
[  378.118287][ T3538] bridge_slave_0: left allmulticast mode
[  378.148909][ T3538] bridge_slave_0: left promiscuous mode
[  378.169360][ T3538] bridge0: port 1(bridge_slave_0) entered disabled state
[  378.267986][ T3538] veth1_macvtap: left promiscuous mode
[  378.274198][ T3538] veth0_macvtap: left promiscuous mode
[  378.291698][ T3538] veth1_vlan: left promiscuous mode
[  378.297203][ T3538] veth0_vlan: left promiscuous mode
[  378.421274][ T5812] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  378.491605][ T5773] Bluetooth: hci2: command tx timeout
[  378.631427][ T5812] usb 5-1: Using ep0 maxpacket: 16
[  378.653198][ T5812] usb 5-1: config 0 interface 0 altsetting 10 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  378.684134][ T5812] usb 5-1: config 0 interface 0 altsetting 10 has 1 endpoint descriptor, different from the interface descriptor's value: 12
[  378.712960][ T5812] usb 5-1: config 0 interface 0 has no altsetting 0
[  378.719651][ T5812] usb 5-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00
[  378.730008][ T5812] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  378.782120][ T5812] usb 5-1: config 0 descriptor??
[  378.987316][ T1290] ieee802154 phy0 wpan0: encryption failed: -22
[  379.219426][ T5812] elo 0003:04E7:0030.0013: unknown main item tag 0x0
[  379.234323][ T5812] elo 0003:04E7:0030.0013: unknown main item tag 0x0
[  379.242476][ T5812] elo 0003:04E7:0030.0013: unknown main item tag 0x0
[  379.249504][ T5812] elo 0003:04E7:0030.0013: unknown main item tag 0x0
[  379.261475][ T5812] elo 0003:04E7:0030.0013: unknown main item tag 0x0
[  379.286593][ T5812] elo 0003:04E7:0030.0013: unknown main item tag 0x0
[  379.293882][ T5812] elo 0003:04E7:0030.0013: unknown main item tag 0x0
[  379.301802][ T5812] elo 0003:04E7:0030.0013: unknown main item tag 0x0
[  379.308783][ T5812] elo 0003:04E7:0030.0013: unknown main item tag 0x7
[  379.323677][ T5812] elo 0003:04E7:0030.0013: unknown main item tag 0x0
[  379.330461][ T5812] elo 0003:04E7:0030.0013: unknown main item tag 0x0
[  379.337800][ T5812] elo 0003:04E7:0030.0013: unknown main item tag 0x0
[  379.346377][ T5812] elo 0003:04E7:0030.0013: unknown main item tag 0x0
[  379.353776][ T5812] elo 0003:04E7:0030.0013: unknown main item tag 0x0
[  379.367238][ T5812] elo 0003:04E7:0030.0013: unknown main item tag 0x0
[  379.375840][ T5812] elo 0003:04E7:0030.0013: unexpected long global item
[  379.391429][ T5812] elo 0003:04E7:0030.0013: parse failed
[  379.397139][ T5812] elo: probe of 0003:04E7:0030.0013 failed with error -22
[  379.464222][ T5812] usb 5-1: USB disconnect, device number 18
[  379.695995][ T3538] team0 (unregistering): Port device team_slave_1 removed
[  379.768931][ T3538] team0 (unregistering): Port device team_slave_0 removed
[  379.830166][ T3538] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  379.912839][ T3538] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  380.571473][ T5773] Bluetooth: hci2: command tx timeout
[  380.727697][ T3538] bond0 (unregistering): Released all slaves
[  380.901072][T11811] netlink: 284 bytes leftover after parsing attributes in process `syz.3.2063'.
[  380.920869][T11821] netlink: 27 bytes leftover after parsing attributes in process `syz.4.2068'.
[  381.105214][T11829] loop1: detected capacity change from 0 to 512
[  381.114816][T11702] bridge0: port 1(bridge_slave_0) entered blocking state
[  381.160933][T11702] bridge0: port 1(bridge_slave_0) entered disabled state
[  381.170350][T11702] bridge_slave_0: entered allmulticast mode
[  381.200097][T11702] bridge_slave_0: entered promiscuous mode
[  381.222584][T11702] bridge0: port 2(bridge_slave_1) entered blocking state
[  381.229817][T11702] bridge0: port 2(bridge_slave_1) entered disabled state
[  381.271041][T11702] bridge_slave_1: entered allmulticast mode
[  381.278729][T11702] bridge_slave_1: entered promiscuous mode
[  381.501517][T11702] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  381.559256][T11702] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  381.670979][   T23] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  381.713327][T11702] team0: Port device team_slave_0 added
[  381.766041][T11702] team0: Port device team_slave_1 added
[  381.846692][T11843] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2076'.
[  381.881907][   T23] usb 4-1: Using ep0 maxpacket: 8
[  381.919042][   T23] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  381.936655][T11702] batman_adv: batadv0: Adding interface: batadv_slave_0
[  381.944253][   T23] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  381.970891][   T23] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  381.985310][T11702] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  382.031757][   T23] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  382.047527][   T23] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  382.062282][T11702] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  382.074920][   T23] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  382.087442][T11702] batman_adv: batadv0: Adding interface: batadv_slave_1
[  382.095580][T11848] loop1: detected capacity change from 0 to 512
[  382.102388][   T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  382.126394][T11848] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  382.138408][T11702] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  382.226893][T11848] EXT4-fs (loop1): 1 truncate cleaned up
[  382.235377][T11848] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  382.272198][T11702] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  382.406588][   T23] usb 4-1: GET_CAPABILITIES returned 0
[  382.419202][   T23] usbtmc 4-1:16.0: can't read capabilities
[  382.500438][T11702] hsr_slave_0: entered promiscuous mode
[  382.539650][T11702] hsr_slave_1: entered promiscuous mode
[  382.543209][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  382.556536][T11702] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  382.565081][T11702] Cannot create hsr debugfs directory
[  382.661264][ T5773] Bluetooth: hci2: command tx timeout
[  382.693719][   T23] usb 4-1: USB disconnect, device number 24
[  382.962926][T11868] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2081'.
[  382.997279][T11868] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2081'.
[  383.041916][T11868] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2081'.
[  383.073191][T11868] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2081'.
[  383.259082][T11870] IPv6: Can't replace route, no match found
[  383.311089][T11870] IPv6: Can't replace route, no match found
[  383.357478][T11702] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  383.467583][T11702] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  383.491679][T11702] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  383.521536][T11874] netlink: 204 bytes leftover after parsing attributes in process `syz.3.2083'.
[  383.545096][T11702] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  383.887931][T11702] 8021q: adding VLAN 0 to HW filter on device bond0
[  383.954508][T11702] 8021q: adding VLAN 0 to HW filter on device team0
[  383.970996][   T27] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  383.987257][ T4279] bridge0: port 1(bridge_slave_0) entered blocking state
[  383.994530][ T4279] bridge0: port 1(bridge_slave_0) entered forwarding state
[  384.054940][ T3538] bridge0: port 2(bridge_slave_1) entered blocking state
[  384.062289][ T3538] bridge0: port 2(bridge_slave_1) entered forwarding state
[  384.172617][T11702] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  384.181783][   T27] usb 5-1: Using ep0 maxpacket: 16
[  384.183816][T11702] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  384.212641][   T27] usb 5-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4
[  384.278312][   T27] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  384.321898][   T27] usb 5-1: Product: syz
[  384.326233][   T27] usb 5-1: Manufacturer: syz
[  384.359425][   T27] usb 5-1: SerialNumber: syz
[  384.372619][   T27] usb 5-1: config 0 descriptor??
[  384.399804][   T27] gspca_main: spca508-2.14.0 probing 041e:4018
[  384.605606][   T27] gspca_spca508: reg_read err -32
[  384.613132][   T27] gspca_spca508: reg_read err -32
[  384.642667][T11702] 8021q: adding VLAN 0 to HW filter on device batadv0
[  384.830982][   T27] gspca_spca508: reg_read err -71
[  384.851936][   T27] gspca_spca508: reg_read err -71
[  384.871432][   T27] gspca_spca508: reg write: error -71
[  384.877833][   T27] spca508: probe of 5-1:0.0 failed with error -71
[  384.887463][T11907] loop3: detected capacity change from 0 to 4096
[  384.913122][   T27] usb 5-1: USB disconnect, device number 19
[  384.943571][T11907] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512).
[  385.170867][ T5901] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  385.405374][ T5901] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  385.420867][ T5901] usb 2-1: config 0 has no interface number 0
[  385.444267][ T5901] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  385.479006][ T5901] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  385.507621][T11922] loop3: detected capacity change from 0 to 128
[  385.517170][ T5901] usb 2-1: Product: syz
[  385.522362][ T5901] usb 2-1: Manufacturer: syz
[  385.538675][T11922] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  385.551680][ T5901] usb 2-1: SerialNumber: syz
[  385.576468][ T5901] usb 2-1: config 0 descriptor??
[  385.608210][T11702] veth0_vlan: entered promiscuous mode
[  385.623691][T11922] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  385.655703][T11702] veth1_vlan: entered promiscuous mode
[  385.747697][T11702] veth0_macvtap: entered promiscuous mode
[  385.789588][T11702] veth1_macvtap: entered promiscuous mode
[  385.813456][ T5901] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[  385.823679][   T34] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  385.846411][ T5901] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  385.877614][T11702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  385.901080][ T5901] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[  385.916723][T11702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  385.926988][ T5901] usb 2-1: media controller created
[  385.951244][T11702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  385.987985][ T5901] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  386.009677][T11702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  386.032103][T11702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  386.055897][T11931] loop3: detected capacity change from 0 to 1024
[  386.073900][T11702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  386.106690][T11702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  386.108777][T11931] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  386.133827][T11702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  386.191104][T11931] ext4 filesystem being mounted at /558/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  386.197998][T11702] batman_adv: batadv0: Interface activated: batadv_slave_0
[  386.202619][ T5773] Bluetooth: hci0: command 0x0406 tx timeout
[  386.223625][T11702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  386.234452][T11702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  386.245417][T11702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  386.257555][T11702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  386.261078][T11934] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set
[  386.272867][T11702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  386.294168][T11702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  386.304482][T11702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  386.321923][T11702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  386.342709][T11702] batman_adv: batadv0: Interface activated: batadv_slave_1
[  386.357162][T11931] EXT4-fs error (device loop3): ext4_map_blocks:720: inode #15: block 3: comm syz.3.2094: lblock 3 mapped to illegal pblock 3 (length 3)
[  386.434048][T11702] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  386.446679][T11931] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  386.459173][T11702] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  386.459388][T11702] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  386.479901][T11702] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  386.525392][T11931] EXT4-fs (loop3): This should not happen!! Data will be lost
[  386.525392][T11931] 
[  386.571021][T11936] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #15: block 3: comm syz.3.2094: lblock 3 mapped to illegal pblock 3 (length 1)
[  386.668141][   T28] audit: type=1800 audit(1776949405.200:95): pid=11936 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2094" name="file1" dev="loop3" ino=15 res=0 errno=0
[  386.731543][   T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  386.739640][   T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  386.812752][   T49] EXT4-fs error (device loop3): ext4_map_blocks:720: inode #15: block 8: comm kworker/u4:3: lblock 8 mapped to illegal pblock 8 (length 8)
[  386.854876][   T49] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  386.868057][   T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  386.898208][   T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  386.905675][   T49] EXT4-fs (loop3): This should not happen!! Data will be lost
[  386.905675][   T49] 
[  386.966414][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  387.056109][T11924] loop4: detected capacity change from 0 to 40427
[  387.131705][T11924] F2FS-fs (loop4): Small segment_count (9 < 1 * 24)
[  387.138402][T11924] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  387.167215][ T5901] i2c i2c-1: ec100: i2c rd failed=-71 reg=33
[  387.179132][T11924] F2FS-fs (loop4): Found nat_bits in checkpoint
[  387.314131][T11947] loop3: detected capacity change from 0 to 512
[  387.378296][ T5901] usb 2-1: USB disconnect, device number 24
[  387.378860][T11924] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  387.420976][T11924] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  387.450119][T11947] EXT4-fs error (device loop3): ext4_orphan_get:1404: inode #15: comm syz.3.2095: inode has both inline data and extents flags
[  387.563852][T11947] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.2095: couldn't read orphan inode 15 (err -117)
[  387.621352][T11947] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  387.792579][ T8098] syz-executor: attempt to access beyond end of device
[  387.792579][ T8098] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  387.839294][ T8098] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  387.849687][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  388.337060][T11969] sp0: Synchronizing with TNC
[  390.728601][T12025] loop3: detected capacity change from 0 to 4096
[  390.756992][T12025] EXT4-fs: inline encryption not supported
[  390.772638][    T9] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  390.801464][T12025] EXT4-fs (loop3): Test dummy encryption mode enabled
[  390.817750][T12025] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[  390.826930][T12025] System zones: 0-5
[  390.846499][T12025] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  390.981003][    T9] usb 2-1: Using ep0 maxpacket: 8
[  390.993551][    T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  391.022290][    T9] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  391.034703][    T9] usb 2-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b
[  391.044653][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  391.053817][    T9] usb 2-1: Product: syz
[  391.058109][    T9] usb 2-1: Manufacturer: syz
[  391.064763][    T9] usb 2-1: SerialNumber: syz
[  391.108912][    T9] usb 2-1: config 0 descriptor??
[  391.119581][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  391.432820][ T5830] usb 2-1: USB disconnect, device number 25
[  392.083235][T12040] loop3: detected capacity change from 0 to 32768
[  392.140934][T12040] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop3 scanned by syz.3.2121 (12040)
[  392.199209][T12040] BTRFS info (device loop3): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885
[  392.231611][T12040] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  392.244016][T12040] BTRFS info (device loop3): setting nodatacow, compression disabled
[  392.268125][T12040] BTRFS info (device loop3): turning on flush-on-commit
[  392.276921][T12040] BTRFS info (device loop3): using free space tree
[  392.390275][T12040] BTRFS info (device loop3): enabling ssd optimizations
[  392.431816][T12040] BTRFS info (device loop3): auto enabling async discard
[  392.550917][ T5901] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  392.829530][ T5901] usb 2-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65
[  392.851364][ T5901] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  392.859962][ T5901] usb 2-1: Product: syz
[  392.876443][ T5901] usb 2-1: Manufacturer: syz
[  392.878768][ T5776] BTRFS info (device loop3): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885
[  392.890986][ T5901] usb 2-1: SerialNumber: syz
[  392.892530][    T8] usb 5-1: new full-speed USB device number 20 using dummy_hcd
[  392.916216][ T5901] usb 2-1: config 0 descriptor??
[  393.120486][    T8] usb 5-1: unable to get BOS descriptor or descriptor too short
[  393.145980][    T8] usb 5-1: not running at top speed; connect to a high speed hub
[  393.169266][    T8] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4
[  393.216416][    T8] usb 5-1: New USB device found, idVendor=2b73, idProduct=0023, bcdDevice= 0.40
[  393.220991][ T5901] usb 2-1: ignoring: probably an ADSL modem
[  393.250979][    T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  393.311233][    T8] usb 5-1: Product: syz
[  393.325829][    T8] usb 5-1: Manufacturer: syz
[  393.330522][    T8] usb 5-1: SerialNumber: syz
[  393.422540][ T5772] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 10 /dev/loop3 scanned by udevd (5772)
[  393.477325][T12100] loop6: detected capacity change from 0 to 512
[  393.597657][T12100] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002]
[  393.623524][ T5901] cxacru 2-1:0.0: usbatm_usb_probe: bind failed: -19!
[  393.636368][    T8] usb 5-1: 2:1: invalid format type 0x1002 is detected, processed as PCM
[  393.675157][T12100] System zones: 0-2, 18-18, 34-35
[  393.716752][T12100] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  393.751288][    T8] usb 5-1: USB disconnect, device number 20
[  393.830920][T12100] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  393.955951][ T5831] usb 2-1: USB disconnect, device number 26
[  394.123136][T11702] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  394.681927][T12125] loop1: detected capacity change from 0 to 1024
[  394.732756][T12125] EXT4-fs (loop1): bad geometry: bigalloc file system with non-zero first_data_block
[  394.732756][T12125] 
[  394.980017][T12129] netlink: 228 bytes leftover after parsing attributes in process `syz.3.2142'.
[  395.101832][T12134] loop1: detected capacity change from 0 to 2048
[  395.148449][T12136] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2145'.
[  395.163242][T12134]  loop1: p3 < > p4 < >
[  395.167480][T12134] loop1: partition table partially beyond EOD, truncated
[  395.180153][T12134] loop1: p3 start 4284289 is beyond EOD, truncated
[  395.664424][T12132] loop4: detected capacity change from 0 to 32768
[  395.711308][T12132] (syz.4.2143,12132,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  395.760541][T12132] (syz.4.2143,12132,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  395.822231][T12132] JBD2: Ignoring recovery information on journal
[  395.957962][T12132] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  396.043801][ T1145] Bluetooth: hci4: Frame reassembly failed (-84)
[  396.297473][ T8098] ocfs2: Unmounting device (7,4) on (node local)
[  396.424059][T12159] loop3: detected capacity change from 0 to 128
[  396.437709][T12159] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  396.460469][T12159] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  396.650718][T12163] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only
[  396.661646][T12163] overlayfs: fs on './cgroup' does not support file handles, falling back to index=off,nfs_export=off.
[  396.674101][T12163] overlayfs: failed to set uuid (348/file0, err=-13); falling back to uuid=null.
[  396.759234][T12166] loop4: detected capacity change from 0 to 128
[  397.814614][T12195] loop6: detected capacity change from 0 to 128
[  397.837540][T12195] EXT4-fs (loop6): Test dummy encryption mode enabled
[  397.860469][T12195] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  397.883796][T12195] ext4 filesystem being mounted at /13/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  397.980881][ T5901] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  398.024993][T11702] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  398.091102][ T5780] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  398.091639][ T5773] Bluetooth: hci4: command 0x1003 tx timeout
[  398.197289][ T5901] usb 4-1: Using ep0 maxpacket: 16
[  398.213296][ T5901] usb 4-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0
[  398.233829][ T5901] usb 4-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0
[  398.289790][ T5901] usb 4-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  398.342337][ T5901] usb 4-1: config 1 interface 0 has no altsetting 0
[  398.353305][ T5901] usb 4-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40
[  398.373529][ T5901] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  398.385813][ T5901] usb 4-1: Product: syz
[  398.393278][ T5901] usb 4-1: Manufacturer: syz
[  398.408249][ T5901] usb 4-1: SerialNumber: syz
[  398.610964][T12213] program syz.4.2176 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  398.665480][ T5901] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 25 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8
[  398.960236][   T23] usb 4-1: USB disconnect, device number 25
[  398.970651][   T23] usblp0: removed
[  399.109992][T12233] loop1: detected capacity change from 0 to 8
[  399.848922][T12249] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2187'.
[  400.776065][T12266] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2195'.
[  401.036039][T12274] comedi: valid board names for 8255 driver are:
[  401.068731][T12274]  8255
[  401.071714][T12274] comedi: valid board names for vmk80xx driver are:
[  401.089202][T12274]  vmk80xx
[  401.092436][T12274] comedi: valid board names for usbduxsigma driver are:
[  401.109085][T12274]  usbduxsigma
[  401.118966][T12274] comedi: valid board names for usbduxfast driver are:
[  401.134375][T12274]  usbduxfast
[  401.142488][T12274] comedi: valid board names for usbdux driver are:
[  401.180996][T12274]  usbdux
[  401.184048][T12274] comedi: valid board names for ni6501 driver are:
[  401.211882][T12274]  ni6501
[  401.221643][T12274] comedi: valid board names for dt9812 driver are:
[  401.248892][T12274]  dt9812
[  401.261609][T12274] comedi: valid board names for ni_labpc_cs driver are:
[  401.301037][T12274]  ni_labpc_cs
[  401.304704][T12274] comedi: valid board names for ni_daq_700 driver are:
[  401.332656][T12274]  ni_daq_700
[  401.336033][T12274] comedi: valid board names for labpc_pci driver are:
[  401.383781][T12274]  labpc_pci
[  401.387078][T12274] comedi: valid board names for adl_pci9118 driver are:
[  401.422530][T12274]  pci9118dg
[  401.425913][T12274]  pci9118hg
[  401.443769][T12274]  pci9118hr
[  401.447062][T12274] comedi: valid board names for 8255_pci driver are:
[  401.468817][T12274]  8255_pci
[  401.476522][T12274] comedi: valid board names for s526 driver are:
[  401.509803][T12274]  s526
[  401.527417][T12274] comedi: valid board names for multiq3 driver are:
[  401.571911][T12274]  multiq3
[  401.575029][T12274] comedi: valid board names for pcmuio driver are:
[  401.601195][T12274]  pcmuio48
[  401.604494][T12274]  pcmuio96
[  401.607645][T12274] comedi: valid board names for pcmmio driver are:
[  401.630853][T12274]  pcmmio
[  401.633882][T12274] comedi: valid board names for pcmda12 driver are:
[  401.650880][T12274]  pcmda12
[  401.654062][T12274] comedi: valid board names for pcmad driver are:
[  401.660520][T12274]  pcmad12
[  401.680867][T12274]  pcmad16
[  401.684056][T12274] comedi: valid board names for ni_labpc driver are:
[  401.700798][T12274]  lab-pc-1200
[  401.711245][T12274]  lab-pc-1200ai
[  401.720794][T12274]  lab-pc+
[  401.723874][T12274] comedi: valid board names for atmio16 driver are:
[  401.740841][T12274]  atmio16
[  401.752261][T12274]  atmio16d
[  401.756618][T12274] comedi: valid board names for ni_at_ao driver are:
[  401.798001][T12274]  at-ao-6
[  401.801601][T12274]  at-ao-10
[  401.804760][T12274] comedi: valid board names for ni_at_a2150 driver are:
[  401.820797][T12274]  ni_at_a2150
[  401.831317][T12274] comedi: valid board names for adq12b driver are:
[  401.851645][T12274]  adq12b
[  401.854652][T12274] comedi: valid board names for mpc624 driver are:
[  401.913929][T12274]  mpc624
[  401.916961][T12274] comedi: valid board names for c6xdigio driver are:
[  401.944467][T12274]  c6xdigio
[  401.947668][T12274] comedi: valid board names for aio_iiro_16 driver are:
[  401.980922][T12274]  aio_iiro_16
[  401.987376][T12274] comedi: valid board names for aio_aio12_8 driver are:
[  402.015059][T12274]  aio_aio12_8
[  402.018516][T12274]  aio_ai12_8
[  402.040792][T12274]  aio_ao12_4
[  402.051094][T12274] comedi: valid board names for fl512 driver are:
[  402.057574][T12274]  fl512
[  402.060552][T12274] comedi: valid board names for dmm32at driver are:
[  402.100799][T12274]  dmm32at
[  402.103901][T12274] comedi: valid board names for dt282x driver are:
[  402.110525][T12274]  dt2821
[  402.140795][T12274]  dt2821-f
[  402.144071][T12274]  dt2821-g
[  402.147214][T12274]  dt2823
[  402.150185][T12274]  dt2824-pgh
[  402.170780][T12274]  dt2824-pgl
[  402.174136][T12274]  dt2825
[  402.177096][T12274]  dt2827
[  402.180297][T12274]  dt2828
[  402.210930][T12274]  dt2829
[  402.213956][T12274]  dt21-ez
[  402.217016][T12274]  dt23-ez
[  402.220086][T12274]  dt24-ez
[  402.251027][T12274]  dt24-ez-pgl
[  402.254488][T12274] comedi: valid board names for dt2817 driver are:
[  402.280778][T12274]  dt2817
[  402.283800][T12274] comedi: valid board names for dt2815 driver are:
[  402.290344][T12274]  dt2815
[  402.320797][T12274] comedi: valid board names for dt2814 driver are:
[  402.327427][T12274]  dt2814
[  402.330410][T12274] comedi: valid board names for dt2811 driver are:
[  402.360826][T12274]  dt2811-pgh
[  402.361611][T12288] loop6: detected capacity change from 0 to 32768
[  402.364182][T12274]  dt2811-pgl
[  402.386024][T12288] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop6 scanned by syz.6.2205 (12288)
[  402.405336][T12274] comedi: valid board names for dt2801 driver are:
[  402.432277][T12274]  dt2801
[  402.435303][T12274] comedi: valid board names for das6402 driver are:
[  402.444596][T12288] BTRFS info (device loop6): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  402.455716][T12274]  das6402-12
[  402.463830][T12288] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm
[  402.469510][T12286] loop4: detected capacity change from 0 to 32768
[  402.476354][T12288] BTRFS info (device loop6): enabling disk space caching
[  402.479939][T12274]  das6402-16
[  402.490442][T12288] BTRFS info (device loop6): force clearing of disk cache
[  402.499663][T12274] comedi: valid board names for das1800 driver are:
[  402.506843][T12288] BTRFS info (device loop6): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  402.514207][T12274]  das-1701st
[  402.521587][T12286] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop4 scanned by syz.4.2204 (12286)
[  402.535202][T12274]  das-1701st-da
[  402.538911][T12274]  das-1702st
[  402.543983][T12274]  das-1702st-da
[  402.549206][T12274]  das-1702hr
[  402.553704][T12274]  das-1702hr-da
[  402.557302][T12274]  das-1701ao
[  402.560627][T12274]  das-1702ao
[  402.564314][T12274]  das-1801st
[  402.574129][T12274]  das-1801st-da
[  402.577746][T12274]  das-1802st
[  402.590873][T12286] BTRFS info (device loop4): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663
[  402.601890][T12288] BTRFS info (device loop6): use zstd compression, level 3
[  402.609151][T12288] BTRFS info (device loop6): disk space caching is enabled
[  402.620098][T12274]  das-1802st-da
[  402.630855][T12274]  das-1802hr
[  402.634199][T12274]  das-1802hr-da
[  402.637791][T12274]  das-1801hc
[  402.642508][T12286] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm
[  402.671297][T12286] BTRFS info (device loop4): using free space tree
[  402.677972][T12274]  das-1802hc
[  402.686269][T12274]  das-1801ao
[  402.689833][T12274]  das-1802ao
[  402.698481][T12274] comedi: valid board names for das800 driver are:
[  402.706007][T12274]  das-800
[  402.709570][T12274]  cio-das800
[  402.715042][T12274]  das-801
[  402.718686][T12274]  cio-das801
[  402.736523][T12274]  das-802
[  402.753974][T12274]  cio-das802
[  402.764215][T12274]  cio-das802/16
[  402.780212][T12274] comedi: valid board names for isa-das08 driver are:
[  402.827660][T12274]  isa-das08
[  402.837803][T12288] BTRFS info (device loop6): enabling ssd optimizations
[  402.848974][T12322] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2207'.
[  402.850897][T12286] BTRFS info (device loop4): enabling ssd optimizations
[  402.867233][T12274]  das08-pgm
[  402.870565][T12274]  das08-pgh
[  402.900789][T12288] BTRFS info (device loop6): auto enabling async discard
[  402.908738][T12274]  das08-pgl
[  402.919119][T12274]  das08-aoh
[  402.920967][T12286] BTRFS info (device loop4): auto enabling async discard
[  402.929577][T12274]  das08-aol
[  402.937977][T12288] BTRFS info (device loop6): rebuilding free space tree
[  402.947986][T12274]  das08-aom
[  402.958432][T12274]  das08/jr-ao
[  402.970844][T12274]  das08jr-16-ao
[  402.974503][T12274]  pc104-das08
[  402.978002][T12274]  das08jr/16
[  403.005392][T12288] BTRFS info (device loop6): disabling free space tree
[  403.013437][T12274] comedi: valid board names for das16m1 driver are:
[  403.020074][T12274]  das16m1
[  403.031034][T12288] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  403.050839][T12274] comedi: valid board names for dac02 driver are:
[  403.057518][T12274]  dac02
[  403.071286][T12288] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  403.087997][T12274] comedi: valid board names for rti802 driver are:
[  403.108747][T12274]  rti802
[  403.118852][T12274] comedi: valid board names for rti800 driver are:
[  403.145257][T12274]  rti800
[  403.148326][T12274]  rti815
[  403.160156][T12274] comedi: valid board names for pcm3724 driver are:
[  403.197209][T12274]  pcm3724
[  403.200323][T12274] comedi: valid board names for pcl818 driver are:
[  403.226456][T12274]  pcl818l
[  403.233235][T12274]  pcl818h
[  403.250052][T12274]  pcl818hd
[  403.263717][T12274]  pcl818hg
[  403.278324][T12274]  pcl818
[  403.292702][T12274]  pcl718
[  403.321012][T12274]  pcm3718
[  403.324128][T12274] comedi: valid board names for pcl816 driver are:
[  403.373085][T12274]  pcl816
[  403.376209][T12274]  pcl814b
[  403.379286][T12274] comedi: valid board names for pcl812 driver are:
[  403.458019][T12274]  pcl812
[  403.475883][T12274]  pcl812pg
[  403.493380][T12274]  acl8112pg
[  403.496665][T12274]  acl8112dg
[  403.538077][T12274]  acl8112hg
[  403.573327][T12274]  a821pgl
[  403.576455][T12274]  a821pglnda
[  403.579779][T12274]  a821pgh
[  403.583035][T12274]  a822pgl
[  403.586226][T12274]  a822pgh
[  403.589738][T12274]  a823pgl
[  403.593199][T12274]  a823pgh
[  403.596607][T12274]  pcl813
[  403.599597][T12274]  pcl813b
[  403.608371][T12274]  acl8113
[  403.613877][T12274]  iso813
[  403.620946][T12274]  acl8216
[  403.624038][T12274]  a826pg
[  403.627015][T12274] comedi: valid board names for pcl730 driver are:
[  403.661655][T12274]  pcl730
[  403.664675][T12274]  iso730
[  403.667641][T12274]  acl7130
[  403.670696][T12274]  pcm3730
[  403.700850][T12274]  pcl725
[  403.712011][T12274]  p8r8dio
[  403.715322][T12274]  acl7225b
[  403.745509][T12274]  p16r16dio
[  403.748864][T12274]  pcl733
[  403.772968][T12274]  pcl734
[  403.776081][T12274]  opmm-1616-xt
[  403.779575][T12274]  pearl-mm-p
[  403.800901][ T8098] BTRFS info (device loop4): last unmount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663
[  403.814176][T11702] BTRFS info (device loop6): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  403.821047][T12274]  ir104-pbf
[  403.847881][T12274] comedi: valid board names for pcl726 driver are:
[  403.864939][T12274]  pcl726
[  403.867965][T12274]  pcl727
[  403.890677][T12274]  pcl728
[  403.938877][T12274]  acl6126
[  403.955691][T12274]  acl6128
[  403.958794][T12274] comedi: valid board names for pcl724 driver are:
[  403.970945][T12274]  pcl724
[  403.973975][T12274]  pcl722
[  403.976948][T12274]  pcl731
[  404.019760][T12274]  acl7122
[  404.034066][T12274]  acl7124
[  404.070585][T12274]  pet48dio
[  404.101112][T12274]  pcmio48
[  404.104260][T12274]  onyx-mm-dio
[  404.107676][T12274] comedi: valid board names for pcl711 driver are:
[  404.173734][T12274]  pcl711
[  404.187844][T12274]  pcl711b
[  404.200886][T12274]  acl8112hg
[  404.216667][T12274]  acl8112dg
[  404.225044][T12274] comedi: valid board names for amplc_pc263 driver are:
[  404.246108][T12274]  pc263
[  404.315805][T12274] comedi: valid board names for amplc_pc236 driver are:
[  404.361298][T12274]  pc36at
[  404.364360][T12274] comedi: valid board names for amplc_dio200 driver are:
[  404.407059][T12274]  pc212e
[  404.427087][T12274]  pc214e
[  404.438299][T12274]  pc215e
[  404.452884][T12274]  pc218e
[  404.467786][T12274]  pc272e
[  404.481617][T12274] comedi: valid board names for comedi_parport driver are:
[  404.518610][T12274]  comedi_parport
[  404.551275][T12274] comedi: valid board names for comedi_test driver are:
[  404.580872][T12274]  comedi_test
[  404.594619][T12274] comedi: valid board names for comedi_bond driver are:
[  404.635649][T12274]  comedi_bond
[  405.477957][T12366] loop6: detected capacity change from 0 to 164
[  405.518062][T12366] Unable to read rock-ridge attributes
[  405.574743][T12335] loop1: detected capacity change from 0 to 40427
[  405.579952][T12366] Unable to read rock-ridge attributes
[  405.659961][T12335] F2FS-fs (loop1): invalid crc value
[  405.723074][T12335] F2FS-fs (loop1): Found nat_bits in checkpoint
[  406.012734][T12335] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  406.357674][ T5768] syz-executor: attempt to access beyond end of device
[  406.357674][ T5768] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  406.410892][ T5768] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  406.456043][T12360] loop3: detected capacity change from 0 to 32768
[  406.540501][T12360] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  406.796483][T12360] XFS (loop3): Ending clean mount
[  406.824203][T12360] XFS (loop3): Quotacheck needed: Please wait.
[  407.010709][T12360] XFS (loop3): Quotacheck: Done.
[  407.170442][ T5776] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  407.250229][T12378] loop6: detected capacity change from 0 to 32768
[  407.282694][T12378] BTRFS error: device /dev/loop6 already registered with a higher generation, found 8 expect 10
[  407.569103][ T5772] BTRFS error: device /dev/loop6 already registered with a higher generation, found 8 expect 10
[  407.631087][T12404] netlink: 188 bytes leftover after parsing attributes in process `syz.6.2225'.
[  408.110441][T12383] loop4: detected capacity change from 0 to 40427
[  408.208756][T12383] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x7ffff
[  408.324230][T12383] F2FS-fs (loop4): invalid crc value
[  408.381637][T12383] F2FS-fs (loop4): Found nat_bits in checkpoint
[  408.562692][T12383] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  408.800802][T12425] loop7: detected capacity change from 0 to 7
[  408.844893][T12425] Dev loop7: unable to read RDB block 7
[  408.850671][T12425]  loop7: unable to read partition table
[  408.851322][T12427] loop3: detected capacity change from 0 to 256
[  408.885756][ T1145] loop: Write error at byte offset 2, length 3584.
[  408.905597][T12427] FAT-fs (loop3): "posix" option is obsolete, not supported now
[  408.907877][T12401] loop1: detected capacity change from 0 to 32768
[  408.925526][T12425] loop7: partition table beyond EOD, truncated
[  408.937782][    C0] blk_print_req_error: 27 callbacks suppressed
[  408.937800][    C0] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x8800 phys_seg 1 prio class 2
[  408.953315][T12425] loop_reread_partitions: partition scan of loop7 (���������C�j̖�P=ý?�}X���	���%��`��ր���{��֐�ȵ4FLQk݊) failed (rc=-5)
[  408.953683][    C0] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x8800 phys_seg 1 prio class 2
[  408.999848][ T8098] syz-executor: attempt to access beyond end of device
[  408.999848][ T8098] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  409.017076][T12401] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10
[  409.029219][ T8098] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  409.496953][ T6496] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10
[  410.399424][T12455] loop4: detected capacity change from 0 to 256
[  410.451711][T12455] exfat: Deprecated parameter 'utf8'
[  410.532212][T12455] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d)
[  410.800270][T12444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  410.841315][T12443] loop6: detected capacity change from 0 to 32768
[  410.962048][T12443] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  411.200912][T12443] XFS (loop6): Ending clean mount
[  411.255438][T12443] XFS (loop6): Quotacheck needed: Please wait.
[  411.436065][T12443] XFS (loop6): Quotacheck: Done.
[  411.655981][T11702] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  412.626223][T12482] loop4: detected capacity change from 0 to 32768
[  412.853597][T12503] loop6: detected capacity change from 0 to 256
[  412.920792][T12503] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  413.402152][T12517] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  414.160941][T12542] loop3: detected capacity change from 0 to 256
[  414.192913][T12542] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  414.290430][T12546] loop6: detected capacity change from 0 to 512
[  414.380868][T12546] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  414.449082][T12546] EXT4-fs error (device loop6): ext4_orphan_get:1404: inode #15: comm syz.6.2268: iget: bad i_size value: 38620345925642
[  414.583709][T12546] EXT4-fs error (device loop6): ext4_orphan_get:1409: comm syz.6.2268: couldn't read orphan inode 15 (err -117)
[  414.639654][T12546] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  414.884516][T11702] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  414.942303][T12569] loop3: detected capacity change from 0 to 1024
[  415.076882][   T28] audit: type=1800 audit(1776949433.600:96): pid=12569 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2266" name="file1" dev="loop3" ino=20 res=0 errno=0
[  415.466374][T12585] loop1: detected capacity change from 0 to 256
[  415.507908][T12587] vivid-008: disconnect
[  415.517983][T12586] vivid-008: reconnect
[  415.554493][  T787] hid-generic 0005:0B57:0101.0014: item fetching failed at offset 0/1
[  415.627784][  T787] hid-generic: probe of 0005:0B57:0101.0014 failed with error -22
[  415.661025][T12585] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  416.352017][T12609] netem: change failed
[  416.806792][T12621] loop6: detected capacity change from 0 to 1024
[  416.820079][T12623] veth0_to_team: entered promiscuous mode
[  416.874324][T12623] gretap0: entered promiscuous mode
[  417.183950][T12594] loop4: detected capacity change from 0 to 32768
[  417.355789][T12594] JBD2: Ignoring recovery information on journal
[  417.634215][T12594] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  418.034271][T12594] OCFS2: ERROR (device loop4): int ocfs2_xattr_find_entry(struct inode *, int, const char *, struct ocfs2_xattr_search *): corrupted xattr entries
[  418.034619][T12594] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  418.202011][T12594] OCFS2: File system is now read-only.
[  418.254085][T12637] OCFS2: ERROR (device loop4): int ocfs2_xattr_find_entry(struct inode *, int, const char *, struct ocfs2_xattr_search *): corrupted xattr entries
[  418.279073][T12637] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  418.488690][T12628] loop1: detected capacity change from 0 to 131072
[  418.499181][T12628] F2FS-fs (loop1): Invalid log sectorsize (67108873)
[  418.506061][T12628] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  418.520403][T12628] F2FS-fs (loop1): invalid crc value
[  418.556230][T12628] F2FS-fs (loop1): Found nat_bits in checkpoint
[  418.628234][T12628] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  418.635469][T12628] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  418.657068][T12646] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2288'.
[  418.667169][T12646] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2288'.
[  418.683543][ T8098] ocfs2: Unmounting device (7,4) on (node local)
[  419.409019][T12656] loop7: detected capacity change from 0 to 7
[  419.423165][T12656] Dev loop7: unable to read RDB block 7
[  419.450988][T12656]  loop7: unable to read partition table
[  419.456949][T12656] loop7: partition table beyond EOD, truncated
[  419.491600][T12656] loop_reread_partitions: partition scan of loop7 (���������C�j̖�P=ý?�}X���	���%��`��ր���{��֐�ȵ4FLQk݊) failed (rc=-5)
[  419.579463][   T49] loop: Write error at byte offset 2, length 3584.
[  419.612513][    C0] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x8800 phys_seg 1 prio class 2
[  419.622146][    C0] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x8800 phys_seg 1 prio class 2
[  420.104995][T12649] loop6: detected capacity change from 0 to 32768
[  420.113671][T12666] ubi31: attaching mtd0
[  420.118500][T12666] ubi31 error: ubi_attach_mtd_dev: bad VID header (49152) or data offsets (49216)
[  420.234561][T12649] ocfs2: Slot 0 on device (7,6) was already allocated to this node!
[  420.327967][T12649] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  420.568388][T12649] (syz.6.2289,12649,0):ocfs2_remount:623 ERROR: Cannot change heartbeat mode on remount
[  420.791518][T11702] ocfs2: Unmounting device (7,6) on (node local)
[  421.148294][T12680] loop1: detected capacity change from 0 to 512
[  421.189723][T12680] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  421.217519][T12680] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  421.227792][T12680] EXT4-fs (loop1): orphan cleanup on readonly fs
[  421.249578][T12680] EXT4-fs (loop1): 1 orphan inode deleted
[  421.286543][T12680] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  421.397289][T12680] EXT4-fs (loop1): shut down requested (2)
[  421.522497][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  421.866640][T12695] loop6: detected capacity change from 0 to 256
[  421.927812][T12695] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d)
[  422.196167][T12703] loop6: detected capacity change from 0 to 2048
[  422.235665][T12703] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  422.640868][ T5901] kernel read not supported for file /dsp1 (pid: 5901 comm: kworker/1:6)
[  422.751338][   T27] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  422.967800][   T27] usb 4-1: Using ep0 maxpacket: 32
[  422.982879][   T27] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  423.012234][   T27] usb 4-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[  423.046965][   T27] usb 4-1: config 0 interface 0 has no altsetting 0
[  423.071673][   T27] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  423.083579][   T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  423.101976][   T27] usb 4-1: Product: syz
[  423.111256][   T27] usb 4-1: Manufacturer: syz
[  423.120396][   T27] usb 4-1: SerialNumber: syz
[  423.138492][   T27] usb 4-1: config 0 descriptor??
[  423.189764][T12711] loop1: detected capacity change from 0 to 40427
[  423.219487][T12711] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x7ffff
[  423.233932][T12711] F2FS-fs (loop1): invalid crc value
[  423.246236][T12711] F2FS-fs (loop1): Found nat_bits in checkpoint
[  423.319086][T12711] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  423.392261][T12709] loop6: detected capacity change from 0 to 40427
[  423.408070][ T5768] syz-executor: attempt to access beyond end of device
[  423.408070][ T5768] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  423.434468][T12709] F2FS-fs (loop6): build fault injection attr: rate: 690, type: 0x7ffff
[  423.440526][ T5768] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  423.467059][T12709] F2FS-fs (loop6): heap/no_heap options were deprecated
[  423.499829][T12709] F2FS-fs (loop6): invalid crc value
[  423.525669][T12709] F2FS-fs (loop6): Found nat_bits in checkpoint
[  423.561343][   T27] gs_usb 4-1:0.0: Configuring for 1 interfaces
[  423.663626][T12709] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  423.809765][T12709] F2FS-fs (loop6): inject checkpoint error in f2fs_balance_fs of f2fs_setattr+0xf6b/0x1360
[  423.849053][T12709] F2FS-fs (loop6): Stopped filesystem due to reason: 1
[  423.872323][T12709] overlayfs: upper fs does not support tmpfile.
[  423.966490][   T27] gs_usb 4-1:0.0: Disabling termination support for channel 0 (-EPROTO)
[  423.992663][   T27] gs_usb 4-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO)
[  424.011820][   T27] gs_usb: probe of 4-1:0.0 failed with error -71
[  424.037083][   T27] usb 4-1: USB disconnect, device number 26
[  425.281415][T12741] loop6: detected capacity change from 0 to 256
[  425.434318][T12726] loop1: detected capacity change from 0 to 32768
[  425.483607][T12726] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop1 scanned by syz.1.2314 (12726)
[  425.572605][T12726] BTRFS info (device loop1): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663
[  425.600938][T12726] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[  425.610453][T12726] BTRFS info (device loop1): using free space tree
[  425.614508][T12747] Bluetooth: hci4: Frame reassembly failed (-84)
[  425.762291][T12726] BTRFS info (device loop1): enabling ssd optimizations
[  425.769332][T12726] BTRFS info (device loop1): auto enabling async discard
[  426.098880][ T5768] BTRFS info (device loop1): last unmount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663
[  426.242251][    T9] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  426.319199][T12778] loop4: detected capacity change from 0 to 16
[  426.350251][T12778] MTD: Attempt to mount non-MTD device "/dev/loop4"
[  426.423876][ T6494] udevd[6494]: incorrect cramfs checksum on /dev/loop4
[  426.504540][    T9] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  426.508024][ T5772] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 11 /dev/loop1 scanned by udevd (5772)
[  426.520809][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  426.536125][ T6494] udevd[6494]: incorrect cramfs checksum on /dev/loop4
[  426.579879][    T9] usb 4-1: config 0 descriptor??
[  426.617239][    T9] cp210x 4-1:0.0: cp210x converter detected
[  427.044469][    T9] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32
[  427.085445][    T9] usb 4-1: cp210x converter now attached to ttyUSB0
[  427.278427][T12781] loop1: detected capacity change from 0 to 32768
[  427.326110][T12781] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  427.340133][ T5901] usb 4-1: USB disconnect, device number 27
[  427.357974][ T5901] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  427.387854][T12781] XFS (loop1): Ending clean mount
[  427.405050][T12781] XFS (loop1): Quotacheck needed: Please wait.
[  427.409287][ T5901] cp210x 4-1:0.0: device disconnected
[  427.468929][T12781] XFS (loop1): Quotacheck: Done.
[  427.611797][T11704] Bluetooth: hci4: command 0x1003 tx timeout
[  427.618551][ T5780] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  427.836106][T12796] loop6: detected capacity change from 0 to 2048
[  427.886581][T12796] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  427.950572][ T5768] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  428.781790][T12794] loop4: detected capacity change from 0 to 40427
[  428.807079][T12809] loop6: detected capacity change from 0 to 1024
[  428.817601][T12794] F2FS-fs (loop4): invalid crc value
[  428.828182][T12794] F2FS-fs (loop4): Found nat_bits in checkpoint
[  428.842098][T12809] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  429.078422][T12794] F2FS-fs (loop4): Start checkpoint disabled!
[  429.112139][T12814] netlink: 204 bytes leftover after parsing attributes in process `syz.1.2342'.
[  429.171921][T12794] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  429.636317][   T34] kworker/u4:2: attempt to access beyond end of device
[  429.636317][   T34] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  429.666987][   T34] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  429.727135][   T34] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  429.806176][T12827] loop6: detected capacity change from 0 to 256
[  429.891060][T12827] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  429.954908][T12806] loop3: detected capacity change from 0 to 40427
[  430.024336][T12806] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  430.057855][T12806] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  430.084941][T12806] F2FS-fs (loop3): invalid crc value
[  430.154673][T12806] F2FS-fs (loop3): Found nat_bits in checkpoint
[  430.178371][T12836] loop6: detected capacity change from 0 to 256
[  430.229945][T12836] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d)
[  430.370155][T12806] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  430.394728][T12806] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  431.234721][T12831] loop1: detected capacity change from 0 to 32768
[  431.343414][T12831] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  431.478104][T12847] loop4: detected capacity change from 0 to 32768
[  431.704018][ T5768] ocfs2: Unmounting device (7,1) on (node local)
[  431.900694][T12858] loop1: detected capacity change from 0 to 64
[  431.957310][T12858] MINIX-fs: mounting file system with errors, running fsck is recommended
[  432.290579][T12865] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  432.958038][T12875] bridge0: port 2(bridge_slave_1) entered disabled state
[  433.009031][T12877] program syz.3.2368 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  433.620470][T12867] set_capacity_and_notify: 1 callbacks suppressed
[  433.620488][T12867] loop1: detected capacity change from 0 to 40427
[  433.625878][T12869] loop6: detected capacity change from 0 to 32768
[  433.643115][T12867] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  433.665789][T12867] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  433.692502][T12867] F2FS-fs (loop1): invalid crc value
[  433.808872][T12867] F2FS-fs (loop1): Found nat_bits in checkpoint
[  433.892906][T12869] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  434.156387][T12869] XFS (loop6): Ending clean mount
[  434.202534][T12867] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  434.267757][T12867] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  434.633855][T11702] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  434.909694][T12888] loop4: detected capacity change from 0 to 131072
[  434.919996][T12888] F2FS-fs (loop4): Wrong CP boundary, start(512) end(1536) blocks(0)
[  434.928412][T12888] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  434.966210][T12888] F2FS-fs (loop4): invalid crc value
[  435.017319][T12888] F2FS-fs (loop4): Found nat_bits in checkpoint
[  435.107582][T12888] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  435.115546][T12888] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[  436.304524][T12933] binder: 12932:12933 ioctl 40046205 0 returned -22
[  438.969329][T12947] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  439.238128][T12957] loop1: detected capacity change from 0 to 512
[  439.306813][T12957] EXT4-fs (loop1): 1 truncate cleaned up
[  439.317708][T12957] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  439.518604][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  439.600950][    T9] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[  439.689100][T12945] loop6: detected capacity change from 0 to 40427
[  439.718709][T12945] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12
[  439.736964][T12945] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  439.747002][T12945] F2FS-fs (loop6): invalid crc value
[  439.775006][T12945] F2FS-fs (loop6): Found nat_bits in checkpoint
[  439.810905][    T9] usb 4-1: Using ep0 maxpacket: 8
[  439.823426][    T9] usb 4-1: config index 0 descriptor too short (expected 74, got 45)
[  439.850884][    T9] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[  439.880512][    T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  439.904487][    T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  439.920811][    T9] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  439.955845][T12945] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[  439.963426][    T9] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  439.975509][T12945] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  439.983689][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  440.225534][    T9] usb 4-1: GET_CAPABILITIES returned 0
[  440.251135][    T9] usbtmc 4-1:16.0: can't read capabilities
[  440.283041][T12978] loop1: detected capacity change from 0 to 2048
[  440.321436][T12978] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found!
[  440.398361][T12978] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  440.421104][ T1290] ieee802154 phy0 wpan0: encryption failed: -22
[  440.519863][T12961] usbtmc 4-1:16.0: usbtmc488_ioctl_trigger returned -71
[  440.566486][ T5901] usb 4-1: USB disconnect, device number 28
[  440.966595][T12975] loop4: detected capacity change from 0 to 40427
[  440.979763][T12982] loop1: detected capacity change from 0 to 8
[  440.991173][T12975] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x7ffff
[  441.041920][T12975] F2FS-fs (loop4): invalid crc value
[  441.077132][T12975] F2FS-fs (loop4): Found nat_bits in checkpoint
[  441.105710][T12986] input: syz1 as /devices/virtual/input/input30
[  441.162486][T12982] SQUASHFS error: Unable to read directory block [249:c]
[  441.326827][T12975] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  441.651835][ T8098] syz-executor: attempt to access beyond end of device
[  441.651835][ T8098] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  441.684421][ T8098] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  442.929293][T12997] loop6: detected capacity change from 0 to 131072
[  442.945796][T12997] F2FS-fs (loop6): invalid crc value
[  442.973651][T12997] F2FS-fs (loop6): Found nat_bits in checkpoint
[  443.031954][T12997] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4
[  443.310854][    T9] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  443.513034][    T9] usb 2-1: Using ep0 maxpacket: 8
[  443.524860][    T9] usb 2-1: config index 0 descriptor too short (expected 74, got 45)
[  443.541384][    T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[  443.573000][    T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  443.592221][    T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  443.613431][    T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  443.657331][    T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  443.675687][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  443.950162][T13019] program syz.3.2415 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  443.951390][    T9] usb 2-1: GET_CAPABILITIES returned 0
[  443.981556][    T9] usbtmc 2-1:16.0: can't read capabilities
[  444.304387][T13014] usbtmc 2-1:16.0: usbtmc488_ioctl_trigger returned -71
[  444.324231][ T5901] usb 2-1: USB disconnect, device number 27
[  444.752693][T13036] loop4: detected capacity change from 0 to 512
[  444.761595][T13036] EXT4-fs: Ignoring removed mblk_io_submit option
[  444.770535][T13036] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  444.850359][T13036] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  444.863961][T13036] ext4 filesystem being mounted at /429/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  445.162961][ T8098] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  446.461217][T13083] loop6: detected capacity change from 0 to 8
[  446.520106][T13060] loop3: detected capacity change from 0 to 32768
[  446.580849][ T5901] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  446.641293][T13060] ERROR: (device loop3): dbAdjCtl: the maximum free buddy is not the old root
[  446.641293][T13060] 
[  446.689247][T13060] ERROR: (device loop3): remounting filesystem as read-only
[  446.791999][ T5901] usb 2-1: Using ep0 maxpacket: 16
[  446.806408][ T5901] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  446.830889][ T5901] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  446.871199][ T5901] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  446.902462][ T5901] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  446.932940][ T5901] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  446.972636][ T5901] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  447.003513][ T5901] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  447.031499][ T5901] usb 2-1: Manufacturer: syz
[  447.047794][ T5901] usb 2-1: config 0 descriptor??
[  447.129130][  T113] BUG: Bad page state in process jfsCommit  pfn:26002
[  447.142475][  T113] page:ffffea0000980080 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1c pfn:0x26002
[  447.163173][  T113] flags: 0xfff0800000820d(locked|referenced|uptodate|workingset|private|node=0|zone=1|lastcpupid=0x7ff)
[  447.190884][  T113] page_type: 0xffffffff()
[  447.195385][  T113] raw: 00fff0800000820d dead000000000100 dead000000000122 0000000000000000
[  447.225286][  T113] raw: 000000000000001c ffff88807defbe88 00000000ffffffff 0000000000000000
[  447.251049][  T113] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set
[  447.274189][  T113] page_owner tracks the page as allocated
[  447.290341][  T113] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x140c40(GFP_NOFS|__GFP_COMP|__GFP_HARDWALL), pid 13060, tgid 13059 (syz.3.2431), ts 446576335939, free_ts 446478926550
[  447.318372][  T113]  post_alloc_hook+0x1c1/0x200
[  447.326363][  T113]  get_page_from_freelist+0x1951/0x19e0
[  447.337282][  T113]  __alloc_pages+0x1f0/0x460
[  447.345236][  T113]  folio_alloc+0x1e/0x30
[  447.349880][  T113]  filemap_alloc_folio+0xdf/0x490
[  447.355639][  T113]  do_read_cache_folio+0x364/0x7d0
[  447.363619][  T113]  do_read_cache_page+0x32/0x250
[  447.368739][  T113]  __get_metapage+0x31a/0xfa0
[  447.373749][  T113]  diRead+0x6d3/0xb90
[  447.378999][  T113]  jfs_iget+0x90/0x440
[  447.383599][  T113]  jfs_fill_super+0x712/0xad0
[  447.388322][  T113]  mount_bdev+0x221/0x2d0
[  447.392913][ T5901] rc_core: IR keymap rc-hauppauge not found
[  447.399218][ T5901] Registered IR keymap rc-empty
[  447.404504][  T113]  legacy_get_tree+0xea/0x180
[  447.409234][  T113]  vfs_get_tree+0x8c/0x280
[  447.414341][ T5901] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  447.420861][  T113]  do_new_mount+0x24b/0xa40
[  447.426200][  T113]  __se_sys_mount+0x2e7/0x3d0
[  447.431705][  T113] page last free stack trace:
[  447.436438][  T113]  free_unref_page_prepare+0x7b2/0x8c0
[  447.442404][  T113]  free_unref_page_list+0xbe/0x860
[  447.447755][  T113]  release_pages+0x1f7a/0x2200
[  447.453278][  T113]  tlb_flush_mmu+0x379/0x510
[  447.457937][  T113]  tlb_finish_mmu+0xf9/0x220
[  447.463556][  T113]  exit_mmap+0x428/0xb90
[  447.463908][ T5901] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  447.467844][  T113]  __mmput+0x118/0x3c0
[  447.479570][  T113]  exit_mm+0x1f2/0x2c0
[  447.485918][  T113]  do_exit+0x8dd/0x2460
[  447.490235][  T113]  do_group_exit+0x21b/0x2d0
[  447.494961][  T113]  get_signal+0x12fc/0x13f0
[  447.499661][  T113]  arch_do_signal_or_restart+0xc2/0x800
[  447.506124][  T113]  exit_to_user_mode_loop+0x70/0x110
[  447.511839][  T113]  exit_to_user_mode_prepare+0xee/0x180
[  447.512196][ T5901] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  447.517879][  T113]  syscall_exit_to_user_mode+0x1a/0x50
[  447.536608][  T113]  do_syscall_64+0x61/0xa0
[  447.546383][ T5901] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input31
[  447.550569][  T113] Modules linked in:
[  447.566330][ T5901] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  447.567721][  T113] 
[  447.598228][  T113] CPU: 0 PID: 113 Comm: jfsCommit Not tainted syzkaller #0
[  447.605611][  T113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  447.612897][ T5901] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  447.615688][  T113] Call Trace:
[  447.615700][  T113]  <TASK>
[  447.615710][  T113]  dump_stack_lvl+0x18c/0x250
[  447.615752][  T113]  ? show_regs_print_info+0x20/0x20
[  447.615783][  T113]  ? swiotlb_print_info+0x70/0x70
[  447.615810][  T113]  ? dump_page+0xba3/0x14a0
[  447.648697][  T113]  bad_page+0x14b/0x170
[  447.652917][  T113]  free_unref_page_prepare+0x85f/0x8c0
[  447.658410][  T113]  free_unref_page+0x32/0x2e0
[  447.663208][  T113]  ? __folio_put+0xef/0x210
[  447.667738][  T113]  txUnlock+0x27e/0xcb0
[  447.671923][  T113]  ? lockdep_hardirqs_on+0x98/0x150
[  447.677157][  T113]  jfs_lazycommit+0x56e/0xa70
[  447.681954][  T113]  ? txFreelock+0x5a0/0x5a0
[  447.686479][  T113]  ? do_task_dead+0xd0/0xd0
[  447.691037][  T113]  ? __kthread_parkme+0x7a/0x1c0
[  447.696023][  T113]  kthread+0x2fa/0x390
[  447.700153][  T113]  ? txFreelock+0x5a0/0x5a0
[  447.704724][  T113]  ? kthread_blkcg+0xd0/0xd0
[  447.709471][  T113]  ret_from_fork+0x48/0x80
[  447.714012][  T113]  ? kthread_blkcg+0xd0/0xd0
[  447.718735][  T113]  ret_from_fork_asm+0x11/0x20
[  447.723568][  T113]  </TASK>
[  447.731829][ T5901] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  447.741320][  T113] Disabling lock debugging due to kernel taint
[  447.760974][ T5901] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  447.765071][  T113] page:ffffea0000980080 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1c pfn:0x26002
[  447.780291][  T113] flags: 0xfff0800000820d(locked|referenced|uptodate|workingset|private|node=0|zone=1|lastcpupid=0x7ff)
[  447.792320][  T113] page_type: 0xffffffff()
[  447.797648][  T113] raw: 00fff0800000820d dead000000000100 dead000000000122 0000000000000000
[  447.801283][ T5901] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  447.807998][  T113] raw: 000000000000001c ffff88807defbe88 00000000ffffffff 0000000000000000
[  447.823095][  T113] page dumped because: VM_BUG_ON_FOLIO(((unsigned int) folio_ref_count(folio) + 127u <= 127u))
[  447.833768][  T113] page_owner tracks the page as allocated
[  447.839783][  T113] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x140c40(GFP_NOFS|__GFP_COMP|__GFP_HARDWALL), pid 13060, tgid 13059 (syz.3.2431), ts 446576335939, free_ts 446478926550
[  447.842632][ T5901] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  447.866533][  T113]  post_alloc_hook+0x1c1/0x200
[  447.866570][  T113]  get_page_from_freelist+0x1951/0x19e0
[  447.866588][  T113]  __alloc_pages+0x1f0/0x460
[  447.882695][  T113]  folio_alloc+0x1e/0x30
[  447.887003][  T113]  filemap_alloc_folio+0xdf/0x490
[  447.893067][  T113]  do_read_cache_folio+0x364/0x7d0
[  447.898306][  T113]  do_read_cache_page+0x32/0x250
[  447.900844][ T5901] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  447.903395][  T113]  __get_metapage+0x31a/0xfa0
[  447.915511][  T113]  diRead+0x6d3/0xb90
[  447.919617][  T113]  jfs_iget+0x90/0x440
[  447.923789][  T113]  jfs_fill_super+0x712/0xad0
[  447.928575][  T113]  mount_bdev+0x221/0x2d0
[  447.932952][  T113]  legacy_get_tree+0xea/0x180
[  447.937660][  T113]  vfs_get_tree+0x8c/0x280
[  447.940924][ T5901] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  447.942163][  T113]  do_new_mount+0x24b/0xa40
[  447.954292][  T113]  __se_sys_mount+0x2e7/0x3d0
[  447.959025][  T113] page last free stack trace:
[  447.964864][  T113]  free_unref_page_prepare+0x7b2/0x8c0
[  447.970369][  T113]  free_unref_page_list+0xbe/0x860
[  447.976109][  T113]  release_pages+0x1f7a/0x2200
[  447.980857][ T5901] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  447.981041][  T113]  tlb_flush_mmu+0x379/0x510
[  447.993264][  T113]  tlb_finish_mmu+0xf9/0x220
[  447.998072][  T113]  exit_mmap+0x428/0xb90
[  448.002485][  T113]  __mmput+0x118/0x3c0
[  448.006577][  T113]  exit_mm+0x1f2/0x2c0
[  448.010651][  T113]  do_exit+0x8dd/0x2460
[  448.011444][ T5901] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  448.014847][  T113]  do_group_exit+0x21b/0x2d0
[  448.026637][  T113]  get_signal+0x12fc/0x13f0
[  448.031215][  T113]  arch_do_signal_or_restart+0xc2/0x800
[  448.036792][  T113]  exit_to_user_mode_loop+0x70/0x110
[  448.042313][  T113]  exit_to_user_mode_prepare+0xee/0x180
[  448.047978][  T113]  syscall_exit_to_user_mode+0x1a/0x50
[  448.053797][  T113]  do_syscall_64+0x61/0xa0
[  448.055768][ T5901] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  448.058513][  T113] ------------[ cut here ]------------
[  448.068479][ T5901] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  448.073096][  T113] kernel BUG at include/linux/mm.h:1458!
[  448.078403][  T113] invalid opcode: 0000 [#1] PREEMPT SMP KASAN
[  448.086938][ T5901] usb 2-1: USB disconnect, device number 28
[  448.087283][  T113] CPU: 0 PID: 113 Comm: jfsCommit Tainted: G    B              syzkaller #0
[  448.108511][  T113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  448.118671][  T113] RIP: 0010:put_metapage+0x253/0x340
[  448.124213][  T113] Code: 38 c1 0f 8c 32 ff ff ff 4c 89 ef e8 b7 78 d9 fe e9 25 ff ff ff e8 3d 41 81 fe 48 8b 3c 24 48 c7 c6 80 09 04 8b e8 dd aa c1 fe <0f> 0b 4c 8b 2c 24 4c 89 ee 48 81 e6 ff 0f 00 00 31 ff e8 56 45 81
[  448.143858][  T113] RSP: 0018:ffffc90002cc7cc0 EFLAGS: 00010246
[  448.149940][  T113] RAX: b283e72309e30200 RBX: ffff88807defbe88 RCX: b283e72309e30200
[  448.158023][  T113] RDX: 0000000000000000 RSI: ffffffff8b1c8e40 RDI: ffffffff8b1c8e00
[  448.166097][  T113] RBP: 000000000000007f R08: ffffffff8e8b15ef R09: 1ffffffff1d162bd
[  448.174269][  T113] R10: dffffc0000000000 R11: fffffbfff1d162be R12: ffff88807defbeb0
[  448.182416][  T113] R13: ffffea00009800b4 R14: 1ffff1100fbdf7d6 R15: 1ffff1100fbdf7e3
[  448.190413][  T113] FS:  0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  448.199353][  T113] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  448.205958][  T113] CR2: 00007f37ce4a8ff8 CR3: 000000006267a000 CR4: 00000000003506f0
[  448.214038][  T113] Call Trace:
[  448.217530][  T113]  <TASK>
[  448.220499][  T113]  txUnlock+0x427/0xcb0
[  448.224701][  T113]  jfs_lazycommit+0x56e/0xa70
[  448.229427][  T113]  ? txFreelock+0x5a0/0x5a0
[  448.233951][  T113]  ? do_task_dead+0xd0/0xd0
[  448.238467][  T113]  ? __kthread_parkme+0x7a/0x1c0
[  448.243525][  T113]  kthread+0x2fa/0x390
[  448.247621][  T113]  ? txFreelock+0x5a0/0x5a0
[  448.252249][  T113]  ? kthread_blkcg+0xd0/0xd0
[  448.256879][  T113]  ret_from_fork+0x48/0x80
[  448.261351][  T113]  ? kthread_blkcg+0xd0/0xd0
[  448.265974][  T113]  ret_from_fork_asm+0x11/0x20
[  448.270857][  T113]  </TASK>
[  448.274084][  T113] Modules linked in:
[  448.293217][  T113] ---[ end trace 0000000000000000 ]---
[  448.298818][  T113] RIP: 0010:put_metapage+0x253/0x340
[  448.304576][  T113] Code: 38 c1 0f 8c 32 ff ff ff 4c 89 ef e8 b7 78 d9 fe e9 25 ff ff ff e8 3d 41 81 fe 48 8b 3c 24 48 c7 c6 80 09 04 8b e8 dd aa c1 fe <0f> 0b 4c 8b 2c 24 4c 89 ee 48 81 e6 ff 0f 00 00 31 ff e8 56 45 81
[  448.346394][  T113] RSP: 0018:ffffc90002cc7cc0 EFLAGS: 00010246
[  448.355943][  T113] RAX: b283e72309e30200 RBX: ffff88807defbe88 RCX: b283e72309e30200
[  448.365508][  T113] RDX: 0000000000000000 RSI: ffffffff8b1c8e40 RDI: ffffffff8b1c8e00
[  448.373917][  T113] RBP: 000000000000007f R08: ffffffff8e8b15ef R09: 1ffffffff1d162bd
[  448.382814][  T113] R10: dffffc0000000000 R11: fffffbfff1d162be R12: ffff88807defbeb0
[  448.391139][  T113] R13: ffffea00009800b4 R14: 1ffff1100fbdf7d6 R15: 1ffff1100fbdf7e3
[  448.399370][  T113] FS:  0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  448.409222][  T113] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  448.415947][  T113] CR2: 00007fff1c6bfc64 CR3: 000000007d6be000 CR4: 00000000003506e0
[  448.424717][  T113] Kernel panic - not syncing: Fatal exception
[  448.431264][  T113] Kernel Offset: disabled
[  448.435599][  T113] Rebooting in 86400 seconds..