last executing test programs:

1m46.176145579s ago: executing program 4 (id=417):
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000})
setns(0xc9, 0x0)
r0 = socket(0x8, 0x5, 0x5)
ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x61e0, 0x0)

1m45.942463175s ago: executing program 4 (id=422):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0xbe, 0xa, 0x4, 0x1, 0x6, 0x0, 0x0, 0x8, 0x80, 0x8, 0x8, 0x0, 0x8}, 0xe)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={<r1=>0x0, 0x10, &(0x7f0000000300)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x17}}]}, &(0x7f0000000440)=0x10)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000000c0)={r1, 0x2, 0x7, 0x9, 0x1, 0x80}, &(0x7f0000000100)=0x14)

1m45.692307444s ago: executing program 4 (id=426):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x79}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x19, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x0}, 0x94)

1m45.424365636s ago: executing program 4 (id=428):
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x2048c5, &(0x7f0000000680)={[{@fat=@uid={'uid', 0x3d, 0xee00}}, {@fat=@quiet}, {@numtail}, {@fat=@usefree}, {@uni_xlate}, {@rodir}, {@fat=@dos1xfloppy}, {@fat=@nfs_stale_rw}, {@fat=@showexec}, {@shortname_winnt}, {@fat=@errors_remount}, {@shortname_lower}, {@utf8}]}, 0x0, 0x29f, &(0x7f0000000840)="$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")
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x44000, 0x0)

1m44.984349983s ago: executing program 4 (id=431):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a300000000008000a"], 0xa4}}, 0x40810)
r0 = socket$netlink(0x10, 0x3, 0x0)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c0000001e002102000000000000000007"], 0x6c}}, 0x4000090)

1m44.08281331s ago: executing program 4 (id=436):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(&(0x7f0000000100)=@filename='proc\x00', &(0x7f0000000200)='./proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc/net/rpc/auth.unix.gid/channel\x00', 0x2, 0x0)
write(r0, &(0x7f0000000500)="3020800a00", 0x4)

1m43.67622831s ago: executing program 32 (id=436):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(&(0x7f0000000100)=@filename='proc\x00', &(0x7f0000000200)='./proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc/net/rpc/auth.unix.gid/channel\x00', 0x2, 0x0)
write(r0, &(0x7f0000000500)="3020800a00", 0x4)

1m18.02425001s ago: executing program 0 (id=572):
setns(0xc9, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f00000000c0)=0x1, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)

1m17.783451058s ago: executing program 0 (id=575):
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0xadeeead5bdd79bbf, 0x0, 0x0, 0x7995}, 0x8, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0})
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x2)
ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000000)=ANY=[])

1m17.499326934s ago: executing program 0 (id=578):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r2, &(0x7f0000000280)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0xffff, 0x2, 0x0, {0xa, 0x0, 0xfffffffe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x400}}}, 0x32)

1m17.177578037s ago: executing program 0 (id=582):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x14f)
mount$bind(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x111091, 0x0)
chroot(&(0x7f0000000580)='./file0/../file0\x00')
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0)
pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00')

1m16.946398972s ago: executing program 0 (id=583):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl(r0, 0x890b, &(0x7f0000000140)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lapb0')
bind$x25(r0, &(0x7f0000000080), 0x12)
connect$x25(r0, &(0x7f0000000100)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12)
write$char_usb(r0, 0x0, 0x0)

1m16.260062267s ago: executing program 0 (id=585):
r0 = socket$inet6(0xa, 0x5, 0x0)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x5e20, 0x100, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
r1 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)

1m15.915700084s ago: executing program 33 (id=585):
r0 = socket$inet6(0xa, 0x5, 0x0)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x5e20, 0x100, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
r1 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)

29.106867211s ago: executing program 6 (id=810):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x3, 0x4, 0x8, 0x88}, 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffff8}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

28.590739223s ago: executing program 6 (id=812):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="680000001000ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1720000021200000400012800c0001006d6163766c616e0030000280080003000300000008000100100000001c0005800a000400aaaaaaaaaa2d00000a0004003426f7b68ed1000008000500", @ANYRES32=r2], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x8000002)
sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfc)

27.925318703s ago: executing program 6 (id=817):
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x0, &(0x7f0000000000), 0x0, 0x248, &(0x7f0000000940)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='mnt/encrypted_dir\x00', 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='mnt/encrypted_dir\x00', 0xc00, 0x0)
setuid(0xee01)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @adiantum, 0x4, '\x00', @a})

27.256347675s ago: executing program 6 (id=820):
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x2048c5, &(0x7f0000000680)={[{@fat=@uid={'uid', 0x3d, 0xee00}}, {@fat=@quiet}, {@numtail}, {@fat=@usefree}, {@uni_xlate}, {@rodir}, {@fat=@dos1xfloppy}, {@fat=@nfs_stale_rw}, {@fat=@showexec}, {@shortname_winnt}, {@fat=@errors_remount}, {@shortname_lower}, {@utf8}]}, 0x0, 0x29f, &(0x7f0000000840)="$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")
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x44000, 0x0)

26.685112487s ago: executing program 6 (id=822):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000140), 0x8, 0x18b9c2)
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000400)={r0, 0x0, {0x2a00, 0x80010000, 0x0, 0x100080000000, 0x400000000107, 0x0, 0x0, 0x1c, 0x14, "fee8a8ab78fc979fd1e00d96f7200000e100e6a180b8785596000100004c000000000000efffff2800", "2809e8db65b5598948224a0010000000000000bdb22d0000b420a1cb84ddb875d72c9f01177d3d458dd4992861ac00", "f422741913ef3d52f400003fe2fcff0000000000de5ded7e00040000002000", [0x8, 0x94]}})
r2 = syz_open_dev$loop(&(0x7f00000000c0), 0xfffffffffffffe01, 0x22880)
ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000540)={r1, 0x8, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffbff, 0x0, 0x4, 0x19, 0x14, "283878b9942423f1e7607f5da8d5d971da626705ff965218caa53a3b0ca7d308641e6ac78ca910b757817f6d89a44049a5d0162c7b56a3f5c252174f679c961a", "d4be82dfba4ae9dae5a99248e9b224a7b0e38a517bc2cc71aa096879d31244e4e20b9cf9b7835d95fc8d48e19efeeec1758f214785590138ccbdc3087c8ed5c1", "1be6818e21a2a61f84c18b3e11dbe06f18877b91168848831ee2cb5e5c902673", [0x8, 0x6]}})

25.707519859s ago: executing program 6 (id=825):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @rand_addr=0x64010102}]}, &(0x7f00000000c0)=0x10)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000300)=0x8)
setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f00000000c0)=r2, 0x4)

25.256580418s ago: executing program 34 (id=825):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @rand_addr=0x64010102}]}, &(0x7f00000000c0)=0x10)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000300)=0x8)
setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f00000000c0)=r2, 0x4)

11.392419982s ago: executing program 3 (id=900):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_INPUT(r0, &(0x7f0000010140)={0x8, {"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", 0x103f}}, 0x1006)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0)
r1 = socket(0x15, 0x5, 0x0)
getsockopt(r1, 0x200000000114, 0x802716, 0x0, &(0x7f0000000000))

10.430697311s ago: executing program 3 (id=905):
syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f00000000c0)={[{@barrier_val={'barrier', 0x3d, 0x9}}, {@orlov}, {@journal_ioprio}, {@test_dummy_encryption_v1}, {@nomblk_io_submit}, {@data_err_ignore}, {@acl}, {@test_dummy_encryption_v1}]}, 0x1, 0xbb4, &(0x7f00000017c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ioctl$XFS_IOC_GOINGDOWN(r0, 0x8004587d, &(0x7f0000000080))
chdir(&(0x7f0000000140)='./file0\x00')
execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0)

8.291048341s ago: executing program 3 (id=910):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000180), &(0x7f0000000000)=""/3, 0x2}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001000000850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r1, r0}, 0xc)

7.733598881s ago: executing program 3 (id=914):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/serio/devices/serio0/drvctl\x00', 0x2001, 0x5)
write(r0, &(0x7f0000000200)='atkbd', 0x5)

5.499769249s ago: executing program 3 (id=920):
syz_mount_image$xfs(&(0x7f0000000280), &(0x7f0000009740)='./file1\x00', 0x8, &(0x7f0000009780), 0x1, 0x9798, &(0x7f0000016540)="$eJzs3QWcbXXBeP25cOkOlVREFExKykC6REQaBOmSFJBSBMQCRDFQEOnu7u7u7u7uhvdz4RLi4qrP+/zFx7XWh5lTe878zu+792bO7LnnLDXPonMMDIw98FZvn77bziuNc9AWAwudsd/G99y+8stfOG3o1SO+dTLObENPZx96OsfAwMCgofcz6K3rBs967HHDDQweGPLfu40+yqjDjT4wMOrQi0PvZ2Cmt05G2//t5d54XzzQyYZ8u+3e+nizMYbcyZsDXWH2CQYGBkZ+z9cPGdc0f/dApS01+7zzvGv1jttwQ28e9O5tb54OfutjtL0HBkbbc+CD148hy47wnq/9dzbke4596yYrPfghfO//cy01+7zzv89/yLY4/NDrZhqyjb9/GzT2/vV8tQtvXWHoFA4aOnGD37O9fBjr/f+opWafZ8GBD96OBw69Z8bT3nhzvzl4roGBwXMPDAyeZ2Bg8Lwftkf97/ShrnxVVVX1oTT7HNMPec4+3Pt+Hhj57Z9r6efCC5585uaBgcELvfU8cfAKbz8XrKqqqqqqqqr/zGafY/o54fn/2MN6/j/1CfNM3fP/qqqqqqqqqv87zT/7HNMPea7/vuf/Ewzr+f8b96+361t/+z/bTG991esf7oOoqqqqqqqqqmE2z/z4/H+yYT3/P+/Eu5/s+X9VVVVVVVXV/50WmX6eOQfe8zp7Q6+e6u3b6fn/0Y9MsvKHNd6qqqqqqqqq+td7/bGTT3/3Nd8/PvC+13t/s6G/Fxh05JlXXvmhDfQ/o0F///uQrT7sMf3/bYjzyAdPNjCw7uIf9lDqQ+j/zGvV1/+T8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/cR9w/P+d1/+fcPWxHxi66JQn7vjEOu9+5Zvv/T94ofkf2/pDGvqH0X/r8f+BNQcNDAz1HXvNgYGBhWZfZLGpBgYG1nlixxOnGHjntpmH3PbVcYd/8w3i3/5nInOPw3e81eRvnQ5ZUQbGf+c+jnzz/ud/Y6/hB71vEO9pnOP322+NpV748vtPp/zgxzHc22eWPGuHPd7+tyzDvW+hkT/gi9++/7cfy/udh459qiFjn3qjddafesPNNv/imuusuPqqq6+67vTTzTDtNDNOO8s0M0y92pprrzrNW58/YM4me/PznP/MnI3+/jl7bPb3ztn7H9sHzdlkw56zN+9x+AtOGOftORv8L87ZnMOes8nWHPqNxplthIEV3pyaQQMD48w1wsCmQy5MO9LAwDhzD112giHLfm3c4QYGdnz3gQ45N9I76+CgrYYss9Q8i87x1m5qYODd03f7gPezH3HoyGcbejr70NM53vo2Yw+8uyoOnvXY44YbMhd/Mx2jjzLqcKMPDIw69OLQ+xmY5a2TUU95e7kPeJ/19w30zZdZ2e6tjzcbY2BgYLQhZ+ZacdAzQ6b+3/A+7f+j////ndfMg95ZHwcN/Ri6zFtes887/7vf681pGDJ3ww+9bqYhJv/Lb23/N/3deCcbeWCyYYx3GK+L82a0fq18/A2n/m+9Lg6Nd4JhjHcYr+P7geNd+sFlbnjrrv7Xxvu+fd2Cb36e7Z/Z1w0Me183PN3BqpdN+v593Tc/eIh/s7t8e45Get9CH7SvW3imy7cacv+zDXtft+CQsY/wN/u64QYGxpnz7X3dkB3fPCMM7DjkwnRDLsw7wsCBQy5M/+aFUQbOHHLhSyuvt/YqQ66Y7+/Xg6kG/c0faMJ2Ns/7trNB73nsg973952D3zodbe+338PpA/abg4Y+rH+4r6D1duxhjHcY7z+F8zzkurVOu/jz/1vvP0XjHXnY4/2g98v+wPFu8/KWt/8vj/ed7WyE90zXfP/MdjbZ325nQx7i8O/ZMv7Zn8NWgeXfOj/BO/e2y1hHvvMzxQjvu99/9DPFfMPezsZe831ft+2eA4OGNTfz/jNzM8nf7YO2fu/c/LM/b031qbduH34Yc3PlwHJbvj03I/6LczPvvzo3sw0M/7dzM3hg7oGBgSmG7h/m+WfmZoJhz80/u96MCsu/dX7Vd66aa5JLP/n23Lx/Lv7R3Mzzr87NZO+sN1O8edvkww2MOOLApitutNEG0771+e2L0731edjb4Fz/zFyO/b8zlxMN/qC5fHdV3Wm+5bb9B9vg3+3T377/uf7VuRx4Zy4H1nz/xlL/qfX7P3f5u8vfXf7u8neXv7v8xX3A8f93Xv9/4V3OnHHoLzdGmPiOK8b7sMf7Ifdfffx/qO/fHP8f74o7Jh5u4J3bhnl89q1l/iOPz8701slo+7+93PuPD/JAP/j47MuzbP/0v+n47P+ot7fVf+L3cO3/3eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/uI+4Pj/NG//HcAFlx697NADoSO8cdMlC3zY4/2Q+68+/j/U92+O/y9wyU1vDDfwzm3DPP7/1jKO4/8nvvLyy//Jx//f3lY7/l//oPzd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvLX9wHHP+f7e2/A5jlvAuWf/vvAS66/ZFJPuzxfsj9tx7/7/3/vbX/d5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+Ysbevx/4H1vb7lw6wUGx///b/cB/t/JH7P4L5I/ZvFfNH/M4r9Y/pjFf/H8MYv/EvljFv8l88cs/kvlj1n8l84fs/gvkz9m8f9u/pjFf9n8MYv/cvljFv/v5Y9Z/JfPH7P4r5A/ZvFfMX/M4r9S/pjFf+X8MYv/KvljFv9V88cs/qvlj1n8V88fs/ivkT9m8V8zf8zi//38MYv/WvljFv+188cs/uvkj1n8180fs/ivlz9m8V8/f8zi/4P8MYv/BvljFv8N88cs/hvlj1n8f5g/ZvHfOH/M4r9J/pjFf9P8MYv/ZvljFv/N88cs/j/KH7P4/zh/zOK/Rf6Yxf8n+WMW/y3zxyz+W+WPWfy3zh+z+P80f8ziv03+mMX/Z/ljFv+f549Z/H+RP2bx/2X+mMX/V8P2H/z/elj/qVn8t237xyz+2+WPWfy3zx+z+P86f8ziv0P+mMX/N/ljFv/f5o9Z/HfMH7P4/y5/zOL/+/wxi/8f8scs/n/MH7P475Q/ZvH/U/6Yxf/P+WMW/53zxyz+u+SPWfz/kj9m8d81f8zi/9f8MYv/bvljFv/d88cs/nvkj1n898wfs/jvlT9m8d87f8ziv0/+mMV/3/wxi/9++WMW//3zxyz+B+SPWfwPzB+z+B+UP2bxPzh/zOJ/SP6Yxf/Q/DGL/2H5Yxb/w/PHLP5H5I9Z/I/MH7P4H5U/ZvE/On/M4n9M/pjF/9j8MYv/cfljFv/j88cs/ifkj1n8T5T6b/0Pbrf4nyT1/0dZ/E/OH7P4n5I/ZvE/NX/M4n9a/pjF//T8MYv/GfljFv8z88cs/mflj1n8z84fs/ifkz9m8T9X7f/Bj9zif57a/4Oz+J+fP2bxvyB/zOJ/Yf6Yxf+i/DGL/8X5Yxb/S/LHLP6X5o9Z/C/LH7P4X54/ZvG/In/M4n9l/pjF/6r8MYv/1fljFv9r8scs/tfmj1n8r8sfs/hfnz9m8b8hf8zif2P+mMX/pvwxi//N+WMW/1vyxyz+t+aPWfxvyx+z+N+eP2bxvyN/zOJ/Z/6Yxf+u/DGL/935Yxb/e/LHLP735o9Z/O/LH7P4358/ZvF/IH/M4v9g/pjF/6H8MYv/w/ljFv9H8scs/o/mj1n8H8sfs/g/nj9m8X8if8zi/2T+mMX/qfwxi//T+WMW/2fyxyz+z+aPWfyfyx+z+D+fP2bxfyF/zOL/Yv6Yxf+l/DGL/8v5Yxb/V/LHLP6v5o9Z/F/LH7P4v54/ZvF/I39M4j9oIH/M4j8of8ziP1z+mMV/+Pwxi//g/DGL/wj5Yxb/EfPHLP4j5Y9Z/EfOH7P4j5I/ZvEfNX/M4j9a/pjFf/T8MYv/GPljFv8x88cs/mPlj1n8x84fs/iPkz9m8R83f8ziP17+mMV//Pwxi/9H8scs/h/NH7P4fyx/zOI/Qf6YxX/C/DGL/0T5Yxb/ifPHLP6T5I9Z/CfNH7P4fzx/zOL/ifwxi/9k+WMW/0/mj1n8J88fs/h/Kn/M4j9F/pjF/9P5Yxb/z+SPWfynzB+z+E+VP2bx/2z+mMX/c/ljFv/P549Z/L+QP2bx/2L+mMX/S/ljFv+p88cs/tPkj1n8p80fs/hPlz9m8Z8+f8zi/+X8MYv/DPljFv8Z88cs/jPlj1n8Z84fs/jPkj9m8f9K/pjF/6v5Yxb/r+WPWfy/nj9m8Z81f8zi/438MYv/bPljFv/Z88cs/nPkj1n858wfs/jPlT9m8Z87f8ziP0/+mMV/3vwxi/98+WMW//nzxyz+C+SPWfy/mT9m8V8wf8zi/638MYv/QvljFv9v549Z/BfOH7P4fyd/zOK/SP6YxX/R/DGL/2L5Yxb/xfPHLP5L5I9Z/JfMH7P4L5U/ZvFfOn/M4r9M/pjF/7v5Yxb/ZfPHLP7L5Y9Z/L+XP2bxXz5/zOK/Qv6YxX/F/DGL/0r5Yxb/lfPHLP6r5I9Z/FfNH7P4r5Y/ZvFfPX/M4r9G/pjFf838MYv/9/PHLP5r5Y9Z/NfOH7P4r5M/ZvFfN3/M4r9e/pjFf/38MYv/D/LHLP4b5I9Z/DfMH7P4b5Q/ZvH/Yf6YxX/j/DGL/yb5Yxb/TfPHLP6b5Y9Z/DfPH7P4/yh/zOL/4/wxi/8W+WMW/5/kj1n8t8wfs/hvlT9m8d86f8zi/9P8MYv/NvljFv+f5Y9Z/H+eP2bx/0X+mMX/l/ljFv9f5Y9Z/LfNH7P4b5c/ZvHfPn/M4v/r/DGL/w75Yxb/3+SPWfx/mz9m8d8xf8zi/7v8MYv/7/PHLP5/yB+z+P8xf8ziv1P+mMX/T/ljFv8/549Z/HfOH7P475I/ZvH/S/6YxX/X/DGL/1/zxyz+u+WPWfx3zx+z+O+RP2bx3zN/zOK/V/6YxX/v/DGL/z75Yxb/ffPHLP775Y9Z/PfPH7P4H5A/ZvE/MH/M4n9Q/pjF/+D8MYv/IfljFv9D88cs/oflj1n8D88fs/gfkT9m8T8yf8zif1T+mMX/6Pwxi/8x+WMW/2Pzxyz+x+WPWfyPzx+z+J+QP2bxPzF/zOJ/Uv6Yxf/k/DGL/yn5Yxb/U/PHLP6n5Y9Z/E/PH7P4n5E/ZvE/M3/M4n9W/pjF/+z8MYv/OfljFv9z88cs/uflj1n8z88fs/hfkD9m8b8wf8zif1H+mMX/4vwxi/8l+WMW/0vzxyz+l+WPWfwvzx+z+F+RP2bxvzJ/zOJ/Vf6Yxf/q/DGL/zX5Yxb/a/PHLP7X5Y9Z/K/PH7P435A/ZvG/MX/M4n9T/pjF/+b8MYv/LfljFv9b88cs/rflj1n8b88fs/jfkT9m8b8zf8zif1f+mMX/7vwxi/89+WMW/3vzxyz+9+WPWfzvzx+z+D+QP2bxfzB/zOL/UP6Yxf/h/DGL/yP5Yxb/R/PHLP6P5Y9Z/B/PH7P4P5E/ZvF/Mn/M4v9U/pjF/+n8MYv/M/ljFv9n88cs/s/lj1n8n88fs/i/kD9m8X8xf8zi/1L+mMX/5fwxi/8r+WMW/1fzxyz+r+WPWfxfzx+z+L+RPybxf/Ns/n+fxX9Q/pjFf7j8MYv/8PljFv/B+WMW/xHyxyz+I+aPWfxHyh+z+I+cP2bxHyV/zOI/av6YxX+0/DGL/+j5Yxb/MfLHLP5j5o9Z/MfKH7P4j50/ZvEfJ3/M4j9u/pjFf7z8MYv/+PljFv+P5I9Z/D+aP2bx/1j+mMV/gvwxi/+E+WMW/4nyxyz+E+ePWfwnyR+z+E+aP2bx/3j+mMX/E/ljFv/J8scs/p/MH7P4T54/ZvH/VP6YxX+K/DGL/6fzxyz+n8kfs/hPmT9m8Z8qf8zi/9n8MYv/5/LHLP6fzx+z+H8hf8zi/8X8MYv/l/LHLP5T549Z/KfJH7P4T5s/ZvGfLn/M4j99/pjF/8v5Yxb/GfLHLP4z5o9Z/GfKH7P4z5w/ZvGfJX/M4v+V/DGL/1fzxyz+X8sfs/h/PX/M4j9r/pjF/xv5Yxb/2fLHLP6z549Z/OfIH7P4z5k/ZvGfK3/M4j93/pjFf578MYv/vPljFv/58scs/vPnj1n8F8gfs/h/M3/M4r9g/pjF/1v5Yxb/hfLHLP7fzh+z+C+cP2bx/07+mMV/kfwxi/+i+WMW/8Xyxyz+i+ePWfyXyB+z+C+ZP2bxXyp/zOK/dP6YxX+Z/DGL/3fzxyz+y+aPWfyXyx+z+H8vf8ziv3z+mMV/hfwxi/+K+WMW/5Xyxyz+K+ePWfxXyR+z+K+aP2bxXy1/zOK/ev6YxX+N/DGL/5r5Yxb/7+ePWfzXyh+z+K+dP2bxXyd/zOK/bv6YxX+9/DGL//r5Yxb/H+SPWfw3yB+z+G+YP2bx3yh/zOL/w/wxi//G+WMW/03yxyz+m+aPWfw3yx+z+G+eP2bx/1H+mMX/x/ljFv8t8scs/j/JH7P4b5k/ZvHfKn/M4r91/pjF/6f5Yxb/bfLHLP4/yx+z+P88f8zi/4v8MYv/L/PHLP6/yh+z+G+bP2bx3y5/zOK/ff6Yxf/X+WMW/x3yxyz+v8kfs/j/Nn/M4r9j/pjF/3f5Yxb/3+ePWfz/kD9m8f9j/pjFf6f8MYv/n/LHLP5/zh+z+O+cP2bx3yV/zOL/l/wxi/+u+WMW/7/mj1n8d8sfs/jvnj9m8d8jf8ziv2f+mMV/r/wxi//e+WMW/33yxyz+++aPWfz3yx+z+O+fP2bxPyB/zOJ/YP6Yxf+g/DGL/8H5Yxb/Q/LHLP6H5o9Z/A/LH7P4H54/ZvE/In/M4n9k/pjF/6j8MYv/0fljFv9j8scs/sfmj1n8j8sfs/gfnz9m8T8hf8zif2L+mMX/pPwxi//J+WMW/1Pyxyz+p+aPWfxPyx+z+J+eP2bxPyN/zOJ/Zv6Yxf+s/DGL/9n5Yxb/c/LHLP7n5o9Z/M/LH7P4n58/ZvG/IH/M4n9h/pjF/6L8MYv/xfljFv9L8scs/pfmj1n8L8sfs/hfnj9m8b8if8zif2X+mMX/qvwxi//V+WMW/2vyxyz+1+aPWfyvyx+z+F+fP2bxvyF/zOJ/Y/6Yxf+m/DGL/835Yxb/W/LHLP635o9Z/G/LH7P4354/ZvG/I3/M4n9n/pjF/678MYv/3fljFv978scs/vfmj1n878sfs/jfnz9m8X8gf8zi/2D+mMX/ofwxi//D+WMW/0fyxyz+j+aPWfwfyx+z+D+eP2bxfyJ/zOL/ZP6Yxf+p/DGL/9P5Yxb/Z/LHLP7P5o9Z/J/LH7P4P58/ZvF/IX/M4v9i/pjF/6X8MYv/y/ljFv9X8scs/q/mj1n8X8sfs/i/nj9m8X8jf0ziP/xA/pjFf1D+mMV/uPwxi//w+WMW/8H5Yxb/EfLHLP4j5o9Z/EfKH7P4j5w/ZvEfJX/M4j9q/pjFf7T8MYv/6PljFv8x8scs/mPmj1n8x8ofs/iPnT9m8R8nf8ziP27+mMV/vPwxi//4+WMW/4/kj1n8P5o/ZvH/WP6YxX+C/DGL/4T5Yxb/ifLHLP4T549Z/CfJH7P4T5o/ZvH/eP6Yxf8T+WMW/8nyxyz+n8wfs/hPnj9m8f9U/pjFf4r8MYv/p/PHLP6fyR+z+E+ZP2bxnyp/zOL/2fwxi//n8scs/p/PH7P4fyF/zOL/xfwxi/+X8scs/lPnj1n8p8kfs/hPmz9m8Z8uf8ziP33+mMX/y/ljFv8Z8scs/jPmj1n8Z8ofs/jPnD9m8Z8lf8zi/5X8MYv/V/PHLP5fyx+z+H89f8ziP2v+mMX/G/ljFv/Z8scs/rPnj1n858gfs/jPmT9m8Z8rf8ziP3f+mMV/nvwxi/+8+WMW//nyxyz+8+ePWfwXyB+z+H8zf8ziv2D+mMX/W3r/kfFai/9Cen/O4v/t/DGL/8L5Yxb/7+SPWfwXyR+z+C+aP2bxXyx/zOK/eP6YxX+J/DGL/5L5Yxb/pfLHLP5L549Z/JfJH7P4fzd/zOK/bP6YxX+5/DGL//fyxyz+y+ePWfxXyB+z+K+YP2bxXyl/zOK/cv6YxX+V/DGL/6r5Yxb/1fLHLP6r549Z/NfIH7P4r5k/ZvH/fv6YxX+t/DGL/9r5Yxb/dfLHLP7r5o9Z/NfLH7P4r58/ZvH/Qf6YxX+D/DGL/4b5Yxb/jfLHLP4/zB+z+G+cP2bx3yR/zOK/af6YxX+z/DGL/+b5Yxb/H+WPWfx/nD9m8d8if8zi/5P8MYv/lvljFv+t8scs/lvnj1n8f5o/ZvHfJn/M4v+z/DGL/8/zxyz+v8gfs/j/Mn/M4v+r/DGL/7b5Yxb/7fLHLP7b549Z/H+dP2bx3yF/zOL/m/wxi/9v88cs/jvmj1n8f5c/ZvH/ff6Yxf8P+WMW/z/mj1n8d8ofs/j/KX/M4v/n/DGL/875Yxb/XfLHLP5/yR+z+O+aP2bx/2v+mMV/t/wxi//u+WMW/z3yxyz+e+aPWfz3yh+z+O+dP2bx3yd/zOK/b/6YxX+//DGL//75Yxb/A/LHLP4H5o9Z/A/KH7P4H5w/ZvE/JH/M4n9o/pjF/7D8MYv/4fljFv8j8scs/kfmj1n8j8ofs/gfnT9m8T8mf8zif2z+mMX/uPwxi//x+WMW/xPyxyz+J+aPWfxPyh+z+J+cP2bxPyV/zOJ/av6Yxf+0/DGL/+n5Yxb/M/LHLP5n5o9Z/M/KH7P4n50/ZvE/J3/M4n9u/pjF/7z8MYv/+fljFv8L8scs/hfmj1n8L8ofs/hfnD9m8b8kf8zif2n+mMX/svwxi//l+WMW/yvyxyz+V+aPWfyvyh+z+F+dP2bxvyZ/zOJ/bf6Yxf+6/DGL//X5Yxb/G/LHLP435o9Z/G/KH7P435w/ZvG/JX/M4n9r/pjF/7b8MYv/7fljFv878scs/nfmj1n878ofs/jfnT9m8b8nf8zif2/+mMX/vvwxi//9+WMW/wfyxyz+D+aPWfwfyh+z+D8s9h9hGLdZ/B8R+w8ri/+j+WMW/8fyxyz+j+ePWfyfyB+z+D+ZP2bxfyp/zOL/dP6Yxf+Z/DGL/7P5Yxb/5/LHLP7P549Z/F/IH7P4v5g/ZvF/KX/M4v9y/pjF/5X8MYv/q/ljFv/X8scs/q/nj1n838gfk/gPHsgfs/gPyh+z+A+XP2bxHz5/zOI/OH/M4j9C/pjFf8T8MYv/SPljFv+R88cs/qPkj1n8R80fs/iPlj9m8R89f8ziP0b+mMV/zPwxi/9Y+WMW/7Hzxyz+4+SPWfzHzR+z+I+XP2bxHz9/zOL/kfwxi/9H88cs/h/LH7P4T5A/ZvGfMH/M4j9R/pjFf+L8MYv/JPljFv9J88cs/h/PH7P4fyJ/zOI/Wf6Yxf+T+WMW/8nzxyz+n8ofs/hPkT9m8f90/pjF/zP5Yxb/KfPHLP5T5Y9Z/D+bP2bx/1z+mMX/8/ljFv8v5I9Z/L+YP2bx/1L+mMV/6vwxi/80+WMW/2nzxyz+0+WPWfynzx+z+H85f8ziP0P+mMV/xvwxi/9M+WMW/5nzxyz+s+SPWfy/kj9m8f9q/pjF/2v5Yxb/r+ePWfxnzR+z+H8jf8ziP1v+mMV/9vwxi/8c+WMW/znzxyz+c+WPWfznzh+z+M+TP2bxnzd/zOI/X/6YxX/+/DGL/wL5Yxb/b+aPWfwXzB+z+H8rf8ziv1D+mMX/2/ljFv+F88cs/t/JH7P4L5I/ZvFfNH/M4r9Y/pjFf/H8MYv/EvljFv8l88cs/kvlj1n8l84fs/gvkz9m8f9u/pjFf9n8MYv/cvljFv/v5Y9Z/JfPH7P4r5A/ZvFfMX/M4r/SB/lv+W8a139oFv+V2/4xi/8q+WMW/1Xzxyz+q+WPWfxXzx+z+K+RP2bxXzN/zOL//fwxi/9a+WMW/7Xzf7f3TIzFf538MYv/uvljFv/18scs/uvnj1n8f5A/ZvHfIH/M4r9h/pjFf6P8MYv/D/PHLP4b549Z/DfJH7P4b5o/ZvHfLH/M4r95/pjF/0f5Yxb/H+ePWfy3yB+z+P8kf8ziv2X+mMV/q/wxi//W+WMW/5/mj1n8t8kfs/j/LH/M4v/z/DGL/y/yxyz+v8wfs/j/Kn/M4r9t/pjFf7v8MYv/9vljFv9f549Z/HfIH7P4/yZ/zOL/2/wxi/+O+WMW/9/lj1n8f58/ZvH/Q/6Yxf+P+WMW/53yxyz+f8ofs/j/OX/M4r9z/pjFf5f8MYv/X/LHLP675o9Z/P+aP2bx3y1/zOK/e/6YxX+P/DGL/575Yxb/vfLHLP57549Z/PfJH7P475s/ZvHfL3/M4r9//pjF/4D8MYv/gfljFv+D8scs/gfnj1n8D8kfs/gfmj/m8B88cFj+mMN/YPDh+WMW/yPyxyz+R+aPWfyPyh+z+B+dP2bxPyZ/zOJ/bP6Yxf+4/DGL//H5Yxb/E/LHLP4n5o9Z/E/KH7P4n5w/ZvE/JX/M4n9q/pjF/7T8MYv/6fljFv8z8scs/mfmj1n8z8ofs/ifnT9m8T8nf8zif27+mMX/vPwxi//5+WMW/wvyxyz+F+aPWfwvyh+z+F+cP2bxvyR/zOJ/af6Yxf+y/DGL/+X5Yxb/K/LHLP5X5o9Z/K/KH7P4X50/ZvG/Jn/M4n9t/pjF/7r8MYv/9fljFv8b8scs/jfmj1n8b8ofs/jfnD9m8b8lf8zif2v+mMX/tvwxi//t+WMW/zvyxyz+d+aPWfzvyh+z+N+dP2bxvyd/zOJ/b/6Yxf++/DGL//35Yxb/B/LHLP4P5o9Z/B/KH7P4P2z0H7TVP15E4v+I0f+fyOL/aP6Yxf+x/DGL/+P5Yxb/J/LHLP5P5o9Z/J/KH7P4P50/ZvF/Jn/M4v9s/pjF/7n8sf9G/yWGnn2v//P5Y/+N/rT9v5A/ZvF/MX/M4v9S/pjF/+X8MYv/K/ljFv9X88cs/q/lj1n8X88fs/i/kT8m8R9hIH/M4j8of8ziP1z+mMV/+Pwxi//g/DGL/wj5Yxb/EfPHLP4j5Y9Z/EfOH7P4j5I/ZvEfNX/M4j9a/pjFf/T8MYv/GPljFv8x88cs/mPlj1n8x84fs/iPkz9m8R83f8ziP17+mMV//Pwxi/9H8scs/h/NH7P4fyx/zOI/Qf6YxX/C/DGL/0T5Yxb/ifPHLP6T5I9Z/CfNH7P4fzx/zOL/ifwxi/9k+WMW/0/mj1n8J88fs/h/Kn/M4j9F/pjF/9P5Yxb/z+SPWfynzB+z+E+VP2bx/2z+mMX/c/ljFv/P549Z/L+QP2bx/2L+mMX/S/ljFv+p88cs/tPkj1n8p80fs/hPlz9m8Z8+f8zi/+X8MYv/DPljFv8Z88cs/jPlj1n8Z84fs/jPkj9m8f9K/pjF/6v5Yxb/r+WPWfy/nj9m8Z81f8zi/438MYv/bPljFv/Z88cs/nPkj1n858wfs/jPlT9m8Z87f8ziP0/+mMV/3vwxi/98+WMW//nzxyz+C+SPWfy/mT9m8V8wf8zi/638MYv/QvljFv9v549Z/BfOH7P4fyd/zOK/SP6YxX/R/DGL/2L5Yxb/xfPHLP5L5I9Z/JfMH7P4L5U/ZvFfOn/M4r9M/pjF/7v5Yxb/ZfPHLP7L5Y9Z/L+XP2bxXz5/zOK/Qv6YxX/F/DGL/0r5Yxb/lfPHLP6r5I9Z/FfNH7P4r5Y/ZvFfPX/M4r9G/pjFf838MYv/9/PHLP5r5Y9Z/NfOH7P4r5M/ZvFfN3/M4r9e/pjFf/38MYv/D/LHLP4b5I9Z/DfMH7P4b5Q/ZvH/Yf6YxX/j/DGL/yb5Yxb/TfPHLP6b5Y9Z/DfPH7P4/yh/zOL/4/wxi/8W+WMW/5/kj1n8t8wfs/hvlT9m8d86f8zi/9P8MYv/NvljFv+f5Y9Z/H+eP2bx/0X+mMX/l/ljFv9f5Y9Z/LfNH7P4b5c/ZvHfPn/M4v/r/DGL/w75Yxb/3+SPWfx/mz9m8d8xf8zi/7v8MYv/7/PHLP5/yB+z+P8xf8ziv1P+mMX/T/ljFv8/549Z/HfOH7P475I/ZvH/S/6YxX/X/DGL/1/zxyz+u+WPWfx3zx+z+O+RP2bx3zN/zOK/V/6YxX/v/DGL/z75Yxb/ffPHLP775Y9Z/PfPH7P4H5A/ZvE/MH/M4n9Q/pjF/+D8MYv/IfljFv9D88cs/oflj1n8D88fs/gfkT9m8T8yf8zif1T+mMX/6Pwxi/8x+WMW/2Pzxyz+x+WPWfyPzx+z+J+QP2bxPzF/zOJ/Uv6Yxf/k/DGL/yn5Yxb/U/PHLP6n5Y9Z/E/PH7P4n5E/ZvE/M3/M4n9W/pjF/+z8MYv/OfljFv9z88cs/uflj1n8z88fs/hfkD/2pv/r//3+F+aPWbb/i/LHLP4X549Z/C/JH7P4X5o/ZvG/LH/M4n95/pjF/4r8MYv/lfljFv+r8scs/lfnj1n8r8kfs/hfmz9m8b8uf8zif33+mMX/hvwxi/+N+WMW/5vyxyz+N+ePWfxvyR+z+N+aP2bxvy1/zOJ/e/6Yxf+O/DGL/535Yxb/u/LHLP53549Z/O/JH7P435s/ZvG/L3/M4n9//pjF/4H8MYv/g/ljFv+H8scs/g/nj1n8H8kfs/g/mj9m8X8sf8zi/3j+mMX/ifwxi/+T+WMW/6fyxyz+T+ePWfyfyR+z+D+bP2bxfy5/zOL/fP6Yxf+F/DGL/4v5Yxb/l/LHLP4v549Z/F/JH7P4v5o/ZvF/LX/M4v96/pjF/438MYn/iAP5Yxb/QfljFv/h8scs/sPnj1n8B+ePWfxHyB+z+I+YP2bxHyl/zOI/cv6YxX+U/DGL/6j5Yxb/0fLH/kv9Bw0MbPU3/qPnj/2X+r/Ze/3HyB+z+I+ZP2bxHyt/zOI/dv6YxX+c/DGL/7j5Yxb/8fLHLP7j549Z/D+SP2bx/2j+mMX/Y/ljFv8J8scs/hPmj1n8J8ofs/hPnD9m8Z8kf8ziP2n+mMX/4/ljFv9P5I9Z/CfLH7P4fzJ/zOI/ef6Yxf9T+WMW/ynyxyz+n84fs/h/Jn/M4j9l/pjFf6r8MYv/Z/PHLP6fyx+z+H8+f8zi/4X8MYv/F/PHLP5fyh+z+E+dP2bxnyZ/zOI/bf6YxX+6/DGL//T5Yxb/L+ePWfxnyB+z+M+YP2bxnyl/zOI/c/6YxX+W/DGL/1fyxyz+X80fs/h/LX/M4v/1/DGL/6z5Yxb/b+SPWfxnyx+z+M+eP2bxnyN/zOI/Z/6YxX+u/DGL/9z5Yxb/efLHLP7z5o9Z/OfLH7P4z58/ZvFfIH/M4v/N/DGL/4L5Yxb/b+WPWfwXyh+z+H87f8ziv3D+mMX/O/ljFv9F8scs/ovmj1n8F8sfs/gvnj9m8V8if8ziv2T+mMV/qfwxi//S+WMW/2Xyxyz+380fs/gvmz9m8V8uf8zi/738MYv/8vljFv8V8scs/ivmj1n8V8ofs/ivnD9m8V8lf8ziv2r+mMV/tfwxi//q+WMW/zXyxyz+a+aPWfy/nz9m8V8rf8ziv3b+mMV/nfwxi/+6+WMW//Xyxyz+6+ePWfx/kD9m8d8gf8ziv2H+mMV/o/wxi/8P88cs/hvnj1n8N8kfs/hvmj9m8d8sf8ziv3n+mMX/R/ljFv8f549Z/LfIH7P4/yR/zOK/Zf6YxX+r/DGL/9b5Yxb/n2r9RxrmrRb/bbT+w87i/7P8MYv/z/PH/qv9x37n2hF/kT/2X+3/7rUj/jJ/zOL/q/wxi/+2+WMW/+3yxyz+2+ePWfx/nT9m8d8hf8zi/xuP/+b/ysIW/996/P+lLP475o9Z/H+XP2bx/33+mMX/D/ljFv8/5o9Z/HfKH7P4/yl/zOL/5/wxi//O+WMW/13yxyz+f8kfs/jvmj9m8f9r/pjFf7f8MYv/7vljFv898scs/nvmj1n898ofs/jvnT9m8d8nf8ziv2/+mMV/v/wxi//+5D/Kv3Fc/6FZ/A9o+8cs/gfmj1n8D8ofs/gfnD9m8T8kf8zif2j+mMX/sPwxi//h+WMW/yPyxyz+R+aPWfyPyh+z+B+dP2bxPyZ/zOJ/bP6Yxf+4/DGL//H5Yxb/E/LHLP4n5o9Z/E/KH7P4n5w/ZvE/JX/M4n9q/pjF/7T8MYv/6fljFv8z8scs/mfmj1n8z8ofs/ifnT9m8T8nf8zif27+mMX/vPwxi//5+WMW/wvyxyz+F+aPWfwvyh+z+F+cP2bxvyR/zOJ/af6Yxf+y/DGL/+X5Yxb/K/LHLP5X5o9Z/K/KH7P4X50/ZvG/Jn/M4n9t/pjF/7r8MYv/9fljFv8b8scs/jfmj1n8b8ofs/jfnD9m8b8lf8zif2v+mMX/tvwxi//t+WMW/zvyxyz+d+aPWfzvyh+z+N+dP2bxvyd/zOJ/b/6Yxf++/DGL//35Yxb/B/LHLP4P5o9Z/B/KH7P4P/x+/1H+zeP6D83i/0jbP2bxfzR/zOL/WP6Yxf/x/DGL/xP5Yxb/J/PHLP5P5Y9Z/J/OH7P4P5M/ZvF/Nn/M4v9c/pjF//n8MYv/C/ljFv8X88cs/i/lj1n8X84fs/i/kj9m8X81f8zi/1r+mMX/9fwxi/8b+WMS/5EG8scs/oPyxyz+w+WPWfyHzx+z+A/OH7P4j5A/ZvEfMX/M4j9S/pjFf+T8MYv/KPljFv9R88cs/qPlj1n8R88fs/iPkT9m8R8zf8ziP1b+mMV/7Pwxi/84+WMW/3Hzxyz+4+WPWfzHzx+z+H8kf8zi/9H8MYv/x/LHLP4T5I9Z/CfMH7P4T5Q/ZvGfOH/M4j9J/pjFf9L8MYv/x/PHLP6fyB+z+E+WP2bx/2T+mMV/8vwxi/+n8scs/lPkj1n8P50/ZvH/TP6YxX/K/DGL/1T5Yxb/z+aPWfw/lz9m8f98/pjF/wv5Yxb/L+aPWfy/lD9m8Z86f8ziP03+mMV/2vwxi/90+WMW/+nzxyz+X84fs/jPkD9m8Z8xf8ziP1P+mMV/5vwxi/8s+WMW/6/kj1n8v5o/ZvH/Wv6Yxf/r+WMW/1nzxyz+38gfs/jPlj9m8Z89f8ziP0f+mMV/zvwxi/9c+WMW/7nzxyz+8+SPWfznzR+z+M+XP2bxnz9/zOK/QP6Yxf+b+WMW/wXzxyz+38ofs/gvlD9m8f92/pjFf+H8MYv/d/LHLP6L5I9Z/BfNH7P4L5Y/ZvFfPH/M4r9E/pjFf8n8MYv/UvljFv+l88cs/svkj1n8v5s/ZvFfNn/M4r9c/pjF/3v5Yxb/5fPHLP4r5I9Z/FfMH7P4r5Q/ZvFfOX/M4r9K/pjFf9X8MYv/avljFv/V88cs/mvkj1n818wfs/h/P3/M4r9W/pjFf+38MYv/OvljFv9188cs/uvlj1n8188fs/j/IH/M4r9B/pjFf8P8MYv/RvljFv8f5o9Z/DfOH7P4b5I/ZvHfNH/M4r9Z/pjFf/P8MYv/j/LH3us/ysB/r/+P88cs2/8W+WMW/5/kj1n8t8wfs/hvlT9m8d86f8zi/9P8MYv/NvljFv+f5Y9Z/H+eP2bx/0X+mMX/l/ljFv9f5Y9Z/LfNH7P4b5c/ZvHfPn/M4v/r/DGL/w75Yxb/3+SPWfx/mz9m8d8xf8zi/7v8MYv/7/PHLP5/yB+z+P8xf8ziv1P+mMX/T/ljFv8/549Z/HfOH7P475I/ZvH/S/6YxX/X/DGL/1/zxyz+u+WPWfx3zx+z+O+RP2bx3zN/zOK/V/6YxX/v/DGL/z75Yxb/ffPHLP775Y9Z/PfPH7P4H5A/ZvE/MH/M4n9Q/pjF/+D8MYv/IfljFv9D88cs/oflj1n8D88fs/gfkT9m8T8yf8zif1T+mMX/6Pwxi/8x+WMW/2Pzxyz+x+WPWfyPzx+z+J+QP2bxPzF/zOJ/Uv6Yxf/k/DGL/yn5Yxb/U/PHLP6n5Y9Z/E/PH7P4n5E/ZvE/M3/M4n9W/pjF/+z8MYv/OfljFv9z88cs/uflj1n8z88fs/hfkD9m8b8wf8zif1H+mMX/4vwxi/8l+WMW/0vzxyz+l+WPWfwvzx+z+F+RP2bxvzJ/zOJ/Vf6Yxf/q/DGL/zX5Yxb/a/PHLP7X5Y9Z/K/PH7P435A/ZvG/MX/M4n9T/pjF/+b8MYv/LfljFv9b88cs/rflj1n8b88fs/jfkT9m8b8zf8zif1f+mMX/7vwxi/89+WMW/3vzxyz+9+WPWfzvzx+z+D+QP2bxfzB/zOL/UP6Yxf/h/DGL/yP5Yxb/R/PHLP6P5Y9Z/B/PH7P4P5E/ZvF/Mn/M4v9U/pjF/+n8MYv/M/ljFv9n88cs/s/lj1n8n88fs/i/kD9m8X8xf8zi/1L+mMX/5fwxi/8r+WMW/1fzxyz+r+WPWfxfzx+z+L+RPybxH3kgf8ziPyh/zOI/XP6YxX/4/DGL/+D8MYv/CPljFv8R88cs/iPlj1n8R84fs/iPkj9m8R81f8ziP1r+mMV/9Pwxi/8Y+WMW/zHzxyz+Y+WPWfzHzh+z+I+TP2bxHzd/zOI/Xv6YxX/8/DGL/0fyxyz+H80fs/h/LH/M4j9B/pjFf8L8MYv/RPljFv+J88cs/pPkj1n8J80fs/h/PH/M4v+J/DGL/2T5Yxb/T+aPWfwnzx+z+H8qf8ziP0X+mMX/0/ljFv/P5I9Z/KfMH7P4T5U/ZvH/bP6Yxf9z+WMW/8/nj1n8v5A/ZvH/Yv6Yxf9L+WMW/6nzxyz+0+SPWfynzR+z+E+XP2bxnz5/zOL/5fwxi/8M+WMW/xnzxyz+M+WPWfxnzh+z+M+SP2bx/0r+mMX/q/ljFv+v5Y9Z/L+eP2bxnzV/zOL/jfwxi/9s+WMW/9nzxyz+c+SPWfznzB+z+M+VP2bxnzt/zOI/T/6YxX/e/DGL/3z5Yxb/+fPHLP4L5I9Z/L+ZP2bxXzB/zOL/rfwxi/9C+WMW/2/nj1n8F84fs/h/J3/M4r9I/pjFf9H8MYv/YvljFv/F88cs/kvkj1n8l8wfs/gvlT9m8V86f8ziv0z+mMX/u/ljFv9l88cs/svlj1n8v5c/ZvFfPn/M4r9C/pjFf8X8MYv/SvljFv+V88cs/qvkj1n8V80fs/ivlj9m8V89f8ziv0b+mMV/zfwxi//388cs/mvlj1n8184fs/ivkz9m8V83f8ziv17+mMV//fwxi/8P8scs/hvkj1n8N8wfs/hvlD9m8f9h/pjFf+P8MYv/JvljFv9N88cs/pvlj1n8N88fs/j/KH/M4v/j/DGL/xb5Yxb/n+SPWfy3zB+z+G+VP2bx3zp/zOL/0/wxi/82+WMW/5/lj1n8f54/ZvH/Rf6Yxf+X+WMW/1/lj1n8t80fs/hvlz9m8d8+f8zi/+v8MYv/DvljFv/f5I9Z/H+bP2bx3zF/zOL/u/wxi//v88cs/n/IH7P4/zF/zOK/U/6Yxf9P+WMW/z/nj1n8d84fs/jvkj9m8f9L/pjFf9f8MYv/X/PHLP675Y9Z/HfPH7P475E/ZvHfM3/M4r9X/pjFf+/8MYv/PvljFv9988cs/vvlj1n8988fs/gfkD9m8T8wf8zif1D+mMX/4Pwxi/8h+WMW/0Pzxyz+h+WPWfwPzx+z+B+RP2bxPzJ/zOJ/VP6Yxf/o/DGL/zH5Yxb/Y/PHLP7H5Y9Z/I/PH7P4n5A/ZvE/MX/M4n9S/pjF/+T8MYv/KfljFv9T88cs/qflj1n8T88fs/ifkT9m8T8zf8zif1b+mMX/7Pwxi/85+WMW/3Pzxyz+5+WPWfzPzx+z+F+QP2bxvzB/zOJ/Uf6Yxf/i/DGL/yX5Yxb/S/PHLP6X5Y9Z/C/PH7P4X5E/ZvG/Mn/M4n9V/pjF/+r8MYv/NfljFv9r88cs/tflj1n8r88fs/jfkD9m8b8xf8zif1P+mMX/5vwxi/8t+WMW/1vzxyz+t+WPWfxvzx+z+N+RP2bxvzN/zOJ/V/6Yxf/u/DGL/z35Yxb/e/PHLP735Y9Z/O/PH7P4P5A/ZvF/MH/M4v9Q/pjF/+H8MYv/I/ljFv9H88cs/o/lj1n8H88fs/g/kT9m8X8yf8zi/1T+mMX/6fwxi/8z+WMW/2fzxyz+z+WPWfyfzx+z+L+QP2bxfzF/zOL/Uv6Yxf/l/DGL/yv5Yxb/V/PHLP6v5Y9Z/F/PH7P4v5E/JvEfZSB/zOI/KH/M4j9c/pjFf/j8MYv/4Pwxi/8I+WMW/xHzxyz+I+WPWfxHzh+z+I+SP2bxHzV/zOI/Wv6YxX/0/DGL/xj5Yxb/MfPHLP5j5Y9Z/MfOH7P4j5M/ZvEfN3/M4j9e/pjFf/z8MYv/R/LHLP4fzR+z+H8sf8ziP0H+mMV/wvwxi/9E+WMW/4nzxyz+k+SPWfwnzR+z+H88f8zi/4n8MYv/ZPljFv9P5o9Z/CfPH7P4fyp/zOI/Rf6Yxf/T+WMW/8/kj1n8p8wfs/hPlT9m8f9s/pjF/3P5Yxb/z+ePWfy/kD9m8f9i/pjF/0v5Yxb/qfPHLP7T5I9Z/KfNH7P4T5c/ZvGfPn/M4v/l/DGL/wz5Yxb/GfPHLP4z5Y9Z/GfOH7P4z5I/ZvH/Sv6Yxf+r+WMW/6/lj1n8v54/ZvGfNX/M4v+N/DGL/2z5Yxb/2fPHLP5z5I9Z/OfMH7P4z5U/ZvGfO3/M4j9P/pjFf978MYv/fPljFv/588cs/gvkj1n8v5k/ZvFfMH/M4v+t/DGL/0L5Yxb/b+ePWfwXzh+z+H8nf8ziv0j+mMV/0fwxi/9i+WMW/8Xzxyz+S+SPWfyXzB+z+C+VP2bxXzp/zOK/TP6Yxf+7+WMW/2Xzxyz+y+WPWfy/lz9m8V8+f8ziv0L+mMV/xfwxi/9K+WMW/5Xzxyz+q+SPWfxXzR+z+K+WP2bxXz1/zOK/Rv6YxX/N/DGL//fzxyz+a+WPWfzXzh+z+K+TP2bxXzd/zOK/Xv6YxX/9/DGL/w/yxyz+G+SPWfw3zB+z+G+UP2bx/2H+mMV/4/wxi/8m+WMW/03zxyz+m+WPWfw3zx+z+P8of8zi/+P8MYv/FvljFv+f5I9Z/LfMH7P4b5U/ZvHfOn/M4v/T/DGL/zb5Yxb/n+WPWfx/nj9m8f9F/pjF/5f5Yxb/X+WPWfy3zR+z+G+XP2bx3z5/zOL/6/wxi/8O+WMW/9/kj1n8f5s/ZvHfMX/M4v+7/DGL/+/zxyz+f8gfs/j/MX/M4r9T/pjF/0/5Yxb/P+ePWfx3zh+z+O+SP2bx/0v+mMV/1/wxi/9f88cs/rvlj1n8d88fs/jvkT9m8d8zf8ziv1f+mMV/7/wxi/8++WMW/33zxyz+++WPWfz3zx+z+B+QP2bxPzB/zOJ/UP6Yxf/g/DGL/yH5Yxb/Q/PHLP6H5Y9Z/A/PH7P4H5E/ZvE/Mn/M4n9U/pjF/+j8MYv/MfljFv9j88cs/sflj1n8j88fs/ifkD9m8T8xf8zif1L+mMX/5Pwxi/8p+WMW/1Pzxyz+p+WPWfxPzx+z+J+RP2bxPzN/zOJ/Vv6Yxf/s/DGL/zn5Yxb/c/PHLP7n5Y9Z/M/PH7P4X5A/ZvG/MH/M4n9R/pjF/+L8MYv/JfljFv9L88cs/pflj1n8L88fs/hfkT9m8b8yf8zif1X+mMX/6vwxi/81+WMW/2vzxyz+1+WPWfyvzx+z+N+QP2bxvzF/zOJ/U/6Yxf/m/DGL/y35Yxb/W/PHLP635Y9Z/G/PH7P435E/ZvG/M3/M4n9X/pjF/+78MYv/PfljFv9788cs/vflj1n8788fs/g/kD9m8X8wf8zi/1D+mMX/4fwxi/8j+WMW/0fzxyz+j+WPWfwfzx+z+D+RP2bxfzJ/zOL/VP6Yxf/p/DGL/zP5Yxb/Z/PHLP7P5Y9Z/J/PH7P4v5A/ZvF/MX/M4v9S/pjF/+X8MYv/K/ljFv9X88cs/q/lj1n8X88fs/i/kT8m8R91IH/M4j8of8ziP1z+mMV/+Pwxi//g/DGL/wj5Yxb/EfPHLP4j5Y9Z/EfOH7P4j5I/ZvEfNX/M4j9a/pjFf/T8MYv/GPljFv8x88cs/mPlj1n8x84fs/iPkz9m8R83f8ziP17+mMV//Pwxi/9H8scs/h/NH7P4fyx/zOI/Qf6YxX/C/DGL/0T5Yxb/ifPHLP6T5I9Z/CfNH7P4fzx/zOL/ifwxi/9k+WMW/0/mj1n8J88fs/h/Kn/M4j9F/pjF/9P5Yxb/z+SPWfynzB+z+E+VP2bx/2z+mMX/c/ljFv/P549Z/L+QP2bx/2L+mMX/S/ljFv+p88cs/tPkj1n8p80fs/hPlz9m8Z8+f8zi/+X8MYv/DPljFv8Z88cs/jPlj1n8Z84fs/jPkj9m8f9K/pjF/6v5Yxb/r+WPWfy/nj9m8Z81f8zi/438MYv/bPljFv/Z88cs/nPkj1n858wfs/jPlT9m8Z87f8ziP0/+mMV/3vwxi/98+WMW//nzxyz+C+SPWfy/mT9m8V8wf8zi/638MYv/QvljFv9v549Z/BfOH7P4fyd/zOK/SP6YxX/R/DGL/2L5Yxb/xfPHLP5L5I9Z/JfMH7P4L5U/ZvFfOn/M4r9M/pjF/7v5Yxb/ZfPHLP7L5Y9Z/L+XP2bxXz5/zOK/Qv6YxX/F/DGL/0r5Yxb/lfPHLP6r5I9Z/FfNH7P4r5Y/ZvFfPX/M4r9G/pjFf838MYv/9/PHLP5r5Y9Z/NfOH7P4r5M/ZvFfN3/M4r9e/pjFf/38MYv/D/LHLP4b5I9Z/DfMH7P4b5Q/ZvH/Yf6YxX/j/DGL/yb5Yxb/TfPH3vUf/423+rBH9P+zD/DfLH/Msv1vnj9m8f9R/pjF/8f5Yxb/LXT+o/xTS1n8f6Lz/+ey+G+ZP2bx3yp/zOK/df6Yxf+n+WMW/23yxyz+P8sfs/j/PH/M4v+L/DGL/y/zxyz+v8ofs/hvmz9m8d8uf8ziv33+mMX/1/ljFv8d8scs/r/JH7P4/zZ/zOK/Y/6Yxf93+WMW/9/nj1n8/5A/ZvH/Y/6YxX+n/DGL/5/yxyz+f84fs/jvnD9m8d8lf8zi/5f8MYv/rvljFv+/5o9Z/HfLH7P4754/ZvHfI3/M4r9n/pjFf6/8MYv/3vljFv998scs/vvmj1n898sfs/jvnz9m8T8gf8zif2D+mMX/oPwxi//B+WMW/0Pyxyz+h+aPWfwPyx+z+B+eP2bxPyJ/zOJ/ZP6Yxf+o/DGL/9H5Yxb/Y/LHLP7H5o9Z/I8D/0EDA1v9O4f2n5jF//i2f8zif0L+mMX/xPwxi/9J+WMW/5Pzxyz+p+SPWfxPzR+z+J+WP2bxPz1/zOJ/Rv6Yxf/M/DGL/1n5Yxb/s/PHLP7n5I9Z/M/NH7P4n5c/ZvE/P3/M4n9B/pjF/8L8MYv/RfljFv+L88cs/pfkj1n8L80fs/hflj9m8b88f8zif0X+mMX/yvwxi/9Vw/If7t8wrv/QLP5Xt/1jFv9r8scs/tfmj1n8r8sfs/hfnz9m8b8hf8zif2P+mMX/pvwxi//N+WMW/1vyxyz+t+aPWfxvyx+z+N+eP2bxvyN/zOJ/Z/6Yxf+u/DGL/935Yxb/e/LHLP735o9Z/O/LH7P4358/ZvF/IH/M4v9g/pjF/6H8MYv/w/ljFv9H8scs/o/mj1n8H8sfs/g/nj9m8X8if8zi/2T+mMX/qfwxi//T+WMW/2fyxyz+z+aPWfyfyx+z+D+fP2bxfyF/zOL/Yv6Yxf+l/DGL/8v5Yxb/V/LHLP6v5o9Z/F/LH7P4v54/ZvF/I39M4j/aQP6YxX9Q/pjFf7j8MYv/8PljFv/B+WMW/xHyxyz+I+aPWfxHyh+z+I+cP2bxHyV/zOI/av6YxX+0/DGL/+j5Yxb/MfLHLP5j5o9Z/MfKH7P4j50/ZvEfJ3/M4j9u/pjFf7z8MYv/+PljFv+P5I9Z/D+aP2bx/1j+mMV/gvwxi/+E+WMW/4nyxyz+E+ePWfwnyR+z+E+aP2bx/3j+mMX/E/ljFv/J8scs/p/MH7P4T54/ZvH/VP6YxX+K/DGL/6fzxyz+n8kfs/hPmT9m8Z8qf8zi/9n8MYv/5/LHLP6fzx+z+H8hf8zi/8X8MYv/l/LHLP5T549Z/KfJH7P4T5s/ZvGfLn/M4j99/pjF/8v5Yxb/GfLHLP4z5o9Z/GfKH7P4z5w/ZvGfJX/M4v+V/DGL/1fzxyz+X8sfs/h/PX/M4j9r/pjF/xv5Yxb/2fLHLP6z549Z/OfIH7P4z5k/ZvGfK3/M4j93/pjFf578MYv/vPljFv/58scs/vPnj1n8F8gfs/h/M3/M4r9g/pjF/1v5Yxb/hfLHLP7fzh+z+C+cP2bx/07+mMV/kfwxi/+i+WMW/8Xyxyz+i+ePWfyXyB+z+C+ZP2bxXyp/zOK/dP6YxX+Z/DGL/3fzxyz+y+aPWfyXyx+z+H8vf8ziv3z+mMV/hfwxi/+K+WMW/5Xyxyz+K+ePWfxXyR+z+K+aP2bxXy1/zOK/ev6YxX+N/DGL/5r5Yxb/7+ePWfzXyh+z+K+dP2bxXyd/zOK/bv6YxX+9/DGL//r5Yxb/H+T/N70x9NTiv0H+mMV/w/wxi/9G+WMW/x/mj1n8N84fs/hvkj9m8d80f8ziv1n+mMV/8/wxi/+P8scs/j/OH7P4b5E/ZvH/Sf6YxX/L/DGL/1b5Yxb/rfPHLP4/zR+z+G+TP2bx/1n+mMX/5/ljFv9f5I9Z/H+ZP2bx/1X+mMV/2/wxi/92+WMW/+3zxyz+v84fs/jvkD9m8f9N/pjF/7f5Yxb/HfPH3vUfNDCw1X+v/+/yxyzb/+/zxyz+f8gfs/j/MX/M4r9T/pjF/0/5Yxb/P+ePWfx3zh+z+O+SP2bx/0v+mMV/1/wxi/9f88cs/rvlj1n8d88fs/jvkT9m8d8zf8ziv1f+mMV/7/wxi/8++WMW/33zxyz+++WPWfz3zx+z+B+QP2bxPzB/zOJ/UP6Yxf/g/DGL/yH5Yxb/Q/PHLP6H5Y9Z/A/PH7P4H5E/ZvE/Mn/M4n9U/pjF/+j8MYv/MfljFv9j88cs/sflj1n8j88fs/ifkD9m8T8xf8zif1L+mMX/5Pwxi/8p+WMW/1Pzxyz+p+WPWfxPzx+z+J+RP2bxPzN/zOJ/Vv6Yxf/s/DGL/zn5Yxb/c/PHLP7n5Y9Z/M/PH7P4X5A/ZvG/MH/M4n9R/pjF/+L8MYv/JfljFv9L88cs/pflj1n8L88fs/hfkT9m8b8yf8zif1X+mMX/6vwxi/81+WMW/2vzxyz+1+WPWfyvzx+z+N+QP2bxvzF/zOJ/U/6Yxf/m/DGL/y35Yxb/W/PHLP635Y9Z/G/PH7P435E/ZvG/M3/M4n9X/pjF/+78MYv/PfljFv9788cs/vflj1n8788fs/g/kD9m8X8wf8zi/1D+mMX/4fwxi/8j+WMW/0fzxyz+j+WPWfwfzx+z+D+RP2bxfzJ/zOL/VP6Yxf/p/DGL/zP5Yxb/Z/PHLP7P5Y9Z/J/PH7P4v5A/ZvF/MX/M4v9S/pjF/+X8MYv/K/ljFv9X88cs/q/lj1n8X88fs/i/kT8m8R99IH/M4j8of8ziP1z+mMV/+Pwxi//g/DGL/wj5Yxb/EfPHLP4j5Y9Z/EfOH7P4j5I/ZvEfNX/M4j9a/pjFf/T8MYv/GPljFv8x88cs/mPlj1n8x84fs/iPkz9m8R83f8ziP17+mMV//Pwxi/9H8scs/h/NH7P4fyx/zOI/Qf6YxX/C/DGL/0T5Yxb/ifPHLP6T5I9Z/CfNH7P4fzx/zOL/ifwxi/9k+WMW/0/m/05bvue8xX/y/DGL/6fyxyz+U+SPWfw/nT9m8f9M/pjFf8r8MYv/VPljFv/P5o9Z/D+XP2bx/3z+mMX/C/ljFv8v5o9Z/L+UP2bxnzp/zOI/Tf6YxX/a/DGL/3T5Yxb/6fPHLP5fzh+z+M+QP2bxnzF/zOI/U/6YxX/m/DGL/yz5Yxb/r+SPWfy/mj9m8f9a/pjF/+v5Yxb/WfPHLP7fyB+z+M+WP2bxnz1/zOI/R/6YxX/O/DGL/1z5Yxb/ufPHLP7z5I9Z/OfNH7P4z5c/ZvGfP3/M4r9A/pjF/5v5Yxb/BfPHLP7fyh+z+C+UP2bx/3b+mMV/4fwxi/938scs/ovkj1n8F80fs/gvlj9m8V88f8ziv0T+mMV/yfwxi/9S+WMW/6Xzxyz+y+SPWfy/mz9m8V82f8ziv1z+mMX/e/ljFv/l88cs/ivkj1n8V8wfs/ivlD9m8V85f8ziv0r+mMV/1fwxi/9q+WMW/9Xzxyz+a+SPWfzXzB+z+H8/f8ziv1b+mMV/7fwxi/86+WMW/3Xzxyz+6+WPWfzXzx+z+P8gf8ziv0H+mMV/w/wxi/9G+WMW/x/mj1n8N84fs/hvkj9m8d80f8ziv1n+mMV/8/wxi/+P8scs/j/OH7P4b5E/ZvH/Sf6YxX/L/DGL/1b5Yxb/rfPHLP4/zR+z+G+TP2bx/1n+mMX/5/ljFv9f5I9Z/H+ZP2bx/1X+mMV/2/wxi/92+WMW/+3zxyz+v84fs/jvkD9m8f9N/pjF/7f5Yxb/HfPHLP6/yx+z+P8+f8zi/4f8MYv/H/PHLP475Y9Z/P+UP2bx/3P+mMV/5/wxi/8u+WMW/7/kj1n8d80fs/j/NX/M4r9b/pjFf/f8MYv/HvljFv8988cs/nvlj1n8984fs/jvkz9m8d83f8ziv1/+mMV///wxi/8B+WMW/wPzxyz+B+WPWfwPzh+z+B+SP2bxPzR/zOJ/WP6Yxf/w/DGL/xH5Yxb/I/PHLP5H5Y9Z/I/OH7P4H5M/ZvE/Nn/M4n9c/pjF//j8MYv/CfljFv8T88cs/iflj1n8T84fs/ifkj9m8T81f8zif1r+mMX/9Pwxi/8Z+WMW/zPzxyz+Z+WPWfzPzh+z+J+TP2bxPzd/zOJ/Xv6Yxf/8/DGL/wX5Yxb/C/PHLP4X5Y9Z/C/OH7P4X6L23/4Db7H4X6r2/+As/pflj1n8L88fs/hfkT9m8b8yf8zif1X+mMX/6vwxi/81+WMW/2vzxyz+1+WPWfyvzx+z+N+QP2bxvzF/zOJ/U/6Yxf/m/DGL/y35Yxb/W/PHLP635Y9Z/G/PH7P435E/ZvG/M3/M4n9X/pjF/+78MYv/PfljFv9788cs/vflj1n8788fs/g/kD9m8X8wf8zi/1D+mMX/4fwxi/8j+WMW/0fzxyz+j+WPWfwfzx+z+D+RP2bxfzJ/zOL/VP6Yxf/p/DGL/zP5Yxb/Z/PHLP7P5Y9Z/J/PH7P4v5A/ZvF/MX/M4v9S/pjF/+X8MYv/K/ljFv9X88cs/q/lj1n8X88fs/i/kT8m8R9jIH/M4j8of8ziP1z+mMV/+Pwxi//g/DGL/wj5Yxb/EfPHLP4j5Y9Z/EfOH7P4j5I/ZvEfNX/M4j9a/pjFf/T8MYv/GPljFv8x88cs/mPlj1n8x84fs/iPkz9m8R83f8ziP17+mMV//Pwxi/9H8scs/h/NH7P4fyx/zOI/Qf6YxX/C/DGL/0T5Yxb/ifPHLP6T5I9Z/CfNH7P4fzx/zOL/ifwxi/9k+WMW/0/mj1n8J88fs/h/Kn/M4j+F13+rYd1o8f+013+YWfw/kz9m8Z8yf8ziP1X+mMX/s/ljFv/P5Y9Z/D+fP2bx/0L+mMX/i/ljFv8v5Y9Z/KfOH7P4T5M/ZvGfNn/M4j9d/pjFf/r8MYv/l/PHLP4z5I9Z/GfMH7P4z5Q/ZvGfOX/M4j9L/pjF/yv5Yxb/r+aPWfy/lj9m8f96/pjFf9b8MYv/N/LHLP6z5Y9Z/GfPH7P4z5E/ZvGfM3/M4j9X/pjFf+78MYv/PPljFv9588cs/vPlj1n8588fs/gvkD9m8f9m/pjFf8H8MYv/t/LHLP4L5Y9Z/L+dP2bxXzh/zOL/nfwxi/8i+WMW/0Xzxyz+i+WPWfwXzx+z+C+RP2bxXzJ/zOK/VP6YxX/p/DGL/zL5Yxb/7+aPWfyXzR+z+C+XP2bx/17+mMV/+fwxi/8K+WMW/xXzxyz+K+WPWfxXzh+z+K+SP2bxXzV/zOK/Wv6YxX/1/DGL/xr5Yxb/NfPHLP7fzx+z+K+VP2bxXzt/zOK/Tv6YxX/d/DGL/3r5Yxb/9fPHLP4/yB+z+G+QP2bx3zB/zOK/Uf6Yxf+H+WMW/43zxyz+m+SPWfw3zR+z+G+WP2bx3zx/zOL/o/wxi/+P88cs/lvkj1n8f5I/ZvHfMn/M4r9V/pjFf+v8MYv/T/PHLP7b5I9Z/H+WP2bx/3n+mMX/F/ljFv9f5o9Z/H+VP2bx3zZ/zOK/Xf6YxX/7/DGL/6/zxyz+O+SPWfx/kz9m8f9t/pjFf8f8MYv/7/LHLP6/zx+z+P8hf8zi/8f8MYv/TvljFv8/5Y9Z/P+cP2bx3zl/zOK/S/6Yxf8v+WMW/13zxyz+f80fs/jvlj9m8d89f8ziv0f+mMV/z/wxi/9e+WMW/73zxyz+++SPWfz3zR+z+O+XP2bx3z9/zOJ/QP6Yxf/A/DGL/0H5Yxb/g/PHLP6H5I9Z/A/NH7P4H5Y/ZvE/PH/M4n9E/pjF/8j8MYv/UfljFv+j88cs/sfkj1n8j80fs/gflz9m8T8+f8zif0L+mMX/xPwxi/9J+WMW/5Pzxyz+p+SPWfxPzR+z+J+WP2bxPz1/zOJ/Rv6Yxf/M/DGL/1n5Yxb/s/PHLP7n5I9Z/M/NH7P4n5c/ZvE/P3/M4n9B/pjF/8L8MYv/RfljFv+L88cs/pfkj1n8L80fs/hflj9m8b88f8zif0X+mMX/yvwxi/9V+WMW/6vzxyz+1+SPWfyvzR+z+F+XP2bxvz5/zOJ/Q/6Yxf/G/DGL/035Yxb/m/PHLP635I9Z/G/NH7P435Y/ZvG/PX/M4n9H/pjF/878MYv/XfljFv+788cs/vfkj1n8780fs/jflz9m8b8/f8zi/0D+mMX/wfwxi/9D+WMW/4fzxyz+j+SPWfwfzR+z+D+WP2bxfzx/zOL/RP6Yxf/J/DGL/1P5Yxb/p/PHLP7P5I9Z/J/NH7P4P5c/ZvF/Pn/M4v9C/pjF/8X8MYv/S/ljFv+X88cs/q/kj1n8X80fs/i/lj9m8X89f8zi/0b+mMR/zIH8MYv/oPwxi/9w+WMW/+Hzxyz+g/PHLP4j5I9Z/EfMH7P4j5Q/ZvEfOX/M4j9K/pjFf9T8MYv/aPljFv/R88cs/mPkj1n8x8wfs/iPlT9m8R87f8ziP07+mMV/3Pwxi/94+WMW//Hzxyz+H8kfs/h/NH/M4v+x/DGL/wT5Yxb/CfPHLP4T5Y9Z/CfOH7P4T5I/ZvGfNH/M4v/x/DGL/yfyxyz+k+WPWfw/mT9m8Z88f8zi/6n8MYv/FPljFv9P549Z/D+TP2bxnzJ/zOI/Vf6Yxf+z+WMW/8/lj1n8P58/ZvH/Qv6Yxf+L+WMW/y/lj1n8p84fs/hPkz9m8Z82f8ziP13+mMV/+vwxi/+X88cs/jPkj1n8Z8wfs/jPlD9m8Z85f8ziP0v+mMX/K/ljFv+v5o9Z/L+WP2bx/3r+mMV/1vwxi/838scs/rPlj1n8Z88fs/jPkT9m8Z8zf8ziP1f+mMV/7vwxi/88+WMW/3nzxyz+8+WPWfznzx+z+C+QP2bx/2b+mMV/wfwxi/+38scs/gvlj1n8v50/ZvFfOH/M4v+d/DGL/yL5Yxb/RfPHLP6L5Y9Z/BfPH7P4L5E/ZvFfMn/M4r9U/pjFf+n8MYv/MvljFv/v5o9Z/JfNH7P4L5c/ZvH/Xv6YxX/5/DGL/wr5Yxb/FfPHLP4r5Y9Z/FfOH7P4r5I/ZvFfNX/M4r9a/pjFf/X8MYv/GvljFv8188cs/t/PH7P4r5U/ZvFfO3/M4r9O/pjFf938MYv/evljFv/188cs/j/IH7P4b5A/ZvHfMH/M4r9R/pjF/4f5Yxb/jfPHLP6b5I9Z/DfNH7P4b5Y/ZvHfPH/M4v+j/DGL/4/zxyz+W+SPWfx/kj9m8d8yf8ziv1X+mMV/6/wxi/9P88cs/tvkj1n8f5Y/ZvH/ef6Yxf8X+WMW/1/mj1n8f5U/ZvHfNn/M4r9d/pjFf/v8MYv/r/PHLP475I9Z/H+TP2bx/23+mMV/x/wxi//v8scs/r/PH7P4/yF/zOL/x/wxi/9O+WMW/z/lj1n8/5w/ZvHfOX/M4r9L/pjF/y/5Yxb/XfPHLP5/zR+z+O+WP2bx3z1/zOK/R/6YxX/P/DGL/175Yxb/vfPHLP775I9Z/PfNH7P475c/ZvHfP3/M4n9A/pjF/8D8MYv/QfljFv+D88cs/ofkj1n8D80fs/gflj9m8T88f8zif0T+mMX/yPwxi/9R+WMW/6Pzxyz+x+SPWfyPzR+z+B+XP2bxPz5/zOJ/Qv6Yxf/E/DGL/0n5Yxb/k/PHLP6n5I9Z/E/NH7P4n5Y/ZvE/PX/M4n9G/pjF/8z8MYv/WfljFv+z88cs/ufkj1n8z80fs/iflz9m8T8/f8zif0H+mMX/wvwxi/9F+WMW/4vzxyz+l+SPWfwvzR+z+F+WP2bxvzx/zOJ/Rf6Yxf/K/DGL/1X5Yxb/q/PHLP7X5I9Z/K/NH7P4X5c/ZvG/Pn/M4n9D/pjF/8b8MYv/TfljFv+b88cs/rfkj1n8b80fs/jflj9m8b89f8zif0f+mMX/zvwxi/9d+WMW/7vzxyz+9+SPWfzvzR+z+N+XP2bxvz9/zOL/QP6Yxf/B/DGL/0P5Yxb/h/PHLP6P5I9Z/B/NH7P4P5Y/ZvF/PH/M4v9E/pjF/8n8MYv/U/ljFv+n88cs/s/kj1n8n80fs/g/lz9m8X8+f8zi/0L+mMX/xfwxi/9L+WMW/5fzxyz+r+SPWfxfzR+z+L+WP2bxfz1/zOL/Rv6YxH+sgfwxi/+g/DGL/3D5Yxb/4fPHLP6D88cs/iPkj1n8R8wfs/iPlD9m8R85f8ziP0r+mMV/1Pwxi/9o+WMW/9Hzxyz+Y+SPWfzHzB+z+I+VP2bxHzt/zOI/Tv6YxX/c/DGL/3j5Yxb/8fPHLP4fyR+z+H80f8zi/7H8MYv/BPljFv8J88cs/hPlj1n8J84fs/hPkj9m8Z80f8zi//+xc+dRdtb1HcdvEoad6q9He7qIRpQCLZIFUGktBghkQcYgsiQkkSyTxSQkZoEshkRtm6YUxFJB1DaaNhXEoq0SKxqIgsWyCZTahZSKFBDbiGtTVJKem8zEZPplTudJn4fK9/X6IzP3Dt8r5H0+3MvJOb5c/1CW/q/QP5Sl/2D9Q1n6v1L/UJb+R+gfytL/VfqHsvR/tf6hLP2P1D+Upf+v6h/K0v8o/UNZ+h+tfyhL/2P0D2Xp/2v6h7L0/3X9Q1n6H6t/KEv/1+gfytL/OP1DWfoP0T+Upf9Q/UNZ+g/TP5Sl/3D9Q1n6H69/KEv/E/QPZel/ov6hLP1fq38oS//X6R/K0v/1+oey9D9J/1CW/r+hfyhL/9/UP5Sl/xv0D2Xp/1v6h7L0P1n/UJb+b9Q/lKX/CP1DWfqfon8oS/9T9Q9l6X+a/qEs/UfqH8rS/3T9Q1n6n6F/KEv/UfqHsvQfrX8oS/8x+oey9B+rfyhL/zP1D2Xp/yb9Q1n6n6V/KEv/Tv1DWfq/Wf9Qlv7j9A9l6X+2/qEs/d+ifyhL/3P0D2Xp/1b9Q1n6n6t/KEv/8/QPZel/vv6hLP0v0D+Upf94/UNZ+k/QP5Sl/4X6h7L0n6h/KEv/SfqHsvSfrH8oS/+36R/K0v8i/UNZ+k/RP5Sl/1T9Q1n6T9M/lKX/dP1DWfp36R/K0n+G/qEs/WfqH8rSf5b+oSz9Z+sfytL/7fqHsvSfo38oS/+5+oey9J+nfyhL/4v1D2XpP1//UJb+C/QPZen/Dv1DWfov1D+Upf8i/UNZ+i/WP5Sl/xL9Q1n6X6J/KEv/S/UPZem/VP9Qlv7L9A9l6b9c/1CW/iv0D2Xp/079Q1n6r9Q/lKX/ZfqHsvRfpX8oS//V+oey9H+X/qEs/d+tfyhL//foH8rS/7f1D2Xp/zv6h7L0/139Q1n6r9E/lKX/7+kfytJ/rf6hLP1/X/9Qlv6X6x/K0v8P9A9l6X+F/qEs/a/UP5Sl/3v1D2Xpf5X+oSz936d/KEv/P9Q/lKX/1fqHsvT/I/1DWfq/X/9Qlv7X6B/K0v9a/UNZ+n9A/1CW/tfpH8rS/4P6h7L0/5D+oSz9P6x/KEv/P9Y/lKX/n+gfytJ/nf6hLP0/on8oS/+P6h/K0n+9/qEs/f9U/1CW/n+mfyhL/w36h7L0/3P9Q1n6f0z/UJb+1+sfytL/Bv1DWfp/XP9Qlv436h/K0v8T+oey9P8L/UNZ+t+kfyhL/0/qH8rS/1P6h7L0/0v9Q1n6/5X+oSz9P61/KEv/z+gfytL/Zv1DWfpv1D+Upf9n9Q9l6f/X+oey9P+c/qEs/W/RP5Sl/+f1D2Xp/wX9Q1n6b9I/lKX/rfqHsvS/Tf9Qlv6b9Q9l6f9F/UNZ+n9J/1CW/rfrH8rS/w79Q1n6f1n/UJb+f6N/KEv/O/UPZen/Ff1DWfr/rf6hLP3v0j+Upf/d+oey9L9H/1CW/vfqH8rS/z79Q1n6f1X/UJb+9+sfytL/Af1DWfo/qH8oS/+/0z+Upf9D+oey9P97/UNZ+n9N/1CW/v+gfyhL/3/UP5Sl/z/pH8rS/5/1D2Xp/7D+oSz9t+gfytL/X/QPZen/iP6hLP3/Vf9Qlv5f1z+Upf+j+oey9P+G/qEs/R/TP5Sl/7/pH8rS/3H9Q1n6P6F/KEv/J/UPZen/Tf1DWfo/pX8oS/9v6R/K0v/f9Q9l6f8f+oey9N+qfyhL/2/rH8rS/2n9Q1n6f0f/UJb+39U/lKX/9/QPZen/ff1DWfr/QP9Qlv4/1D+Upf9/6h/K0n+b/qEs/f9L/1CW/s/oH8rS/0f6h7L0/7H+oSz9f6J/KEv/Z/UPZem/Xf9Qlv479A8l6f/ilv6hLP0H6B/K0n+g/qEs/QfpH8rSfz/9Q1n6d+gfytJ/f/1DWfofoH8oS/8D9Q9l6X+Q/qEs/Q/WP5Sl/yH6h7L0P1T/UJb+h+kfytL/5/QPZen/Iv1DL7j+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/98sWrZ8zpS5c7sW+sY3vvHN7m+e738zAQAA/9d++qH/+f47AQAAAAAAAAAAAAAAAAAAgLya+L8Te77/GQEAAAAAAAAAAAAA4GfdmM5Ttg4asNdTg/Z8cPi9XTu/nrDtglkbNmwsPV+7f3xm8JID93ywY8eOHecs2nR698MDWq1W+3/txd2PD+x93H791fe9btyuR2XEB6aWG1a2Om/bcMljj0z70bGbOnY+29G6aMbsuV1DB7Za5bSO1tL2g2EDWq1yRkfrqvaD4e0Hozpa17cfHL/zwUGtze0Hx02bP3d6+4nRlX/P4IViTOfq1qC9Ftva698Ge+5/9X0TlvZ87eMle15tv1b3/tc9O+6hXj/r8Rz773n9ckrv/ff7HxB4Tv3b/4yhPV/7eMn/8f5/xk+GbYp+9tz773n9cqr9Q32Cz/97bbT35/5en/8HBy+5+7589s5B7f0PP/j7M7qf2u9/8/n/p69fTuu9/4F7ff5vf44f2fP5/4BWq5y+j78dkMqYzndt7ev9v+/97/fLvW4G7Ln/tZNGv7+9/1fc/uhLup/q6Of+R/b1/r+2198r0D9jOj+6o9f7fz/23zoqeMnd+193xRfPb+9/5aibb9jjZ/3Z/+m99z9k8bwFQxYtW/6a2fOmzOya2XXx8cNPHDb0tcNOGnrikJ0fCXb9uo+/K5DDvr3/tw7udTOg1eraff/Ke142sr3/O9Y/Mbb7qQP7uf8z+nz/H+z9H0JHDGztv39r6ZTFixcO2/Vrz8Phu37d9ZcF++/Hf/+/6ujuv6znzwwHtFq/uPt+1aTW/e39v/zJB97Y/dT+/dz/qD73P2LvP6sE+mcf3/+n97rZa//lUy+6rr3/UYcMv7v7qf7+9//oPvf/Ee//sC/GdLZqfRNt73/g49dcU+26jPHnf1CfJvZ/XFlzdLXrMtb+oT5N7L9r/rG3VrsuZ9o/1KeJ/a957+izq12XN9k/1KeJ/d/z3cfurHZdzrJ/qE8T+/96x/eWVbsunfYP9Wli/zeuGP90tevyZvuH+jSx/5dd+/Q3ql2XcfYP9Wli/+c/NXJxtetytv1DfZrY/4rDz72r2nV5i/1DfZrY/9Bp2ydWuy7n2D/Up4n9P/ieD3662nV5q/1DfZrY/3XPDjuy2nU51/6hPk3s/+aDBn+o2nU5z/6hPk3sf/ullx9W7bqcb/9Qnyb2v/rWjhHVrssF9g/1aWL/d2++6WvVrst4+4f6NLH/J0+4bVa16zLB/qE+Tez/E2Nfsr3adbnQ/qE+Tey/8+MLSrXrMtH+oT5N7L/joYfXVLsuk+wf6tPE/o8ZfNdJ1a7LZPuH+jSx/6mTp3yy2nV5m/1DfZrY/6hnPnZEtetykf1DfZrY/6FrDv1Mtesyxf6hPk3sf/Ciww+udl2m2j/Up4n9zzls44erXZdp9g/1aWL/a7c+uKjadZlu/1CfJvb/pauXPV7tunTZP9Snif1/e+asC6tdlxn2D/VpYv8bfun2e6tdl5n2D/VpYv8P33/W6mrXZZb9Q32a2P9VNz3xC9Wuy2z7h/o0sf8vTNh2fbXr8nb7h/o0sf9tr554crXrMsf+oT5N7P+ld7z+gWrXZa79Q32a2P/kW64eVe26zLN/qE8T+1/Y+e5nql2Xi+0f6tPE/k8aesz8atdlvv1DfZrY/5Vb1k2tdl0W2D/Up4n9f3n9CT+odl3eYf9Qnyb2/9R5R46tdl0W2j/Up4n9rz/6yi3Vrssi+4f6NLH/EV/51vHVrsti+4f6NLH/QzaesqHadVli/1CfJvZ/1KnjfqXadbnE/qE+Tex/7ht+fEW163Kp/UN9mtj/z/9wyeZq12Wp/UN9mtj/+MsfOa/adVlm/1CfJva/ZNVXv1ntuiy3f6hPE/s/ecD0y6pdlxX2D/VpYv9bHm29r9p1eaf9Q32a2P+16248oNp1WWn/UJ8m9v/5Obd8rtp1ucz+oT5N7P87Ly1Dql2XVfYPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwH+zAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhR04EAAAAAAA8n9thKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqirswLEAAAAAgDB/6yB6NwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICjAAAA//+Y5I3v")
unlinkat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x0)
getdents64(0xffffffffffffffff, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='.\x00', 0x0, 0x100)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x8040587f, &(0x7f00000000c0)={0x29, 0x300000000})

4.996109539s ago: executing program 5 (id=921):
r0 = socket(0x11, 0xa, 0x5)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e20, @broadcast}})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
sendto$inet(r0, &(0x7f0000000140)="9c91d7798c7f1b4ca046b42f0c3d", 0x5ee, 0x800, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)

3.168308088s ago: executing program 1 (id=933):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}], 0x10)
sendto$inet6(r0, &(0x7f00000009c0)="fd", 0x1, 0x20000081, &(0x7f0000000000)={0xa, 0x4e23, 0x57bc3377, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000040)=0x1, 0x4)
recvmmsg(r0, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=""/13, 0xd}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/63, 0x3f}, 0x6}], 0x2, 0xf1, 0x0)

2.937615513s ago: executing program 5 (id=925):
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x10000000000030, 0x0, 0x0)
memfd_create(0x0, 0x2)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup(r0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x428, 0xffffffff, 0x2e0, 0x210, 0x2e0, 0xffffffff, 0xffffffff, 0x390, 0x390, 0x390, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_to_batadv\x00', 'pimreg0\x00', {}, {0xff}, 0x84, 0x2, 0x2}, 0x0, 0x1e8, 0x210, 0x0, {0x100000000000000}, [@common=@inet=@sctp={{0x148}, {[0x4e20, 0x4e20], [0x4e21, 0x4e2c], [0x4, 0x8, 0x7f, 0x7, 0x1, 0x7, 0x1ff, 0x9, 0xab2, 0x2, 0x300000, 0x5, 0x9, 0x1, 0x9, 0xcd4, 0x7, 0xc5a, 0x4, 0x7, 0x62f7, 0xba7d, 0x5b000000, 0x6, 0x1, 0x6c7f, 0x9, 0x0, 0x9, 0x9, 0x8, 0x0, 0x80000001, 0x9, 0x200, 0x71e5e785, 0xfffffbff, 0x19, 0xf6b, 0xab19, 0x81, 0x9, 0xf4, 0x9, 0x9, 0x2, 0x3, 0x1, 0x7, 0x5, 0xcd, 0x6, 0x8f, 0x9, 0x4005, 0x4b7d, 0x9, 0x1, 0x7, 0x6, 0x4, 0x6, 0x2, 0xfaa0], 0x0, [{0x5, 0x2, 0xf8}, {0x9, 0x7f, 0x1}, {0x4, 0x9, 0x10}, {0xf, 0x5, 0x1}], 0x0, 0x7, 0x1}}, @common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}, {{@ip={@loopback, @rand_addr=0x64010101, 0xffffff00, 0xff000000, 'geneve0\x00', 'macvlan0\x00', {0xff}, {}, 0x2e, 0x0, 0x4}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x1, 0x0, 0x2, 0x1, 0x4, 0x4], 0x1, 0x3}, {0x4, [0x1, 0x0, 0x6, 0x2, 0x7, 0x1], 0x0, 0x3}}}}, {{@ip={@private=0xa010101, @loopback, 0xff, 0xff000000, 'bond0\x00', 'ip6tnl0\x00', {}, {}, 0x2f, 0x0, 0x21}, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x2, 0x1c, "f30053790051bf3ffd3f72b279e4368029840d3facd44179be46d350310b"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x488)

2.89939061s ago: executing program 1 (id=926):
syz_mount_image$hfsplus(&(0x7f0000000140), &(0x7f00000003c0)='./file1\x00', 0x0, &(0x7f0000000100)=ANY=[], 0x5, 0x709, &(0x7f000000a240)="$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")
r0 = syz_open_dev$loop(&(0x7f0000000100), 0x7, 0x103482)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='freezer.state\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0xd, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00000014000800000000000000007f"}})
ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x591)

2.634844852s ago: executing program 5 (id=928):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0)
write$uinput_user_dev(r0, &(0x7f00000020c0)={'syz0\x00', {0x0, 0x0, 0x0, 0x2}, 0x0, [0x39, 0x3, 0x4000401, 0x8, 0xe, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2a, 0xfffffffd, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xfffffffd, 0x10000000, 0x99, 0x8, 0x0, 0x0, 0xfffffffd, 0x0, 0x7fffffff, 0xfffffffc, 0x5, 0xfffffff6, 0x0, 0x8, 0x800000, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x1], [0x3, 0xfffff41a, 0x0, 0x0, 0x4, 0x20000, 0x2000000, 0xedc0, 0x0, 0x5ee, 0x5, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x2, 0x5, 0x0, 0x9, 0x1, 0x0, 0xfffffff8, 0x2, 0x0, 0x5, 0x400, 0x0, 0x0, 0x8, 0x40000, 0x0, 0xc0804000, 0x100, 0x0, 0xfffffffd, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x5, 0x4, 0x7, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, 0xfffffffe, 0xfffff986], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x80, 0xc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0xfffffffd, 0x2, 0xffffffff, 0x0, 0x8000, 0x0, 0x20, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x200, 0x2, 0xe, 0x80000000, 0x2, 0x47fff, 0x0, 0x0, 0x0, 0x3, 0xfffffffd, 0xf, 0x3, 0xffffff85, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4, 0xf88, 0x0, 0x0, 0x0, 0x7ff], [0xfffffffe, 0x0, 0x4, 0x0, 0xfffefffe, 0x0, 0x2, 0x4, 0xfffffffc, 0xffffffff, 0x0, 0x2, 0xfffffffc, 0x4, 0x803, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x10, 0x5, 0xfffffffe, 0xfff, 0x8, 0x4, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xea, 0x0, 0x1, 0xfffffffd, 0x8000000, 0x4, 0xffffffff, 0x0, 0x0, 0xffffe]}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_CREATE(r0, 0x5501)

2.053071777s ago: executing program 1 (id=929):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.52742362s ago: executing program 3 (id=931):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x1c, 0x68, 0x1, 0xfcfd, 0x25dfdbfb, {0x2, 0x0, 0x1}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x0)
getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000006a0005062cbd7000fcdbdf25020000000000000008000500", @ANYRES32=r2], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x880)

1.414527062s ago: executing program 5 (id=932):
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file1\x00', 0x0, &(0x7f0000000000), 0xfe, 0x250, &(0x7f0000000300)="$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")
r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x182)
fallocate(r0, 0x0, 0x1, 0x2000002)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000000)={0x17c04, 0xffffffffffffffff, 0x6, 0x72b7, 0x8})
lseek(r0, 0x102, 0x4)

1.034697817s ago: executing program 1 (id=934):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'ovf\x00', 0x0, 0xd, 0x5c}, 0x2c)

993.130735ms ago: executing program 2 (id=935):
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00')
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000)
getdents(r0, &(0x7f0000001f80)=""/4096, 0x1000)

830.141757ms ago: executing program 5 (id=936):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58)
accept4(r1, 0x0, 0x0, 0x80000)
close_range(r0, 0xffffffffffffffff, 0x0)

793.696304ms ago: executing program 2 (id=937):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.stat\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r0, 0x0)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x98, 0x130, 0x1c8, 0x2f8, 0x0, 0x98, 0x130, 0x260, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98, 0x0, {0x0, 0x1e01}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ip={@empty, @empty=0x98, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x0, 0x3}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0)

661.39203ms ago: executing program 1 (id=938):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, &(0x7f0000000040)={0x1f, @none}, 0x8)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x200201, 0x0)
r2 = dup3(r0, r1, 0x0)
bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xfffe, 0x2}, 0xe)

579.346496ms ago: executing program 2 (id=939):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0)
ioctl(r0, 0xc138fd06, 0x0)
ioctl(r0, 0xc138fd0e, &(0x7f0000003000)="0400000000000000000000005001000038010000000000000000000000000000000000000000000000000000000000006d706174683000")

494.974413ms ago: executing program 1 (id=940):
syz_usb_connect(0x2, 0x24, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/vhci\x00', 0x2, 0x0)
read$FUSE(r0, &(0x7f00000002c0)={0x2020}, 0x2020)

433.457135ms ago: executing program 2 (id=941):
socket$inet_sctp(0x2, 0x1, 0x84)
r0 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a050401000000000000000a0000000900010073797a300000000040000000120a050402000000000000000a0000000900010073797a30000000000900020073797a310000000008000300000000050c000480080001000000000114000000110001"], 0x88}}, 0x0)

174.853486ms ago: executing program 2 (id=942):
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/netfilter\x00')
fchdir(r0)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x200000c, 0x32, 0xffffffffffffffff, 0x33ed0000)
r1 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0)
getdents64(r1, &(0x7f0000000fc0)=""/224, 0xe0)

154.941719ms ago: executing program 5 (id=943):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x5, &(0x7f0000000000)=[{&(0x7f0000004500)="d800000016008111e00212ba0d8105040a601100ff0f040b067c55a1bc0009001e0006990300000015000500fe808178a8021500030001400200000901ac04000bd67f6f9400710016277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad85667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b440431629b0b5aa14c3d21e2fa353905e2a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110c230002)
recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x15}, 0x2042)

0s ago: executing program 2 (id=944):
r0 = socket$inet6(0xa, 0x3, 0x5)
sendmmsg$inet6(r0, &(0x7f0000002800)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@dontfrag={{0x14, 0x29, 0x3e, 0x6}}], 0x18}}], 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4)
sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x4, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000300)=ANY=[], 0x28}}], 0x1, 0x0)

kernel console output (not intermixed with test programs):

w USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00
[  118.798216][ T4236] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  118.863214][ T4236] usb 1-1: config 0 descriptor??
[  119.355052][ T4236] hid (null): usage index exceeded
[  119.449996][ T4236] hid-generic 0003:0C70:F0B6.0002: ignoring exceeding usage max
[  119.522170][ T4949] tap0: tun_chr_ioctl cmd 1074025677
[  119.529016][ T4236] hid-generic 0003:0C70:F0B6.0002: ignoring exceeding usage max
[  119.559407][ T4949] tap0: linktype set to 786
[  119.583581][ T4236] hid-generic 0003:0C70:F0B6.0002: usage index exceeded
[  119.611039][ T4236] hid-generic 0003:0C70:F0B6.0002: item 0 1 2 2 parsing failed
[  119.644450][ T4236] hid-generic: probe of 0003:0C70:F0B6.0002 failed with error -22
[  119.696951][ T4236] usb 1-1: USB disconnect, device number 2
[  120.032511][ T1111] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  120.108054][ T1111] hid-generic 0000:0000:0000.0003: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  120.153360][ T4240] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  120.481640][ T4950] loop3: detected capacity change from 0 to 32768
[  120.553878][ T4240] usb 3-1: config index 0 descriptor too short (expected 23569, got 27)
[  120.589218][ T4950] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.291 (4950)
[  120.626931][ T4240] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  120.783570][ T4240] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  120.856291][ T4240] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  120.887394][ T4950] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  120.943404][ T4240] usb 3-1: Manufacturer: syz
[  120.958104][ T4950] BTRFS info (device loop3): using free space tree
[  121.014141][ T4240] usb 3-1: config 0 descriptor??
[  121.133336][ T4950] BTRFS info (device loop3): has skinny extents
[  121.150442][ T1111] Bluetooth: hci0: command 0x0c1a tx timeout
[  121.221980][   T25] kauditd_printk_skb: 11 callbacks suppressed
[  121.221992][   T25] audit: type=1807 audit(1790397501.700:30): action=measure func=F res=0
[  121.249554][ T4973] ima: policy update failed
[  121.341686][   T25] audit: type=1802 audit(1790397501.730:31): pid=4974 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.0.298" res=0 errno=0
[  121.363936][ T4240] rc_core: IR keymap rc-hauppauge not found
[  121.371440][ T4240] Registered IR keymap rc-empty
[  121.434942][ T4953] loop4: detected capacity change from 0 to 32768
[  121.513479][ T4240] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  121.539127][ T4950] BTRFS info (device loop3): enabling ssd optimizations
[  121.577750][   T25] audit: type=1802 audit(1790397501.790:32): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.298" res=0 errno=0
[  121.652268][ T4240] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input5
[  121.816434][ T4953] XFS (loop4): Mounting V5 Filesystem
[  121.965933][ T5003] rc rc0: two consecutive events of type space
[  122.084465][ T4953] XFS (loop4): Ending clean mount
[  122.099951][   T25] audit: type=1800 audit(1790397502.580:33): pid=4950 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.291" name="file1" dev="loop3" ino=260 res=0 errno=0
[  122.207023][ T4240] usb 3-1: USB disconnect, device number 2
[  122.237725][ T4953] XFS (loop4): Quotacheck needed: Please wait.
[  122.447372][ T5011] netlink: 40 bytes leftover after parsing attributes in process `syz.1.303'.
[  122.491103][ T5013] capability: warning: `syz.0.304' uses 32-bit capabilities (legacy support in use)
[  122.522078][ T4953] XFS (loop4): Quotacheck: Done.
[  122.559175][ T5014] netlink: 40 bytes leftover after parsing attributes in process `syz.1.303'.
[  122.590059][ T5013] program syz.0.304 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  122.766942][ T4953] XFS (loop4): User initiated shutdown received.
[  122.847093][ T5011] netlink: 40 bytes leftover after parsing attributes in process `syz.1.303'.
[  122.858372][ T4953] XFS (loop4): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:495).  Shutting down filesystem.
[  122.967540][ T4953] XFS (loop4): Please unmount the filesystem and rectify the problem(s)
[  123.355391][ T4187] XFS (loop4): Unmounting Filesystem
[  124.209237][ T5056] i2c i2c-0: new_device: Can't parse I2C address
[  124.502659][ T5067] netlink: 12 bytes leftover after parsing attributes in process `syz.3.321'.
[  124.574692][ T5071] loop1: detected capacity change from 0 to 512
[  124.643388][ T4240] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  124.711804][ T5074] loop4: detected capacity change from 0 to 128
[  124.826724][ T5074] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  124.925302][ T5074] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  125.000435][ T5071] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  125.015583][ T4236] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  125.202841][ T5071] ext4 filesystem being mounted at /70/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  125.218279][ T4240] usb 3-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice= 0.00
[  125.239324][ T5086] syzkaller0 speed is unknown, defaulting to 1000
[  125.263402][ T4240] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  125.279534][ T5086] syzkaller0 speed is unknown, defaulting to 1000
[  125.301169][ T4240] usb 3-1: Product: syz
[  125.319919][ T5086] syzkaller0 speed is unknown, defaulting to 1000
[  125.327143][ T4240] usb 3-1: Manufacturer: syz
[  125.354429][ T4240] usb 3-1: SerialNumber: syz
[  125.403827][ T4236] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  125.424880][ T4240] ums_eneub6250 3-1:1.0: USB Mass Storage device detected
[  125.451549][ T4236] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[  125.511644][ T4240] scsi host1: usb-storage 3-1:1.0
[  125.573938][ T5066] EXT4-fs (loop1): can't change dax mount option while remounting
[  125.608355][ T4236] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64
[  125.689192][ T4236] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6
[  125.767831][ T4236] usb 4-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00
[  125.830490][ T4236] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  125.850811][ T5086] infiniband syz0: set down
[  125.865015][ T1092] block nbd0: Possible stuck request ffff888021c00000: control (read@0,4096B). Runtime 30 seconds
[  125.881001][ T4240] ums_eneub6250: This driver only supports SD/MS cards. It does not support SM cards.
[  125.900717][ T5086] infiniband syz0: added syzkaller0
[  125.923568][ T5076] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  125.972205][ T5076] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  126.030973][ T5035] syzkaller0 speed is unknown, defaulting to 1000
[  126.044717][ T4236] keyspan 4-1:1.0: Keyspan 2 port adapter converter detected
[  126.091909][ T4236] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 84
[  126.134278][ T4236] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 2
[  126.191438][ T5086] RDS/IB: syz0: added
[  126.207759][ T4236] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  126.230820][ T5086] smc: adding ib device syz0 with port count 1
[  126.258980][ T4236] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 88
[  126.301874][ T4236] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 6
[  126.316530][ T5086] smc:    ib device syz0 port 1 has pnetid 
[  126.358104][    T7] syzkaller0 speed is unknown, defaulting to 1000
[  126.367859][ T4238] usb 3-1: USB disconnect, device number 3
[  126.390382][ T4236] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  126.417676][ T5086] syzkaller0 speed is unknown, defaulting to 1000
[  126.782334][ T5097] Invalid argument reading file caps for ./file0
[  126.995526][ T5086] syzkaller0 speed is unknown, defaulting to 1000
[  127.024604][   T13] usb 4-1: USB disconnect, device number 4
[  127.077702][   T13] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  127.215479][   T13] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  127.247670][ T5104] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  127.329994][   T13] keyspan 4-1:1.0: device disconnected
[  127.379970][ T5104] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready
[  127.449091][ T5104] IPv6: ADDRCONF(NETDEV_CHANGE): eql: link becomes ready
[  127.508963][ T5104] IPv6: ADDRCONF(NETDEV_CHANGE): ifb0: link becomes ready
[  127.621265][ T5104] IPv6: ADDRCONF(NETDEV_CHANGE): ifb1: link becomes ready
[  127.691204][ T5104] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready
[  127.796565][ T5116] input: syz1 as /devices/virtual/input/input6
[  127.807041][ T5104] IPv6: ADDRCONF(NETDEV_CHANGE): wpan0: link becomes ready
[  127.837507][ T5104] IPv6: ADDRCONF(NETDEV_CHANGE): wpan1: link becomes ready
[  127.979365][ T5108] device syzkaller1 entered promiscuous mode
[  128.045674][ T5086] syzkaller0 speed is unknown, defaulting to 1000
[  128.365696][    T7] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  128.633482][    T7] usb 2-1: Using ep0 maxpacket: 8
[  128.669167][ T5086] syzkaller0 speed is unknown, defaulting to 1000
[  128.813472][    T7] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  128.864352][    T7] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  128.946237][    T7] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  129.227288][    T7] usb 2-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40
[  129.317298][ T5086] syzkaller0 speed is unknown, defaulting to 1000
[  129.384798][    T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  129.444729][    T7] usb 2-1: Product: syz
[  129.449062][    T7] usb 2-1: Manufacturer: syz
[  129.518863][    T7] usb 2-1: SerialNumber: syz
[  129.720239][ T5121] loop3: detected capacity change from 0 to 40427
[  129.814564][ T5121] F2FS-fs (loop3): invalid crc value
[  129.910944][ T5121] F2FS-fs (loop3): Found nat_bits in checkpoint
[  130.241201][ T5121] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  130.346151][ T5158] program syz.0.353 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  130.623584][    T7] usb 2-1: 1:1: cannot get freq (v2/v3): err -71
[  130.658865][    T7] usb 2-1: uac_clock_source_is_valid(): cannot get clock validity for id 0
[  130.706827][ T5165] loop2: detected capacity change from 0 to 512
[  130.839029][ T5169] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only
[  130.917668][    T7] usb 2-1: USB disconnect, device number 2
[  130.993910][ T5169] overlayfs: NFS export requires an index dir, falling back to nfs_export=off.
[  131.196115][ T4192] attempt to access beyond end of device
[  131.196115][ T4192] loop3: rw=2049, want=45104, limit=40427
[  131.259144][ T5165] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrquota,grpjquota=,nodelalloc,,errors=continue. Quota mode: writeback.
[  131.390440][ T5165] ext4 filesystem being mounted at /78/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  131.971698][ T5186] loop1: detected capacity change from 0 to 512
[  132.491803][ T5198] loop0: detected capacity change from 0 to 256
[  132.568940][ T5186] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  132.884931][ T5186] ext4 filesystem being mounted at /75/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  132.991529][   T25] audit: type=1400 audit(1790397513.470:34): apparmor="STATUS" info="profile missing flags" error=-71 profile="unconfined" name=223A6F pid=5208 comm="syz.3.375" name=223A6F offset=35
[  133.015901][ T5182] loop4: detected capacity change from 0 to 32768
[  133.038829][ T5207] syz.2.374 uses obsolete (PF_INET,SOCK_PACKET)
[  133.532040][ T5215] loop3: detected capacity change from 0 to 4096
[  133.843938][ T5215] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  134.229982][ T5215] ntfs3: loop3: failed to convert "0080" to macgaelic
[  134.351364][ T5238] rdma_rxe: rxe_register_device failed with error -23
[  134.366491][ T5215] ntfs3: loop3: failed to convert name for inode 1e.
[  134.403762][ T5236] loop4: detected capacity change from 0 to 512
[  134.509805][ T5238] rdma_rxe: failed to add bond0
[  134.558664][ T5236] EXT4-fs error (device loop4): ext4_orphan_get:1410: inode #15: comm syz.4.385: iget: bad i_size value: 38620345925642
[  134.791693][ T5236] EXT4-fs error (device loop4): ext4_orphan_get:1415: comm syz.4.385: couldn't read orphan inode 15 (err -117)
[  134.937088][ T5236] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  135.104017][ T5251] loop2: detected capacity change from 0 to 2048
[  135.210218][ T5251] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  135.284483][ T5258] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.385: bg 0: block 5: invalid block bitmap
[  135.499197][    T7] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  135.521922][ T5258] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 624 with error 28
[  135.573767][    T7] hid-generic 0000:0000:0000.0004: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  135.624794][ T5262] loop0: detected capacity change from 0 to 4096
[  135.707366][ T5258] EXT4-fs (loop4): This should not happen!! Data will be lost
[  135.707366][ T5258] 
[  135.762006][ T5258] EXT4-fs (loop4): Total free blocks count 0
[  135.813080][ T5258] EXT4-fs (loop4): Free/Dirty block details
[  135.841195][ T5262] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled
[  135.907931][ T5258] EXT4-fs (loop4): free_blocks=0
[  135.913185][ T5258] EXT4-fs (loop4): dirty_blocks=624
[  135.927669][ T5262] EXT4-fs (loop0): Unrecognized mount option "seclabel" or missing value
[  135.966688][ T5273] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  136.047491][ T5258] EXT4-fs (loop4): Block reservation details
[  136.122685][ T5258] EXT4-fs (loop4): i_reserved_data_blocks=624
[  136.181724][ T5275] loop2: detected capacity change from 0 to 512
[  136.327570][ T5275] EXT4-fs error (device loop2): ext4_orphan_get:1410: inode #15: comm syz.2.401: iget: bad i_size value: 38620345925642
[  136.498959][ T5275] EXT4-fs error (device loop2): ext4_orphan_get:1415: comm syz.2.401: couldn't read orphan inode 15 (err -117)
[  136.628889][ T5275] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  136.784963][ T5275] EXT4-fs (loop2): shut down requested (1)
[  136.849927][ T5286] netlink: 4 bytes leftover after parsing attributes in process `syz.3.405'.
[  137.185592][ T5294] loop2: detected capacity change from 0 to 256
[  137.776059][ T5304] program syz.3.414 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  137.834938][ T5306] loop0: detected capacity change from 0 to 16
[  137.898045][ T5302] i2c i2c-0: new_device: Instantiated device tps6598x at 0x20
[  137.926581][ T5306] erofs: (device loop0): mounted with root inode @ nid 36.
[  138.026919][ T1428] ieee802154 phy0 wpan0: encryption failed: -22
[  138.037027][ T1428] ieee802154 phy1 wpan1: encryption failed: -22
[  138.146588][ T5308] kAFS: Invalid Command on /proc/fs/afs/cells file
[  138.713816][ T5322] device team_slave_0 entered promiscuous mode
[  138.731361][ T5322] device team_slave_1 entered promiscuous mode
[  138.949583][ T5322] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  139.032303][ T5335] loop4: detected capacity change from 0 to 128
[  139.070872][ T5332] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  139.414631][ T4187] FAT-fs (loop4): error, corrupted directory (invalid entries)
[  139.437557][ T5341] loop0: detected capacity change from 0 to 64
[  139.494685][ T4187] FAT-fs (loop4): error, corrupted directory (invalid entries)
[  139.595618][ T5341] hfs: get root inode failed
[  140.265260][ T5353] loop0: detected capacity change from 0 to 64
[  140.364323][ T5351] loop3: detected capacity change from 0 to 4096
[  140.389083][ T5353] hfs: get root inode failed
[  140.619827][ T1268] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  140.948827][ T5351] ntfs3: loop3: failed to convert "0080" to cp864
[  140.976030][ T1268] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  141.268704][ T1268] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  141.433089][ T1268] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  141.613093][ T5373] loop2: detected capacity change from 0 to 512
[  141.770215][ T5367] syzkaller0 speed is unknown, defaulting to 1000
[  141.783685][ T5373] EXT4-fs (loop2): 1 truncate cleaned up
[  141.851780][ T5373] EXT4-fs (loop2): mounted filesystem without journal. Opts: abort,,errors=continue. Quota mode: none.
[  142.025571][   T25] audit: type=1800 audit(1790397522.510:35): pid=5373 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.445" name="file1" dev="loop2" ino=15 res=0 errno=0
[  143.295436][   T25] audit: type=1326 audit(1790397523.780:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5411 comm="syz.2.456" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f229b560159 code=0x0
[  143.543560][ T5032] Bluetooth: hci1: command 0x0409 tx timeout
[  143.745454][ T5367] chnl_net:caif_netlink_parms(): no params data found
[  143.989009][ T5387] loop3: detected capacity change from 0 to 32768
[  144.471438][ T5367] bridge0: port 1(bridge_slave_0) entered blocking state
[  144.528634][ T5367] bridge0: port 1(bridge_slave_0) entered disabled state
[  144.593059][ T5367] device bridge_slave_0 entered promiscuous mode
[  144.686869][ T5452] IPVS: wrr: SCTP 172.20.20.187:0 - no destination available
[  144.721077][ T5367] bridge0: port 2(bridge_slave_1) entered blocking state
[  144.813403][ T5367] bridge0: port 2(bridge_slave_1) entered disabled state
[  144.823119][ T5367] device bridge_slave_1 entered promiscuous mode
[  144.918541][ T5452] syz.3.467 (5452) used greatest stack depth: 20176 bytes left
[  145.102606][ T5367] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  145.375594][ T5367] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  145.712320][ T5367] team0: Port device team_slave_0 added
[  145.791093][ T5032] Bluetooth: hci1: command 0x041b tx timeout
[  145.982133][ T5367] team0: Port device team_slave_1 added
[  146.180154][ T5367] batman_adv: batadv0: Adding interface: batadv_slave_0
[  146.273404][ T5367] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  146.514578][ T5367] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  146.585743][ T5458] loop2: detected capacity change from 0 to 32768
[  146.678375][ T1268] device hsr_slave_0 left promiscuous mode
[  146.708982][ T5458] XFS (loop2): Mounting V5 Filesystem
[  146.748386][ T1268] device hsr_slave_1 left promiscuous mode
[  146.833137][ T1268] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  146.882436][ T5458] XFS (loop2): Ending clean mount
[  146.919461][ T1268] batman_adv: batadv0: Removing interface: batadv_slave_0
[  146.993444][   T13] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  147.021732][ T1268] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  147.088897][ T1268] batman_adv: batadv0: Removing interface: batadv_slave_1
[  147.701725][ T5521] loop0: detected capacity change from 0 to 131072
[  147.717136][ T1268] device bridge_slave_1 left promiscuous mode
[  147.757333][ T1268] bridge0: port 2(bridge_slave_1) entered disabled state
[  147.788259][ T5035] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  147.800165][ T5521] F2FS-fs (loop0): Wrong CP boundary, start(512) end(1536) blocks(0)
[  147.808648][ T5521] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  147.832880][ T5521] F2FS-fs (loop0): invalid crc value
[  147.880979][ T5521] F2FS-fs (loop0): Found nat_bits in checkpoint
[  147.928501][ T5521] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  147.943479][ T5521] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  147.956169][   T13] usb 4-1: config index 0 descriptor too short (expected 50, got 32)
[  148.007177][   T13] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  148.127805][   T13] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8
[  148.187007][   T13] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  148.220459][ T5032] Bluetooth: hci1: command 0x040f tx timeout
[  148.251902][ T4196] XFS (loop2): Unmounting Filesystem
[  148.294367][ T5035] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  148.309710][ T1268] device bridge_slave_0 left promiscuous mode
[  148.354907][ T5035] usb 2-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  148.370821][ T1268] bridge0: port 1(bridge_slave_0) entered disabled state
[  148.384523][   T13] usb 4-1: New USB device found, idVendor=0525, idProduct=127a, bcdDevice= 1.00
[  148.418260][   T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  148.427215][ T5035] usb 2-1: config 0 interface 0 has no altsetting 0
[  148.444818][   T13] usb 4-1: Product: syz
[  148.452284][ T5035] usb 2-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00
[  148.475774][   T13] usb 4-1: Manufacturer: syz
[  148.480427][   T13] usb 4-1: SerialNumber: syz
[  148.498599][ T5035] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  148.550464][ T5035] usb 2-1: config 0 descriptor??
[  148.555972][ T5510] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  148.662710][ T1268] device veth1_macvtap left promiscuous mode
[  148.674273][   T13] usb_debug 4-1:1.0: debug converter detected
[  148.706713][ T1268] device veth0_macvtap left promiscuous mode
[  148.713781][   T13] usb 4-1: debug converter now attached to ttyUSB0
[  148.722548][ T1268] device veth1_vlan left promiscuous mode
[  148.762053][ T1268] device veth0_vlan left promiscuous mode
[  148.930590][    C0] debug ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71
[  148.977139][ T5032] usb 4-1: USB disconnect, device number 5
[  149.030077][ T5032] debug ttyUSB0: debug converter now disconnected from ttyUSB0
[  149.086740][ T5032] usb_debug 4-1:1.0: device disconnected
[  149.650538][ T5528] rnbd_client L125: Can't parse path ip:1: -22
[  149.713641][ T5035] sony 0003:054C:09CC.0005: Failed to get version data from Dualshock 4
[  149.732005][ T5035] sony 0003:054C:09CC.0005: hidraw0: USB HID vb6.2c Joystick [HID 054c:09cc] on usb-dummy_hcd.1-1/input0
[  149.732035][ T5035] sony 0003:054C:09CC.0005: failed to claim input
[  149.816167][ T5035] usb 2-1: USB disconnect, device number 3
[  150.159600][ T5532] fido_id[5532]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  150.182363][ T5534] loop2: detected capacity change from 0 to 64
[  150.267353][ T1268] team0 (unregistering): Port device team_slave_1 removed
[  150.313645][ T5032] Bluetooth: hci1: command 0x0419 tx timeout
[  150.553746][ T1268] team0 (unregistering): Port device team_slave_0 removed
[  150.761753][ T1268] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  150.802403][ T5547] netlink: 'syz.1.498': attribute type 1 has an invalid length.
[  150.912610][ T5547] netlink: 'syz.1.498': attribute type 1 has an invalid length.
[  150.939905][ T1268] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  150.967770][ T5547] iwpm_send_hello: Unable to send a nlmsg
[  151.045951][ T4236] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  151.367055][ T1268] bond0 (unregistering): Released all slaves
[  151.473586][ T4236] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  151.520264][ T4236] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  151.560662][ T4236] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  151.601499][ T4236] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  151.621175][ T4236] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  151.641352][ T4236] usb 3-1: config 0 descriptor??
[  151.691773][ T5367] batman_adv: batadv0: Adding interface: batadv_slave_1
[  151.729708][ T5367] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  151.756356][    C0] vkms_vblank_simulate: vblank timer overrun
[  151.862425][ T5367] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  152.116888][ T4236] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving
[  152.217027][ T5567] i2c i2c-0: new_device: Instantiated device stusb1600 at 0x28
[  152.296819][ T4236] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  152.447121][ T5367] device hsr_slave_0 entered promiscuous mode
[  152.556143][ T5367] device hsr_slave_1 entered promiscuous mode
[  152.618849][ T5367] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  152.691715][ T5367] Cannot create hsr debugfs directory
[  152.779539][ T5576] syz.0.510 (5576) used greatest stack depth: 20144 bytes left
[  152.963551][ T5035] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  153.233491][ T5035] usb 4-1: Using ep0 maxpacket: 8
[  153.543986][ T5035] usb 4-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77
[  153.583468][ T4238] usb 3-1: reset high-speed USB device number 4 using dummy_hcd
[  153.603379][ T5035] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239
[  153.649386][ T5367] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  153.679994][ T5035] usb 4-1: Product: syz
[  153.714251][ T5035] usb 4-1: Manufacturer: syz
[  153.719004][ T5035] usb 4-1: SerialNumber: syz
[  153.791116][ T5035] usb 4-1: config 0 descriptor??
[  153.858655][ T5035] gspca_main: sq905-2.14.0 probing 2770:9120
[  153.962910][ T5367] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  154.013664][ T5367] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  154.145206][ T5367] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  154.509143][    T7] usb 3-1: USB disconnect, device number 4
[  154.672429][ T5367] 8021q: adding VLAN 0 to HW filter on device bond0
[  154.783096][ T5445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  154.818827][ T5445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  154.932056][ T5367] 8021q: adding VLAN 0 to HW filter on device team0
[  154.944376][ T5035] gspca_sq905: sq905_read_data: usb_control_msg failed (-71)
[  155.001071][ T5035] sq905: probe of 4-1:0.0 failed with error -71
[  155.044359][  T161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  155.099980][  T161] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  155.132123][ T5035] usb 4-1: USB disconnect, device number 6
[  155.206121][  T161] bridge0: port 1(bridge_slave_0) entered blocking state
[  155.215756][  T161] bridge0: port 1(bridge_slave_0) entered forwarding state
[  155.341502][  T161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  155.437592][  T161] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  155.511023][  T161] bridge0: port 2(bridge_slave_1) entered blocking state
[  155.518221][  T161] bridge0: port 2(bridge_slave_1) entered forwarding state
[  155.546387][   T13] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  155.633147][ T5647] loop3: detected capacity change from 0 to 256
[  155.693889][  T161] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  155.784262][  T161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  155.899481][  T161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  155.943953][ T1092] block nbd0: Possible stuck request ffff888021c00000: control (read@0,4096B). Runtime 60 seconds
[  155.960842][ T5035] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  155.970738][   T13] usb 1-1: config index 0 descriptor too short (expected 23569, got 27)
[  156.035520][   T13] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  156.111918][  T161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  156.228151][  T161] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  156.243672][   T13] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  156.259566][   T13] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  156.284886][  T161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  156.303317][   T13] usb 1-1: Manufacturer: syz
[  156.310921][  T161] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  156.341357][   T13] usb 1-1: config 0 descriptor??
[  156.377271][  T161] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  156.433544][    T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  156.454439][  T161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  156.521901][  T161] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  156.591755][ T5035] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  156.599427][   T13] rc_core: IR keymap rc-hauppauge not found
[  156.628050][ T5367] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  156.642513][   T13] Registered IR keymap rc-empty
[  156.718392][ T5367] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  156.726982][   T13] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  156.766911][  T161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  156.795673][   T13] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input8
[  156.815448][  T161] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  157.016438][ T5032] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  157.029734][ T5035] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  157.103477][ T5035] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[  157.199884][ T5035] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64
[  157.223869][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  157.315708][ T5035] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6
[  157.427558][ T5035] usb 2-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00
[  157.502247][ T5035] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  157.566702][    T7] usb 1-1: USB disconnect, device number 3
[  157.573557][ T5653] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  157.580622][ T5653] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  157.686582][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  157.714383][ T5035] keyspan 2-1:1.0: Keyspan 2 port adapter converter detected
[  157.739485][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  157.810219][ T5035] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 84
[  157.822370][ T5367] 8021q: adding VLAN 0 to HW filter on device batadv0
[  157.880935][ T5035] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 2
[  157.984554][ T5035] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  158.064850][ T5035] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 88
[  158.160414][ T5685] loop2: detected capacity change from 0 to 512
[  158.202334][ T5035] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 6
[  158.290377][ T5035] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  158.308933][ T5685] EXT4-fs error (device loop2): ext4_orphan_get:1410: inode #15: comm syz.2.538: inode has both inline data and extents flags
[  158.394061][ T5035] usb 2-1: USB disconnect, device number 4
[  158.430710][ T5685] EXT4-fs error (device loop2): ext4_orphan_get:1415: comm syz.2.538: couldn't read orphan inode 15 (err -117)
[  158.486284][ T5035] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  158.540624][ T5685] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback.
[  158.598305][ T5035] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  158.669143][ T5035] keyspan 2-1:1.0: device disconnected
[  158.754907][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  158.981745][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  159.103459][    T7] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  159.119311][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  159.241423][ T5705] loop2: detected capacity change from 0 to 1024
[  159.296912][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  159.335257][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  159.421076][ T5367] device veth0_vlan entered promiscuous mode
[  159.453404][    T7] usb 1-1: Using ep0 maxpacket: 32
[  159.478529][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  159.487335][ T4238] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  159.541245][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  159.583585][   T13] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  159.603478][    T7] usb 1-1: config 0 has an invalid interface number: 85 but max is 0
[  159.657280][ T5367] device veth1_vlan entered promiscuous mode
[  159.713376][    T7] usb 1-1: config 0 has no interface number 0
[  159.750391][    T7] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  159.811022][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  159.840858][    T7] usb 1-1: config 0 interface 85 has no altsetting 0
[  159.869880][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  159.883284][   T13] usb 4-1: Using ep0 maxpacket: 32
[  159.914585][ T5445] hfsplus: b-tree write err: -5, ino 25
[  159.934848][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  159.959819][ T5445] hfsplus: b-tree write err: -5, ino 4
[  159.994954][ T5032] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  160.024542][ T5445] hfsplus: b-tree write err: -5, ino 2
[  160.030521][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  160.043997][    T7] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  160.053194][    T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  160.074347][ T5445] hfsplus: b-tree write err: -5, ino 26
[  160.095689][    T7] usb 1-1: Product: syz
[  160.100060][    T7] usb 1-1: Manufacturer: syz
[  160.118092][ T5367] device veth0_macvtap entered promiscuous mode
[  160.144438][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  160.163551][   T13] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe
[  160.181154][    T7] usb 1-1: SerialNumber: syz
[  160.245274][    T7] usb 1-1: config 0 descriptor??
[  160.259924][ T5367] device veth1_macvtap entered promiscuous mode
[  160.293855][   T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  160.362015][   T13] usb 4-1: Product: syz
[  160.391539][ T5367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  160.412206][   T13] usb 4-1: Manufacturer: syz
[  160.447510][   T13] usb 4-1: SerialNumber: syz
[  160.462418][ T5367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  160.500405][   T13] usb 4-1: config 0 descriptor??
[  160.536324][ T5367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  160.666606][ T5367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  160.713520][ T4238] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  160.769634][ T5367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  160.803593][   T13] snd-usb-6fire 4-1:0.0: unknown device firmware state received from device:
[  160.832976][   T13] 00 00 00 00 00 00 00 00 
[  160.845783][ T5367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  160.859810][   T13] snd-usb-6fire: probe of 4-1:0.0 failed with error -5
[  160.912796][ T5367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  160.989747][ T5710] loop1: detected capacity change from 0 to 32768
[  161.005409][    T7] appletouch 1-1:0.85: Geyser mode initialized.
[  161.024870][ T5367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  161.045327][    T7] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.85/input/input9
[  161.104749][ T5367] batman_adv: batadv0: Interface activated: batadv_slave_0
[  161.197870][  T149] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  161.226977][ T4236] usb 4-1: USB disconnect, device number 7
[  161.234715][ T5710] XFS (loop1): Mounting V5 Filesystem
[  161.284283][  T149] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  161.337289][ T4240] usb 1-1: USB disconnect, device number 4
[  161.345189][ T5032] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  161.353497][    C0] appletouch 1-1:0.85: atp_complete: usb_submit_urb failed with result -19
[  161.477348][ T5367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  161.537362][ T5367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  161.564728][ T5367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  161.598175][ T5367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  161.615441][ T5710] XFS (loop1): Ending clean mount
[  161.660557][ T5367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  161.777470][ T5367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  161.934526][ T5367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  162.030455][ T5367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  162.107768][ T5367] batman_adv: batadv0: Interface activated: batadv_slave_1
[  162.139264][ T4240] appletouch 1-1:0.85: input: appletouch disconnected
[  162.173969][ T5445] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  162.217069][ T4188] XFS (loop1): Unmounting Filesystem
[  162.242394][ T5445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  162.352703][ T5367] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  162.361883][ T4236] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  162.431143][ T5367] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  162.516226][ T5367] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  162.573347][ T5367] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  162.643925][ T4236] usb 4-1: Using ep0 maxpacket: 32
[  162.652317][    T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  162.664120][ T4240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  162.793579][ T4236] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32
[  162.903652][ T5036] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  163.015643][ T4236] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c
[  163.029408][ T4236] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  163.041013][ T4236] usb 4-1: Product: syz
[  163.047831][ T4236] usb 4-1: Manufacturer: syz
[  163.056863][ T4236] usb 4-1: SerialNumber: syz
[  163.079560][ T4236] usb 4-1: config 0 descriptor??
[  163.103789][ T5745] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  163.144443][ T4236] hub 4-1:0.0: bad descriptor, ignoring hub
[  163.150483][ T4236] hub: probe of 4-1:0.0 failed with error -5
[  163.157541][ T5036] usb 3-1: Using ep0 maxpacket: 8
[  163.197647][ T4236] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input10
[  163.283932][ T5036] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  163.307274][  T140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  163.355051][  T140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  163.384501][ T5036] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  163.461268][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  163.506416][ T5036] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  163.552212][ T5445] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  163.574747][ T5036] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  163.597923][ T5445] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  163.647163][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  163.669515][ T5036] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  163.712802][ T5036] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  163.831627][ T4240] usb 4-1: USB disconnect, device number 8
[  163.838056][    C0] usbtouchscreen 4-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19
[  163.989884][ T5032] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  164.018741][ T4236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  164.035172][ T5036] usb 3-1: GET_CAPABILITIES returned 0
[  164.042286][ T5036] usbtmc 3-1:16.0: can't read capabilities
[  164.343913][    C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  164.373281][    C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  164.383134][    C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  164.392617][    C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  164.405648][    C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  164.418094][    C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  164.428808][    C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  164.438650][    C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  164.447735][    C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  164.457668][    C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  164.469642][    C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  164.478757][    C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  164.487833][    C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  164.496906][    C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  164.511915][    C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  164.528437][    C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2
[  164.600222][ T5032] usb 3-1: USB disconnect, device number 5
[  164.665593][ T1325] kernel read not supported for file /dsp1 (pid: 1325 comm: kworker/0:3)
[  165.063981][ T4238] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  165.318761][ T5795] loop2: detected capacity change from 0 to 256
[  165.360476][ T5795] exfat: Deprecated parameter 'utf8'
[  165.435134][ T5795] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d)
[  165.589542][ T5803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  165.598945][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  165.618192][   T25] audit: type=1800 audit(1790397546.100:37): pid=5795 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.564" name="file1" dev="loop2" ino=1048618 res=0 errno=0
[  166.105221][ T5036] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  166.321100][ T5819] netlink: 'syz.5.569': attribute type 6 has an invalid length.
[  166.439968][ T5829] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  167.144040][ T5036] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  167.224016][ T4238] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  167.423468][ T1325] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  167.693495][ T1325] usb 6-1: Using ep0 maxpacket: 32
[  167.813632][ T1325] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  168.005197][ T1325] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  168.067401][ T1325] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  168.121558][ T1325] usb 6-1: Product: syz
[  168.150421][ T1325] usb 6-1: Manufacturer: syz
[  168.188701][ T1325] usb 6-1: SerialNumber: syz
[  168.228444][ T5841] loop2: detected capacity change from 0 to 32768
[  168.235130][ T1325] usb 6-1: config 0 descriptor??
[  168.329142][ T4236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  168.340302][ T5848] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  168.348519][ T5841] XFS (loop2): Mounting V5 Filesystem
[  168.393934][ T1325] hub 6-1:0.0: bad descriptor, ignoring hub
[  168.427291][ T1325] hub: probe of 6-1:0.0 failed with error -5
[  168.554591][ T5841] XFS (loop2): Ending clean mount
[  168.894401][ T4196] XFS (loop2): Unmounting Filesystem
[  169.302587][ T5885] loop3: detected capacity change from 0 to 1024
[  169.338444][ T5880] syzkaller0 speed is unknown, defaulting to 1000
[  169.411566][ T4240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  169.480832][ T5885] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpjquota=,,errors=continue. Quota mode: writeback.
[  169.639442][ T5894] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  169.639442][ T5894] The task syz.1.591 (5894) triggered the difference, watch for misbehavior.
[  169.877804][ T5036] usb 6-1: USB disconnect, device number 2
[  169.998042][ T5896] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  170.024456][ T1325] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  170.034865][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  170.264051][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  170.424630][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  170.589368][ T5880] chnl_net:caif_netlink_parms(): no params data found
[  170.773144][ T5916] loop3: detected capacity change from 0 to 512
[  170.920099][ T5919] loop2: detected capacity change from 0 to 512
[  170.949480][ T5916] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  171.059106][ T5916] EXT4-fs (loop3): 1 truncate cleaned up
[  171.108102][ T5919] EXT4-fs (loop2): inline encryption not supported
[  171.134744][ T5880] bridge0: port 1(bridge_slave_0) entered blocking state
[  171.172801][ T5916] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  171.195471][ T5919] EXT4-fs (loop2): Mount option "noacl" will be removed by 3.5
[  171.195471][ T5919] Contact linux-ext4@vger.kernel.org if you think we should keep it.
[  171.195471][ T5919] 
[  171.238353][ T5036] Bluetooth: hci0: command 0x0409 tx timeout
[  171.326412][ T5880] bridge0: port 1(bridge_slave_0) entered disabled state
[  171.370902][ T5937] loop1: detected capacity change from 0 to 512
[  171.408886][ T5880] device bridge_slave_0 entered promiscuous mode
[  171.445513][ T5919] EXT4-fs (loop2): Test dummy encryption mode enabled
[  171.464206][ T5036] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  171.513516][ T5937] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  171.549299][ T5938] device tunl0 entered promiscuous mode
[  171.563632][ T5919] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  171.610295][ T5938] netlink: 'syz.5.601': attribute type 4 has an invalid length.
[  171.645945][ T5937] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  171.680006][ T5919] EXT4-fs error (device loop2): ext4_orphan_get:1436: comm syz.2.598: bad orphan inode 131083
[  171.723563][ T5938] netlink: 9 bytes leftover after parsing attributes in process `syz.5.601'.
[  171.802376][ T5919] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,lazytime,inlinecrypt,usrquota,discard,journal_ioprio=0x0000000000000003,noacl,test_dummy_encryption=v1,usrquota,,errors=continue. Quota mode: writeback.
[  171.841317][ T5937] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #16: comm syz.1.602: invalid indirect mapped block 32768 (level 2)
[  171.859787][ T5880] bridge0: port 2(bridge_slave_1) entered blocking state
[  171.898830][ T5880] bridge0: port 2(bridge_slave_1) entered disabled state
[  171.937824][ T5937] EXT4-fs (loop1): Remounting filesystem read-only
[  171.951359][ T5880] device bridge_slave_1 entered promiscuous mode
[  172.021602][ T5937] EXT4-fs (loop1): 1 orphan inode deleted
[  172.107230][ T5937] EXT4-fs (loop1): 1 truncate cleaned up
[  172.134036][ T5880] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  172.169751][ T5937] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrquota,errors=remount-ro,noblock_validity,lazytime,jqfmt=vfsv0,nolazytime,dioread_nolock,journal_ioprio=0x0000000000000006,. Quota mode: writeback.
[  172.274544][ T5880] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  172.362397][ T5956] device batadv_slave_1 entered promiscuous mode
[  172.398353][ T5955] device batadv_slave_1 left promiscuous mode
[  172.472805][ T5880] team0: Port device team_slave_0 added
[  172.503953][ T5036] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  172.527598][ T5937] EXT4-fs error (device loop1): ext4_search_dir:1551: inode #12: block 7: comm syz.1.602: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=784, size=56 fake=0
[  172.601922][ T5880] team0: Port device team_slave_1 added
[  172.718674][ T5880] batman_adv: batadv0: Adding interface: batadv_slave_0
[  172.760319][ T5919] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[  172.800030][ T5937] EXT4-fs (loop1): Remounting filesystem read-only
[  172.884565][ T5880] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  172.926602][ T5967] EXT4-fs error (device loop1): ext4_check_all_de:667: inode #12: block 7: comm syz.1.602: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=784, size=124 fake=0
[  172.999299][ T5919] overlayfs: upper fs needs to support d_type.
[  173.117917][ T5967] EXT4-fs (loop1): Remounting filesystem read-only
[  173.140022][ T5880] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  173.261203][ T5880] batman_adv: batadv0: Adding interface: batadv_slave_1
[  173.308386][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  173.324447][ T5919] fscrypt (loop2): Missing crypto API support for AES-256-XTS (API name: "xts(aes)")
[  173.381547][ T5880] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  173.473719][ T5919] overlayfs: upper fs does not support tmpfile.
[  173.503690][ T5036] Bluetooth: hci0: command 0x041b tx timeout
[  173.603969][ T5919] fscrypt (loop2): Error allocating 'xts(aes)' transform: -4
[  173.642763][ T4236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  173.701150][ T5880] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  173.984160][ T5880] device hsr_slave_0 entered promiscuous mode
[  174.040833][ T5880] device hsr_slave_1 entered promiscuous mode
[  174.101553][ T5880] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  174.170393][ T5880] Cannot create hsr debugfs directory
[  174.664053][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  174.801456][ T6017] loop5: detected capacity change from 0 to 256
[  174.851916][ T5880] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  174.879653][ T6019] loop2: detected capacity change from 0 to 256
[  174.892281][ T5880] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  174.901039][ T6017] exfat: Deprecated parameter 'utf8'
[  174.960629][ T5880] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  174.981525][ T6017] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d)
[  175.022099][ T5880] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  175.168664][   T25] audit: type=1800 audit(1790397555.650:38): pid=6017 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.619" name="file1" dev="loop5" ino=1048619 res=0 errno=0
[  175.336938][ T6024] loop1: detected capacity change from 0 to 512
[  175.499026][ T6024] EXT4-fs (loop1): inline encryption not supported
[  175.543619][   T13] Bluetooth: hci0: command 0x040f tx timeout
[  175.563709][ T6024] EXT4-fs (loop1): Mount option "noacl" will be removed by 3.5
[  175.563709][ T6024] Contact linux-ext4@vger.kernel.org if you think we should keep it.
[  175.563709][ T6024] 
[  175.737677][ T4238] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  175.773864][ T5880] 8021q: adding VLAN 0 to HW filter on device bond0
[  175.788626][ T6029] loop5: detected capacity change from 0 to 512
[  175.823575][ T6024] EXT4-fs (loop1): Test dummy encryption mode enabled
[  175.920881][ T6029] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  175.943028][ T6024] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  176.001552][ T5880] 8021q: adding VLAN 0 to HW filter on device team0
[  176.041760][ T6029] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  176.056834][ T6034] loop2: detected capacity change from 0 to 256
[  176.077534][  T149] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  176.093787][ T6024] EXT4-fs error (device loop1): ext4_orphan_get:1436: comm syz.1.623: bad orphan inode 131083
[  176.130123][  T149] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  176.160526][ T6029] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #16: comm syz.5.624: invalid indirect mapped block 32768 (level 2)
[  176.276145][ T6024] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,lazytime,inlinecrypt,usrquota,discard,journal_ioprio=0x0000000000000003,noacl,test_dummy_encryption=v1,usrquota,,errors=continue. Quota mode: writeback.
[  176.329464][  T149] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  176.355538][ T6029] EXT4-fs (loop5): Remounting filesystem read-only
[  176.401984][  T149] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  176.411329][ T6029] EXT4-fs (loop5): 1 orphan inode deleted
[  176.453885][ T4236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  176.479666][ T6041] loop2: detected capacity change from 0 to 512
[  176.491969][  T149] bridge0: port 1(bridge_slave_0) entered blocking state
[  176.499152][  T149] bridge0: port 1(bridge_slave_0) entered forwarding state
[  176.508021][ T6029] EXT4-fs (loop5): 1 truncate cleaned up
[  176.564836][ T6029] EXT4-fs (loop5): mounted filesystem without journal. Opts: usrquota,errors=remount-ro,noblock_validity,lazytime,jqfmt=vfsv0,nolazytime,dioread_nolock,journal_ioprio=0x0000000000000006,. Quota mode: writeback.
[  176.633572][ T6041] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[  176.686520][ T6024] overlayfs: upper fs needs to support d_type.
[  176.703720][  T149] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  176.743507][ T4236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  176.787259][ T6024] fscrypt: AES-256-XTS using implementation "xts-aes-aesni"
[  176.830071][  T149] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  176.873867][ T6041] EXT4-fs error (device loop2): ext4_orphan_get:1436: comm syz.2.626: bad orphan inode 15
[  176.938070][  T149] bridge0: port 2(bridge_slave_1) entered blocking state
[  176.945255][  T149] bridge0: port 2(bridge_slave_1) entered forwarding state
[  176.954833][ T6029] EXT4-fs error (device loop5): ext4_search_dir:1551: inode #12: block 7: comm syz.5.624: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=784, size=56 fake=0
[  177.011749][ T6021] loop3: detected capacity change from 0 to 32768
[  177.021276][  T149] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  177.029479][ T6041] ext4_test_bit(bit=14, block=18) = 1
[  177.052375][ T6041] is_bad_inode(inode)=0
[  177.088459][ T6041] NEXT_ORPHAN(inode)=1023
[  177.111402][  T149] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  177.141347][ T6029] EXT4-fs (loop5): Remounting filesystem read-only
[  177.167637][ T6041] max_ino=32
[  177.187042][ T6021] XFS (loop3): Mounting V5 Filesystem
[  177.211044][  T149] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  177.230901][ T6041] i_nlink=0
[  177.236561][ T6055] EXT4-fs error (device loop5): ext4_check_all_de:667: inode #12: block 7: comm syz.5.624: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=784, size=124 fake=0
[  177.272312][ T4188] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 13: comm syz-executor: path /129/bus: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[  177.312278][ T6041] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.626: bg 0: block 161: padding at end of block bitmap is not set
[  177.368752][  T149] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  177.392935][ T6021] XFS (loop3): Ending clean mount
[  177.415295][  T149] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  177.450635][ T6041] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6191: Corrupt filesystem
[  177.479260][ T6055] EXT4-fs (loop5): Remounting filesystem read-only
[  177.500218][  T149] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  177.534209][ T6041] EXT4-fs (loop2): mounted filesystem without journal. Opts: nogrpid,nolazytime,,errors=continue. Quota mode: none.
[  177.574355][  T149] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  177.619842][ T6041] ext2 filesystem being mounted at /126/�q�Y�3aK supports timestamps until 2038-01-19 (0x7fffffff)
[  177.631112][ T4240] Bluetooth: hci0: command 0x0419 tx timeout
[  177.650123][  T149] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  177.702456][ T4192] XFS (loop3): Unmounting Filesystem
[  177.775112][  T149] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  177.877366][ T5032] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  177.888559][  T149] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  177.961296][ T5880] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  178.056799][ T5880] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  178.099719][  T149] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  178.110153][  T149] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  178.715284][  T149] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  178.842607][  T149] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  179.062207][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  179.110521][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  179.254517][  T149] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  179.368875][ T5880] 8021q: adding VLAN 0 to HW filter on device batadv0
[  179.402551][ T6067] loop2: detected capacity change from 0 to 32768
[  179.462794][  T149] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  179.574639][ T6067] XFS (loop2): Mounting V5 Filesystem
[  179.737584][ T6080] syzkaller0 speed is unknown, defaulting to 1000
[  179.925966][ T6067] XFS (loop2): Ending clean mount
[  180.238581][ T6102] XFS (loop2): User initiated shutdown received.
[  180.300173][ T6102] XFS (loop2): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:495).  Shutting down filesystem.
[  180.534806][ T6102] XFS (loop2): Please unmount the filesystem and rectify the problem(s)
[  180.764888][ T4196] XFS (loop2): Unmounting Filesystem
[  180.783629][ T5445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  180.814014][ T5445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  181.150818][ T6121] loop5: detected capacity change from 0 to 16
[  181.198542][ T5880] device veth0_vlan entered promiscuous mode
[  181.260729][ T6121] erofs: (device loop5): mounted with root inode @ nid 36.
[  181.314066][  T161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  181.322421][  T161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  181.422727][ T6121] attempt to access beyond end of device
[  181.422727][ T6121] loop5: rw=524288, want=32, limit=16
[  181.507639][ T5880] device veth1_vlan entered promiscuous mode
[  181.544560][ T4238] Bluetooth: hci2: command 0x0409 tx timeout
[  181.562151][  T161] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  181.589824][ T6121] erofs: (device loop5): z_erofs_lz4_decompress: failed to decompress -23 in[46, 4050] out[4096]
[  181.635671][  T161] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  181.734331][  T161] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  181.778178][   T25] audit: type=1800 audit(1790397562.260:39): pid=6121 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.640" name="file2" dev="loop5" ino=89 res=0 errno=0
[  181.885349][  T161] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  182.074192][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  182.129452][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  182.243579][ T5880] device veth0_macvtap entered promiscuous mode
[  182.372235][ T5880] device veth1_macvtap entered promiscuous mode
[  182.619102][ T5880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  182.695568][ T5880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  182.824176][ T5880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  182.910725][ T5880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  182.978294][ T5880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  183.050193][ T5880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  183.093350][ T5880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  183.166361][ T5880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  183.228986][ T5880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  183.322084][ T5880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  183.382400][ T5880] batman_adv: batadv0: Interface activated: batadv_slave_0
[  183.465218][ T5445] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  183.504266][ T5445] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  183.556995][ T5445] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  183.610633][ T5445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  183.682544][ T5880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  183.703287][ T1325] Bluetooth: hci2: command 0x041b tx timeout
[  183.761396][ T5880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  183.858422][ T5880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  183.939691][ T5880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  184.002086][ T5880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  184.073437][ T5880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  184.129379][ T5880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  184.188995][ T5880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  184.211904][ T6147] loop5: detected capacity change from 0 to 40427
[  184.242184][ T5880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  184.290174][ T6147] F2FS-fs (loop5): invalid crc value
[  184.353146][ T5880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  184.375485][ T6147] F2FS-fs (loop5): Found nat_bits in checkpoint
[  184.452387][ T5880] batman_adv: batadv0: Interface activated: batadv_slave_1
[  184.521348][ T6080] chnl_net:caif_netlink_parms(): no params data found
[  184.589284][ T5445] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  184.624215][ T6165] loop3: detected capacity change from 0 to 512
[  184.649320][ T5445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  184.659082][ T6164] loop2: detected capacity change from 0 to 256
[  184.741196][ T5880] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  184.769510][ T6164] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  184.783120][ T6165] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,errors=remount-ro,. Quota mode: writeback.
[  184.798442][ T6165] ext4 filesystem being mounted at /129/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  184.852552][ T6165] EXT4-fs error (device loop3): ext4_xattr_block_get:543: inode #12: comm syz.3.648: corrupted xattr block 6
[  184.872992][ T6165] EXT4-fs (loop3): Remounting filesystem read-only
[  184.880607][ T6165] overlayfs: failed to get origin (-117)
[  184.890886][ T6165] EXT4-fs error (device loop3): ext4_xattr_block_find:1857: inode #12: comm syz.3.648: corrupted xattr block 6
[  184.921859][ T6165] EXT4-fs (loop3): Remounting filesystem read-only
[  184.931622][ T6165] overlayfs: failed to verify origin (/, ino=2, err=-117)
[  184.938982][ T6165] overlayfs: failed to verify upper root origin
[  184.962286][ T6147] F2FS-fs (loop5): Cannot turn on quotas: -2 on 0
[  185.003402][ T5880] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  185.017083][ T6164] exFAT-fs (loop2): Medium has reported failures. Some data may be lost.
[  185.044056][ T6147] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4
[  185.065301][ T5880] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  185.084786][ T6164] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc4d1c548, utbl_chksum : 0xe619d30d)
[  185.100813][ T5880] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  185.259890][   T25] audit: type=1800 audit(1790397565.740:40): pid=6164 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.649" name="file1" dev="loop2" ino=1048620 res=0 errno=0
[  185.663162][ T6176] netlink: 'syz.2.651': attribute type 11 has an invalid length.
[  185.759304][ T5367] attempt to access beyond end of device
[  185.759304][ T5367] loop5: rw=2049, want=45112, limit=40427
[  185.798565][   T13] Bluetooth: hci2: command 0x040f tx timeout
[  186.023764][ T1092] block nbd0: Possible stuck request ffff888021c00000: control (read@0,4096B). Runtime 90 seconds
[  186.142208][ T6190] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[  186.236893][ T1268] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  186.246426][  T140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  186.327385][ T6080] bridge0: port 1(bridge_slave_0) entered blocking state
[  186.336589][  T140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  186.366264][ T1268] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  186.427910][ T6080] bridge0: port 1(bridge_slave_0) entered disabled state
[  186.544271][ T6080] device bridge_slave_0 entered promiscuous mode
[  186.595179][  T140] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  186.632685][  T140] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  186.800828][  T149] device hsr_slave_0 left promiscuous mode
[  186.878284][  T149] device hsr_slave_1 left promiscuous mode
[  186.931171][  T149] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  186.984927][  T149] batman_adv: batadv0: Removing interface: batadv_slave_0
[  187.078475][  T149] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  187.105573][  T149] batman_adv: batadv0: Removing interface: batadv_slave_1
[  187.142738][  T149] device bridge_slave_1 left promiscuous mode
[  187.177121][  T149] bridge0: port 2(bridge_slave_1) entered disabled state
[  187.249152][  T149] device bridge_slave_0 left promiscuous mode
[  187.286157][  T149] bridge0: port 1(bridge_slave_0) entered disabled state
[  187.437659][  T149] device veth1_macvtap left promiscuous mode
[  187.473412][  T149] device veth0_macvtap left promiscuous mode
[  187.493623][  T149] device veth1_vlan left promiscuous mode
[  187.528611][  T149] device veth0_vlan left promiscuous mode
[  187.863539][ T4236] Bluetooth: hci2: command 0x0419 tx timeout
[  188.360512][  T149] team0 (unregistering): Port device team_slave_1 removed
[  188.454854][  T149] team0 (unregistering): Port device team_slave_0 removed
[  188.520165][  T149] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  188.600508][  T149] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  188.805219][  T149] bond0 (unregistering): Released all slaves
[  188.861543][ T6080] bridge0: port 2(bridge_slave_1) entered blocking state
[  188.881716][ T6080] bridge0: port 2(bridge_slave_1) entered disabled state
[  188.906581][ T6080] device bridge_slave_1 entered promiscuous mode
[  189.113839][ T6080] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  189.254831][ T6080] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  189.471655][ T6253] loop2: detected capacity change from 0 to 256
[  189.563956][ T6080] team0: Port device team_slave_0 added
[  189.593737][ T5035] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  189.678941][ T6256] IPVS: wrr: SCTP 172.20.20.187:0 - no destination available
[  189.704593][ T6080] team0: Port device team_slave_1 added
[  189.842016][ T6080] batman_adv: batadv0: Adding interface: batadv_slave_0
[  189.925742][ T6080] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  190.011004][ T5035] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  190.049407][ T5035] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  190.082532][ T5035] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  190.103087][ T6080] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  190.123629][ T5032] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  190.152169][ T5035] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  190.256407][ T6080] batman_adv: batadv0: Adding interface: batadv_slave_1
[  190.288612][ T6080] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  190.327317][ T5035] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  190.391848][ T5035] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  190.462993][ T5035] usb 7-1: Manufacturer: syz
[  190.491381][ T5035] usb 7-1: config 0 descriptor??
[  190.554956][ T6080] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  190.566609][ T5032] usb 6-1: unable to get BOS descriptor or descriptor too short
[  190.673783][ T5032] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7
[  190.903818][ T5032] usb 6-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40
[  190.956738][ T5032] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  191.004769][ T5035] appleir 0003:05AC:8243.0007: unknown main item tag 0x0
[  191.013029][ T5032] usb 6-1: Product: syz
[  191.036482][ T5032] usb 6-1: Manufacturer: syz
[  191.041153][ T5032] usb 6-1: SerialNumber: syz
[  191.050306][ T5035] appleir 0003:05AC:8243.0007: No inputs registered, leaving
[  191.120033][ T5035] appleir 0003:05AC:8243.0007: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.6-1/input0
[  191.273138][ T6080] device hsr_slave_0 entered promiscuous mode
[  191.355539][ T5032] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  191.390581][   T13] usb 7-1: USB disconnect, device number 2
[  191.414791][ T6080] device hsr_slave_1 entered promiscuous mode
[  191.470593][ T6287] fido_id[6287]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory
[  191.514911][ T6080] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  191.555474][ T6080] Cannot create hsr debugfs directory
[  191.573517][ T5032] usb 6-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22)
[  192.307524][ T6300] loop2: detected capacity change from 0 to 8192
[  192.384245][ T5032] usb 6-1: USB disconnect, device number 3
[  192.557733][ T6300] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal
[  192.708807][ T6300] REISERFS (device loop2): using ordered data mode
[  192.735802][ T6312] loop6: detected capacity change from 0 to 256
[  192.822613][ T6300] reiserfs: using flush barriers
[  192.937396][ T6312] FAT-fs (loop6): bogus number of FAT sectors
[  192.949626][ T6300] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  193.020140][ T6312] FAT-fs (loop6): Can't find a valid FAT filesystem
[  193.073715][ T6316] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  193.110120][ T6300] REISERFS (device loop2): checking transaction log (loop2)
[  193.264329][ T6312] netlink: 104 bytes leftover after parsing attributes in process `syz.6.683'.
[  193.938868][ T6300] REISERFS (device loop2): Using tea hash to sort names
[  194.016555][ T6298] loop3: detected capacity change from 0 to 40427
[  194.031789][ T6300] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2)
[  194.139799][ T6298] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  194.231009][ T6298] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  194.243174][ T6300] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  194.268206][ T6080] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  194.361332][ T6298] F2FS-fs (loop3): Found nat_bits in checkpoint
[  194.442668][ T6080] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  194.541123][ T6080] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  194.790195][   T25] audit: type=1800 audit(1790397575.270:41): pid=6300 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.681" name="file1" dev="loop2" ino=4 res=0 errno=0
[  194.864713][ T6080] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  195.281235][ T6326] loop6: detected capacity change from 0 to 32768
[  195.476080][ T6080] 8021q: adding VLAN 0 to HW filter on device bond0
[  195.498957][ T6326] JBD2: Ignoring recovery information on journal
[  195.545950][ T6328] loop5: detected capacity change from 0 to 32768
[  195.740305][ T6080] 8021q: adding VLAN 0 to HW filter on device team0
[  195.796102][ T6328] 
[  195.796102][ T6328]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  195.796102][ T6328] 
[  195.808539][ T6326] ocfs2: Mounting device (7,6) on (node local, slot 0) with writeback data mode.
[  195.849449][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  195.904561][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  196.012912][ T6328] ERROR: (device loop5): diWrite: ixpxd invalid
[  196.012912][ T6328] 
[  196.134770][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  196.198336][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  196.243545][ T6328] ERROR: (device loop5): txCommit: 
[  196.243545][ T6328] 
[  196.283875][ T4279] bridge0: port 1(bridge_slave_0) entered blocking state
[  196.291005][ T4279] bridge0: port 1(bridge_slave_0) entered forwarding state
[  196.433889][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  196.533883][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  196.585438][ T5367] 
[  196.585438][ T5367]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  196.585438][ T5367] 
[  196.623493][ T4279] bridge0: port 2(bridge_slave_1) entered blocking state
[  196.630635][ T4279] bridge0: port 2(bridge_slave_1) entered forwarding state
[  196.680455][ T5367] 
[  196.680455][ T5367]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  196.680455][ T5367] 
[  196.751242][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  196.770497][ T5880] ocfs2: Unmounting device (7,6) on (node local)
[  196.830858][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  196.959826][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  197.066283][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  197.183450][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  197.316473][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  197.432732][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  197.529304][ T1325] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  197.582267][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  197.649247][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  197.669744][ T6365] loop5: detected capacity change from 0 to 512
[  197.697330][ T1325] hid-generic 0000:0000:0000.0008: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  197.729539][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  197.765947][ T6365] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option
[  197.835842][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  197.880516][ T6365] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2
[  197.916008][ T6080] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  197.953910][ T6365] EXT4-fs error (device loop5): ext4_iget_extra_inode:4573: inode #15: comm syz.5.690: corrupted in-inode xattr
[  197.981414][ T6371] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  198.023676][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  198.138703][ T6365] EXT4-fs error (device loop5): ext4_orphan_get:1415: comm syz.5.690: couldn't read orphan inode 15 (err -117)
[  198.236183][ T6365] EXT4-fs (loop5): mounted filesystem without journal. Opts: nomblk_io_submit,jqfmt=vfsv0,min_batch_time=0x00000000000003ff,noload,grpjquota=.,noblock_validity,resgid=0x0000000000000000,nobarrier,errors=continue,,errors=continue. Quota mode: writeback.
[  198.604699][ T6356] loop3: detected capacity change from 0 to 32768
[  198.668374][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  198.698104][ T6365] EXT4-fs error (device loop5): ext4_check_dx_root:2268: inode #2: comm syz.5.690: Corrupt dir, invalid name_len for '..', running e2fsck is recommended
[  198.744447][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  198.839489][ T6356] XFS (loop3): Mounting V5 Filesystem
[  198.854287][ T6080] 8021q: adding VLAN 0 to HW filter on device batadv0
[  198.923996][ T6381] loop6: detected capacity change from 0 to 2048
[  199.040577][  T161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  199.113048][ T6381] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  199.174384][  T161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  199.240712][ T6381] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  199.286085][ T6356] XFS (loop3): Ending clean mount
[  199.365330][  T161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  199.412412][ T6356] XFS (loop3): Quotacheck needed: Please wait.
[  199.520267][  T161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  199.598920][ T6080] device veth0_vlan entered promiscuous mode
[  199.689029][  T161] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  199.732753][  T161] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  199.759857][ T6356] XFS (loop3): Quotacheck: Done.
[  199.822514][ T6080] device veth1_vlan entered promiscuous mode
[  199.991794][ T4192] XFS (loop3): Unmounting Filesystem
[  200.050732][  T161] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  200.095148][  T161] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  200.153665][    T7] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  200.166493][  T161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  200.237184][  T161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  200.346583][ T6080] device veth0_macvtap entered promiscuous mode
[  200.383046][ T6403] loop6: detected capacity change from 0 to 512
[  200.436249][ T6080] device veth1_macvtap entered promiscuous mode
[  200.443699][    T7] usb 6-1: Using ep0 maxpacket: 8
[  200.563618][    T7] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  200.580634][ T6080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  200.652910][    T7] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  200.679980][ T6080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  200.746696][ T1428] ieee802154 phy0 wpan0: encryption failed: -22
[  200.753886][ T1428] ieee802154 phy1 wpan1: encryption failed: -22
[  200.771169][ T6080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  200.792820][    T7] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  200.820603][ T6080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  200.840671][    T7] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  200.859433][ T6080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  200.874967][    T7] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  200.890046][    T7] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  200.898720][ T6080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  200.936178][ T6080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  200.950491][ T6080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  200.968022][ T6080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  200.980754][ T6080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  201.031035][ T6080] batman_adv: batadv0: Interface activated: batadv_slave_0
[  201.076315][ T5445] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  201.157383][ T5445] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  201.173617][    T7] usb 6-1: GET_CAPABILITIES returned 0
[  201.179161][    T7] usbtmc 6-1:16.0: can't read capabilities
[  201.204266][ T5445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  201.292830][ T6080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  201.347565][ T6080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  201.369773][ T6414] FAULT_INJECTION: forcing a failure.
[  201.369773][ T6414] name failslab, interval 1, probability 0, space 0, times 1
[  201.410565][ T4236] usb 6-1: USB disconnect, device number 4
[  201.442679][ T6080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  201.463095][ T6080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  201.481149][ T6414] CPU: 0 PID: 6414 Comm: syz.2.710 Not tainted syzkaller #0
[  201.488606][ T6414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  201.498809][ T6414] Call Trace:
[  201.502109][ T6414]  <TASK>
[  201.505052][ T6414]  dump_stack_lvl+0x188/0x250
[  201.509756][ T6414]  ? show_regs_print_info+0x20/0x20
[  201.515259][ T6414]  ? load_image+0x410/0x410
[  201.519922][ T6414]  ? __might_sleep+0xf0/0xf0
[  201.525987][ T6414]  ? __lock_acquire+0x7b50/0x7b50
[  201.533595][ T6414]  should_fail+0x383/0x4b0
[  201.540432][ T6414]  should_failslab+0x5/0x20
[  201.544967][ T6414]  slab_pre_alloc_hook+0x51/0xc0
[  201.550742][ T6414]  ? __d_alloc+0x27/0x6d0
[  201.555565][ T6414]  kmem_cache_alloc+0x3d/0x280
[  201.561825][ T6414]  __d_alloc+0x27/0x6d0
[  201.567728][ T6414]  ? d_alloc_pseudo+0xe/0x70
[  201.575211][ T6414]  d_alloc_pseudo+0x19/0x70
[  201.581313][ T6414]  alloc_file_pseudo+0xe0/0x200
[  201.586216][ T6414]  ? alloc_empty_file_noaccount+0x80/0x80
[  201.593874][ T6414]  ? alloc_fd+0x59e/0x650
[  201.598259][ T6414]  sock_alloc_file+0xb3/0x240
[  201.603322][ T6414]  __sys_socket+0x11d/0x170
[  201.609959][ T6414]  __x64_sys_socket+0x76/0x80
[  201.618554][ T6414]  do_syscall_64+0x4c/0xa0
[  201.625451][ T6414]  ? clear_bhb_loop+0x30/0x80
[  201.632731][ T6414]  ? clear_bhb_loop+0x30/0x80
[  201.637704][ T6414]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  201.645284][ T6414] RIP: 0033:0x7f229b560159
[  201.649735][ T6414] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  201.673953][ T6414] RSP: 002b:00007f22997b8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  201.682421][ T6414] RAX: ffffffffffffffda RBX: 00007f229b7e7fa0 RCX: 00007f229b560159
[  201.693321][ T6414] RDX: 0000000000000002 RSI: 0000000000000003 RDI: 000000000000000f
[  201.704689][ T6414] RBP: 00007f229b5f706b R08: 0000000000000000 R09: 0000000000000000
[  201.717829][ T6414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  201.732400][ T6414] R13: 00007f229b7e8038 R14: 00007f229b7e7fa0 R15: 00007ffc0cc81e08
[  201.744642][ T6414]  </TASK>
[  201.768493][ T6080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  201.787530][ T6080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  201.800396][ T6080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  201.815756][ T6080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  201.829143][ T6080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  201.847617][ T6080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  201.884707][ T6080] batman_adv: batadv0: Interface activated: batadv_slave_1
[  201.958974][  T161] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  202.006249][  T161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  202.069317][ T6080] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  202.108285][ T6080] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  202.135552][ T6080] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  202.176680][ T6080] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  202.507274][ T6417] device syzkaller1 entered promiscuous mode
[  202.623910][  T149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  202.690150][  T149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  202.745701][ T6169] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  202.858291][ T6169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  202.897329][ T6169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  202.949430][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  203.029268][ T6428] PID 6428 killed due to inadequate hugepage pool
[  203.217674][ T6438] loop5: detected capacity change from 0 to 256
[  203.368278][ T6438] exfat: Deprecated parameter 'namecase'
[  203.452936][ T6438] exfat: Deprecated parameter 'namecase'
[  203.572979][ T6438] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d)
[  205.822715][ T6498] loop5: detected capacity change from 0 to 164
[  206.801830][ T6525] loop5: detected capacity change from 0 to 512
[  207.319111][ T6532] syzkaller0 speed is unknown, defaulting to 1000
[  207.521995][ T6539] tipc: Started in network mode
[  207.655447][ T6539] tipc: Node identity ac14142f, cluster identity 4711
[  207.725257][ T6544] loop5: detected capacity change from 0 to 512
[  207.772335][ T6539] tipc: New replicast peer: 172.20.20.170
[  207.819708][ T6544] EXT4-fs (loop5): 1 truncate cleaned up
[  207.868209][ T6544] EXT4-fs (loop5): mounted filesystem without journal. Opts: abort,,errors=continue. Quota mode: none.
[  207.927991][ T6539] tipc: Enabled bearer <udp:syz2>, priority 10
[  207.983801][   T25] audit: type=1800 audit(1790397588.470:42): pid=6544 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.758" name="file1" dev="loop5" ino=15 res=0 errno=0
[  208.059249][ T6540] tipc: New replicast peer: 0.0.0.0
[  208.579650][ T6523] loop1: detected capacity change from 0 to 40427
[  208.686329][ T6523] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  208.816762][ T6523] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  208.970965][ T6523] F2FS-fs (loop1): invalid crc value
[  209.007373][ T5032] tipc: Node number set to 2886997039
[  209.045545][ T6523] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 9809626597)
[  209.468375][ T6523] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  209.550485][ T6523] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  210.260559][ T6591] tipc: Started in network mode
[  210.328309][ T6591] tipc: Node identity 7f000001, cluster identity 4711
[  210.367141][ T6591] tipc: Enabled bearer <udp:syz1>, priority 10
[  210.609121][ T6601] loop6: detected capacity change from 0 to 1024
[  210.690161][ T6604] device team_slave_0 entered promiscuous mode
[  210.697695][ T6604] device team_slave_1 entered promiscuous mode
[  210.908261][ T6604] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  211.088694][ T6609] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  211.253302][   T13] usb 7-1: new full-speed USB device number 3 using dummy_hcd
[  211.598301][    T7] tipc: Node number set to 2130706433
[  211.703754][   T13] usb 7-1: config 0 has an invalid interface number: 6 but max is 0
[  211.750318][   T13] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  211.872415][   T13] usb 7-1: config 0 has no interface number 0
[  211.918260][   T13] usb 7-1: config 0 interface 6 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  211.982723][   T13] usb 7-1: config 0 interface 6 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64
[  212.208637][   T13] usb 7-1: New USB device found, idVendor=10cf, idProduct=8061, bcdDevice=b7.12
[  212.272434][   T13] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  212.342703][   T13] usb 7-1: Product: syz
[  212.381528][   T13] usb 7-1: Manufacturer: syz
[  212.427122][   T13] usb 7-1: SerialNumber: syz
[  212.479571][   T13] usb 7-1: config 0 descriptor??
[  212.524991][ T6642] 9pnet: p9_errstr2errno: server reported unknown error �
[  212.534115][ T6601] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  212.621095][   T13] vmk80xx 7-1:0.6: driver 'vmk80xx' failed to auto-configure device.
[  212.728798][   T13] vmk80xx: probe of 7-1:0.6 failed with error -22
[  212.926875][   T13] usb 7-1: USB disconnect, device number 3
[  212.961273][ T6648] device team_slave_0 entered promiscuous mode
[  212.967637][ T6648] device team_slave_1 entered promiscuous mode
[  213.087730][ T6648] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  213.103599][ T5032] Bluetooth: hci4: command 0x0406 tx timeout
[  213.153702][ T5032] Bluetooth: hci3: command 0x0406 tx timeout
[  213.310632][ T6649] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  213.328680][ T6652] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  213.989487][ T6664] loop6: detected capacity change from 0 to 256
[  214.139782][ T6664] FAT-fs (loop6): Directory bread(block 64) failed
[  214.227992][ T6664] FAT-fs (loop6): Directory bread(block 65) failed
[  214.344066][ T6664] FAT-fs (loop6): Directory bread(block 66) failed
[  214.350678][ T6664] FAT-fs (loop6): Directory bread(block 67) failed
[  214.477080][ T6664] FAT-fs (loop6): Directory bread(block 68) failed
[  214.528028][ T6664] FAT-fs (loop6): Directory bread(block 69) failed
[  214.575400][ T6664] FAT-fs (loop6): Directory bread(block 70) failed
[  214.653587][ T6664] FAT-fs (loop6): Directory bread(block 71) failed
[  214.660261][ T6664] FAT-fs (loop6): Directory bread(block 72) failed
[  214.829692][ T6664] FAT-fs (loop6): Directory bread(block 73) failed
[  215.420497][ T6659] loop2: detected capacity change from 0 to 40427
[  215.543140][ T6659] F2FS-fs (loop2): invalid crc value
[  215.625443][ T6659] F2FS-fs (loop2): Found nat_bits in checkpoint
[  215.633331][ T5032] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  215.871694][ T6685] device team_slave_0 entered promiscuous mode
[  215.878117][ T6685] device team_slave_1 entered promiscuous mode
[  215.912116][ T6659] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0
[  215.977505][ T6685] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  216.003929][ T6659] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[  216.073540][ T5032] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  216.110700][ T1092] block nbd0: Possible stuck request ffff888021c00000: control (read@0,4096B). Runtime 120 seconds
[  216.125281][ T6688] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  216.169609][ T5032] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  216.291028][ T5032] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  216.443630][ T5032] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  216.492520][ T6694] loop1: detected capacity change from 0 to 1024
[  216.515280][ T6697] loop6: detected capacity change from 0 to 128
[  216.590379][ T6694] EXT4-fs (loop1): Ignoring removed mblk_io_submit option
[  216.612300][ T4196] attempt to access beyond end of device
[  216.612300][ T4196] loop2: rw=2049, want=45104, limit=40427
[  216.691737][ T6697] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  216.708705][ T5032] usb 6-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13
[  216.724479][ T6694] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled
[  216.792159][ T5032] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  216.848176][ T6697] ext4 filesystem being mounted at /30/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  216.869155][ T6694] EXT4-fs error (device loop1): ext4_ext_check_inode:501: inode #11: comm syz.1.816: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512)
[  216.919325][ T5032] usb 6-1: Product: syz
[  216.954615][ T5032] usb 6-1: Manufacturer: syz
[  216.959440][ T5032] usb 6-1: SerialNumber: syz
[  217.032541][ T6694] EXT4-fs error (device loop1): ext4_orphan_get:1415: comm syz.1.816: couldn't read orphan inode 11 (err -117)
[  217.057204][ T5032] usb 6-1: config 0 descriptor??
[  217.116570][ T6694] EXT4-fs (loop1): mounted filesystem without journal. Opts: sysvgroups,noload,mblk_io_submit,jqfmt=vfsv0,discard,nouid32,grpquota,quota,,errors=continue. Quota mode: writeback.
[  217.325149][ T5032] adutux 6-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0
[  217.345077][ T6704] loop6: detected capacity change from 0 to 128
[  217.447197][ T6694] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:476: comm syz.1.816: Invalid block bitmap block 0 in block_group 0
[  217.600966][ T5032] usb 6-1: USB disconnect, device number 5
[  217.787927][ T6694] Quota error (device loop1): write_blk: dquota write failed
[  217.837331][ T5880] FAT-fs (loop6): error, corrupted directory (invalid entries)
[  217.847100][ T6676] adutux: No device or device unplugged -19
[  217.906506][ T5880] FAT-fs (loop6): error, corrupted directory (invalid entries)
[  217.923567][ T6694] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  218.004337][ T6694] EXT4-fs error (device loop1): ext4_acquire_dquot:6236: comm syz.1.816: Failed to acquire dquot type 0
[  218.368581][  T140] EXT4-fs error (device loop1): __ext4_get_inode_loc:4334: comm kworker/u4:1: Invalid inode table block 8796093022209 in block_group 0
[  219.393363][    T7] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  219.405575][ T1268] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  219.573146][ T1268] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  219.726942][ T1268] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  219.803697][    T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  219.872799][    T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  219.939298][    T7] usb 3-1: New USB device found, idVendor=056a, idProduct=0318, bcdDevice= 0.00
[  219.985772][    T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  220.069624][    T7] usb 3-1: config 0 descriptor??
[  220.199110][ T1268] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  220.314028][ T6736] syzkaller0 speed is unknown, defaulting to 1000
[  220.586734][    T7] wacom 0003:056A:0318.0009: unknown main item tag 0x0
[  220.664223][    T7] wacom 0003:056A:0318.0009: unknown main item tag 0x0
[  220.723491][    T7] wacom 0003:056A:0318.0009: unknown main item tag 0x0
[  220.781717][    T7] wacom 0003:056A:0318.0009: unknown main item tag 0x0
[  220.853453][    T7] wacom 0003:056A:0318.0009: unknown main item tag 0x0
[  220.927250][    T7] wacom 0003:056A:0318.0009: unknown main item tag 0x0
[  220.970382][    T7] wacom 0003:056A:0318.0009: unknown main item tag 0x0
[  221.014986][    T7] wacom 0003:056A:0318.0009: unknown main item tag 0x0
[  221.067317][    T7] wacom 0003:056A:0318.0009: unknown main item tag 0x0
[  221.088167][ T6760] loop1: detected capacity change from 0 to 16
[  221.121652][    T7] wacom 0003:056A:0318.0009: unknown main item tag 0x0
[  221.162174][    T7] wacom 0003:056A:0318.0009: unknown main item tag 0x0
[  221.183701][ T6760] erofs: (device loop1): mounted with root inode @ nid 36.
[  221.252439][    T7] wacom 0003:056A:0318.0009: unknown main item tag 0x0
[  221.334276][    T7] wacom 0003:056A:0318.0009: unknown main item tag 0x0
[  221.397858][    T7] wacom 0003:056A:0318.0009: unknown main item tag 0x0
[  221.494805][    T7] wacom 0003:056A:0318.0009: unknown main item tag 0x0
[  221.522848][ T6736] chnl_net:caif_netlink_parms(): no params data found
[  221.560437][    T7] wacom 0003:056A:0318.0009: unknown main item tag 0x0
[  221.608410][    T7] wacom 0003:056A:0318.0009: unknown main item tag 0x0
[  221.655216][    T7] wacom 0003:056A:0318.0009: unknown main item tag 0x0
[  221.711591][    T7] wacom 0003:056A:0318.0009: unknown main item tag 0x0
[  221.762308][    T7] wacom 0003:056A:0318.0009: unknown main item tag 0x0
[  221.805768][    T7] wacom 0003:056A:0318.0009: unknown main item tag 0x0
[  221.870183][    T7] wacom 0003:056A:0318.0009: unknown main item tag 0x0
[  221.903989][    T7] wacom 0003:056A:0318.0009: unknown main item tag 0x0
[  221.970824][    T7] wacom 0003:056A:0318.0009: unknown main item tag 0x0
[  222.051628][    T7] usb 3-1: USB disconnect, device number 6
[  222.122266][ T1325] Bluetooth: hci0: command 0x0409 tx timeout
[  222.866481][ T6789] loop5: detected capacity change from 0 to 512
[  223.870423][ T6795] device tunl0 entered promiscuous mode
[  223.928661][ T6795] netlink: 'syz.1.851': attribute type 4 has an invalid length.
[  223.993600][ T6795] netlink: 9 bytes leftover after parsing attributes in process `syz.1.851'.
[  224.187961][ T6736] bridge0: port 1(bridge_slave_0) entered blocking state
[  224.236881][ T4236] Bluetooth: hci0: command 0x041b tx timeout
[  224.316231][ T6736] bridge0: port 1(bridge_slave_0) entered disabled state
[  224.395021][ T6809] loop5: detected capacity change from 0 to 64
[  224.421944][ T6736] device bridge_slave_0 entered promiscuous mode
[  224.499070][ T6736] bridge0: port 2(bridge_slave_1) entered blocking state
[  224.613396][ T6736] bridge0: port 2(bridge_slave_1) entered disabled state
[  224.622090][ T6736] device bridge_slave_1 entered promiscuous mode
[  224.953185][ T6736] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  225.086459][ T6736] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  225.426899][ T6736] team0: Port device team_slave_0 added
[  225.787302][ T6736] team0: Port device team_slave_1 added
[  225.919818][ T6839] loop5: detected capacity change from 0 to 256
[  226.064592][ T6839] exfat: Deprecated parameter 'utf8'
[  226.134367][ T6839] exfat: Deprecated parameter 'utf8'
[  226.263591][ T4236] Bluetooth: hci0: command 0x040f tx timeout
[  226.282301][ T6839] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  226.381243][ T6736] batman_adv: batadv0: Adding interface: batadv_slave_0
[  226.450226][ T6736] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  226.610258][ T6736] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  226.699976][ T6169] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting
[  226.774181][ T6736] batman_adv: batadv0: Adding interface: batadv_slave_1
[  226.809067][ T6850] loop5: detected capacity change from 0 to 256
[  226.809203][ T6736] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  226.902736][ T6850] exFAT-fs (loop5): error, invalid access to FAT bad cluster (entry 0x00000005)
[  226.949647][ T6850] exFAT-fs (loop5): failed to load upcase table
[  226.988140][ T6850] exFAT-fs (loop5): failed to recognize exfat type
[  227.003777][ T6169] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  227.066208][ T6736] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  227.609506][ T6736] device hsr_slave_0 entered promiscuous mode
[  227.653673][ T6736] device hsr_slave_1 entered promiscuous mode
[  227.699948][ T6736] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  227.750302][ T6736] Cannot create hsr debugfs directory
[  228.056258][ T6868] loop5: detected capacity change from 0 to 256
[  228.128627][ T6870] loop3: detected capacity change from 0 to 512
[  228.352841][ T1325] Bluetooth: hci0: command 0x0419 tx timeout
[  228.900473][ T6886] netlink: 8 bytes leftover after parsing attributes in process `syz.1.878'.
[  229.019103][ T1268] device hsr_slave_0 left promiscuous mode
[  229.072982][ T1268] device hsr_slave_1 left promiscuous mode
[  229.141487][ T1268] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  229.188624][ T1268] batman_adv: batadv0: Removing interface: batadv_slave_0
[  229.250657][ T1268] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  229.297854][ T1268] batman_adv: batadv0: Removing interface: batadv_slave_1
[  229.332071][ T6897] using random self ethernet address
[  229.352231][ T1268] device bridge_slave_1 left promiscuous mode
[  229.370488][ T6897] using random host ethernet address
[  229.400921][ T1268] bridge0: port 2(bridge_slave_1) entered disabled state
[  229.463159][ T6780] syz.2.847 (6780): drop_caches: 3
[  229.463574][ T4236] usb 4-1: new full-speed USB device number 9 using dummy_hcd
[  229.513923][ T1268] device bridge_slave_0 left promiscuous mode
[  229.532926][ T1268] bridge0: port 1(bridge_slave_0) entered disabled state
[  229.600545][ T1268] device team_slave_0 left promiscuous mode
[  229.607166][ T1268] device team_slave_1 left promiscuous mode
[  229.639206][ T6902] loop2: detected capacity change from 0 to 1764
[  229.649821][ T1268] device veth1_macvtap left promiscuous mode
[  229.658875][ T1268] device veth0_macvtap left promiscuous mode
[  229.670078][ T1268] device veth1_vlan left promiscuous mode
[  229.679409][ T1268] device veth0_vlan left promiscuous mode
[  229.853687][ T4236] usb 4-1: config 0 has an invalid interface number: 50 but max is 0
[  229.881256][ T4236] usb 4-1: config 0 has no interface number 0
[  229.920862][ T4236] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  229.970326][ T4236] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid maxpacket 255, setting to 64
[  230.157507][ T4236] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice= 0.03
[  230.181422][ T4236] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  230.212113][ T4236] usb 4-1: Product: syz
[  230.231390][ T4236] usb 4-1: Manufacturer: syz
[  230.240421][ T4236] usb 4-1: SerialNumber: syz
[  230.258865][ T4236] usb 4-1: config 0 descriptor??
[  230.293681][ T6895] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  230.336591][ T4236] yurex 4-1:0.50: USB YUREX device now attached to Yurex #0
[  230.528905][ T6904] loop2: detected capacity change from 0 to 32768
[  230.612518][ T6904] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.885 (6904)
[  230.722184][ T6904] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  230.767499][ T6904] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  230.836786][ T6904] BTRFS info (device loop2): use zstd compression, level 3
[  230.870896][ T1268] team0 (unregistering): Port device team_slave_1 removed
[  230.884329][ T6904] BTRFS info (device loop2): using free space tree
[  230.891886][ T6904] BTRFS info (device loop2): has skinny extents
[  230.952759][ T1268] team0 (unregistering): Port device team_slave_0 removed
[  231.002329][ T1268] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  231.043872][ T6904] BTRFS info (device loop2): enabling ssd optimizations
[  231.096986][ T1268] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  231.371089][   T25] audit: type=1804 audit(1790397611.850:43): pid=6938 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.885" name="/newroot/185/file0/file0/file0" dev="loop2" ino=258 res=1 errno=0
[  231.539495][ T1268] bond0 (unregistering): Released all slaves
[  231.768603][ T6736] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  231.905642][ T6942] program syz.5.894 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  231.950389][ T6736] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  232.030104][ T6736] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  232.681455][ T6955] loop3: detected capacity change from 0 to 1024
[  232.994216][ T6736] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  233.389235][ T1111] usb 4-1: USB disconnect, device number 9
[  233.414692][ T1111] yurex 4-1:0.50: USB YUREX #0 now disconnected
[  233.756289][ T6970] page:ffffea0001490040 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x52401
[  233.904471][ T6970] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff)
[  234.016365][ T6970] raw: 00fff00000000200 0000000000000000 dead000000000122 ffff88801794e640
[  234.098348][ T6970] raw: 0000000000000000 00000000000c000c 00000001ffffffff 0000000000000000
[  234.124222][ T6736] 8021q: adding VLAN 0 to HW filter on device bond0
[  234.181046][ T6970] page dumped because: unmovable page
[  234.248778][ T6985] loop3: detected capacity change from 0 to 4096
[  234.255974][ T6970] page_owner tracks the page as allocated
[  234.272810][ T6988] loop2: detected capacity change from 0 to 512
[  234.312537][ T6970] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 6736, ts 220268309263, free_ts 220130057758
[  234.353781][ T6985] EXT4-fs (loop3): Ignoring removed orlov option
[  234.409605][ T6736] 8021q: adding VLAN 0 to HW filter on device team0
[  234.463974][ T6985] EXT4-fs (loop3): Test dummy encryption mode enabled
[  234.481402][ T6988] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  234.510243][ T6970]  get_page_from_freelist+0x24f6/0x2670
[  234.537251][  T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  234.558477][ T6985] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option
[  234.576790][ T6970]  __alloc_pages+0x1ee/0x480
[  234.581477][ T6970]  new_slab+0xc0/0x4b0
[  234.604341][  T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  234.637236][ T6985] EXT4-fs (loop3): Test dummy encryption mode enabled
[  234.679913][ T6988] EXT4-fs (loop2): 1 truncate cleaned up
[  234.686486][ T6970]  ___slab_alloc+0x807/0xdd0
[  234.724310][ T6988] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable=0x0000000000000004,dioread_nolock,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,nojournal_checksum,grpjquota=,,errors=continue. Quota mode: none.
[  234.754065][ T6970]  kmem_cache_alloc+0xf0/0x280
[  234.760377][ T6970]  __proc_create+0x36f/0x8b0
[  234.787431][  T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  234.816661][ T6985] EXT4-fs (loop3): mounted filesystem without journal. Opts: barrier=0x0000000000000009,orlov,journal_ioprio=0x0000000000000000,test_dummy_encryption=v1,nomblk_io_submit,data_err=ignore,acl,test_dummy_encryption=v1,,errors=continue. Quota mode: writeback.
[  234.884479][  T140] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  234.899406][ T6970]  proc_create_reg+0x87/0x100
[  234.946426][ T6970]  proc_create_net_data+0x95/0x1a0
[  234.951643][ T6970]  if6_proc_net_init+0x55/0x70
[  234.957388][  T140] bridge0: port 1(bridge_slave_0) entered blocking state
[  234.964517][  T140] bridge0: port 1(bridge_slave_0) entered forwarding state
[  235.016580][ T6970]  ops_init+0x360/0x5f0
[  235.069269][  T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  235.078959][ T6970]  setup_net+0x39e/0xa10
[  235.102078][ T6970]  copy_net_ns+0x33e/0x5b0
[  235.125555][  T140] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  235.139716][ T6970]  create_new_namespaces+0x3ce/0x700
[  235.198715][ T6970]  unshare_nsproxy_namespaces+0x116/0x160
[  235.217733][  T140] bridge0: port 2(bridge_slave_1) entered blocking state
[  235.227801][  T140] bridge0: port 2(bridge_slave_1) entered forwarding state
[  235.302967][ T6970]  ksys_unshare+0x4f6/0x8e0
[  235.315321][ T6985] EXT4-fs (loop3): shut down requested (0)
[  235.411793][ T6970]  __x64_sys_unshare+0x34/0x40
[  235.449244][ T6970] page last free stack trace:
[  235.467827][  T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  235.507138][ T6970]  free_unref_page_prepare+0x637/0x6c0
[  235.531361][  T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  235.557612][ T6970]  free_unref_page_list+0x119/0x830
[  235.586947][ T6970]  release_pages+0x185f/0x1bd0
[  235.611597][ T6999] netlink: 64 bytes leftover after parsing attributes in process `syz.2.908'.
[  235.657887][ T6970]  tlb_finish_mmu+0x1b4/0x370
[  235.686172][ T6970]  exit_mmap+0x3d0/0x640
[  235.692418][ T6970]  __mmput+0x115/0x390
[  235.718548][  T140] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  235.750990][   T25] audit: type=1800 audit(1790397616.230:44): pid=7000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.905" name="file0" dev="loop3" ino=13 res=0 errno=0
[  235.818875][ T6970]  exit_mm+0x632/0x7b0
[  235.846854][  T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  235.876487][ T6970]  do_exit+0x5b8/0x2110
[  235.896926][ T6970]  do_group_exit+0x12c/0x2f0
[  235.932525][  T140] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  235.954227][ T6970]  get_signal+0x7eb/0x12e0
[  235.983589][ T6970]  arch_do_signal_or_restart+0xe6/0x12a0
[  235.997882][  T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  236.023817][ T6970]  exit_to_user_mode_loop+0x9e/0x130
[  236.029202][ T6970]  exit_to_user_mode_prepare+0xee/0x180
[  236.107407][ T6970]  syscall_exit_to_user_mode+0x16/0x40
[  236.112958][ T6970]  do_syscall_64+0x58/0xa0
[  236.120536][  T140] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  236.217563][  T140] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  236.243382][ T6970]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  236.374296][  T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  236.586454][  T140] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  236.722844][  T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  236.855455][  T140] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  236.939579][ T6736] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  237.084419][ T4236] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  237.272295][ T7035] netlink: 68 bytes leftover after parsing attributes in process `syz.1.918'.
[  237.403427][ T4236] usb 6-1: Using ep0 maxpacket: 16
[  237.444280][ T1111] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  237.524420][ T4236] usb 6-1: config 0 has an invalid interface number: 7 but max is 0
[  237.576781][ T4236] usb 6-1: config 0 has no interface number 0
[  237.633844][ T4236] usb 6-1: config 0 interface 7 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  237.846301][ T7021] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input14
[  237.873734][ T1111] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  237.893471][ T4236] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  237.920482][ T6389] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  237.935273][ T7042] syzkaller0 speed is unknown, defaulting to 1000
[  237.942940][ T1111] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  237.954255][ T4236] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  237.962295][ T4236] usb 6-1: Product: syz
[  237.972962][ T6389] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  238.018086][ T1111] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  238.045944][ T4236] usb 6-1: Manufacturer: syz
[  238.050811][ T4236] usb 6-1: SerialNumber: syz
[  238.078579][ T6736] 8021q: adding VLAN 0 to HW filter on device batadv0
[  238.118066][ T4236] r8152-cfgselector 6-1: config 0 descriptor??
[  238.129212][ T1111] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  238.229551][ T1111] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  238.298181][ T1111] usb 3-1: config 0 descriptor??
[  238.419717][ T7024] udc-core: couldn't find an available UDC or it's busy
[  238.480345][ T7024] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  238.533656][ T4236] r8152 6-1:0.7: Expected endpoints are not found
[  238.743611][ T4236] r8152-cfgselector 6-1: Unknown version 0x0000
[  238.784673][ T4236] r8152-cfgselector 6-1: USB disconnect, device number 6
[  238.834834][ T1111] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving
[  238.898442][ T1111] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  239.770999][ T7066] loop2: detected capacity change from 0 to 512
[  239.854489][ T7066] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  239.920151][ T5027] usb 3-1: USB disconnect, device number 7
[  240.009101][ T7066] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a80ce01c, mo2=0002]
[  240.141651][ T7066] System zones: 1-12
[  240.189100][ T7066] EXT4-fs (loop2): orphan cleanup on readonly fs
[  240.302321][ T7066] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.922: invalid indirect mapped block 12 (level 1)
[  240.614590][ T7066] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.922: invalid indirect mapped block 2 (level 2)
[  240.638611][ T6169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  240.695050][ T6169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  240.724745][ T7066] EXT4-fs (loop2): 1 truncate cleaned up
[  240.813606][ T6169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  240.828734][ T7066] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrquota,nobarrier,,,errors=continue. Quota mode: writeback.
[  240.914274][ T6169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  241.070604][ T6736] device veth0_vlan entered promiscuous mode
[  241.118724][ T6169] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  241.169658][ T6169] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  241.281379][ T6736] device veth1_vlan entered promiscuous mode
[  241.492118][ T6736] device veth0_macvtap entered promiscuous mode
[  241.580002][ T7097] loop1: detected capacity change from 0 to 1024
[  241.708451][  T149] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  241.752815][  T149] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  241.814651][ T7102] input: syz0 as /devices/virtual/input/input15
[  241.884207][  T149] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  241.955324][  T149] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  241.977273][ T7073] loop3: detected capacity change from 0 to 32768
[  242.082112][ T6736] device veth1_macvtap entered promiscuous mode
[  242.126361][  T149] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  242.230230][ T6736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  242.314246][ T7073] XFS (loop3): Mounting V5 Filesystem
[  242.356258][ T6736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  242.442060][ T7073] XFS (loop3): Ending clean mount
[  242.450768][ T6736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  242.521098][ T6736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  242.582232][ T6736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  242.671688][ T6736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  242.730472][ T6736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  242.752425][ T6736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  242.770506][ T6736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  242.790216][ T6736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  242.822763][ T4192] XFS (loop3): Unmounting Filesystem
[  242.841472][ T6736] batman_adv: batadv0: Interface activated: batadv_slave_0
[  243.049678][ T7122] loop5: detected capacity change from 0 to 128
[  243.127688][ T7122] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  243.193644][ T7122] ext4 filesystem being mounted at /88/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  243.228225][  T161] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  243.339389][  T161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  243.434416][ T6736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  243.503378][ T6736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  243.518199][ T7129] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  243.549546][ T6736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  243.603357][ T6736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  243.649051][ T6736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  243.731008][ T6736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  243.793292][ T6736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  243.863460][ T6736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  243.901303][ T6736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  243.917104][ T6736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  243.996886][ T6736] batman_adv: batadv0: Interface activated: batadv_slave_1
[  244.335886][ T6169] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  244.390004][ T6169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  244.457427][ T6974] 
[  244.459807][ T6974] ======================================================
[  244.466834][ T6974] WARNING: possible circular locking dependency detected
[  244.474135][ T6974] syzkaller #0 Not tainted
[  244.478644][ T6974] ------------------------------------------------------
[  244.485661][ T6974] kworker/0:21/6974 is trying to acquire lock:
[  244.491844][ T6974] ffff88807c039028 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xfa/0x210
[  244.502895][ T6974] 
[  244.502895][ T6974] but task is already holding lock:
[  244.510258][ T6974] ffffffff8d6d6b68 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_epo+0x43/0x170
[  244.519320][ T6974] 
[  244.519320][ T6974] which lock already depends on the new lock.
[  244.519320][ T6974] 
[  244.532324][ T6974] 
[  244.532324][ T6974] the existing dependency chain (in reverse order) is:
[  244.541776][ T6974] 
[  244.541776][ T6974] -> #4 (rfkill_global_mutex){+.+.}-{3:3}:
[  244.549783][ T6974]        __mutex_lock_common+0x1e5/0x2400
[  244.557046][ T6974]        mutex_lock_nested+0x17/0x20
[  244.563428][ T6974]        rfkill_register+0x2f/0x970
[  244.569713][ T6974]        hci_register_dev+0x459/0x980
[  244.576871][ T6974]        vhci_create_device+0x32e/0x5c0
[  244.582447][ T6974]        vhci_write+0x389/0x440
[  244.588564][ T6974]        vfs_write+0x748/0xd70
[  244.593345][ T6974]        ksys_write+0x153/0x260
[  244.599025][ T6974]        do_syscall_64+0x4c/0xa0
[  244.606619][ T6974]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  244.614817][ T6974] 
[  244.614817][ T6974] -> #3 (&data->open_mutex){+.+.}-{3:3}:
[  244.624506][ T6974]        __mutex_lock_common+0x1e5/0x2400
[  244.630360][ T6974]        mutex_lock_nested+0x17/0x20
[  244.635738][ T6974]        vhci_send_frame+0x88/0x100
[  244.640969][ T6974]        hci_send_frame+0x1a9/0x2e0
[  244.646296][ T6974]        hci_tx_work+0x9b5/0x16d0
[  244.652667][ T6974]        process_one_work+0x867/0xff0
[  244.658718][ T6974]        worker_thread+0xad7/0x12a0
[  244.663959][ T6974]        kthread+0x42e/0x520
[  244.668556][ T6974]        ret_from_fork+0x1f/0x30
[  244.673560][ T6974] 
[  244.673560][ T6974] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}:
[  244.686346][ T6974]        __flush_work+0x116/0x210
[  244.694076][ T6974]        hci_dev_do_close+0x201/0x1020
[  244.702792][ T6974]        hci_unregister_dev+0x2eb/0x590
[  244.710378][ T6974]        vhci_release+0x73/0xc0
[  244.718665][ T6974]        __fput+0x212/0x8c0
[  244.723511][ T6974]        task_work_run+0x125/0x1a0
[  244.728649][ T6974]        do_exit+0x635/0x2110
[  244.733409][ T6974]        do_group_exit+0x12c/0x2f0
[  244.738520][ T6974]        __x64_sys_exit_group+0x3b/0x40
[  244.744075][ T6974]        do_syscall_64+0x4c/0xa0
[  244.749051][ T6974]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  244.755479][ T6974] 
[  244.755479][ T6974] -> #1 (&hdev->req_lock){+.+.}-{3:3}:
[  244.763288][ T6974]        __mutex_lock_common+0x1e5/0x2400
[  244.769026][ T6974]        mutex_lock_nested+0x17/0x20
[  244.774339][ T6974]        bg_scan_update+0x44/0x3b0
[  244.779901][ T6974]        process_one_work+0x867/0xff0
[  244.785285][ T6974]        worker_thread+0xad7/0x12a0
[  244.790502][ T6974]        kthread+0x42e/0x520
[  244.795126][ T6974]        ret_from_fork+0x1f/0x30
[  244.800935][ T6974] 
[  244.800935][ T6974] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}:
[  244.813915][ T6974]        __lock_acquire+0x2c66/0x7b50
[  244.819318][ T6974]        lock_acquire+0x19e/0x400
[  244.824351][ T6974]        __flush_work+0x116/0x210
[  244.829382][ T6974]        __cancel_work_timer+0x3f4/0x560
[  244.835038][ T6974]        hci_request_cancel_all+0xcc/0x300
[  244.840855][ T6974]        hci_dev_do_close+0x4e/0x1020
[  244.846238][ T6974]        hci_rfkill_set_block+0x101/0x180
[  244.851968][ T6974]        rfkill_set_block+0x1c1/0x3c0
[  244.857350][ T6974]        rfkill_epo+0x75/0x170
[  244.862158][ T6974]        rfkill_op_handler+0x76/0x220
[  244.867532][ T6974]        process_one_work+0x867/0xff0
[  244.872906][ T6974]        worker_thread+0xad7/0x12a0
[  244.878113][ T6974]        kthread+0x42e/0x520
[  244.882705][ T6974]        ret_from_fork+0x1f/0x30
[  244.887650][ T6974] 
[  244.887650][ T6974] other info that might help us debug this:
[  244.887650][ T6974] 
[  244.897885][ T6974] Chain exists of:
[  244.897885][ T6974]   (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex
[  244.897885][ T6974] 
[  244.913649][ T6974]  Possible unsafe locking scenario:
[  244.913649][ T6974] 
[  244.921203][ T6974]        CPU0                    CPU1
[  244.926569][ T6974]        ----                    ----
[  244.931943][ T6974]   lock(rfkill_global_mutex);
[  244.936715][ T6974]                                lock(&data->open_mutex);
[  244.943835][ T6974]                                lock(rfkill_global_mutex);
[  244.951146][ T6974]   lock((work_completion)(&hdev->bg_scan_update));
[  244.957738][ T6974] 
[  244.957738][ T6974]  *** DEADLOCK ***
[  244.957738][ T6974] 
[  244.968938][ T6974] 3 locks held by kworker/0:21/6974:
[  244.974909][ T6974]  #0: ffff888016c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x75c/0xff0
[  244.985727][ T6974]  #1: ffffc90003337d00 ((rfkill_op_work).work){+.+.}-{0:0}, at: process_one_work+0x79e/0xff0
[  244.996808][ T6974]  #2: ffffffff8d6d6b68 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_epo+0x43/0x170
[  245.007159][ T6974] 
[  245.007159][ T6974] stack backtrace:
[  245.013083][ T6974] CPU: 0 PID: 6974 Comm: kworker/0:21 Not tainted syzkaller #0
[  245.020788][ T6974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  245.030847][ T6974] Workqueue: events rfkill_op_handler
[  245.036381][ T6974] Call Trace:
[  245.039931][ T6974]  <TASK>
[  245.042999][ T6974]  dump_stack_lvl+0x188/0x250
[  245.049023][ T6974]  ? load_image+0x410/0x410
[  245.053726][ T6974]  ? show_regs_print_info+0x20/0x20
[  245.060811][ T6974]  ? print_circular_bug+0x12b/0x1a0
[  245.066301][ T6974]  check_noncircular+0x296/0x330
[  245.071761][ T6974]  ? look_up_lock_class+0x71/0x110
[  245.076897][ T6974]  ? add_chain_block+0x9b0/0x9b0
[  245.082199][ T6974]  ? lockdep_lock+0xf1/0x1f0
[  245.087064][ T6974]  ? __lock_acquire+0x1305/0x7b50
[  245.092129][ T6974]  ? mark_lock+0x94/0x320
[  245.096481][ T6974]  ? _find_first_zero_bit+0xd1/0xf0
[  245.101876][ T6974]  __lock_acquire+0x2c66/0x7b50
[  245.106741][ T6974]  ? verify_lock_unused+0x140/0x140
[  245.113376][ T6974]  ? verify_lock_unused+0x140/0x140
[  245.118862][ T6974]  lock_acquire+0x19e/0x400
[  245.123770][ T6974]  ? __flush_work+0xfa/0x210
[  245.128953][ T6974]  ? __lock_acquire+0x7b50/0x7b50
[  245.136079][ T6974]  ? read_lock_is_recursive+0x10/0x10
[  245.141857][ T6974]  ? start_flush_work+0x784/0x830
[  245.147917][ T6974]  __flush_work+0x116/0x210
[  245.152450][ T6974]  ? __flush_work+0xfa/0x210
[  245.158392][ T6974]  ? flush_work+0x20/0x20
[  245.163058][ T6974]  ? try_to_grab_pending+0xfb/0x820
[  245.168280][ T6974]  ? mark_lock+0x94/0x320
[  245.172630][ T6974]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  245.178620][ T6974]  ? lock_chain_count+0x20/0x20
[  245.183480][ T6974]  ? mark_lock+0x94/0x320
[  245.188170][ T6974]  ? __cancel_work_timer+0x36a/0x560
[  245.193488][ T6974]  __cancel_work_timer+0x3f4/0x560
[  245.198626][ T6974]  ? cancel_work_sync+0x20/0x20
[  245.203483][ T6974]  ? __cancel_work+0x1f9/0x2e0
[  245.208255][ T6974]  ? lockdep_hardirqs_on+0x94/0x140
[  245.213544][ T6974]  ? __cancel_work+0x27b/0x2e0
[  245.218311][ T6974]  ? cancel_work+0x20/0x20
[  245.222741][ T6974]  ? __rwlock_init+0x140/0x140
[  245.227514][ T6974]  hci_request_cancel_all+0xcc/0x300
[  245.232817][ T6974]  hci_dev_do_close+0x4e/0x1020
[  245.237675][ T6974]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  245.243612][ T6974]  ? _raw_spin_unlock+0x40/0x40
[  245.248470][ T6974]  hci_rfkill_set_block+0x101/0x180
[  245.253678][ T6974]  ? rcu_lock_release+0x20/0x20
[  245.258541][ T6974]  rfkill_set_block+0x1c1/0x3c0
[  245.263431][ T6974]  rfkill_epo+0x75/0x170
[  245.267687][ T6974]  rfkill_op_handler+0x76/0x220
[  245.274639][ T6974]  process_one_work+0x867/0xff0
[  245.279512][ T6974]  ? worker_detach_from_pool+0x240/0x240
[  245.285153][ T6974]  ? lockdep_hardirqs_off+0x70/0x100
[  245.290451][ T6974]  ? _raw_spin_lock_irq+0xb7/0xf0
[  245.295631][ T6974]  ? _raw_spin_lock_irqsave+0x100/0x100
[  245.301228][ T6974]  ? wq_worker_running+0x97/0x170
[  245.306468][ T6974]  worker_thread+0xad7/0x12a0
[  245.314354][ T6974]  kthread+0x42e/0x520
[  245.321374][ T6974]  ? rcu_lock_release+0x20/0x20
[  245.326251][ T6974]  ? kthread_blkcg+0xd0/0xd0
[  245.330865][ T6974]  ret_from_fork+0x1f/0x30
[  245.335296][ T6974]  </TASK>
[  245.348794][ T6736] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  245.381800][ T6736] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  245.408400][ T6736] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  245.419720][ T6736] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  246.088942][ T6736] ieee80211 phy19: Selected rate control algorithm 'minstrel_ht'
[  246.171015][  T149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  246.183536][ T1092] block nbd0: Possible stuck request ffff888021c00000: control (read@0,4096B). Runtime 150 seconds
[  246.210989][ T6736] ieee80211 phy20: Selected rate control algorithm 'minstrel_ht'
[  246.228039][  T149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  246.260173][ T6169] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  246.308660][ T6169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  246.350191][ T6169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  246.382035][  T161] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  248.103780][   T27] INFO: task udevd:4285 blocked for more than 143 seconds.
[  248.116762][   T27]       Not tainted syzkaller #0
[  248.127612][   T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  248.147458][   T27] task:udevd           state:D stack:25360 pid: 4285 ppid:  3558 flags:0x00004002
[  248.179715][   T27] Call Trace:
[  248.187817][   T27]  <TASK>
[  248.193124][   T27]  __schedule+0x11c3/0x4350
[  248.205785][   T27]  ? release_firmware_map_entry+0x190/0x190
[  248.220713][   T27]  ? preempt_schedule+0xbc/0xd0
[  248.231456][   T27]  ? preempt_schedule_common+0xa5/0xd0
[  248.245950][   T27]  ? release_firmware_map_entry+0x190/0x190
[  248.260201][   T27]  ? preempt_schedule+0xbc/0xd0
[  248.276150][   T27]  ? schedule_preempt_disabled+0x20/0x20
[  248.297350][   T27]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  248.319549][   T27]  ? __lock_acquire+0x7b50/0x7b50
[  248.337123][   T27]  ? lock_chain_count+0x20/0x20
[  248.351579][   T27]  schedule+0x11b/0x1e0
[  248.366647][   T27]  io_schedule+0x7c/0xd0
[  248.381294][   T27]  wait_on_page_bit_common+0x8bf/0xeb0
[  248.387499][   T27]  ? wait_on_page_bit+0x50/0x50
[  248.395717][   T27]  ? blkdev_fallocate+0x4a0/0x4a0
[  248.404078][   T27]  ? rcu_lock_release+0x20/0x20
[  248.409251][   T27]  do_read_cache_page+0xae6/0x1010
[  248.416914][   T27]  read_part_sector+0xd7/0x4c0
[  248.422329][   T27]  ? vsnprintf+0x14e/0x1c20
[  248.428572][   T27]  adfspart_check_ICS+0xc3/0xe90
[  248.436707][   T27]  ? vsnprintf+0x1b22/0x1c20
[  248.444350][   T27]  ? adfspart_check_ADFS+0x840/0x840
[  248.450393][   T27]  ? snprintf+0xe5/0x140
[  248.457025][   T27]  ? vscnprintf+0x80/0x80
[  248.461520][   T27]  bdev_disk_changed+0x936/0x1690
[  248.468659][   T27]  ? blk_drop_partitions+0x1b0/0x1b0
[  248.478662][   T27]  ? iput+0x345/0x880
[  248.487155][   T27]  blkdev_get_whole+0x2f9/0x390
[  248.498112][   T27]  blkdev_get_by_dev+0x2da/0xa50
[  248.507830][   T27]  blkdev_open+0x128/0x2c0
[  248.517527][   T27]  ? block_ioctl+0xf0/0xf0
[  248.522071][   T27]  do_dentry_open+0x7f7/0xf90
[  248.527208][   T27]  path_openat+0x2718/0x2fb0
[  248.531962][   T27]  ? __kasan_slab_alloc+0xa9/0xc0
[  248.539663][   T27]  ? do_filp_open+0x400/0x400
[  248.544724][   T27]  do_filp_open+0x1df/0x400
[  248.549470][   T27]  ? vfs_tmpfile+0x300/0x300
[  248.556307][   T27]  ? _raw_spin_unlock+0x24/0x40
[  248.561322][   T27]  ? alloc_fd+0x59e/0x650
[  248.566250][   T27]  do_sys_openat2+0x14b/0x500
[  248.571065][   T27]  ? __lock_acquire+0x7b50/0x7b50
[  248.578361][   T27]  ? do_sys_open+0xe0/0xe0
[  248.582904][   T27]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  248.593134][   T27]  ? lock_chain_count+0x20/0x20
[  248.603351][   T27]  __x64_sys_openat+0x135/0x160
[  248.608413][   T27]  do_syscall_64+0x4c/0xa0
[  248.612956][   T27]  ? clear_bhb_loop+0x30/0x80
[  248.620932][   T27]  ? clear_bhb_loop+0x30/0x80
[  248.626739][   T27]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  248.632772][   T27] RIP: 0033:0x7fd16ca2d407
[  248.639824][   T27] RSP: 002b:00007fffb3e69970 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[  248.651554][   T27] RAX: ffffffffffffffda RBX: 00007fd16c93f880 RCX: 00007fd16ca2d407
[  248.672356][   T27] RDX: 00000000000a0800 RSI: 000056299fc32080 RDI: ffffffffffffff9c
[  248.689683][   T27] RBP: 000056299fc15910 R08: 0000000000000000 R09: 0000000000000000
[  248.711724][   T27] R10: 0000000000000000 R11: 0000000000000202 R12: 000056299fc2a830
[  248.729061][   T27] R13: 000056299fc2d410 R14: 00007fffb3e69a38 R15: 000056299fc2a830
[  248.749423][   T27]  </TASK>
[  248.777726][   T27] INFO: lockdep is turned off.
[  248.792043][   T27] NMI backtrace for cpu 0
[  248.796424][   T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0
[  248.803772][   T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  248.814502][   T27] Call Trace:
[  248.819294][   T27]  <TASK>
[  248.822732][   T27]  dump_stack_lvl+0x188/0x250
[  248.827561][   T27]  ? show_regs_print_info+0x20/0x20
[  248.832770][   T27]  ? load_image+0x410/0x410
[  248.837274][   T27]  ? tick_nohz_tick_stopped+0x7b/0xb0
[  248.842656][   T27]  ? irq_work_queue+0xb8/0x140
[  248.849076][   T27]  nmi_cpu_backtrace+0x3a2/0x3d0
[  248.854028][   T27]  ? nmi_trigger_cpumask_backtrace+0x280/0x280
[  248.861524][   T27]  ? _printk+0xda/0x130
[  248.869210][   T27]  ? rcu_lock_release+0x5/0x20
[  248.874388][   T27]  ? load_image+0x410/0x410
[  248.878901][   T27]  ? arch_trigger_cpumask_backtrace+0x10/0x10
[  248.885886][   T27]  nmi_trigger_cpumask_backtrace+0x163/0x280
[  248.891897][   T27]  watchdog+0xe1b/0xe60
[  248.897346][   T27]  kthread+0x42e/0x520
[  248.905125][   T27]  ? hungtask_pm_notify+0x40/0x40
[  248.913136][   T27]  ? kthread_blkcg+0xd0/0xd0
[  248.919354][   T27]  ret_from_fork+0x1f/0x30
[  248.924573][   T27]  </TASK>
[  249.087500][   T27] Kernel panic - not syncing: hung_task: blocked tasks
[  249.094422][   T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0
[  249.101647][   T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  249.112061][   T27] Call Trace:
[  249.115591][   T27]  <TASK>
[  249.118590][   T27]  dump_stack_lvl+0x188/0x250
[  249.123296][   T27]  ? show_regs_print_info+0x20/0x20
[  249.128510][   T27]  ? load_image+0x410/0x410
[  249.134408][   T27]  panic+0x2f8/0x850
[  249.138339][   T27]  ? schedule_preempt_disabled+0x20/0x20
[  249.144090][   T27]  ? bpf_jit_dump+0xd0/0xd0
[  249.148631][   T27]  ? __irq_work_queue_local+0x12c/0x190
[  249.154642][   T27]  ? nmi_trigger_cpumask_backtrace+0x260/0x280
[  249.163593][   T27]  watchdog+0xe5a/0xe60
[  249.170745][   T27]  kthread+0x42e/0x520
[  249.174872][   T27]  ? hungtask_pm_notify+0x40/0x40
[  249.179903][   T27]  ? kthread_blkcg+0xd0/0xd0
[  249.184500][   T27]  ret_from_fork+0x1f/0x30
[  249.188953][   T27]  </TASK>
[  249.192090][   T27] Kernel Offset: disabled
[  249.196426][   T27] Rebooting in 86400 seconds..