last executing test programs:

6m17.420294536s ago: executing program 0 (id=413):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, 0x0, 0x0)
sendmmsg$unix(r0, 0x0, 0x0, 0x4000000)
setsockopt$sock_int(r1, 0x1, 0x54, 0x0, 0x0)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r3 = openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x538143, 0x0)
syz_open_pts(r3, 0x501000)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r5 = memfd_create(&(0x7f0000000b00)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'\b\x00\x00\x00\x00\x00\x00\x00\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6&\xd0\x9daA\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xe2\x05\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\xbd\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7\x8en\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xef\x03Ga\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcaf2\x02F1\xc6\x82\x00E\xae\x9d\x17\x871N:\xb4\xea \x8e\xdelP\x83\x1f\'\xe2\xd6\xc0\xc3\xfc\xc9677u\xf3RUP@o>\xee\xb8\xa3\t\x02\xb7\\,\xebK\xed\x1b\xc9e\xb3\x16\xce\x9bI\xdb\xfa\x82\x85\t\x9bg\xd0s\xe2\f{\x8cp~;\xf8\x96\xf2\x91\x06\x89\xa6D\xce\xac\x03\xc1\x83\xd1\xe6 |\xa75\xd7\x80t\xfc\xf8\xd2\x12N\x1cB7^\xfd4\xae\xb0VFw\b!\xae\x1baTv\xc0z\x19\xc5\xc8w\xba\x97N\x9a`\x8f\xfc\x9ee\xf9\x00\x1cQA\x14]\r\xd4\"\xc2\x12GD\xdb{\x88\xaa\x81\xc8\xa2\xdeI\xa2\xbel\x0e\xec\x17fNI\x05\xff\x8d\xf4_\x1a\vqA\xb7\x0ed<\x98\xee\xb8\x19\xec\x9f\xee\xe1_\xacG\x8b\xa3\xc3\x13\x80\x0f\xf4I\xdeAwG\xbdkno\xa2\b\x126\x97\x9b\xf9|P\xd94\v\x15\xcb\xc0\x9d\x11\xf3\x18\xae!2\x1b\x12\xa9\xc8~\xb7S\x94\xb5\xc7;\xa90D>s\xe9\xa4N\xf8\xdb\xab\xa0\x94~\xa1]b\xa4\xe5\xe2e\x1c\x8b\xd2\xc7Md\x93\x02\xd8\xb0,\xeb\x03\xaa\v\xed\x9bR\x8a\x80\xc2\x1f\x17ej\x973wv\x83a\xe06\x96\xde\xbc%Uh;H\xf8S\xf1\xa1g\x02\xc4\xc3\xa4\xa8\x96\t\xfex\xa2?\xcb\\Y\x1e\xfe\xca\xa0i\x80O\x11\xac\xb7$\xdb\xbc\xb0\xcb\xacqU\xb5*\x00\x00\x00\x00\x00\x00\x00\f\xda\xf8oV\x89\xd3\x1f\x99+\xe5T\x8eM4\x1c\xc6\x7f\xd4\xf2\xcc\xd3\x94\xca\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00~A9\xf6IBu2L\x9e\xa2\xd0\x92\xd1\xbc\xb8\tJ\xa1\aN\x87\x95\xbb\xa9s\xab\x90\x06\xc6!p\x9e?~\xf9\xe6\xae*\v\xa3\xd9gxKN\'z]*\x93\xf7\b\x91\xd0\xff\xd9\xc6a\xb5q\x9c\xa1Go\xd58\x93\xe0,\x9f\xe4\xa9\xd9A\x9e\x95e\x98\xd0V\x9d\xed\x97\xf1\xc5\xce\xf5\x90!d\x9a\xd8\x10\xbbx\r8\xff\x8bNUK\xebA\xe5\x92f\xc4\xd1\xa8\x15\xbf\xb5iW\xdb.kbf*\x89\xf0\xecq m-~\xbbf?\xec=\xd2\xe2\x1e\x8d/o\xcd\xc8x\xdb\xe6\xd0W\xca\xc5kz\x8e9\xfa\x86\x0f\x96p', 0x2)
ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000000)={0x0, 0x2, 0x3ffffff, 0x1000003})

6m11.788311385s ago: executing program 0 (id=427):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000380), 0x3, 0x589, &(0x7f0000001580)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c})
chdir(&(0x7f0000000140)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x400, &(0x7f0000000500)=ANY=[], 0x9, 0x20a, &(0x7f0000000900)="$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")
sched_setscheduler(0x0, 0x1, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f0000000240), 0x0}, 0x20)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32)
ftruncate(r3, 0x6000000)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0)

6m6.780429999s ago: executing program 0 (id=434):
socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0))
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="b8000000000000001701000002000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf900000080c79d6b6d1d4301678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f06ef28a63b329e09a86c62f907539c9af6f1b0bc00510c3b27f64245b6f4f80e00bca3c91538839a52c3c393aadb6ed6155fad3c98896658e106d043cc8652373dd8e2a7"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b", 0x2f}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610995a895f214c473e", 0xdc}], 0x2, 0x0, 0x0, 0xc0}], 0x2, 0x48040)
r2 = socket$alg(0x26, 0x5, 0x0)
ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x6, 0x1000, 0x0, 0x1, 0x19, 0xc, "faf98317e5a114998a1a8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x5, 0x7]}})
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan0\x00'})
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

6m3.728052485s ago: executing program 0 (id=437):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
getpgrp(0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg0\x00'})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x0, 0x0)
fchdir(r3)
r4 = open(0x0, 0x143142, 0x80)
ftruncate(r4, 0x2007ffb)
syz_mount_image$xfs(&(0x7f000000d4c0), &(0x7f000000d500)='./file0\x00', 0x0, &(0x7f000000d540), 0x1, 0xd4a0, &(0x7f000000d580)="$eJzs3QtsleX9wPG3lFZq1PxNTPRvYoYgojhFWhWZCrQ4WAWLyJQKAyTSFRGvEAduURZDNjWLGJdtxkXHZnSbZMsuKNuSDWcAwagwDYwsgTGNl6mAceMyDV3OrbSH0tgHn6dDPp+Enr7v6e9pOd8+77EmhzaPndyQZX2zgsVZufrvrt+0/rVxP1g+4c8nPjjnll8Vzo4eXby7f/H29OLtgCy/WP7uPoVTNdlvV/TJHfTpuO6xNTUVJ2TZScXD0nrDCzd3rit9XFuZ4un/K92fX7Qi/+b+wp92NfnPc23lrI7rFD664uC/6FGquX7c2NIj2KFbZfHuigP35W/7Fv6MWp9lo9Zmh/z+6FW5r3PxSY99fGVvfyFHgub6cY1l/UcXO1cU92P/8j14NCr/Pm/92aYtxYewossL5xGiuX7shKybfTxy1vzL2wrXzaosy6qzLDsmy7J+vd2DT0d9Q11D7ppfOi5mL+3/xV19X8zY++EbWZYdX3yeGFF6LgCOLPUNdWO62P/V3e3/0Y1P/Mv+hyNfY31DXW6vl+3/ft3t/9dWDjuh+LP/8MLU/t79SwAAAAAAXZq/6K6bZs2b13KHd7zjHe+0v9PbVyYgtgObvre/EiC1FP850dt/RwAAADjaNTbVv19Z0elUZceD015qyd9esKd5zn2rlqws3RbvHt/Fkp1e59/W1tZ2347q0utjjyl7vWy/8uHc+nOPG7K0eNi//PUHVfmzVdn1X71xXsv5uU81sCpbmDsYllv3zKpsae6gNncwuCr7ae6gLn9Qk63KHZx3w63zZudOnBX4iH22NDYtzio7Fcs6fTd07D/3uEk/Kt12s2Rptfw/KpHrv2LFgifL7is5RP/29U//H/z3BT5TetZ/enPptpslD9r/t//6L/Vd3Xfo/u3rD9A/ri6u/50alV/3y67//btYsn3+mYWtM3P9H51xbGn/9/0k1/8O6w8s759fvP36n1vqjNL1P/fcMuiwHoyjUGPTN9/vbv9337/vqcUP69Nhtn21sRM3Lcr1X7fwe8uLp6p62P+M7vZ/Rf+Drif0UGPTsray/d+D/tngLpZsb7K0etqJuf7brz57aof7etJ/UHn/oQtuvm3o/EV3nXvjzbNaW1pbbqmrHXHhxRfUjqgdMTR/SSi8PbwH5ShyePs/O7ZspiLLBrXPv/v2hsty/S9c/dGa4ql+Pex/Zrf7//rOXysdDOiTVVdnC2ctWHDHsMLb0mFt4W3hw7ro34Pn/4GlH6JqircVWXZK+/w9H//uqlz/feueXFY8Vd3D/oO761994PMS6DD3/+yymU79T3vqkadz/adPaLiieKqnz/9ndbv/F9v/h6uxqex/+HzKcv1bdr64MHD8bD//xZWi/8i2tScGjg/RP64U/ffsev6iwPFz9I8rRf9vb9v2fOD45/WPK0X/+g1/eyNw/Fz940rR/9RVm78TOH6e/nGl6P/qK6/+PHB8qP5xpejfuu/R/w8cP1//uFL0/8Xux0cGjg/TP64U/f/95sNTAsdr9Y8rRf9L3/n+bYHjdfrHlaL/mDUPLAkcv0D/uFL0v3/dgz8OHL9Q/7hS9N+45d4XA8cv0j+uFP1P2fSt9wLHh+sfV4r+Wz+Yckbg+MX6x5Wi/8n7J4d+ihH6x5Wi/4QdM+cGjn9B/7hS9F+yfVro7+K8RP+4UvT/z8vjVgaOX6p/XCn61z035vHA8cv0jytF/zkbJ+4OHB+pf1wp+i/bOn5j4Pgo/eNK0f+FfX+6O3B8tP5xpehfsfsP1wWO1+sfV4r+U998NvQFmQ36x5Wi/8Pv/ObkwPEx+seVov97a375j8Dxy/WPK0X/QeueXh04/kX940rR/+4tTy0PHB+rf1wp+j+76ScPBI6P0z+uFP1v/2D+mMDxL+kfV4r+K/d/bXbgeKP+caXo//qOrx8fOH6F/nGl6D9k+z1DAsfH6x9Xiv7XvHzDtsDxCfrHlaL/D59r3Rs4fqX+caXov3bjTQ8FjjfpH1eK/idsvfWZwPGJ+seVov/v3x5cFTh+lf5xpeg//62BAwLHJ+kfV4r+Z+0Z2tXvCfkkrtY/rhT9t+89J/S3yU/WP64U/R/bPPyRwPEv6x9Xiv5T/lr3x8Dxa/SPK0X/414YtTlw/Fr940rRf/XaS3YFjk/RP64U/Sv//u7FgePN+seVov/6nTs/Fzh+nf5xpej/UNvrdwaOT9U/rhT9m3e9NSlwfJr+caXoP3jbR08Ejn9F/7hS9N+xoe3ewPHp+seVov+KVR/+M3B8hv5xpej/jVf2vBQ4PlN/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+yw4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRV24EAAAAAAAMj/tRGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsAMHAgAAAABA/q+NUFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYUdOwHbdC4Y938/Yx37lqRk3/edrENI1iwlFLIXUkloG0qFRKEoa4hQIbuSpDASFdoslX3f92X+x5gZSafe3vft+Pn3nud5HM993dcy1/O9v5/rup6bqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqr/i2225sarDQYTjlsb+Q/7Rxw+6sZR16915BnrXjbtITvtdtbYrauuOm73bKNf1eClk720e9jYQ4YPzjl52JiVYa8872TDhw9NNRiagUe155P/xbCnGf/mpZMOvfRy4Niflxs+5mWfixfa+L84l7rNRqy15rgZHHqF2wTjdg+Nn91xywnH/izz1GCwzKWD17w+Xv9uOvuk9V7vMfwntNmItdZ+lf9gnPNL7q++v629+jr/1Kqjdn9d4f5NbTZizXXHWL/WfXzDdQ8MHz32uT7RYDCYeDAYTDIYDCZ9vT3q39OI1ZZcbcwzf/z6WPWR478Q0PN9aGij47cc9/d12cFg+Krj/xZU1X9WI1ZbcnW4/yd+eT/c/7Pe9tS63f9V//mtPWK1JQev+J4/duvIScfvp/v/qmMuWOr1G3FVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVvR69+MBFlwwGg6HBYDBsMHh+MO79K5eD0aNHjx6zfual1133ug30/x8NjTh81I2jrl/ryDPWvWzaQ3ba7ay/zdJ/bP/5n6D+N43xn/S02QaD3TZ9vYdSr0Pd/+7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5S/uxQcuumTcNTBsMHh+MO79yPHLKRa67OBxh859y7GX7/fqfz9m26T/z0f9ujU04vBRN466fq0jz1j3smkP2Wm3s/4P3D3/+Z+g/je95L/z0Nh7eTAYTLPzYDBYf8RGm8w3GAz2u/zYW+YYvLxvuTH7VphugsEEL/3T+V56nfs1TjzbK5eTvXyOM186/9qjT5hg6FWDeEUX7H/pATtt9tRSr17O+9qfY9j4N9NuMfGho0ePHv13G8f1Ws+q8ecf/1lefZ+PG/t8Y8a+6B677r7ox/beZ+Gdd91mx+133H63JZdYfunlllpi+SWWX3SHnXfZfrGxr68xZ2NnZc5/Zc4mfvWcPTDilXP26s/2WnM22z+fs5fOuNWOe503fs4m/G/O2Zz/fM5m23n8WGebaLD1S1Mz5lfONdFgrzEri0/yir8tM405dsXphg0Gh/7tg455N8nL1+DQyDHHbLbmxqv9baQj/2Fs//CcfqlVV33VNM8+bjnH2I+96iumdfjgnHOHjVn5u2mebPjwoakGgxnGrY4/3/JjF7tvOv640a9q3OZpXjnxY2d+6MCxPy83fMzLrQuevfIrz/MaBP+O/kfP/3/wWm7o5YkaGvcz7pixXiPWWvtvv2vV8S8Tjtu27BiTV8/Zv7N/GO9sw16+rmm8a49Ybckxm181/y/fCnR9rfP0ESPHXVvLjv1XL/6PUfjZse5Lr691P8/2quU/e3ZM8Le3f9u6/TWzvPrZsc5rD/Hv7ovxczTJqw56rWfHoQtM8cFXPpte49mx7pixTzR45bNjzK+dc/yzY8zY55locOiYlSXGrMw70eDUMStLvrQyfHDpmJVFtv3wLtsNvfT36h+ug/mGXp6A17hu13zVdTvsFdM39Ir5Gxp3PU84GKwyajBY5Qr6XK89nRxdtxP/k/GOWG3J1ceM8VXX7fh/QuMZOmz0lTMOBoMpx32u5ceP/X8SjXfCfz7e1WC8E/6T8Q4OXv+4if/N4335PnvpWhv3mJ7vNf7N391n0/zDfbbvBK+4M/7V7zXbwfFj38/08tlOP+qUWcbP0USvOu9/9Td6/Gch//Hf+V7Z0MjB0D+bm9f6HvZ3czPVP5+bf/X7y3zjvmAM/ydzs+GFz392/NxM/N+cm3lfY25e+X34lU08GAz/+7mZcLDGmG804+Zmnn9lbqb491w3k8HxY9/P/fKmla67+77xcwNzgX//x59/nv/m3Axt/fJ1M9dL++YYNph44sFe2+yxx0cXH/s6fnWJsa///B6c61+Zy0n/PXM587inzrB/nJyXN+194wZr/k/vwbn+u3M522DY+P/nsvOrb5Z/X/33v7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7iXnzgokvGXQPDBoPnB2PfD41bDkbefPSCy41ZDgaDic4/eq+1Xu/xvs4NjTh81I2jrl/ryDPWvWzaQ3ba7az/A3fPf/4nqP9NL/nvPDQYjLu/p9l5MBisP2KjTeYbDAZr7XX0+cMGL++bacy+FacbNhgcOvR3J5jk5WOGRo45ZrM1N15tMJhw3BEj/+GX/sN99FKrrjpu92zjlrOPW84xeOlkL+0eNnbT8ME55w4bszLsleedbPjwoakGgxnGrY4/37JjF3teNf640a9q3OZpxu8f9vLMDB049uflho95mX6aY09+5Xn+5dn+f9T4Z/XOw/7LQ7v/3eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvLX9yLD1x0ybhrYNhg8Pxg7PuhkeOWgxO3+MjwcZfIRAuOvvby13u8r3NDIw4fdeOo69c68ox1L5v2kJ12O+v/wN3zn/8J6n/TS/47Dw0G4+7vaXYeDAbrj9hok/kGg8Hl145ecNjg5X0zjdm34nTDBoNDh/7uBJO8fMzQyDHHbLbmxqsNBhOOO2LkP/zSf7iPXmrVVcftnm3ccvZxyzkGL53spd3Dxm4aPjjn3GFjVoa98ryTDR8+NNVgMMO41fHnW3bsYs+rxh83+lWN2zzN+P3DXp6ZoQPH/rzc8DEvC1+9+a6vPM+/PNv/jxr/rN552H95aPe/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5i3vxgYsuGXcNDBsMnh+MfT9s3HJo5KIPnzn/mOWY9dsnOujI13u8r3NDIw4fdeOo69c68ox1L5v2kJ12O+v/wN3zn/8J6n/TGP9JT5ttMNht09d7KPU61P3vLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+4l584KJLxr0d9retw0Z2XWBDIw4fdeOo69c68ox1L5v2kJ12O+v1HtD/ttfw3zd/zOK/X/6Yxf9z+WMW/8/nj1n8988fs/h/IX/M4v/F/DGL/5fyxyz+B+SPWfwPzB+z+B+UP2bx/3L+mMX/4Pwxi/9X8scs/ofkj1n8D80fs/h/NX/M4v+1/DGL/2H5Yxb/w/PHLP5H5I9Z/L+eP2bx/0b+mMX/yPwxi/9R+WMW/2/mj1n8v5U/ZvE/On/M4n9M/pjF/9j8MYv/cfljFv/j88cs/ifkj1n8v50/ZvE/MX/M4n9S/pjF/+T8MYv/d/LHLP6n5I9Z/E/NH7P4fzd/zOJ/Wv6Yxf/0/DGL/xn5Yxb/7+WPWfy/nz9m8f9B/pjF/8z8MYv/WfljFv+z88cs/j/MH7P4n5M/ZvE/N3/M4n9e/pjF//z8MYv/BfljFv8L88cs/hflj1n8L84fs/j/KH/M4v/j/DGL/yX5Yxb/n+SPWfwvzR+z+P80f8zif1n+mMX/Z/ljFv/L88cs/j/PH7P4/yJ/zOJ/Rf6Yxf/K/DGL/1X5Yxb/UfljFv+r88cs/r/MH7P4X5M/ZvH/Vf6Yxf/a/DGL/3X5Yxb/X+ePWfx/kz9m8f9t/pjF//r8MYv/DfljFv8b88cs/r/LH7P4/z5/zOL/h/wxi/8f88cs/n/KH7P435Q/ZvG/OX/M4n9L/pjF/9b8MYv/n/PHLP5/yR+z+P81f8zif1v+mMX/9vwxi/8d+WMW/zvzxyz+d+WPWfzvzh+z+N+TP2bxvzd/zOJ/X/6Yxf/+/DGL/wP5Yxb/B/PHLP4P5Y9Z/B/OH7P4P5I/ZvF/NH/M4v9Y/pjF//H8MYv/E/ljFv8n88cs/k/lj1n8n84fs/g/kz9m8X82f8zi/1z+mMX/+fwxi/8L+WMW/xfzxyz+o/PHJP4TDPLHLP5D+WMW/2H5Yxb/CfLHLP4T5o9Z/CfKH7P4T5w/ZvGfJH/M4j9p/pjFf3j+mMV/svwxi//k+WMW/ynyxyz+U+aPWfynyh+z+E+dP2bxnyZ/zOI/bf6YxX+6/DGL//T5Yxb/GfLHLP5vyB+z+M+YP2bxf2P+mMV/pvwxi/+b8scs/jPnj1n835w/ZvF/S/6YxX+W/DGL/1vzxyz+s+aPWfxnyx+z+M+eP2bxnyN/zOI/Z/6YxX+u/DGL/9z5Yxb/efLHLP7z5o9Z/OfLH7P4z58/ZvFfIH/M4r9g/pjFf6H8MYv/wvljFv9F8scs/ovmj1n8F8sfs/gvnj9m8V8if8ziv2T+mMV/qfwxi//S+WMW/2Xyxyz+y+aPWfyXyx+z+C+fP2bxf1v+mMV/hfwxi/+K+WMW/5Xyxyz+K+ePWfxXyR+z+K+aP2bxH5E/ZvFfLX/M4r96/pjF/+35Yxb/NfLHLP5r5o9Z/NfKH7P4vyN/zOK/dv6Yxf+d+WMW/3Xyxyz+6+aPWfzXyx+z+K+fP2bx3yB/zOK/Yf6Yxf9d+WMW/43yxyz+G+ePWfw3yR+z+G+aP2bxf3f+mMX/PfljFv/N8scs/u/NH7P4b54/ZvHfIn/M4r9l/pjF/335Yxb/9+ePWfy3yh+z+G+dP2bx3yZ/zOL/gfwxi/+2+WMW/+3yxyz+2+ePWfx3yB+z+O+YP2bx3yl/zOK/c/6Yxf+D+WMW/w/lj1n8d8kfs/jvmj9m8d8tf8zi/+H8MYv/7vljFv+P5I9Z/D+aP2bx/1j+mMV/j/wxi//H88cs/nvmj1n8P5E/ZvHfK3/M4r93/pjFf5/8MYv/J/PHLP6fyh+z+H86f8zi/5n8MYv/Z/PHLP4j88cs/vvmj1n898sfs/h/Ln/M4v/5/DGL//75Yxb/L+SPWfy/mD9m8f9S/pjF/4D8MYv/gfljFv+D8scs/l/OH7P4H5w/ZvH/Sv6Yxf+Q/DGL/6H5Yxb/r+aPWfy/lj9m8T8sf8zif3j+mMX/iPwxi//X88cs/t/IH7P4H5k/ZvE/Kn/M4v/N/DGL/7fyxyz+R+ePWfyPyR+z+B+bP2bxPy5/zOJ/fP6Yxf+E/DGL/7fzxyz+J+aPWfxPyh+z+J+cP2bx/07+mMX/lPwxi/+p+WMW/+/mj1n8T8sfs/ifnj9m8T8jf8zi/738MYv/9/PHLP4/yB+z+J+ZP2bxPyt/zOJ/dv6Yxf+H+WMW/3Pyxyz+5+aPWfzPyx+z+J+fP2bxvyB/zOJ/Yf6Yxf+i/DGL/8X5Yxb/H+WPWfx/nD9m8b8kf8zi/5P8MYv/pfljFv+f5o9Z/C/LH7P4/yx/zOJ/ef6Yxf/n+WMW/1/kj1n8r8gfs/hfmT9m8b8qf8ziPyp/zOJ/df6Yxf+X+WMW/2vyxyz+v8ofs/hfmz9m8b8uf8zi/+v8MYv/b/LHLP6/zR+z+F+fP2bxvyF/zOJ/Y/6Yxf93+WMW/9/nj1n8/5A/ZvH/Y/6Yxf9P+WMW/5vyxyz+N+ePWfxvyR+z+N+aP2bx/3P+mMX/L/ljFv+/5o9Z/G/LH7P4354/ZvG/I3/M4n9n/pjF/678MYv/3fljFv978scs/vfmj1n878sfs/jfnz9m8X8gf8zi/2D+mMX/ofwxi//D+WMW/0fyxyz+j+aPWfwfyx+z+D+eP2bxfyJ/zOL/ZP6Yxf+p/DGL/9P5Yxb/Z/LHLP7P5o9Z/J/LH7P4P58/ZvF/IX/M4v9i/pjFf3T+mMR/wkH+mMV/KH/M4j8sf8ziP0H+mMV/wvwxi/9E+WMW/4nzxyz+k+SPWfwnzR+z+A/PH7P4T5Y/ZvGfPH/M4j9F/pjFf8r8MYv/VPljFv+p88cs/tPkj1n8p80fs/hPlz9m8Z8+f8ziP0P+mMX/DfljFv8Z88cs/m/MH7P4z5Q/ZvF/U/6YxX/m/DGL/5vzxyz+b8kfs/jPkj9m8X9r/pjFf9b8MYv/bPljFv/Z88cs/nPkj1n858wfs/jPlT9m8Z87f8ziP0/+mMV/3vwxi/98+WMW//nzxyz+C+SPWfwXzB+z+C+UP2bxXzh/zOK/SP6YxX/R/DGL/2L5Yxb/xfPHLP5L5I9Z/JfMH7P4L5U/ZvFfOn/M4r9M/pjFf9n8MYv/cvljFv/l88cs/m/LH7P4r5A/ZvFfMX/M4r9S/pjFf+X8MYv/KvljFv9V88cs/iPyxyz+q+WPWfxXzx+z+L89f8ziv0b+mMV/zfwxi/9a+WMW/3fkj1n8184fs/i/M3/M4r9O/pjFf938MYv/evljFv/188cs/hvkj1n8N8wfs/i/K3/M4r9R/pjFf+P8MYv/JvljFv9N88cs/u/OH7P4vyd/zOK/Wf6Yxf+9+WMW/83zxyz+W+SPWfy3zB+z+L8vf8zi//78MYv/VvljFv+t88cs/tvkj1n8P5A/ZvHfNn/M4r9d/pjFf/v8MYv/DvljFv8d88cs/jvlj1n8d84fs/h/MH/M4v+h/DGL/y75Yxb/XfPHLP675Y9Z/D+cP2bx3z1/zOL/kfwxi/9H88cs/h/LH7P475E/ZvH/eP6YxX/P/DGL/yfyxyz+e+WPWfz3zh+z+O+TP2bx/2T+mMX/U/ljFv9P549Z/D+TP2bx/2z+mMV/ZP6YxX/f/DGL/375Yxb/z+WPWfw/nz9m8d8/f8zi/4X8MYv/F/PHLP5fyh+z+B+QP2bxPzB/zOJ/UP6Yxf/L+WMW/4Pzxyz+X8kfs/gfkj9m8T80f8zi/9X8MYv/1/LHLP6H5Y9Z/A/PH7P4H5E/ZvH/ev6Yxf8b+WMW/yPzxyz+R+WPWfy/mT9m8f9W/pjF/+j8MYv/MfljFv9j88cs/sflj1n8j88fs/ifkD9m8f92/pjF/8T8MYv/SfljFv+T88cs/t/JH7P4n5I/ZvE/NX/M4v/d/DGL/2n5Yxb/0/PHLP5n5I9Z/L+XP2bx/37+mMX/B/ljFv8z88cs/mflj1n8z84fs/j/MH/M4n9O/pjF/9z8MYv/efljFv/z88cs/hfkj1n8L8wfs/hflD9m8b84f8zi/6P8MYv/j/PHLP6X5I9Z/H+SP2bxvzR/zOL/0/wxi/9l+WMW/5/lj1n8L88fs/j/PH/M4v+L/DGL/xX5Yxb/K/PHLP5X5Y9Z/Eflj1n8r84fs/j/Mn/M4n9N/pjF/1f5Yxb/a/PHLP7X5Y9Z/H+dP2bx/03+mMX/t/ljFv/r88cs/jfkj1n8b8wfs/j/Ln/M4v/7/DGL/x/yxyz+f8wfs/j/KX/M4n9T/pjF/+b8MYv/LfljFv9b88cs/n/OH7P4/yV/zOL/1/wxi/9t+WMW/9vzxyz+d+SPWfzvzB+z+N+VP2bxvzt/zOJ/T/6Yxf/e/DGL/335Yxb/+/PHLP4P5I9Z/B/MH7P4P5Q/ZvF/OH/M4v9I/pjF/9H8MYv/Y/ljFv/H88cs/k/kj1n8n8wfs/g/lT9m8X86f8zi/0z+mMX/2fwxi/9z+WMW/+fzxyz+L+SPWfxfzB+z+I/OH5P4TzTIH7P4D+WPWfyH5Y9Z/CfIH7P4T5g/ZvGfKH/M4j9x/pjFf5L8MYv/pPljFv/h+WMW/8nyxyz+k+ePWfynyB+z+E+ZP2bxnyp/zOI/df6YxX+a/DGL/7T5Yxb/6fLHLP7T549Z/GfIH7P4vyF/zOI/Y/6Yxf+N+WMW/5nyxyz+b8ofs/jPnD9m8X9z/pjF/y35Yxb/WfLHLP5vzR+z+M+aP2bxny1/zOI/e/6YxX+O/DGL/5z5Yxb/ufLHLP5z549Z/OfJH7P4z5s/ZvGfL3/M4j9//pjFf4H8MYv/gvljFv+F8scs/gvnj1n8F8kfs/gvmj9m8V8sf8ziv3j+mMV/ifwxi/+S+WMW/6Xyxyz+S+ePWfyXyR+z+C+bP2bxXy5/zOK/fP6Yxf9t+WMW/xXyxyz+K+aPWfxXyh+z+K+cP2bxXyV/zOK/av6YxX9E/pjFf7X8MYv/6vljFv+3549Z/NfIH7P4r5k/ZvFfK3/M4v+O/DGL/9r5Yxb/d+aPWfzXyR+z+K+bP2bxXy9/zOK/fv6YxX+D/DGL/4b5Yxb/d+WPWfw3yh+z+G+cP2bx3yR/zOK/af6Yxf/d+WMW//fkj1n8N8sfs/i/N3/M4r95/pjFf4v8MYv/lvljFv/35Y9Z/N+fP2bx3yp/zOK/df6YxX+b/DGL/wfyxyz+2+aPWfy3yx+z+G+fP2bx3yF/zOK/Y/6YxX+n/DGL/875Yxb/D+aPWfw/lD9m8d8lf8ziv2v+mMV/t/wxi/+H88cs/rvnj1n8P5I/ZvH/aP6Yxf9j+WMW/z3yxyz+H88fs/jvmT9m8f9E/pjFf6/8MYv/3vljFv998scs/p/MH7P4fyp/zOL/6fwxi/9n8scs/p/NH7P4j8wfs/jvmz9m8d8vf8zi/7n8MYv/5/PHLP77549Z/L+QP2bx/2L+mMX/S/ljFv8D8scs/gfmj1n8D8ofs/h/OX/M4n9w/pjF/yv5Yxb/Q/LHLP6H5o9Z/L+aP2bx/1r+mMX/sPwxi//h+WMW/yPyxyz+X88fs/h/I3/M4n9k/pjF/6j8MYv/N/PHLP7fyh+z+B+dP2bxPyZ/zOJ/bP6Yxf+4/DGL//H5Yxb/E/LHLP7fzh+z+J+YP2bxPyl/zOJ/cv6Yxf87+WMW/1Pyxyz+p+aPWfy/mz9m8T8tf8zif3r+mMX/jPwxi//38scs/t/PH7P4/yB/zOJ/Zv6Yxf+s/DGL/9n5Yxb/H+aPWfzPyR+z+J+bP2bxPy9/zOJ/fv6Yxf+C/DGL/4X5Yxb/i/LHLP4X549Z/H+UP2bx/3H+mMX/kvwxi/9P8scs/pfmj1n8f5o/ZvG/LH/M4v+z/DGL/+X5Yxb/n+ePWfx/kT9m8b8if8zif2X+mMX/qvwxi/+o/DGL/9X5Yxb/X+aPWfyvyR+z+P8qf8zif23+mMX/uvwxi/+v88cs/r/JH7P4/zZ/zOJ/ff6Yxf+G/DGL/435Yxb/3+WPWfx/nz9m8f9D/pjF/4/5Yxb/P+WPWfxvyh+z+N+cP2bxvyV/zOJ/a/6Yxf/P+WMW/7/kj1n8/5o/ZvG/LX/M4n97/pjF/478MYv/nfljFv+78scs/nfnj1n878kfs/jfmz9m8b8vf8zif3/+mMX/gfwxi/+D+WMW/4fyxyz+D+ePWfwfyR+z+D+aP2bxfyx/zOL/eP6Yxf+J/DGL/5P5Yxb/p/LHLP5P549Z/J/JH7P4P5s/ZvF/Ln/M4v98/pjF/4X8MYv/i/ljFv/R+WMS/4kH+WMW/6H8MYv/sPwxi/8E+WMW/wnzxyz+E+WPWfwnzh+z+E+SP2bxnzR/zOI/PH/M4j9Z/pjFf/L8MYv/FPljFv8p88cs/lPlj1n8p84fs/hPkz9m8Z82f8ziP13+mMV/+vwxi/8M+WMW/zfkj1n8Z8wfs/i/MX/M4j9T/pjF/035Yxb/mfPHLP5vzh+z+L8lf8ziP0v+mMX/rfljFv9Z88cs/rPlj1n8Z88fs/jPkT9m8Z8zf8ziP1f+mMV/7vwxi/88+WMW/3nzxyz+8+WPWfznzx+z+C+QP2bxXzB/zOK/UP6YxX/h/DGL/yL5Yxb/RfPHLP6L5Y9Z/BfPH7P4L5E/ZvFfMn/M4r9U/pjFf+n8MYv/MvljFv9l88cs/svlj1n8l88fs/i/LX/M4r9C/pjFf8X8MYv/SvljFv+V88cs/qvkj1n8V80fs/iPyB+z+K+WP2bxXz1/zOL/9vwxi/8a+WMW/zXzxyz+a+WPWfzfkT9m8V87f8zi/878MYv/OvljFv9188cs/uvlj1n8188fs/hvkD9m8d8wf8zi/678MYv/RvljFv+N88cs/pvkj1n8N80fs/i/O3/M4v+e/DGL/2b5Yxb/9+aPWfw3zx+z+G+RP2bx3zJ/zOL/vvwxi//788cs/lvlj1n8t84fs/hvkz9m8f9A/pjFf9v8MYv/dvljFv/t88cs/jvkj1n8d8wfs/jvlD9m8d85f8zi/8H8MYv/h/LHLP675I9Z/HfNH7P475Y/ZvH/cP6YxX/3/DGL/0fyxyz+H80fs/h/LH/M4r9H/pjF/+P5Yxb/PfPHLP6fyB+z+O+VP2bx3zt/zOK/T/6Yxf+T+WMW/0/lj1n8P50/ZvH/TP6Yxf+z+WMW/5H5Yxb/ffPHLP775Y9Z/D+XP2bx/3z+mMV///wxi/8X8scs/l/MH7P4fyl/zOJ/QP6Yxf/A/DGL/0H5Yxb/L+ePWfwPzh+z+H8lf8zif0j+mMX/0Pwxi/9X88cs/l/LH7P4H5Y/ZvE/PH/M4n9E/pjF/+v5Yxb/b+SPWfyPzB+z+B+VP2bx/2b+mMX/W/ljFv+j88cs/sfkj1n8j80fs/gflz9m8T8+f8zif0L+mMX/2/ljFv8T88cs/iflj1n8T84fs/h/J3/M4n9K/pjF/9T8MYv/d/PHLP6n5Y9Z/E/PH7P4n5E/ZvH/Xv6Yxf/7+WMW/x/kj1n8z8wfs/iflT9m8T87f8zi/8P8MYv/OfljFv9z88cs/uflj1n8z88fs/hfkD9m8b8wf8zif1H+mMX/4vwxi/+P8scs/j/OH7P4X5I/ZvH/Sf6Yxf/S/DGL/0/zxyz+l+WPWfx/lj9m8b88f8zi//P8MYv/L/LHLP5X5I9Z/K/MH7P4X5U/ZvEflT9m8b86f8zi/8v8MYv/NfljFv9f5Y9Z/K/NH7P4X5c/ZvH/df6Yxf83+WMW/9/mj1n8r88fs/jfkD9m8b8xf8zi/7v8MYv/7/PHLP5/yB+z+P8xf8zi/6f8MYv/TfljFv+b88cs/rfkj1n8b80fs/j/OX/M4v+X/DGL/1/zxyz+t+WPWfxvzx+z+N+RP2bxvzN/zOJ/V/6Yxf/u/DGL/z35Yxb/e/PHLP735Y9Z/O/PH7P4P5A/ZvF/MH/M4v9Q/pjF/+H8MYv/I/ljFv9H88cs/o/lj1n8H88fs/g/kT9m8X8yf8zi/1T+mMX/6fwxi/8z+WMW/2fzxyz+z+WPWfyfzx+z+L+QP2bxfzF/zOI/On9M4j/JIH/M4j+UP2bxH5Y/ZvGfIH/M4j9h/pjFf6L8MYv/xPljFv9J8scs/pPmj1n8h+ePWfwnyx+z+E+eP2bxnyJ/zOI/Zf6YxX+q/DGL/9T5Yxb/afLHLP7T5o9Z/KfLH7P4T58/ZvGfIX/M4v+G/DGL/4z5Yxb/N+aPWfxnyh+z+L8pf8ziP3P+mMX/zfljFv+35I9Z/GfJH7P4vzV/zOI/a/6YxX+2/DGL/+z5Yxb/OfLHLP5z5o9Z/OfKH7P4z50/ZvGfJ3/M4j9v/pjFf778MYv//PljFv8F8scs/gvmj1n8F8ofs/gvnD9m8V8kf8ziv2j+mMV/sfwxi//i+WMW/yXyxyz+S+aPWfyXyh+z+C+dP2bxXyZ/zOK/bP6YxX+5/DGL//L5Yxb/t+WPWfxXyB+z+K+YP2bxXyl/zOK/cv6YxX+V/DGL/6r5Yxb/EfljFv/V8scs/qvnj1n8354/ZvFfI3/M4r9m/pjFf638MYv/O/LHLP5r549Z/N+ZP2bxXyd/zOK/bv6YxX+9/DGL//r5Yxb/DfLHLP4b5o9Z/N+VP2bx3yh/zOK/cf6YxX+T/DGL/6b5Yxb/d+ePWfzfkz9m8d8sf8zi/978MYv/5vljFv8t8scs/lvmj1n835c/ZvF/f/6YxX+r/DGL/9b5Yxb/bfLHLP4fyB+z+G+bP2bx3y5/zOK/ff6YxX+H/DGL/475Yxb/nfLHLP47549Z/D+YP2bx/1D+mMV/l/wxi/+u+WMW/93yxyz+H84fs/jvnj9m8f9I/pjF/6P5Yxb/j+WPWfz3yB+z+H88f8ziv2f+mMX/E/ljFv+98scs/nvnj1n898kfs/h/Mn/M4v+p/DGL/6fzxyz+n8kfs/h/Nn/M4j8yf8ziv2/+mMV/v/wxi//n8scs/p/PH7P4758/ZvH/Qv6Yxf+L+WMW/y/lj1n8D8gfs/gfmD9m8T8of8zi/+X8MYv/wfljFv+v5I9Z/A/JH7P4H5o/ZvH/av6Yxf9r+WMW/8Pyxyz+h+ePWfyPyB+z+H89f8zi/438MYv/kfljFv+j8scs/t/MH7P4fyt/zOJ/dP6Yxf+Y/DGL/7H5Yxb/4/LHLP7H549Z/E/IH7P4fzt/zOJ/Yv6Yxf+k/DGL/8n5Yxb/7+SPWfxPyR+z+J+aP2bx/27+mMX/tPwxi//p+WMW/zPyxyz+38sfs/h/P3/M4v+D/DGL/5n5Yxb/s/LHLP5n549Z/H+YP2bxPyd/zOJ/bv6Yxf+8/DGL//n5Yxb/C/LHLP4X5o9Z/C/KH7P4X5w/ZvH/Uf6Yxf/H+WMW/0vyxyz+P8kfs/hfmj9m8f9p/pjF/7L8MYv/z/LHLP6X549Z/H+eP2bx/0X+mMX/ivwxi/+V+WMW/6vyxyz+o/LHLP5X549Z/H+ZP2bxvyZ/zOL/q/wxi/+1+WMW/+vyxyz+v84fs/j/Jn/M4v/b/DGL//X5Yxb/G/LHLP435o9Z/H+XP2bx/33+mMX/D/ljFv8/5o9Z/P+UP2bxvyl/zOJ/c/6Yxf+W/DGL/635Yxb/P+ePWfz/kj9m8f9r/pjF/7b8MYv/7fljFv878scs/nfmj1n878ofs/jfnT9m8b8nf8zif2/+mMX/vvwxi//9+WMW/wfyxyz+D+aPWfwfyh+z+D+cP2bxfyR/zOL/aP6Yxf+x/DGL/+P5Yxb/J/LHLP5P5o9Z/J/KH7P4P50/ZvF/Jn/M4v9s/pjF/7n8MYv/8/ljFv8X8scs/i/mj1n8R+ePSfwnHeSPWfyH8scs/sPyxyz+E+SPWfwnzB+z+E+UP2bxnzh/zOI/Sf6YxX/S/DGL//D8MYv/ZPljFv/J88cs/lPkj1n8p8wfs/hPlT9m8Z86f8ziP03+mMV/2vwxi/90+WMW/+nzxyz+M+SPWfzfkD9m8Z8xf8zi/8b8MYv/TPljFv835Y9Z/GfOH7P4vzl/zOL/lvwxi/8s+WMW/7fmj1n8Z80fs/jPlj9m8Z89f8ziP0f+mMV/zvwxi/9c+WMW/7nzxyz+8+SPWfznzR+z+M+XP2bxnz9/zOK/QP6YxX/B/DGL/0L5Yxb/hfPHLP6L5I9Z/BfNH7P4L5Y/ZvFfPH/M4r9E/pjFf8n8MYv/UvljFv+l88cs/svkj1n8l80fs/gvlz9m8V8+f8zi/7b8MYv/CvljFv8V88cs/ivlj1n8V84fs/ivkj9m8V81f8ziPyJ/zOK/Wv6YxX/1/DGL/9vzxyz+a+SPWfzXzB+z+K+VP2bxf0f+mMV/7fwxi/8788cs/uvkj1n8180fs/ivlz9m8V8/f8ziv0H+mMV/w/wxi/+78scs/hvlj1n8N84fs/hvkj9m8d80f8zi/+78MYv/e/LHLP6b5Y9Z/N+bP2bx3zx/zOK/Rf6YxX/L/DGL//vyxyz+788fs/hvlT9m8d86f8ziv03+mMX/A/ljFv9t88cs/tvlj1n8t88fs/jvkD9m8d8xf8ziv1P+mMV/5/wxi/8H88cs/h/KH7P475I/ZvHfNX/M4r9b/pjF/8P5Yxb/3fPHLP4fyR+z+H80f8zi/7H8MYv/HvljFv+P549Z/PfMH7P4fyJ/zOK/V/6YxX/v/DGL/z75Yxb/T+aPWfw/lT9m8f90/pjF/zP5Yxb/z+aPWfxH5o9Z/PfNH7P475c/ZvH/XP6Yxf/z+WMW//3zxyz+X8gfs/h/MX/M4v+l/DGL/wH5Yxb/A/PHLP4H5Y9Z/L+cP2bxPzh/zOL/lfwxi/8h+WMW/0Pzxyz+X80fs/h/LX/M4n9Y/pjF//D8MYv/EfljFv+v549Z/L+RP2bxPzJ/zOJ/VP6Yxf+b+WMW/2/lj1n8j84fs/gfkz9m8T82f8zif1z+mMX/+Pwxi/8J+WMW/2/nj1n8T8wfs/iflD9m8T85f8zi/538MYv/KfljFv9T88cs/t/NH7P4n5Y/ZvE/PX/M4n9G/pjF/3v5Yxb/7+ePWfx/kD9m8T8zf8zif1b+mMX/7Pwxi/8P88cs/ufkj1n8z80fs/iflz9m8T8/f8zif0H+mMX/wvwxi/9F+WMW/4vzxyz+P8ofs/j/OH/M4n9J/pjF/yf5Yxb/S/PHLP4/zR+z+F+WP2bx/1n+mMX/8vwxi//P88cs/r/IH7P4X5E/ZvG/Mn/M4n9V/pjFf1T+mMX/6vwxi/8v88cs/tfkj1n8f5U/ZvG/Nn/M4n9d/pjF/9f5Yxb/3+SPWfx/mz9m8b8+f8zif0P+mMX/xvwxi//v8scs/r/PH7P4/yF/zOL/x/wxi/+f8scs/jflj1n8b84fs/jfkj9m8b81f8zi/+f8MYv/X/LHLP5/zR+z+N+WP2bxvz1/zOJ/R/6Yxf/O/DGL/135Yxb/u/PHLP735I9Z/O/NH7P435c/ZvG/P3/M4v9A/pjF/8H8MYv/Q/ljFv+H88cs/o/kj1n8H80fs/g/lj9m8X88f8zi/0T+mMX/yfwxi/9T+WMW/6fzxyz+z+SPWfyfzR+z+D+XP2bxfz5/zOL/Qv6Yxf/F/DGL/+j8MYn/8EH+mMV/KH/M4j8sf8ziP0H+mMV/wvwxi/9E+WMW/4nzxyz+k+SPWfwnzR+z+A/PH7P4T5Y/ZvGfPH/M4j9F/pjFf8r8MYv/VPljFv+p88cs/tPkj1n8p80fs/hPlz9m8Z8+f8ziP0P+mMX/DfljFv8Z88cs/m/MH7P4z5Q/ZvF/U/6YxX/m/DGL/5vzxyz+b8kfs/jPkj9m8X9r/pjFf9b8MYv/bPljFv/Z88cs/nPkj1n858wfs/jPlT9m8Z87f8ziP0/+mMV/3vwxi/98+WMW//nzxyz+C+SPWfwXzB+z+C+UP2bxXzh/zOK/SP6YxX/R/DGL/2L5Yxb/xfPHLP5L5I9Z/JfMH7P4L5U/ZvFfOn/M4r9M/pjFf9n8MYv/cvljFv/l88cs/m/LH7P4r5A/ZvFfMX/M4r9S/pjFf+X8MYv/KvljFv9V88cs/iPyxyz+q+WPWfxXzx+z+L89f8ziv0b+mMV/zfwxi/9a+WMW/3fkj1n8184fs/i/M3/M4r9O/pjFf938MYv/evljFv/188cs/hvkj1n8N8wfs/i/K3/M4r9R/pjFf+P8MYv/JvljFv9N88cs/u/OH7P4vyd/zOK/Wf6Yxf+9+WMW/83zxyz+W+SPWfy3zB+z+L8vf8zi//78MYv/VvljFv+t88cs/tvkj1n8P5A/ZvHfNn/M4r9d/pjFf/v8MYv/DvljFv8d88cs/jvlj1n8d84fs/h/MH/M4v+h/DGL/y75Yxb/XfPHLP675Y9Z/D+cP2bx3z1/zOL/kfwxi/9H88cs/h/LH7P475E/ZvH/eP6YxX/P/DGL/yfyxyz+e+WPWfz3zh+z+O+TP2bx/2T+mMX/U/ljFv9P549Z/D+TP2bx/2z+mMV/ZP6YxX/f/DGL/375Yxb/z+WPWfw/nz9m8d8/f8zi/4X8MYv/F/PHLP5fyh+z+B+QP2bxPzB/zOJ/UP6Yxf/L+WMW/4Pzxyz+X8kfs/gfkj9m8T80f8zi/9X8MYv/1/LHLP6H5Y9Z/A/PH7P4H5E/ZvH/ev6Yxf8b+WMW/yPzxyz+R+WPWfy/mT9m8f9W/pjF/+j8MYv/MfljFv9j88cs/sflj1n8j88fs/ifkD9m8f92/pjF/8T8MYv/SfljFv+T88cs/t/JH7P4n5I/ZvE/NX/M4v/d/DGL/2n5Yxb/0/PHLP5n5I9Z/L+XP2bx/37+mMX/B/ljFv8z88cs/mflj1n8z84fs/j/MH/M4n9O/pjF/9z8MYv/efljFv/z88cs/hfkj1n8L8wfs/hflD9m8b84f8zi/6P8MYv/j/PHLP6X5I9Z/H+SP2bxvzR/zOL/0/wxi/9l+WMW/5/lj1n8L88fs/j/PH/M4v+L/DGL/xX5Yxb/K/PHLP5X5Y9Z/Eflj1n8r84fs/j/Mn/M4n9N/pjF/1f5Yxb/a/PHLP7X5Y9Z/H+dP2bx/03+mMX/t/ljFv/r88cs/jfkj1n8b8wfs/j/Ln/M4v/7/DGL/x/yxyz+f8wfs/j/KX/M4n9T/pjF/+b8MYv/LfljFv9b88cs/n/OH7P4/yV/zOL/1/wxi/9t+WMW/9vzxyz+d+SPWfzvzB+z+N+VP2bxvzt/zOJ/T/6Yxf/e/DGL/335Yxb/+/PHLP4P5I9Z/B/MH7P4P5Q/ZvF/OH/M4v9I/pjF/9H8MYv/Y/ljFv/H88cs/k/kj1n8n8wfs/g/lT9m8X86f8zi/0z+mMX/2fwxi/9z+WMW/+fzxyz+L+SPWfxfzB+z+I/OH5P4TzbIH7P4D+WPWfyH5Y9Z/CfIH7P4T5g/ZvGfKH/M4j9x/pjFf5L8MYv/pPljFv/h+WMW/8nyxyz+k+ePWfynyB+z+E+ZP2bxnyp/zOI/df6YxX+a/DGL/7T5Yxb/6fLHLP7T549Z/GfIH7P4vyF/zOI/Y/6Yxf+N+WMW/5nyxyz+b8ofs/jPnD9m8X9z/pjF/y35Yxb/WfLHLP5vzR+z+M+aP2bxny1/zOI/e/6YxX+O/DGL/5z5Yxb/ufLHLP5z549Z/OfJH7P4z5s/ZvGfL3/M4j9//pjFf4H8MYv/gvljFv+F8scs/gvnj1n8F8kfs/gvmj9m8V8sf8ziv3j+mMV/ifwxi/+S+WMW/6Xyxyz+S+ePWfyXyR+z+C+bP2bxXy5/zOK/fP6Yxf9t+WMW/xXyxyz+K+aPWfxXyh+z+K+cP2bxXyV/zOK/av6YxX9E/pjFf7X8MYv/6vljFv+3549Z/NfIH7P4r5k/ZvFfK3/M4v+O/DGL/9r5Yxb/d+aPWfzXyR+z+K+bP2bxXy9/zOK/fv6YxX+D/DGL/4b5Yxb/d+WPWfw3yh+z+G+cP2bx3yR/zOK/af6Yxf/d+WMW//fkj1n8N8sfs/i/N3/M4r95/pjFf4v8MYv/lvljFv/35Y9Z/N+fP2bx3yp/zOK/df6YxX+b/DGL/wfyxyz+2+aPWfy3yx+z+G+fP2bx3yF/zOK/Y/6YxX+n/DGL/875Yxb/D+aPWfw/lD9m8d8lf8ziv2v+mMV/t/wxi/+H88cs/rvnj1n8P5I/ZvH/aP6Yxf9j+WMW/z3yxyz+H88fs/jvmT9m8f9E/pjFf6/8MYv/3vljFv998scs/p/MH7P4fyp/zOL/6fwxi/9n8scs/p/NH7P4j8wfs/jvmz9m8d8vf8zi/7n8MYv/5/PHLP77549Z/L+QP2bx/2L+mMX/S/ljFv8D8scs/gfmj1n8D8ofs/h/OX/M4n9w/pjF/yv5Yxb/Q/LHLP6H5o9Z/L+aP2bx/1r+mMX/sPwxi//h+WMW/yPyxyz+X88fs/h/I3/M4n9k/pjF/6j8MYv/N/PHLP7fyh+z+B+dP2bxPyZ/zOJ/bP6Yxf+4/DGL//H5Yxb/E/LHLP7fzh+z+J+YP2bxPyl/zOJ/cv6Yxf87+WMW/1Pyxyz+p+aPWfy/mz9m8T8tf8zif3r+mMX/jPwxi//38scs/t/PH7P4/yB/zOJ/Zv6Yxf+s/DGL/9n5Yxb/H+aPWfzPyR+z+J+bP2bxPy9/zOJ/fv6Yxf+C/DGL/4X5Yxb/i/LHLP4X549Z/H+UP2bx/3H+mMX/kvwxi/9P8scs/pfmj1n8f5o/ZvG/LH/M4v+z/DGL/+X5Yxb/n+ePWfx/kT9m8b8if8zif2X+mMX/qvwxi/+o/DGL/9X5Yxb/X+aPWfyvyR+z+P8qf8zif23+mMX/uvwxi/+v88cs/r/JH7P4/zZ/zOJ/ff6Yxf+G/DGL/435Yxb/3+WPWfx/nz9m8f9D/pjF/4/5Yxb/P+WPWfxvyh+z+N+cP2bxvyV/zOJ/a/6Yxf/P+WMW/7/kj1n8/5o/ZvG/LX/M4n97/pjF/478MYv/nfljFv+78scs/nfnj1n878kfs/jfmz9m8b8vf8zif3/+mMX/gfwxi/+D+WMW/4fyxyz+D+ePWfwfyR+z+D+aP2bxfyx/zOL/eP6Yxf+J/DGL/5P5Yxb/p/LHLP5P549Z/J/JH7P4P5s/ZvF/Ln/M4v98/pjF/4X8MYv/i/ljFv/R+WMS/8kH+WMW/6H8MYv/sPwxi/8E+WMW/wnzxyz+E+WPWfwnzh+z+E+SP2bxnzR/zOI/PH/M4j9Z/pjFf/L8MYv/FPljFv8p88cs/lPlj1n8p84fs/hPkz9m8Z82f8ziP13+mMV/+vwxi/8M+WMW/zfkj1n8Z8wfs/i/MX/M4j9T/pjF/035Yxb/mfPHLP5vzh+z+L8lf8ziP0v+mMX/rfljFv9Z88cs/rPlj1n8Z88fs/jPkT9m8Z8zf8ziP1f+mMV/7vwxi/88+WMW/3nzxyz+8+WPWfznzx+z+C+QP2bxXzB/zOK/UP6YxX/h/DGL/yL5Yxb/RfPHLP6L5Y9Z/BfPH7P4L5E/ZvFfMn/M4r9U/pjFf+n8MYv/MvljFv9l88cs/svlj1n8l88fs/i/LX/M4r9C/pjFf8X8MYv/SvljFv+V88cs/qvkj1n8V80fs/iPyB+z+K+WP2bxXz1/zOL/9vwxi/8a+WMW/zXzxyz+a+WPWfzfkT9m8V87f8zi/878MYv/OvljFv9188cs/uvlj1n8188fs/hvkD9m8d8wf8zi/678MYv/RvljFv+N88cs/pvkj1n8N80fs/i/O3/M4v+e/DGL/2b5Yxb/9+aPWfw3zx+z+G+RP2bx3zJ/zOL/vvwxi//788cs/lvlj1n8t84fs/hvkz9m8f9A/pjFf9v8MYv/dvljFv/t88cs/jvkj1n8d8wfs/jvlD9m8d85f8zi/8H8MYv/h/LHLP675I9Z/HfNH7P475Y/ZvH/cP6YxX/3/DGL/0fyxyz+H80fs/h/LH/M4r9H/pjF/+P5Yxb/PfPHLP6fyB+z+O+VP2bx3zt/zOK/T/6Yxf+T+WMW/0/lj1n8P50/ZvH/TP6Yxf+z+WMW/5H5Yxb/ffPHLP775Y9Z/D+XP2bx/3z+mMV///wxi/8X8scs/l/MH7P4fyl/zOJ/QP6Yxf/A/DGL/0H5Yxb/L+ePWfwPzh+z+H8lf8zif0j+mMX/0Pwxi/9X88cs/l/LH7P4H5Y/ZvE/PH/M4n9E/pjF/+v5Yxb/b+SPWfyPzB+z+B+VP2bx/2b+mMX/W/ljFv+j88cs/sfkj1n8j80fs/gflz9m8T8+f8zif0L+mMX/2/ljFv8T88cs/iflj1n8T84fs/h/J3/M4n9K/pjF/9T8MYv/d/PHLP6n5Y9Z/E/PH7P4n5E/ZvH/Xv6Yxf/7+WMW/x/kj1n8z8wfs/iflT9m8T87f8zi/8P8MYv/OfljFv9z88cs/uflj1n8z88fs/hfkD9m8b8wf8zif1H+mMX/4vwxi/+P8scs/j/OH7P4X5I/ZvH/Sf6Yxf/S/DGL/0/zxyz+l+WPWfx/lj9m8b88f8zi//P8MYv/L/LHLP5X5I9Z/K/MH7P4X5U/ZvEflT9m8b86f8zi/8v8MYv/NfljFv9f5Y9Z/K/NH7P4X5c/ZvH/df6Yxf83+WMW/9/mj1n8r88fs/jfkD9m8b8xf8zi/7v8MYv/7/PHLP5/yB+z+P8xf8zi/6f8MYv/TfljFv+b88cs/rfkj1n8b80fs/j/OX/M4v+X/DGL/1/zxyz+t+WPWfxvzx+z+N+RP2bxvzN/zOJ/V/6Yxf/u/DGL/z35Yxb/e/PHLP735Y9Z/O/PH7P4P5A/ZvF/MH/M4v9Q/pjF/+H8MYv/I/ljFv9H88cs/o/lj1n8H88fs/g/kT9m8X8yf8zi/1T+mMX/6fwxi/8z+WMW/2fzxyz+z+WPWfyfzx+z+L+QP2bxfzF/zOI/On9M4j/FIH/M4j+UP2bxH5Y/ZvGfIH/M4j9h/pjFf6L8MYv/xPljFv9J8scs/pPmj1n8h+ePWfwnyx+z+E+eP2bxnyJ/zOI/Zf6YxX+q/DGL/9T5Yxb/afLHLP7T5o9Z/KfLH7P4T58/ZvGfIX/M4v+G/DGL/4z5Yxb/N+aPWfxnyh+z+L8pf8ziP3P+mMX/zfljFv+35I9Z/GfJH7P4vzV/zOI/a/6YxX+2/DGL/+z5Yxb/OfLHLP5z5o9Z/OfKH7P4z50/ZvGfJ3/M4j9v/pjFf778MYv//PljFv8F8scs/gvmj1n8F8ofs/gvnD9m8V8kf8ziv2j+mMV/sfwxi//i+WMW/yXyxyz+S+aPWfyXyh+z+C+dP2bxXyZ/zOK/bP6YxX+5/DGL//L5Yxb/t+WPWfxXyB+z+K+YP2bxXyl/zOK/cv6YxX+V/DGL/6r5Yxb/EfljFv/V8scs/qvnj1n8354/ZvFfI3/M4r9m/pjFf638MYv/O/LHLP5r549Z/N+ZP2bxXyd/zOK/bv6YxX+9/DGL//r5Yxb/DfLHLP4b5o9Z/N+VP2bx3yh/zOK/cf6YxX+T/DGL/6b5Yxb/d+ePWfzfkz9m8d8sf8zi/978MYv/5vljFv8t8scs/lvmj1n835c/ZvF/f/6YxX+r/DGL/9b5Yxb/bfLHLP4fyB+z+G+bP2bx3y5/zOK/ff6YxX+H/DGL/475Yxb/nfLHLP47549Z/D+YP2bx/1D+mMV/l/wxi/+u+WMW/93yxyz+H84fs/jvnj9m8f9I/pjF/6P5Yxb/j+WPWfz3yB+z+H88f8ziv2f+mMX/E/ljFv+98scs/nvnj1n898kfs/h/Mn/M4v+p/DGL/6fzxyz+n8kfs/h/Nn/M4j8yf8ziv2/+mMV/v/wxi//n8scs/p/PH7P4758/ZvH/Qv6Yxf+L+WMW/y/lj1n8D8gfs/gfmD9m8T8of8zi/+X8MYv/wfljFv+v5I9Z/A/JH7P4H5o/ZvH/av6Yxf9r+WMW/8Pyxyz+h+ePWfyPyB+z+H89f8zi/438MYv/kfljFv+j8scs/t/MH7P4fyt/zOJ/dP6Yxf+Y/DGL/7H5Yxb/4/LHLP7H549Z/E/IH7P4fzt/zOJ/Yv6Yxf+k/DGL/8n5Yxb/7+SPWfxPyR+z+J+aP2bx/27+mMX/tPwxi//p+WMW/zPyxyz+38sfs/h/P3/M4v+D/DGL/5n5Yxb/s/LHLP5n549Z/H+YP2bxPyd/zOJ/bv6Yxf+8/DGL//n5Yxb/C/LHLP4X5o9Z/C/KH7P4X5w/ZvH/Uf6Yxf/H+WMW/0vyxyz+P8kfs/hfmj9m8f9p/pjF/7L8MYv/z/LHLP6X549Z/H+eP2bx/0X+mMX/ivwxi/+V+WMW/6vyxyz+o/LHLP5X549Z/H+ZP2bxvyZ/zOL/q/wxi/+1+WMW/+vyxyz+v84fs/j/Jn/M4v/b/DGL//X5Yxb/G/LHLP435o9Z/H+XP2bx/33+mMX/D/ljFv8/5o9Z/P+UP2bxvyl/zOJ/c/6Yxf+W/DGL/635Yxb/P+ePWfz/kj9m8f9r/pjF/7b8MYv/7fljFv878scs/nfmj1n878ofs/jfnT9m8b8nf8zif2/+mMX/vvwxi//9+WMW/wfyxyz+D+aPWfwfyh+z+D+cP2bxfyR/zOL/aP6Yxf+x/DGL/+P5Yxb/J/LHLP5P5o9Z/J/KH7P4P50/ZvF/Jn/M4v9s/pjF/7n8MYv/8/ljFv8X8scs/i/mj1n8R+ePSfynHOSPWfyH8scs/sPyxyz+E+SPWfwnzB+z+E+UP2bxnzh/zOI/Sf6YxX/S/DGL//D8MYv/ZPljFv/J88cs/lPkj1n8p8wfs/hPlT9m8Z86f8ziP03+mMV/2vwxi/90+WMW/+nzxyz+M+SPWfzfkD9m8Z8xf8zi/8b8MYv/TPljFv835Y9Z/GfOH7P4vzl/zOL/lvwxi/8s+WMW/7fmj1n8Z80fs/jPlj9m8Z89f8ziP0f+mMV/zvwxi/9c+WMW/7nzxyz+8+SPWfznzR+z+M+XP2bxnz9/zOK/QP6YxX/B/DGL/0L5Yxb/hfPHLP6L5I9Z/BfNH7P4L5Y/ZvFfPH/M4r9E/pjFf8n8MYv/UvljFv+l88cs/svkj1n8l80fs/gvlz9m8V8+f8zi/7b8MYv/CvljFv8V88cs/ivlj1n8V84fs/ivkj9m8V81f8ziPyJ/zOK/Wv6YxX/1/DGL/9vzxyz+a+SPWfzXzB+z+K+VP2bxf0f+mMV/7fwxi/8788cs/uvkj1n8180fs/ivlz9m8V8/f8ziv0H+mMV/w/wxi/+78scs/hvlj1n8N84fs/hvkj9m8d80f8zi/+78MYv/e/LHLP6b5Y9Z/N+bP2bx3zx/zOK/Rf6YxX/L/DGL//vyxyz+788fs/hvlT9m8d86f8ziv03+mMX/A/ljFv9t88cs/tvlj1n8t88fs/jvkD9m8d8xf8ziv1P+mMV/5/wxi/8H88cs/h/KH7P475I/ZvHfNX/M4r9b/pjF/8P5Yxb/3fPHLP4fyR+z+H80f8zi/7H8MYv/HvljFv+P549Z/PfMH7P4fyJ/zOK/V/6YxX/v/DGL/z75Yxb/T+aPWfw/lT9m8f90/pjF/zP5Yxb/z+aPWfxH5o9Z/PfNH7P475c/ZvH/XP6Yxf/z+WMW//3zxyz+X8gfs/h/MX/M4v+l/DGL/wH5Yxb/A/PHLP4H5Y9Z/L+cP2bxPzh/zOL/lfwxi/8h+WMW/0Pzxyz+X80fs/h/LX/M4n9Y/pjF//D8MYv/EfljFv+v549Z/L+RP2bxPzJ/zOJ/VP6Yxf+b+WMW/2/lj1n8j84fs/gfkz9m8T82f8zif1z+mMX/+Pwxi/8J+WMW/2/nj1n8T8wfs/iflD9m8T85f8zi/538MYv/KfljFv9T88cs/t/NH7P4n5Y/ZvE/PX/M4n9G/pjF/3v5Yxb/7+ePWfx/kD9m8T8zf8zif1b+mMX/7Pwxi/8P88cs/ufkj1n8z80fs/iflz9m8T8/f8zif0H+mMX/wvwxi/9F+WMW/4vzxyz+P8ofs/j/OH/M4n9J/pjF/yf5Yxb/S/PHLP4/zR+z+F+WP2bx/1n+mMX/8vwxi//P88cs/r/IH7P4X5E/ZvG/Mn/M4n9V/pjFf1T+mMX/6vwxi/8v88cs/tfkj1n8f5U/ZvG/Nn/M4n9d/pjF/9f5Yxb/3+SPWfx/mz9m8b8+f8zif0P+mMX/xvwxi//v8scs/r/PH7P4/yF/zOL/x/wxi/+f8scs/jflj1n8b84fs/jfkj9m8b81f8zi/+f8MYv/X/LHLP5/zR+z+N+WP2bxvz1/zOJ/R/6Yxf/O/DGL/135Yxb/u/PHLP735I9Z/O/NH7P435c/ZvG/P3/M4v9A/pjF/8H8MYv/Q/ljFv+H88cs/o/kj1n8H80fs/g/lj9m8X88f8zi/0T+mMX/yfwxi/9T+WMW/6fzxyz+z+SPWfyfzR+z+D+XP2bxfz5/zOL/Qv6Yxf/F/DGL/+j8MYn/VIP8MYv/UP6YxX9Y/pjFf4L8MYv/hPljFv+J8scs/hPnj1n8J8kfs/hPmj9m8R+eP2bxnyx/zOI/ef6YxX+K/DGL/5T5Yxb/qfLHLP5T549Z/KfJH7P4T5s/ZvGfLn/M4j99/pjFf4b8MYv/G/LHLP4z5o9Z/N+YP2bxnyl/zOL/pvwxi//M+WMW/zfnj1n835I/ZvGfJX/M4v/W/DGL/6z5Yxb/2fLHLP6z549Z/OfIH7P4z5k/ZvGfK3/M4j93/pjFf578MYv/vPljFv/58scs/vPnj1n8F8gfs/gvmD9m8V8of8ziv3D+mMV/kfwxi/+i+WMW/8Xyxyz+i+ePWfyXyB+z+C+ZP2bxXyp/zOK/dP6YxX+Z/DGL/7L5Yxb/5fLHLP7L549Z/N+WP2bxXyF/zOK/Yv6YxX+l/DGL/8r5Yxb/VfLHLP6r5o9Z/Efkj1n8V8sfs/ivnj9m8X97/pjFf438MYv/mvljFv+18scs/u/IH7P4r50/ZvF/Z/6YxX+d/DGL/7r5Yxb/9fLHLP7r549Z/DfIH7P4b5g/ZvF/V/6YxX+j/DGL/8b5Yxb/TfLHLP6b5o9Z/N+dP2bxf0/+mMV/s/wxi/9788cs/pvnj1n8t8gfs/hvmT9m8X9f/pjF//35Yxb/rfLHLP5b549Z/LfJH7P4fyB/zOK/bf6YxX+7/DGL//b5Yxb/HfLHLP475o9Z/HfKH7P475w/ZvH/YP6Yxf9D+WMW/13yxyz+u+aPWfx3yx+z+H84f8ziv3v+mMX/I/ljFv+P5o9Z/D+WP2bx3yN/zOL/8fwxi/+e+WMW/0/kj1n898ofs/jvnT9m8d8nf8zi/8n8MYv/p/LHLP6fzh+z+H8mf8zi/9n8MYv/yPwxi/+++WMW//3yxyz+n8sfs/h/Pn/M4r9//pjF/wv5Yxb/L+aPWfy/lD9m8T8gf8zif2D+mMX/oPwxi/+X88cs/gfnj1n8v5I/ZvE/JH/M4n9o/pjF/6v5Yxb/r+WPWfwPyx+z+B+eP2bxPyJ/zOL/9fwxi/838scs/kfmj1n8j8ofs/h/M3/M4v+t/DGL/9H5Yxb/Y/LHLP7H5o9Z/I/LH7P4H58/ZvE/IX/M4v/t/DGL/4n5Yxb/k/LHLP4n549Z/L+TP2bxPyV/zOJ/av6Yxf+7+WMW/9Pyxyz+p+ePWfzPyB+z+H8vf8zi//38MYv/D/LHLP5n5o9Z/M/KH7P4n50/ZvH/Yf6Yxf+c/DGL/7n5Yxb/8/LHLP7n549Z/C/IH7P4X5g/ZvG/KH/M4n9x/pjF/0f5Yxb/H+ePWfwvyR+z+P8kf8zif2n+mMX/p/ljFv/L8scs/j/LH7P4X54/ZvH/ef6Yxf8X+WMW/yvyxyz+V+aPWfyvyh+z+I/KH7P4X50/ZvH/Zf6Yxf+a/DGL/6/yxyz+1+aPWfyvyx+z+P86f8zi/5v8MYv/b/PHLP7X549Z/G/IH7P435g/ZvH/Xf6Yxf/3+WMW/z/kj1n8/5g/ZvH/U/6Yxf+m/DGL/835Yxb/W/LHLP635o9Z/P+cP2bx/0v+mMX/r/ljFv/b8scs/rfnj1n878gfs/jfmT9m8b8rf8zif3f+mMX/nvwxi/+9+WMW//vyxyz+9+ePWfwfyB+z+D+YP2bxfyh/zOL/cP6Yxf+R/DGL/6P5Yxb/x/LHLP6P549Z/J/IH7P4P5k/ZvF/Kn/M4v90/pjF/5n8MYv/s/ljFv/n8scs/s/nj1n8X8gfs/i/mD9m8R+dPybxn3qQP2bxH8ofs/gPyx+z+E+QP2bxnzB/zOI/Uf6YxX/i/DGL/yT5Yxb/SfPHLP7D88cs/pPlj1n8J88fs/hPkT9m8Z8yf8ziP1X+mMV/6vwxi/80+WMW/2nzxyz+0+WPWfynzx+z+M+QP2bxf0P+mMV/xvwxi/8b88cs/jPlj1n835Q/ZvGfOX/M4v/m/DGL/1vyxyz+s+SPWfzfmj9m8Z81f8ziP1v+mMV/9vwxi/8c+WMW/znzxyz+c+WPWfznzh+z+M+TP2bxnzd/zOI/X/6YxX/+/DGL/wL5Yxb/BfPHLP4L5Y9Z/BfOH7P4L5I/ZvFfNH/M4r9Y/pjFf/H8MYv/EvljFv8l88cs/kvlj1n8l84fs/gvkz9m8V82f8ziv1z+mMV/+fwxi//b8scs/ivkj1n8V8wfs/ivlD9m8V85f8ziv0r+mMV/1fwxi/+I/DGL/2r5Yxb/1fPHLP5vzx+z+K+RP2bxXzN/zOK/Vv6Yxf8d+WMW/7Xzxyz+78wfs/ivkz9m8V83f8ziv17+mMV//fwxi/8G+WMW/w3zxyz+78ofs/hvlD9m8d84f8ziv0n+mMV/0/wxi/+788cs/u/JH7P4b5Y/ZvF/b/6YxX/z/DGL/xb5Yxb/LfPHLP7vyx+z+L8/f8ziv1X+mMV/6/wxi/82+WMW/w/kj1n8t80fs/hvlz9m8d8+f8ziv0P+mMV/x/wxi/9O/x979GAAiIEAAfBt3Nu2Gdu2bZxtxbZt27Zt27adNLAVZGdaGP9Ry/9A/1HL/yD/Ucv/YP9Ry/8Q/1HL/1D/Ucv/MP9Ry/9w/1HL/wj/Ucv/SP9Ry/8o/1HL/2j/Ucv/GP9Ry/9Y/1HL/zj/Ucv/eP9Ry/8E/1HL/0T/Ucv/JP9Ry/9k/1HL/xT/Ucv/VP9Ry/80/1HL/3T/Ucv/Jv6jlv9N/Uct/5v5j1r+N/cftfxv4T9q+d/Sf9Tyv5X/qOV/a/9Ry/82/qOW/239Ry3/2/mPWv639x+1/O/gP2r539F/1PK/k/+o5X9n/1HL/y7+o5b/Xf1HLf+7+Y9a/nf3H7X87+E/avnf03/U8r+X/6jlf2//Ucv/Pv6jlv99/Uct//v5j1r+9/cftfwf4D9q+T/Qf9Tyf5D/qOX/YP9Ry/8h/qOW/0P9Ry3/h/mPWv4P9x+1/B/hP2r5P9J/1PJ/lP+o5f9o/1HL/zH+o5b/Y/1HLf/H+Y9a/o/3H7X8n+A/avk/0X/U8n+S/6jl/2T/Ucv/Kf6jlv9T/Uct/6f5j1r+T/cftfyf4T9q+T/Tf9Tyf5b/qOX/bP9Ry/85/qOW/3P9Ry3/5/mPWv7P9x+1/F/gP2r5v9B/1PJ/kf+o5f9i/1HL/yX+o5b/S/1HLf+X+Y9a/i/3H7X8X+E/avm/0n/U8n+V/6jl/2r/Ucv/Nf6jlv9r/Uct/9f5j1r+r/cftfzf4D9q+b/Rf9Tyf5P/qOX/Zv9Ry/8t/qOW/1v9Ry3/t/mPWv5v9x+1/N/hP2r5v9N/1PJ/l/+o5f9u/1HL/z3+o5b/e/1HLf/3+Y9a/u/3H7X8P+A/avl/0H/U8v+Q/6jl/2H/Ucv/I/6jlv9H/Uct/4/5j1r+H/cftfw/4T9q+X/Sf9Ty/5T/qOX/af9Ry/8z/qOW/2f9Ry3/z/mPWv6f9x+1/L/gP2r5f9F/1PL/kv+o5f9l/1HL/yv+o5b/V/1HLf+v+Y9a/l/3H7X8v+E/avl/03/U8v+W/6jl/23/Ucv/O/6jlv93/Uct/+/5j1r+3/cftfx/4D9q+f/Qf9Ty/5H/qOX/Y/9Ryf+Az/iPWv4/6z9q+f+c/6jl//P+o5b/L/iPWv6/6D9q+f+S/6jl/8v+o5b/r/iPWv6/6j9q+f+a/6jl/+v+o5b/b/iPWv6/6T9q+f+W/6jl/9v+o5b/Af6jlv/v+I9a/r/rP2r5/57/qOX/+/6jlv8f+I9a/n/oP2r5/5H/qOX/x/6jlv+f+I9a/n/qP2r5/5n/qOX/5/6jlv9f+I9a/n/pP2r5/5X/qOX/1/6jlv/f+I9a/n/rP2r5/53/qOX/9/6jlv8/+I9a/v/oP2r5/5P/qOX/z/6jlv+/+I9a/v/qP2r5/5v/qOX/7/6jlv9/+I9a/v/pP2r5/5f/qOX/3/6jlv//+I9a/v/rP2r5/5//qOX///6jlv8Z/Ect/zP6j1r+Z/IftfzP7D9q+Z/Ff9TyP6v/qOV/Nv9Ry//s/qOW/zn8Ry3/c/qPWv7n8h+1/M/tP2r5n8d/1PI/r/+o5X8+/1HL//z+o5b/BfxHLf8L+o9a/hfyH7X8L+w/avlfxH/U8r+o/6jlfzH/Ucv/4v6jlv8l/Ect/0v6j1r+l/Iftfwv7T9q+V/Gf9Tyv6z/qOV/Of9Ry//y/qOW/xX8Ry3/K/qPWv5X8h+1/K/sP2r5X8V/1PK/qv+o5X81/1HL/+r+o5b/NfxHLf9r+o9a/tfyH7X8r+0/avlfx3/U8r+u/6jlfz3/Ucv/+v6jlv8N/Ect/xv6j1r+N/Iftfxv7D9q+R/oP2r5H+Q/avkf7D9q+R/iP2r5H+o/avkf5j9q+R/uP2r5H+E/avkf6T9q+R/lP2r5H+0/avkf4z9q+R/rP2r5H+c/avkf7z9q+Z/gP2r5n+g/avmf5D9q+Z/sP2r5n+I/avmf6j9q+Z/mP2r5n+4/+tT9AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfMIOHAgAAAAAAPm/NkJVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVUVduBAAAAAAADI/7URqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrADxwIAAAAAwvyts+jaAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBfAQAA//+ME5Qw")

6m2.530542805s ago: executing program 0 (id=439):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x590)
setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e22, @multicast2}}}, 0x108)
sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, 0x0, 0x40000)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x802, 0x0)
setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xffffffff}, 0x1c)
sendmmsg$inet6(r2, &(0x7f0000002940), 0x40000000000017d, 0x888)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)

5m54.65643655s ago: executing program 0 (id=448):
prlimit64(0x0, 0x6, 0x0, 0x0)
setreuid(0xee01, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
munlockall()
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
io_uring_setup(0x650b, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x21, 0xab})
r3 = socket(0x28, 0x5, 0x0)
listen(0xffffffffffffffff, 0x4)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20)
recvfrom$inet_nvme(r3, 0x0, 0x0, 0x40000002, 0x0, 0x0)

5m39.511535505s ago: executing program 32 (id=448):
prlimit64(0x0, 0x6, 0x0, 0x0)
setreuid(0xee01, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
munlockall()
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
io_uring_setup(0x650b, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x21, 0xab})
r3 = socket(0x28, 0x5, 0x0)
listen(0xffffffffffffffff, 0x4)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20)
recvfrom$inet_nvme(r3, 0x0, 0x0, 0x40000002, 0x0, 0x0)

5m8.179450622s ago: executing program 1 (id=506):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x40844}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = getgid()
sendmsg$unix(r2, &(0x7f00000059c0)={&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000005940)=[@rights={{0x1c, 0x1, 0x1, [r1, r2, r2, r1]}}, @cred={{0x18, 0x1, 0x2, {r0, 0x0, r3}}}, @cred={{0x18, 0x1, 0x2, {r0, 0xee00}}}], 0x4c, 0x4000010}, 0x4840)
syz_usbip_server_init(0x6)
socket$inet6(0xa, 0x2, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_rx_ring(r4, 0x107, 0x5, 0x0, 0x0)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0)

5m1.168464185s ago: executing program 1 (id=513):
r0 = openat(0xffffffffffffffff, 0x0, 0x4c0142, 0x163)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)
syz_init_net_socket$llc(0x1a, 0x801, 0x0)
gettid()
timer_create(0x0, 0x0, &(0x7f0000bbdffc))
bind$alg(0xffffffffffffffff, &(0x7f00000003c0)={0x26, 'hash\x00', 0x0, 0x0, 'tgr192\x00'}, 0x58)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x330, 0x0, 0x12, 0x600, 0x0, 0x202, 0x288, 0x2e8, 0x2e8, 0x288, 0x2c0, 0x4, 0x0, {[{{@uncond, 0x0, 0x168, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "0000000000000019b5115c2aee68d23a465cd431e150c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baeb8989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b500", 0x2}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff}, {0xffffffffffffffff, 0x2, 0x6}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0xff}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x390)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$hfs(&(0x7f0000000180), &(0x7f00000000c0)='./file1\x00', 0x1000812, &(0x7f0000001800)=ANY=[@ANYBLOB="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"/396, @ANYRESOCT, @ANYRES8=0x0, @ANYBLOB="eb4df9aa36400f1596263ee4e2ba950c3777a4ec31bc2dc78cd48b646ae82f0508a43d2064587fb0b58769e71fc7b7c8e93fa8ec644b9889e92afb0c6a178d5f85790c4047947250a43c67c7b897debc120c19d2b9c218c8a1205fae81bb140f9e9a69c60fd20d07ac3643e470a4bbe559f8b777749dd02b1336813ff11343d09bebc37a1ed9bb9ced4e3264a2ead14b4350c271", @ANYRESHEX=0x0, @ANYBLOB="0affd5ece651e2a4648f9b279d8dc44bc4bd6acc0aa01a3ab56e469d3c338a26ff996b57afbe65c4eb94f6fd4cfbda2af6c85c6e135955ca0640546a2aac7bb02432e45e6d333181ee921f9f26a8ef000000000800000000000000000000000000000000000000000000000000004de9f91aeab66cc8b2197d3c00068324c7b7bd"], 0x1, 0x305, &(0x7f0000000340)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101041, 0xf0)
syz_mount_image$vfat(&(0x7f00000007c0), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x824851, 0x0, 0x1, 0x0, &(0x7f0000000d40))
syz_mount_image$vfat(&(0x7f0000000800), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140))

5m0.931319102s ago: executing program 1 (id=516):
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="66643d0c79d3846101009049ca56f0a2f705fb78526dce", @ANYBLOB=',rootmode=00000000000', @ANYRESDEC=0x0])
kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a198", 0x3e, 0x5, 0xffffffff}], 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d9307", 0xe7}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="b8000000000000001701000002000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf900000080c79d6b6d1d4301678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f06ef28a63b329e09a86c62f907539c9af6f1b0bc00510c3b27f64245b6f4f80e00bca3c91538839a52c3c393aadb6ed6155fad3c98896658e106d043cc8652373dd8e2a7"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005fe1d2", 0xa3}], 0x1, 0x0, 0x0, 0xc0}], 0x2, 0x48040)
r2 = socket$alg(0x26, 0x5, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/tcp\x00')
ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={r3, 0x0, {0x0, 0x0, 0x0, 0x6, 0x1000, 0x0, 0x1, 0x19, 0xc, "faf98317e5a114998a1a8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x5, 0x7]}})
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_GET_INTERFACE(r3, &(0x7f0000000680)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x28, 0x0, 0x20, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1, 0x5d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4041)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r5 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

5m0.277770148s ago: executing program 1 (id=517):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0xd, 0x3, 0x0, &(0x7f0000000480)='GPL\x00'}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
ptrace$setregset(0x4205, r0, 0x200, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0)
msgget(0x3, 0x200)
sched_setaffinity(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x39}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x2a}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
openat(0xffffffffffffff9c, 0x0, 0x42, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x6, 0x3, 0x7ffcfffc}]})
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, 0x0)

4m59.172689265s ago: executing program 1 (id=519):
r0 = syz_open_dev$vim2m(&(0x7f0000000a40), 0x9, 0x2)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdir(0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9)
openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x109040, 0x0)
openat$vcs(0xffffffffffffff9c, 0x0, 0x8900, 0x0)
mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x40, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10)
setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000001200)=0xd0, 0x4)
connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10)
sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x7, 0x0, 0x0)
recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x4, 0xd, 0x20, "134604cea4ddbc704c17bc74772190f5070001ebfffdfffffee793000000e000", 0x31435641})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000500)=@nat={'nat\x00', 0x670, 0x5, 0x3e0, 0x328, 0x328, 0xffffffff, 0x280, 0x328, 0x408, 0x408, 0xffffffff, 0x408, 0x408, 0x5, 0x0, {[{{@uncond, 0x0, 0xd8, 0x110, 0x48, {}, [@common=@unspec=@rateest={{0x68}, {'wlan1\x00', 'ip6tnl0\x00', 0x12, 0x2, 0x9, 0x2004, 0x5, 0x3, {0xc35}, {0x1ff}}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0xc, @loopback, @dev={0xac, 0x14, 0x14, 0x20}, @gre_key=0x1, @icmp_id=0x68}}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0xa, 0x4, "ed481ca2c99b76ccda2879f6a12da5725ea2669d62d23b45710a851be124"}}}, {{@ip={@local, @remote, 0xff, 0x0, 'virt_wifi0\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @local, @empty, @icmp_id=0x68, @port=0x4e22}}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@icmp={{0x28}, {0xc, "1542", 0x1}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x2, @ipv4=@broadcast, @ipv4=@empty, @gre_key=0x3, @icmp_id=0x64}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x440)

4m51.284533191s ago: executing program 1 (id=531):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
unshare(0x68040200)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfdffa000)
syz_open_dev$vim2m(0x0, 0x8, 0x2)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
socketpair$tipc(0x1e, 0x1, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000500)={&(0x7f00000005c0)=@hci, 0x80, &(0x7f0000000440)=[{&(0x7f0000000700)=""/257, 0x101}, {0x0}, {&(0x7f00000003c0)=""/8, 0x8}], 0x3}, 0x0)
sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4040000)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020a000307000000000000000000000005001a00ff020000000000000000000000000001ac14bb000000000000000000000000000000f3"], 0x38}}, 0x0)
sendmsg$NFT_BATCH(r1, 0x0, 0x40)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000680)='/sys/power/disk', 0x2, 0x0)
io_setup(0x20, &(0x7f0000001140)=<r4=>0x0)
io_submit(r4, 0x1, &(0x7f00000001c0)=[&(0x7f0000002040)={0xf, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f00000000c0)="fc", 0x7}])
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6d207ee5}, 0x8)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

4m35.692157946s ago: executing program 33 (id=531):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
unshare(0x68040200)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfdffa000)
syz_open_dev$vim2m(0x0, 0x8, 0x2)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
socketpair$tipc(0x1e, 0x1, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000500)={&(0x7f00000005c0)=@hci, 0x80, &(0x7f0000000440)=[{&(0x7f0000000700)=""/257, 0x101}, {0x0}, {&(0x7f00000003c0)=""/8, 0x8}], 0x3}, 0x0)
sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4040000)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020a000307000000000000000000000005001a00ff020000000000000000000000000001ac14bb000000000000000000000000000000f3"], 0x38}}, 0x0)
sendmsg$NFT_BATCH(r1, 0x0, 0x40)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000680)='/sys/power/disk', 0x2, 0x0)
io_setup(0x20, &(0x7f0000001140)=<r4=>0x0)
io_submit(r4, 0x1, &(0x7f00000001c0)=[&(0x7f0000002040)={0xf, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f00000000c0)="fc", 0x7}])
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6d207ee5}, 0x8)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

1m8.359004998s ago: executing program 5 (id=993):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]})
r0 = syz_io_uring_setup(0x3bd4, &(0x7f0000000400)={0x0, 0xcc19, 0x130c8, 0x1, 0x30e}, &(0x7f0000000100), &(0x7f0000000240), &(0x7f0000000000))
io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0)

1m8.156311403s ago: executing program 5 (id=996):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e36, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0x1}], 0x1c)

1m7.917548399s ago: executing program 5 (id=999):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
write$char_usb(0xffffffffffffffff, &(0x7f0000000040), 0x0)
pselect6(0x40, &(0x7f0000000000)={0x5, 0x0, 0x4000000000000004, 0xff, 0xfffffffffffffffb, 0x7, 0xfffffffffffffffa, 0x1ffe}, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb")
ptrace$getregset(0x4205, r0, 0x1, &(0x7f0000000140)={&(0x7f0000000000)=""/120, 0x78})

1m6.851906515s ago: executing program 5 (id=1009):
syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8c, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1, 0x2aa, &(0x7f0000000c80)="$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")
renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file7\x00', 0x5)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mysys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:02.0/resource0\x00', 0x2, 0x0)
mmap(0x0, 0x1012, 0x3, 0x11, r0, 0x0)
syz_mount_image$fuse(0x0, 0x0, 0x3000009, 0x0, 0x1, 0x0, 0x0)

1m6.196664782s ago: executing program 5 (id=1014):
userfaultfd(0x1)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000007980), 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00')
read$FUSE(r0, &(0x7f0000002540)={0x2020}, 0x2040)
syz_open_procfs(0x0, 0x0)

1m5.416941141s ago: executing program 5 (id=1020):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x4008004)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000340)={[{0x22e, 0x2, 0xfe, 0x0, 0x0, 0x88, 0x0, 0x0, 0x5, 0xff, 0x1f}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfd, 0x0, 0x4, 0x20, 0xfd, 0x1000000}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1m4.793505816s ago: executing program 34 (id=1020):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x4008004)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000340)={[{0x22e, 0x2, 0xfe, 0x0, 0x0, 0x88, 0x0, 0x0, 0x5, 0xff, 0x1f}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfd, 0x0, 0x4, 0x20, 0xfd, 0x1000000}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

7.862186535s ago: executing program 2 (id=1221):
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000580)={'#! ', './file0', [], 0xa, "26716ec47a07f6f5264a85c9"}, 0x17)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r1, 0x0, 0x20000040)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getsockopt$sock_buf(r1, 0x1, 0x1f, &(0x7f0000000040)=""/52, &(0x7f0000000080)=0x34)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$key(0xf, 0x3, 0x2)
r5 = socket(0x1e, 0x4, 0x0)
connect$tipc(r5, 0x0, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000500)='p', 0x1}], 0x1}}], 0x1, 0x4804)
r6 = socket$netlink(0x10, 0x3, 0x4)
writev(r6, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1)

6.558435038s ago: executing program 2 (id=1225):
r0 = syz_usb_connect(0x0, 0x6c, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x5c5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x5a, 0x1, 0x1, 0x0, 0x80, 0xfa, "", [{{0x9, 0x4, 0x0, 0x0, 0x8, 0xff, 0x0, 0x0, 0x0, [], [{{0x9, 0x5, 0x1, 0x2, 0x200}}, {{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}, {{0x9, 0x5, 0x84, 0x2, 0x200}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
nanosleep(&(0x7f0000000100)={0x2}, 0x0)

5.750908407s ago: executing program 7 (id=1228):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008000}, 0x4000)

5.528154543s ago: executing program 7 (id=1230):
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./myconfig\x00', 0x1ff)
mount(&(0x7f0000000180)=@filename='none\x00', &(0x7f00000001c0)='./myconfig\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./myconfig/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./myconfig/usb_gadget/g1/idVendor\x00', 0x1, 0x0)
write(r0, &(0x7f00000002c0)='0x1d6b', 0x6)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./myconfig/usb_gadget/g1/idProduct\x00', 0x1, 0x0)
write(r1, &(0x7f0000000340)='0x0104', 0x6)
close(r1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./myconfig/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./myconfig/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff)
symlinkat(&(0x7f0000000400)='./myconfig/usb_gadget/g1/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./myconfig/usb_gadget/g1/configs/c.1/uac2.usb0\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./myconfig/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r2, &(0x7f00000004c0)='usbip-vudc.0', 0xc)
close(r2)
nanosleep(&(0x7f0000000500)={0x0, 0xbebc200}, 0x0)
r3 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x1, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r3, 0xc1185511, &(0x7f0000000580)={{0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00'})

5.040254115s ago: executing program 7 (id=1233):
unshare(0x40000000)
r0 = socket(0x8, 0x1, 0x0)
connect(r0, &(0x7f0000000100)=@generic={0x8}, 0x10)

4.564083717s ago: executing program 6 (id=1236):
r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cd0c39000001010203010902270001010080fa0904000003ff000000070501020002000705810200020007058202000200"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x20, &(0x7f0000000300)=""/32) (async)
syz_usb_ep_write(r0, 0x81, 0x20, &(0x7f0000000100)="0884848484848484848484848484848484848484848484848484848484848484")
syz_usb_ep_read(r0, 0x1, 0x20, &(0x7f0000000300)=""/32) (async)
syz_usb_ep_write(r0, 0x81, 0x20, &(0x7f0000000100)="0884848484848484848484848484848484848484848484848484848484848484")
syz_usb_ep_read(r0, 0x1, 0x20, &(0x7f0000000300)=""/32) (async)
syz_usb_ep_write(r0, 0x81, 0x20, &(0x7f0000000100)="0884848484848484848484848484848484848484848484848484848484848484")
syz_usb_ep_read(r0, 0x1, 0x20, &(0x7f0000000300)=""/32) (async)
syz_usb_ep_write(r0, 0x81, 0x20, &(0x7f0000000100)="0884848484848484848484848484848484848484848484848484848484848484")
nanosleep(&(0x7f0000000200)={0x0, 0x1dcd6500}, 0x0)

4.563974817s ago: executing program 7 (id=1237):
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0x2, &(0x7f0000000380)=ANY=[@ANYBLOB="b7000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x18, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, r1, 0x0, 0x0, 0x0, 0x0}, 0x94)

4.329570593s ago: executing program 7 (id=1238):
r0 = syz_usb_connect(0x0, 0x2b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d31375320000010200010902190001010080320904000001ff00000007058102000200"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
nanosleep(&(0x7f0000000300)={0x1}, 0x0)

3.864248664s ago: executing program 3 (id=1240):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008000}, 0x4000)

3.800488496s ago: executing program 3 (id=1241):
r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a5, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x20, 0x1, 0x1, 0x0, 0xc0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x8, 0x6, 0x50, 0x0, [], [{{0x7, 0x5, 0x81, 0x2, 0x200}}, {{0x7, 0x5, 0x2, 0x2, 0x200}}]}}]}}]}}, 0x0)
syz_usb_ep_write(r0, 0x81, 0x24, &(0x7f0000000200)='6\x00'/36)
nanosleep(&(0x7f0000000400)={0x1}, 0x0)

3.284013068s ago: executing program 6 (id=1243):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='sysfs\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='bdc\x00', 0x4)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/platform/devices/alarmtimer/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f0000000240)='bdc\x00', 0x4)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/platform/devices/serial8250/driver_override\x00', 0x1, 0x0)
write(r2, &(0x7f0000000340)='bdc\x00', 0x4)
close(r2)

3.268645419s ago: executing program 6 (id=1244):
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0)
r0 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x1234, 0x5678, 0x100, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x20, 0x1, 0x1, 0x0, 0x80, 0xfa, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x8, 0x5, 0x50, 0x0, [], [{{0x9, 0x5, 0x1, 0x2, 0x200}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0)
syz_usb_ep_read(r0, 0x1, 0x1f, &(0x7f0000000100))
syz_usb_ep_write(r0, 0x82, 0x24, &(0x7f0000000200)="000005021f00000053595a20202020204449534b202020202020202020202020312e3020")
syz_usb_ep_write(r0, 0x82, 0xd, &(0x7f0000000300)="55534253010000000000000000")

3.019637605s ago: executing program 2 (id=1245):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000000)=@filename='none\x00', &(0x7f0000000040)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:02.0/driver/unbind\x00', 0x1, 0x0)

2.80819548s ago: executing program 2 (id=1246):
delete_module(&(0x7f0000000000)='dwc3\x00', 0x0)
delete_module(&(0x7f0000000000)='dwc3_pci\x00', 0x0)

2.779485221s ago: executing program 2 (id=1247):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000000100)={0x8f, 0x0, 0x2})
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000300)={0x0, &(0x7f0000000400)=[@uexit], 0x18})
ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000200)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x1200000}]})
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000500)={0x4, 0x0, [{0x1b, 0x0, 0xfee00c00}, {0x80f, 0x0, 0x1ff}, {0x832, 0x0, 0x40000}, {0x6e0, 0x0, 0x100000}]})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

2.700353783s ago: executing program 6 (id=1248):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0xfe6, 0x9800, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x27, 0x1, 0x1, 0x0, 0x80, 0x32, "", [{{0x9, 0x4, 0x0, 0x0, 0x3, 0xff, 0xff, 0x0, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x3, 0x40, 0x1}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x1, 0x13, 0x6, "001122334455"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
nanosleep(&(0x7f0000000300)={0x2}, 0x0)

2.536103217s ago: executing program 2 (id=1249):
r0 = syz_usb_connect(0x0, 0x43, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000402505a7a400010102030109024300020100c03209040000010202000005240010010524010001042402020524060001070581030a000a09040100020a0000000705820240000007050302400000"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
nanosleep(&(0x7f0000000300)={0x1}, 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
close(r1)
syz_usb_disconnect(r0)
nanosleep(&(0x7f0000000300)={0x1}, 0x0)

2.326628132s ago: executing program 4 (id=1250):
r0 = mq_open(&(0x7f0000000000)='\\_1\x00', 0x8c2, 0x30, 0x0)
r1 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, 0x0)
mq_timedsend(r0, 0x0, 0x0, 0x5, 0x0)

2.260457224s ago: executing program 4 (id=1251):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008000}, 0x4000)

2.148202217s ago: executing program 4 (id=1252):
r0 = syz_usb_connect$cdc_ncm(0x3, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010003020000092505a1a440000102030109025c0002010080320904000001020d0000052400100105240600010d240f0100000000ea0500000006241a0001000705810310000909040100000a00000009040101020a0000000705820200020007050302000200"], 0x0)
nanosleep(&(0x7f0000000100)={0x0, 0x1dcd6500}, 0x0)
syz_usb_disconnect(r0)

1.947869882s ago: executing program 7 (id=1253):
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040109710780001010200010902270001010080320904000003ff000000070581020002000705010200020007058203400001"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000001100)={0x40, 0xd, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
nanosleep(&(0x7f0000000600)={0x1}, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
nanosleep(&(0x7f0000000600)={0x1}, 0x0)
mkdir(&(0x7f0000002000)='./mysys\x00', 0x1ff)
mount(&(0x7f0000002100)=@filename='none\x00', &(0x7f0000002200)='./mysys\x00', &(0x7f0000002300)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000002400)='./mysys/power/state\x00', 0x1, 0x0)
write(r1, &(0x7f0000002500)='freeze', 0x6)

1.169007681s ago: executing program 3 (id=1254):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file_img\x00', 0x42, 0x1ff)
pwrite64(r0, &(0x7f0000000100)="ff0000ff", 0x4, 0x0)
pwrite64(r0, &(0x7f0000000200)="090101010c0900000001000000020000000001000000414446535f4449534300000000000000000000000000000000000000080000", 0x34, 0xdc0)
pwrite64(r0, &(0x7f0000000300)="cf", 0x1, 0xdf1)
ftruncate(r0, 0x10000)
r1 = syz_open_dev$loop(&(0x7f0000000400), 0x0, 0x2)
ioctl$LOOP_SET_FD(r1, 0x4c00, r0)
mkdir(&(0x7f0000000500)='./mnt\x00', 0x1ed)
mount(&(0x7f0000000600)=@loop={'/dev/loop', 0x0}, &(0x7f0000000700)='./mnt\x00', &(0x7f0000000800)='adfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000900)='./mnt/foo\x00', 0x0, 0x0)

1.059985134s ago: executing program 4 (id=1255):
mkdir(&(0x7f0000000000)='./config\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r0, &(0x7f0000000940)='\n', 0x1)
close(r0)
mkdir(&(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff)
mkdir(&(0x7f00000001c0)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/strings/0x409/manufacturer\x00', 0x1, 0x0)
write(r1, &(0x7f0000000240)='Linux', 0x5)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/strings/0x409/product\x00', 0x1, 0x0)
write(r2, &(0x7f00000002c0)='Loopback Gadget', 0xf)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0)
write(r3, &(0x7f0000000340)='0x1d6b', 0x6)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0)
write(r4, &(0x7f00000003c0)='0x0104', 0x6)
close(r4)
mkdir(&(0x7f0000000440)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdir(&(0x7f00000004c0)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/configs/c.1/strings/0x409/configuration\x00', 0x1, 0x0)
write(r5, &(0x7f0000000540)='Conf 1', 0x6)
close(r5)
mkdir(&(0x7f00000005c0)='./config/usb_gadget/g1/functions/Loopback.usb0\x00', 0x1ff)
symlink(&(0x7f0000000600)='./config/usb_gadget/g1/functions/Loopback.usb0\x00', &(0x7f0000000640)='./config/usb_gadget/g1/configs/c.1/Loopback.usb0\x00')
r6 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r6, &(0x7f00000006c0)='dummy_udc.0', 0xb)
close(r6)
nanosleep(&(0x7f0000000700)={0x0, 0x1dcd6500}, 0x0)
nanosleep(&(0x7f0000000700)={0x0, 0x1dcd6500}, 0x0)
nanosleep(&(0x7f0000000700)={0x0, 0x1dcd6500}, 0x0)
r7 = syz_open_dev$usbfs(&(0x7f00000007c0), 0x16, 0x2)
ioctl$USBDEVFS_CONTROL(r7, 0xc0185500, &(0x7f0000000800)={0x0, 0xb, 0x0, 0x0, 0x0, 0x3e8, 0x0})
close(r7)

943.846526ms ago: executing program 3 (id=1256):
mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, &(0x7f0000000400)='\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/module/usbcore/parameters/quirks\x00', 0x1, 0x0)
write(r0, &(0x7f0000000600)='0123:4567:a\x00', 0xc)

835.603069ms ago: executing program 3 (id=1257):
syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x1, 0xfa, 0x41b}}}, 0x7)
mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='ffffffff', 0x8)
close(r0)
mkdir(&(0x7f0000000a00)='./debug\x00', 0x1ff)
mount(&(0x7f0000000a40)=@filename='none\x00', &(0x7f0000000a80)='./debug\x00', &(0x7f0000000ac0)='debugfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./debug/dynamic_debug/control\x00', 0x1, 0x0)
write(r1, &(0x7f0000000b40)='file vhci_hcd.c -p', 0x12)
close(r1)
syz_usbip_server_init(0x5)
r2 = syz_open_dev$usbfs(&(0x7f0000000380), 0x10, 0x2)
ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000400)={0x23, 0x3, 0x8, 0x1, 0x0, 0x3e8, &(0x7f0000000440)})
ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000480)={0x23, 0x1, 0x8, 0x1, 0x0, 0x3e8, &(0x7f00000004c0)})
ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000500)={0xa3, 0x0, 0x0, 0x1, 0x4, 0x3e8, &(0x7f0000000540)='\x00\x00\x00\x00'})

292.078183ms ago: executing program 4 (id=1258):
mkdir(&(0x7f0000000000)='./mount_sys\x00', 0x1ff)
mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./mount_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0)

247.091674ms ago: executing program 4 (id=1259):
syz_usb_connect(0x2, 0x4e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000401107500500010102030109023c00010100c0320904000006ff00000007058e0200020007050e02000200070501020002000705030200020007058d0200020007050d02000200"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0})
nanosleep(&(0x7f0000000100)={0x1}, 0x0)
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x85)
pwrite64(r0, &(0x7f0000000300)="001f2403000004000000", 0xa, 0x0)
close(r0)

118.437417ms ago: executing program 6 (id=1260):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x2e, {0x0, "b9020001004831d249c7c0010000000f01c10f01d9f4"}}, @nested_vmlaunch={0x12f, 0x18}], 0x76})
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000200)={0x7, 0x0, [{0x0, 0x0, 0x0, 0xd, 0x756e6547, 0x6c65746e, 0x49656e69}, {0x1, 0x0, 0x0, 0x6e8, 0x0, 0x80000020}, {0x80000000, 0x0, 0x0, 0x80000008}, {0x80000001}, {0x40000000, 0x0, 0x0, 0x40000005, 0x7263694d, 0x666f736f, 0x76482074}, {0x40000001, 0x0, 0x0, 0x31237648}, {0x40000003, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x8}]})
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000300)={0x2, 0x0, [{0x40000000, 0x0, 0x80000000}, {0x40000001, 0x0, 0x1}]})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

60.065299ms ago: executing program 3 (id=1261):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='bxt_wcove_usbc\n\x00', 0xf)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/platform/drivers/bxt_wcove_usbc/bind\x00', 0x1, 0x0)
write(r1, &(0x7f0000000400)='pcspkr\n\x00', 0x7)
close(r1)

0s ago: executing program 6 (id=1262):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000)

kernel console output (not intermixed with test programs):

 SerialNumber: syz
[   95.320846][   T22] usb 3-1: config 0 descriptor??
[   95.801736][ T4539] loop0: detected capacity change from 0 to 1024
[   96.984898][ T4545] hfsplus: request for non-existent node 33554434 in B*Tree
[   97.016700][ T4545] hfsplus: request for non-existent node 33554434 in B*Tree
[   97.065796][ T4545] hfsplus: b-tree write err: -5, ino 3
[   97.251261][   T22] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71
[   97.268625][   T22] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71
[   97.283174][   T22] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71
[   97.317632][   T22] f81534: probe of 3-1:0.12 failed with error -71
[   97.339936][ T4558] syz.0.43 uses obsolete (PF_INET,SOCK_PACKET)
[   97.356578][   T22] usb 3-1: USB disconnect, device number 4
[   98.996748][ T4595] process 'syz.2.47' launched './file0' with NULL argv: empty string added
[  100.656067][ T4611] loop2: detected capacity change from 0 to 512
[  100.848144][ T4611] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  100.972406][ T4611] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:406: inode #2: comm syz.2.53: No space for directory leaf checksum. Please run e2fsck -D.
[  101.008500][ T4611] EXT4-fs error (device loop2): __ext4_find_entry:1696: inode #2: comm syz.2.53: checksumming directory block 0
[  101.046967][ T4611] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:406: inode #2: comm syz.2.53: No space for directory leaf checksum. Please run e2fsck -D.
[  101.087868][ T4611] EXT4-fs error (device loop2): __ext4_find_entry:1696: inode #2: comm syz.2.53: checksumming directory block 0
[  101.130655][ T4620] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:406: inode #2: comm syz.2.53: No space for directory leaf checksum. Please run e2fsck -D.
[  101.181901][ T4620] EXT4-fs error (device loop2): __ext4_find_entry:1696: inode #2: comm syz.2.53: checksumming directory block 0
[  101.223175][ T4611] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:406: inode #2: comm syz.2.53: No space for directory leaf checksum. Please run e2fsck -D.
[  101.251190][ T4611] EXT4-fs error (device loop2): __ext4_find_entry:1696: inode #2: comm syz.2.53: checksumming directory block 0
[  101.271822][ T4620] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:406: inode #2: comm syz.2.53: No space for directory leaf checksum. Please run e2fsck -D.
[  101.333108][ T4620] EXT4-fs error (device loop2): __ext4_find_entry:1696: inode #2: comm syz.2.53: checksumming directory block 0
[  101.384002][ T4611] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:406: inode #2: comm syz.2.53: No space for directory leaf checksum. Please run e2fsck -D.
[  101.428711][ T4611] EXT4-fs error (device loop2): __ext4_find_entry:1696: inode #2: comm syz.2.53: checksumming directory block 0
[  101.488105][ T4628] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:406: inode #2: comm syz.2.53: No space for directory leaf checksum. Please run e2fsck -D.
[  101.551646][ T4628] EXT4-fs error (device loop2): __ext4_find_entry:1696: inode #2: comm syz.2.53: checksumming directory block 0
[  101.552437][ T4630] netlink: 64 bytes leftover after parsing attributes in process `syz.1.58'.
[  101.590952][ T4611] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:406: inode #2: comm syz.2.53: No space for directory leaf checksum. Please run e2fsck -D.
[  101.615869][ T4611] EXT4-fs error (device loop2): __ext4_find_entry:1696: inode #2: comm syz.2.53: checksumming directory block 0
[  101.647207][ T4611] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:406: inode #2: comm syz.2.53: No space for directory leaf checksum. Please run e2fsck -D.
[  101.669394][ T4636] loop3: detected capacity change from 0 to 256
[  101.676608][ T4611] EXT4-fs error (device loop2): __ext4_find_entry:1696: inode #2: comm syz.2.53: checksumming directory block 0
[  101.719112][ T4611] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:406: inode #2: comm syz.2.53: No space for directory leaf checksum. Please run e2fsck -D.
[  101.794278][ T4611] EXT4-fs error (device loop2): __ext4_find_entry:1696: inode #2: comm syz.2.53: checksumming directory block 0
[  101.971024][ T4270] EXT4-fs (loop2): unmounting filesystem.
[  103.091289][ T4656] loop0: detected capacity change from 0 to 512
[  103.196147][ T4656] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  103.275397][ T4656] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  103.365465][ T4656] EXT4-fs (loop0): 1 truncate cleaned up
[  103.371301][ T4656] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  103.627390][ T4275] EXT4-fs (loop0): unmounting filesystem.
[  104.288561][ T4673] loop2: detected capacity change from 0 to 512
[  104.321824][ T4673] EXT4-fs: Ignoring removed bh option
[  104.362324][ T4673] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  104.395799][ T4673] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  104.407600][ T4673] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  104.555612][ T4677] device syzkaller0 entered promiscuous mode
[  104.654406][ T4677] tipc: Started in network mode
[  104.659685][ T4677] tipc: Node identity 7ab32e437cf9, cluster identity 4711
[  104.668335][ T4270] EXT4-fs (loop2): unmounting filesystem.
[  104.686549][ T4677] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  104.737192][ T4676] tipc: Resetting bearer <eth:syzkaller0>
[  104.907007][ T4676] tipc: Disabling bearer <eth:syzkaller0>
[  105.281471][ T4689] Bluetooth: MGMT ver 1.22
[  105.627444][ T4698] loop3: detected capacity change from 0 to 128
[  105.659668][ T4698] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  105.691061][ T4698] ext4 filesystem being mounted at /14/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  105.898762][ T4698] EXT4-fs (loop3): shut down requested (2)
[  106.777626][ T4285] EXT4-fs (loop3): unmounting filesystem.
[  106.881999][ T4712] loop3: detected capacity change from 0 to 512
[  106.923244][ T4712] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #2: comm syz.3.87: missing EA_INODE flag
[  106.952655][ T4712] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.87: error while reading EA inode 2 err=-117
[  106.989901][ T4712] EXT4-fs (loop3): 1 orphan inode deleted
[  107.012979][ T4712] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  107.138437][ T4718] dccp_invalid_packet: pskb_may_pull failed
[  107.261093][ T4285] EXT4-fs (loop3): unmounting filesystem.
[  107.354010][ T4284] Bluetooth: hci0: Opcode 0x1407 failed: -110
[  107.354878][ T4281] Bluetooth: hci0: command 0x1407 tx timeout
[  107.553167][ T4736] binder: 4734:4736 ioctl c0306201 200000000080 returned -14
[  107.595215][ T4736] binder: 4734:4736 ioctl c0306201 2000000003c0 returned -14
[  108.233621][   T26] audit: type=1326 audit(1786987809.512:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4754 comm="syz.4.102" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fbd39e0d9 code=0x7ffc0000
[  108.298807][   T26] audit: type=1326 audit(1786987809.542:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4754 comm="syz.4.102" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fbd39e0d9 code=0x7ffc0000
[  108.377609][   T26] audit: type=1326 audit(1786987809.562:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4754 comm="syz.4.102" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fbd39e0d9 code=0x7ffc0000
[  108.560801][ T4757] loop0: detected capacity change from 0 to 2048
[  108.573100][   T26] audit: type=1326 audit(1786987809.562:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4754 comm="syz.4.102" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fbd39e0d9 code=0x7ffc0000
[  108.616944][ T4748] mmap: syz.3.100 (4748) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  108.657388][ T4757] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  108.676523][ T4764] overlayfs: failed to clone upperpath
[  108.684953][   T26] audit: type=1326 audit(1786987809.562:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4754 comm="syz.4.102" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f5fbd39e0d9 code=0x7ffc0000
[  108.827194][   T26] audit: type=1326 audit(1786987809.562:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4754 comm="syz.4.102" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fbd39e0d9 code=0x7ffc0000
[  108.897612][   T26] audit: type=1326 audit(1786987809.562:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4754 comm="syz.4.102" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fbd39e0d9 code=0x7ffc0000
[  108.941192][   T26] audit: type=1326 audit(1786987809.572:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4754 comm="syz.4.102" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fbd39e0d9 code=0x7ffc0000
[  109.041489][   T26] audit: type=1326 audit(1786987809.572:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4754 comm="syz.4.102" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7f5fbd39e0d9 code=0x7ffc0000
[  109.495252][   T26] audit: type=1326 audit(1786987809.572:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4754 comm="syz.4.102" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fbd39e0d9 code=0x7ffc0000
[  110.233944][ T4779] loop3: detected capacity change from 0 to 2048
[  110.312660][ T4780] nvmet_rdma: enabling port 1 (127.0.0.1:44)
[  110.436586][ T4783] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  110.650605][ T4776] loop0: detected capacity change from 0 to 32768
[  110.682542][ T4779] syz.3.111 invoked oom-killer: gfp_mask=0x100c4a(GFP_NOFS|__GFP_HIGHMEM|__GFP_HARDWALL|__GFP_MOVABLE), order=0, oom_score_adj=1000
[  110.744641][ T4776] XFS (loop0): Mounting V5 Filesystem
[  110.748938][ T4779] CPU: 0 PID: 4779 Comm: syz.3.111 Not tainted syzkaller #0
[  110.757628][ T4779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  110.767727][ T4779] Call Trace:
[  110.771037][ T4779]  <TASK>
[  110.773998][ T4779]  dump_stack_lvl+0x188/0x24e
[  110.778720][ T4779]  ? ___ratelimit+0x14e/0x610
[  110.783623][ T4779]  ? show_regs_print_info+0x12/0x12
[  110.788863][ T4779]  ? load_image+0x410/0x410
[  110.793431][ T4779]  ? ___ratelimit+0x474/0x610
[  110.798207][ T4779]  ? radix_tree_cpu_dead+0x160/0x160
[  110.803761][ T4779]  dump_header+0xd8/0x820
[  110.808160][ T4779]  oom_kill_process+0x361/0x550
[  110.813074][ T4779]  out_of_memory+0xe25/0x1220
[  110.817812][ T4779]  ? mutex_lock_nested+0x10/0x10
[  110.822828][ T4779]  ? unregister_oom_notifier+0x20/0x20
[  110.828437][ T4779]  mem_cgroup_out_of_memory+0x2c0/0x390
[  110.834041][ T4779]  ? mem_cgroup_oom_trylock+0x210/0x210
[  110.839823][ T4779]  ? do_raw_spin_unlock+0x11d/0x230
[  110.845089][ T4779]  try_charge_memcg+0xc9d/0x17c0
[  110.850361][ T4779]  ? page_ext_get+0x1de/0x2a0
[  110.855109][ T4779]  ? percpu_ref_put+0x180/0x180
[  110.860038][ T4779]  ? get_mem_cgroup_from_mm+0x34/0x290
[  110.865665][ T4779]  charge_memcg+0x117/0x3b0
[  110.870339][ T4779]  ? __mem_cgroup_charge+0x80/0x80
[  110.875678][ T4779]  ? get_mem_cgroup_from_mm+0x34/0x290
[  110.881207][ T4779]  ? get_mem_cgroup_from_mm+0x34/0x290
[  110.886903][ T4779]  ? get_mem_cgroup_from_mm+0x1ae/0x290
[  110.892525][ T4779]  __mem_cgroup_charge+0x21/0x80
[  110.897896][ T4779]  __filemap_add_folio+0xc91/0x1920
[  110.903603][ T4779]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  110.909927][ T4779]  ? folio_put+0xd0/0xd0
[  110.914355][ T4779]  ? folio_alloc+0x51/0x60
[  110.919191][ T4779]  ? folio_memcg_rcu+0x220/0x220
[  110.924302][ T4779]  ? filemap_add_folio+0x3d0/0x3d0
[  110.929653][ T4779]  ? __lock_acquire+0x7c40/0x7c40
[  110.934747][ T4779]  ? xas_start+0x3d1/0x770
[  110.939242][ T4779]  filemap_add_folio+0xa8/0x3d0
[  110.944249][ T4779]  __filemap_get_folio+0x771/0xde0
[  110.949422][ T4779]  ? __filemap_get_folio+0x10f/0xde0
[  110.954766][ T4779]  ? page_cache_prev_miss+0x380/0x380
[  110.960203][ T4779]  ? nilfs_direct_IO+0x120/0x120
[  110.965293][ T4779]  ? rcu_read_lock_any_held+0xb0/0x130
[  110.970823][ T4779]  pagecache_get_page+0x26/0x260
[  110.975999][ T4779]  nilfs_make_empty+0x74/0x550
[  110.980857][ T4779]  ? nilfs_transaction_begin+0x525/0x700
[  110.986813][ T4779]  nilfs_mkdir+0x1ca/0x340
[  110.991481][ T4779]  ? nilfs_symlink+0x3c0/0x3c0
[  110.997437][ T4779]  ? apparmor_path_mkdir+0x1ac/0x230
[  111.003021][ T4779]  ? nilfs_setattr+0x2c0/0x2c0
[  111.007833][ T4779]  ? inode_permission+0xef/0x480
[  111.013218][ T4779]  ? bpf_lsm_inode_mkdir+0x5/0x10
[  111.018268][ T4779]  ? security_inode_mkdir+0xb3/0x100
[  111.023945][ T4779]  vfs_mkdir+0x386/0x570
[  111.028226][ T4779]  do_mkdirat+0x1d8/0x440
[  111.032666][ T4779]  ? vfs_mkdir+0x570/0x570
[  111.037111][ T4779]  ? getname_flags+0x206/0x500
[  111.041916][ T4779]  __x64_sys_mkdir+0x6a/0x80
[  111.046617][ T4779]  do_syscall_64+0x4c/0xa0
[  111.051048][ T4779]  ? clear_bhb_loop+0x60/0xb0
[  111.055739][ T4779]  ? clear_bhb_loop+0x60/0xb0
[  111.060433][ T4779]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  111.066612][ T4779] RIP: 0033:0x7f462499e0d9
[  111.071038][ T4779] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  111.090843][ T4779] RSP: 002b:00007f4625852028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053
[  111.099278][ T4779] RAX: ffffffffffffffda RBX: 00007f4624c25fa0 RCX: 00007f462499e0d9
[  111.107385][ T4779] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000200000000000
[  111.115543][ T4779] RBP: 00007f4624a35024 R08: 0000000000000000 R09: 0000000000000000
[  111.123608][ T4779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  111.132671][ T4779] R13: 00007f4624c26038 R14: 00007f4624c25fa0 R15: 00007ffd53a12588
[  111.140965][ T4779]  </TASK>
[  111.149560][ T4779] memory: usage 8kB, limit 8kB, failcnt 27
[  111.174956][ T4798] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  111.202705][ T4779] memory+swap: usage 12kB, limit 9007199254740988kB, failcnt 0
[  111.275443][ T4776] XFS (loop0): Ending clean mount
[  111.291426][ T4779] kmem: usage 8kB, limit 9007199254740988kB, failcnt 0
[  111.299054][ T4779] Memory cgroup stats for /syz3/test:
[  111.299605][ T4779] anon 0
[  111.299605][ T4779] file 0
[  111.299605][ T4779] kernel 8192
[  111.299605][ T4779] kernel_stack 0
[  111.299605][ T4779] pagetables 0
[  111.299605][ T4779] sec_pagetables 0
[  111.299605][ T4779] percpu 0
[  111.299605][ T4779] sock 0
[  111.299605][ T4779] vmalloc 0
[  111.299605][ T4779] shmem 0
[  111.299605][ T4779] zswap 0
[  111.299605][ T4779] zswapped 0
[  111.299605][ T4779] file_mapped 0
[  111.299605][ T4779] file_dirty 0
[  111.299605][ T4779] file_writeback 0
[  111.299605][ T4779] swapcached 4096
[  111.299605][ T4779] anon_thp 0
[  111.299605][ T4779] file_thp 0
[  111.299605][ T4779] shmem_thp 0
[  111.299605][ T4779] inactive_anon 0
[  111.299605][ T4779] active_anon 0
[  111.299605][ T4779] inactive_file 0
[  111.299605][ T4779] active_file 0
[  111.299605][ T4779] unevictable 0
[  111.299605][ T4779] slab_reclaimable 3960
[  111.299605][ T4779] slab_unreclaimable 648
[  111.299605][ T4779] slab 4608
[  111.299605][ T4779] workingset_refault_anon 0
[  111.342787][ T4794] loop1: detected capacity change from 0 to 32768
[  111.542745][ T4779] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0-1,oom_memcg=/syz3/test,task_memcg=/syz3/test,task=syz.3.111,pid=4778,uid=0
[  111.631369][ T4798] syz.4.117 (4798) used greatest stack depth: 20432 bytes left
[  111.654239][ T4779] Memory cgroup out of memory: Killed process 4779 (syz.3.111) total-vm:104292kB, anon-rss:1420kB, file-rss:22960kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000
[  111.832570][ T4806] fuse: Bad value for 'fd'
[  111.883039][ T4275] XFS (loop0): Unmounting Filesystem
[  112.123964][ T4783] NILFS (loop3): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  112.169211][ T4783] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=4)
[  112.243126][ T4783] Remounting filesystem read-only
[  112.458607][ T4284] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection
[  113.802219][ T4832] capability: warning: `syz.1.129' uses deprecated v2 capabilities in a way that may be insecure
[  113.869799][ T4837] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  114.131814][ T4841] device syzkaller0 entered promiscuous mode
[  114.407313][ T4844] loop1: detected capacity change from 0 to 32768
[  114.471335][ T4844] XFS (loop1): Mounting V5 Filesystem
[  114.581436][ T4844] XFS (loop1): Ending clean mount
[  114.799026][ T4280] XFS (loop1): Unmounting Filesystem
[  114.931596][ T4859] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  115.126224][ T4863] loop1: detected capacity change from 0 to 2048
[  115.173134][ T4864] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  115.364069][ T4864] NILFS (loop1): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  115.402939][ T4864] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=4)
[  115.420550][ T4864] Remounting filesystem read-only
[  115.551020][   T26] kauditd_printk_skb: 22 callbacks suppressed
[  115.551036][   T26] audit: type=1800 audit(1786987816.822:36): pid=4868 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.137" name="bmaControls" dev="configfs" ino=36987 res=0 errno=0
[  119.600322][ T4917] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found
[  119.905221][ T4937] loop1: detected capacity change from 0 to 2048
[  120.041677][ T4937] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  120.081125][ T4937] ext4 filesystem being mounted at /28/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  121.076519][ T4937] fs-verity: sha512 using implementation "sha512-avx2"
[  121.683538][ T4280] EXT4-fs (loop1): unmounting filesystem.
[  121.843372][ T4281] Bluetooth: hci4: command 0x0406 tx timeout
[  122.274058][ T4969] Zero length message leads to an empty skb
[  122.392864][    T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!!
[  122.412870][    T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!!
[  122.422859][    T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!!
[  122.432844][    T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!!
[  122.442869][    T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!!
[  122.452858][    T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!!
[  122.462856][    T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!!
[  122.472852][    T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!!
[  122.482870][    T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!!
[  124.863970][   T26] audit: type=1800 audit(1786987826.142:37): pid=4991 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.168" name="zoned" dev="configfs" ino=37243 res=0 errno=0
[  125.022435][   T26] audit: type=1800 audit(1786987826.162:38): pid=4991 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.168" name="zone_nr_conv" dev="configfs" ino=37244 res=0 errno=0
[  125.335022][   T26] audit: type=1800 audit(1786987826.162:39): pid=4991 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.168" name="power" dev="configfs" ino=37245 res=0 errno=0
[  125.745506][ T4991] Dev nullb1: unable to read RDB block 8
[  127.164287][ T4991]  nullb1: unable to read partition table
[  127.172249][ T4991] null_blk: disk nullb1 created
[  128.101482][ T5004] loop0: detected capacity change from 0 to 2048
[  129.135506][ T5004] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  129.184009][ T5004] ext4 filesystem being mounted at /34/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  129.530792][ T4275] EXT4-fs (loop0): unmounting filesystem.
[  129.647506][   T32] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  129.877526][   T32] usb 2-1: Using ep0 maxpacket: 32
[  129.897515][   T32] usb 2-1: unable to get BOS descriptor or descriptor too short
[  129.918201][   T32] usb 2-1: no configurations
[  129.938203][   T32] usb 2-1: can't read configurations, error -22
[  131.610657][ T5031] netlink: 'syz.0.188': attribute type 11 has an invalid length.
[  131.715940][ T5031] netlink: 36 bytes leftover after parsing attributes in process `syz.0.188'.
[  132.087841][ T5044] netlink: 4 bytes leftover after parsing attributes in process `syz.0.184'.
[  132.128901][    T7] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  132.247332][ T5050] device syzkaller0 entered promiscuous mode
[  132.263529][ T4314] usb 2-1: new full-speed USB device number 4 using dummy_hcd
[  132.322922][    T7] usb 3-1: Using ep0 maxpacket: 16
[  132.329873][    T7] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  132.340384][    T7] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  132.353616][    T7] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  132.363378][    T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  132.372052][    T7] usb 3-1: Product: syz
[  132.376385][    T7] usb 3-1: Manufacturer: syz
[  132.381192][    T7] usb 3-1: SerialNumber: syz
[  132.455018][ T4314] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  133.886982][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[  133.887923][ T4314] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  133.893850][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[  133.904270][ T4314] usb 2-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00
[  133.921264][ T4314] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  133.930637][    T7] usb 3-1: 0:2 : does not exist
[  133.973199][ T4314] usb 2-1: config 0 descriptor??
[  134.003291][    T7] usb 3-1: 5:0: failed to get current value for ch 0 (-22)
[  134.134175][    T7] usb 3-1: USB disconnect, device number 5
[  134.252557][ T4516] udevd[4516]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  134.860635][ T4314] isku 0003:1E7D:319C.0001: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.1-1/input0
[  135.523609][ T4314] isku 0003:1E7D:319C.0001: couldn't init struct isku_device
[  135.531338][ T4314] isku 0003:1E7D:319C.0001: couldn't install keyboard
[  135.617910][ T4314] isku: probe of 0003:1E7D:319C.0001 failed with error -71
[  135.701900][ T4314] usb 2-1: USB disconnect, device number 4
[  135.848675][ T5073] loop2: detected capacity change from 0 to 2048
[  135.892544][ T5073] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  136.170492][ T5071] fido_id[5071]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  138.096457][ T5094] loop0: detected capacity change from 0 to 512
[  139.402074][ T5094] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  139.664984][ T5094] EXT4-fs warning (device loop0): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  142.113183][ T5094] EXT4-fs (loop0): mount failed
[  142.279223][ T5115] device syzkaller0 entered promiscuous mode
[  146.625303][ T5147] device syzkaller0 entered promiscuous mode
[  146.777101][ T5147] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  146.812013][ T5145] tipc: Resetting bearer <eth:syzkaller0>
[  147.461426][ T5145] tipc: Disabling bearer <eth:syzkaller0>
[  148.460432][   T26] audit: type=1800 audit(1786987849.732:40): pid=5161 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.217" name="memory_backed" dev="configfs" ino=37726 res=0 errno=0
[  148.493937][ T5161] syz.3.217 (5161) used greatest stack depth: 19184 bytes left
[  149.937423][   T26] audit: type=1800 audit(1786987849.762:41): pid=5161 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.217" name="zone_nr_conv" dev="configfs" ino=37727 res=0 errno=0
[  150.032937][   T26] audit: type=1800 audit(1786987849.762:42): pid=5161 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.217" name="power" dev="configfs" ino=37728 res=0 errno=0
[  151.378485][   T26] audit: type=1800 audit(1786987852.652:43): pid=5193 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.227" name="zoned" dev="configfs" ino=37833 res=0 errno=0
[  151.462281][   T26] audit: type=1800 audit(1786987852.662:44): pid=5193 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.227" name="zone_nr_conv" dev="configfs" ino=37834 res=0 errno=0
[  151.468139][ T5196] loop1: detected capacity change from 0 to 512
[  151.530730][ T5193] null_blk: disk nullb2 created
[  151.532111][   T26] audit: type=1800 audit(1786987852.662:45): pid=5193 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.227" name="power" dev="configfs" ino=37835 res=0 errno=0
[  151.586587][ T5196] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  151.611772][   T26] audit: type=1800 audit(1786987852.672:46): pid=5193 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.227" name="zoned" dev="configfs" ino=37836 res=0 errno=0
[  151.662970][   T26] audit: type=1800 audit(1786987852.672:47): pid=5193 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.227" name="power" dev="configfs" ino=37837 res=0 errno=0
[  152.093263][ T5205] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003)
[  154.215510][ T5222] device syzkaller0 entered promiscuous mode
[  161.073562][ T5304] fuse: Bad value for 'fd'
[  162.635798][ T5313] loop0: detected capacity change from 0 to 2048
[  162.715705][ T5313] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  165.370545][ T5333] random: crng reseeded on system resumption
[  172.255754][ T5375] tipc: Started in network mode
[  172.270514][ T5375] tipc: Node identity a2b20270f27f, cluster identity 4711
[  172.373382][ T5375] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  172.404705][ T5377] device syzkaller0 entered promiscuous mode
[  172.860766][ T5393] netlink: 28 bytes leftover after parsing attributes in process `syz.1.271'.
[  173.292744][ T5393] bridge0: port 1(bridge_slave_0) entered disabled state
[  173.306628][ T5393] bridge0: port 2(bridge_slave_1) entered disabled state
[  173.380779][ T5394] tipc: Resetting bearer <eth:syzkaller0>
[  173.410227][ T5374] tipc: Resetting bearer <eth:syzkaller0>
[  173.516134][ T5374] tipc: Disabling bearer <eth:syzkaller0>
[  173.592905][ T4319] tipc: Node number set to 1355612784
[  177.474449][   T26] audit: type=1326 audit(1786987878.752:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5429 comm="syz.0.268" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa898d9e0d9 code=0x0
[  178.397701][ T4426] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  178.853194][ T4426] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  179.132738][ T4426] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  179.142239][ T4426] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  179.179959][ T4426] usb 3-1: config 0 descriptor??
[  179.972597][ T4426] pwc: Askey VC010 type 2 USB webcam detected.
[  180.078164][ T5466] device syzkaller0 entered promiscuous mode
[  180.117943][ T5467] netlink: 'syz.1.286': attribute type 1 has an invalid length.
[  180.169730][ T5467] 8021q: adding VLAN 0 to HW filter on device bond1
[  180.387120][ T4426] pwc: recv_control_msg error -32 req 02 val 2b00
[  180.421831][ T4426] pwc: recv_control_msg error -32 req 02 val 2700
[  180.439032][ T4426] pwc: recv_control_msg error -32 req 02 val 2c00
[  180.452738][ T4426] pwc: recv_control_msg error -32 req 04 val 1000
[  180.470884][ T4426] pwc: recv_control_msg error -32 req 04 val 1300
[  180.475513][ T5467] bond1: (slave veth3): Enslaving as an active interface with a down link
[  180.479026][ T4426] pwc: recv_control_msg error -32 req 04 val 1400
[  180.522454][ T4426] pwc: recv_control_msg error -32 req 02 val 2000
[  180.535798][ T4426] pwc: recv_control_msg error -32 req 02 val 2100
[  180.549672][ T4426] pwc: recv_control_msg error -32 req 04 val 1500
[  180.562768][ T4426] pwc: recv_control_msg error -32 req 02 val 2500
[  180.578128][ T4426] pwc: recv_control_msg error -32 req 02 val 2400
[  180.590766][ T4426] pwc: recv_control_msg error -32 req 02 val 2600
[  180.812022][ T4426] pwc: recv_control_msg error -71 req 02 val 2800
[  180.824814][ T4426] pwc: recv_control_msg error -71 req 04 val 1100
[  180.832899][ T4426] pwc: recv_control_msg error -71 req 04 val 1200
[  180.858760][ T4426] pwc: Registered as video103.
[  180.877652][ T4426] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input5
[  180.923395][ T4426] usb 3-1: USB disconnect, device number 6
[  181.242076][ T5471] device bond1 entered promiscuous mode
[  181.283349][ T5473] device macvlan2 entered promiscuous mode
[  181.303955][ T5473] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  185.029545][ T5503] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  186.659288][ T4281] Bluetooth: hci5: command 0x1003 tx timeout
[  186.661117][ T4284] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  193.038006][ T5537] loop3: detected capacity change from 0 to 131072
[  193.068883][ T5537] F2FS-fs (loop3): invalid crc value
[  193.222792][    C0] sched: RT throttling activated
[  193.230078][ T5537] F2FS-fs (loop3): Found nat_bits in checkpoint
[  193.285157][ T5537] F2FS-fs (loop3): Cannot turn on quotas: -2 on 2
[  193.319941][ T5537] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[  194.398568][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[  194.405110][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[  195.145977][ T5561] loop2: detected capacity change from 0 to 32768
[  195.739110][ T5567] trusted_key: encrypted_key: key user:syz not found
[  196.612574][ T5561] JBD2: Ignoring recovery information on journal
[  196.628744][ T5561] jbd2_journal_bmap: journal block not found at offset 32 on loop2-75
[  196.637485][ T5561] JBD2: bad block at offset 32
[  196.656301][ T5561] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  197.603683][ T5572] OCFS2: ERROR (device loop2): int ocfs2_claim_suballoc_bits(struct ocfs2_alloc_context *, handle_t *, u32, u32, struct ocfs2_suballoc_result *): Chain allocator dinode 71 has 16777215 used bits but only 1024 total
[  197.625432][ T5572] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  197.635569][ T5572] OCFS2: File system is now read-only.
[  197.641151][ T5572] (syz.2.307,5572,1):ocfs2_claim_suballoc_bits:2015 ERROR: status = -30
[  197.649692][ T5572] (syz.2.307,5572,1):__ocfs2_claim_clusters:2387 ERROR: status = -30
[  197.657945][ T5572] (syz.2.307,5572,1):__ocfs2_claim_clusters:2395 ERROR: status = -30
[  197.666262][ T5572] (syz.2.307,5572,1):ocfs2_block_group_alloc_contig:455 ERROR: status = -30
[  197.675860][ T5572] (syz.2.307,5572,1):ocfs2_block_group_alloc:727 ERROR: status = -30
[  197.684365][ T5572] (syz.2.307,5572,1):ocfs2_block_group_alloc:780 ERROR: status = -30
[  197.692934][ T5572] (syz.2.307,5572,1):ocfs2_reserve_suballoc_bits:855 ERROR: status = -30
[  197.702108][ T5572] (syz.2.307,5572,1):ocfs2_reserve_suballoc_bits:872 ERROR: status = -30
[  197.710721][ T5572] (syz.2.307,5572,1):ocfs2_reserve_new_metadata_blocks:1012 ERROR: status = -30
[  197.720004][ T5572] (syz.2.307,5572,1):ocfs2_reserve_new_metadata_blocks:1035 ERROR: status = -30
[  197.729440][ T5572] (syz.2.307,5572,1):ocfs2_expand_inline_dir:2840 ERROR: status = -30
[  197.737655][ T5572] (syz.2.307,5572,1):ocfs2_extend_dir:3204 ERROR: status = -30
[  197.745657][ T5572] (syz.2.307,5572,1):ocfs2_prepare_dir_for_insert:4325 ERROR: status = -30
[  197.754515][ T5572] (syz.2.307,5572,1):ocfs2_mknod:298 ERROR: status = -30
[  197.761567][ T5572] (syz.2.307,5572,1):ocfs2_mknod:502 ERROR: status = -30
[  197.768670][ T5572] (syz.2.307,5572,1):ocfs2_create:676 ERROR: status = -30
[  197.833103][ T5572] syz.2.307 (5572) used greatest stack depth: 17680 bytes left
[  198.038426][ T4270] ocfs2: Unmounting device (7,2) on (node local)
[  201.593089][ T4284] Bluetooth: hci2: command 0x0406 tx timeout
[  201.593150][ T4276] Bluetooth: hci0: command 0x0406 tx timeout
[  201.594205][ T4279] Bluetooth: hci1: command 0x0406 tx timeout
[  202.542166][ T4284] Bluetooth: hci3: command 0x0406 tx timeout
[  203.348392][ T5596] tc action pedit offset 0 out of bounds
[  203.831592][ T5605] netlink: 'syz.3.318': attribute type 1 has an invalid length.
[  203.923038][ T5605] 8021q: adding VLAN 0 to HW filter on device bond1
[  204.052929][ T4319] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  204.758392][ T5611] bond1: (slave veth3): Enslaving as an active interface with a down link
[  204.851167][ T5605] device bond1 entered promiscuous mode
[  204.880923][ T5614] device macvlan2 entered promiscuous mode
[  206.354207][ T5614] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  206.356602][ T4319] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  206.374018][ T4319] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  206.384792][ T4319] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[  206.397172][ T4319] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  206.411397][ T4319] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  206.448367][ T4319] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  206.466684][ T4319] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  206.512963][ T4319] usb 2-1: Product: syz
[  206.517223][ T4319] usb 2-1: Manufacturer: syz
[  206.572501][ T5623] loop2: detected capacity change from 0 to 2048
[  206.582486][ T4319] cdc_wdm 2-1:1.0: skipping garbage
[  206.592922][ T4319] cdc_wdm 2-1:1.0: skipping garbage
[  206.623283][ T4319] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[  206.629487][ T4319] cdc_wdm 2-1:1.0: Unknown control protocol
[  206.740828][ T5623] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  207.963949][ T4326] usb 2-1: USB disconnect, device number 5
[  213.566657][ T5652] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[  214.594659][ T5654] can0: slcan on ttyS3.
[  215.333695][ T5654] can0 (unregistered): slcan off ttyS3.
[  218.583425][ T5668] netlink: 'syz.0.336': attribute type 1 has an invalid length.
[  219.271891][ T5668] 8021q: adding VLAN 0 to HW filter on device bond1
[  219.656118][ T5668] device bond1 entered promiscuous mode
[  219.756992][ T5675] device macvlan2 entered promiscuous mode
[  219.795588][ T5675] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  223.745408][ T5691] tc action pedit 'at' offset 36687 out of bounds
[  225.698984][ T5710] xt_NFQUEUE: number of total queues is 0
[  231.152894][ T4426] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  231.333133][ T4426] usb 2-1: device descriptor read/64, error -71
[  231.633775][ T4426] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  234.690132][ T5763] program syz.3.344 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  235.232926][ T5763] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  243.852671][ T5809] device syzkaller0 entered promiscuous mode
[  245.255949][ T5825] netlink: 12 bytes leftover after parsing attributes in process `syz.4.365'.
[  245.611215][ T5835] program syz.0.373 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  245.621221][ T5835] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  246.317732][ T5809] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  246.368427][ T5830] tipc: Resetting bearer <eth:syzkaller0>
[  246.402647][ T5808] tipc: Resetting bearer <eth:syzkaller0>
[  246.498255][ T5808] tipc: Disabling bearer <eth:syzkaller0>
[  248.944844][ T5854] can0: slcan on ttyS3.
[  250.789959][ T5855] can0 (unregistered): slcan off ttyS3.
[  251.025251][ T5861] jffs2: notice: (5861) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  254.813283][ T5888] futex_wake_op: syz.4.389 tries to shift op by 144; fix this program
[  256.224670][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[  256.231001][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[  258.517974][ T4279] Bluetooth: hci4: command 0x0406 tx timeout
[  259.463671][ T4426] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  260.029379][ T4426] usb 1-1: unable to get BOS descriptor or descriptor too short
[  260.193463][ T4426] usb 1-1: config 66 has an invalid descriptor of length 0, skipping remainder of the config
[  260.366469][ T4426] usb 1-1: config 66 has 1 interface, different from the descriptor's value: 2
[  260.427092][ T4426] usb 1-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=a4.95
[  260.512868][ T4426] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  260.520950][ T4426] usb 1-1: Product: syz
[  260.606012][ T4426] usb 1-1: Manufacturer: syz
[  260.670275][ T4426] usb 1-1: SerialNumber: syz
[  262.508976][ T4426] usb 1-1: can't set config #66, error -71
[  262.570885][ T4426] usb 1-1: USB disconnect, device number 2
[  264.718887][ T5976] device syzkaller0 entered promiscuous mode
[  267.207245][ T5990] device syzkaller0 entered promiscuous mode
[  270.717316][ T6026] using random self ethernet address
[  270.725572][ T6026] using random host ethernet address
[  270.763080][   T26] audit: type=1800 audit(1787512260.220:49): pid=6026 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.422" name="host_addr" dev="configfs" ino=40063 res=0 errno=0
[  281.599960][ T6087] device syzkaller0 entered promiscuous mode
[  283.817168][ T6105] loop3: detected capacity change from 0 to 1024
[  284.843980][ T6105] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  285.081872][ T6105] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  286.657645][ T6127] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  287.587766][ T6132] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  287.595131][ T6132] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  287.857853][ T6132] Bluetooth: hci0: Suspend notifier action (1) failed: -4
[  287.873414][ T6132] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  287.890944][ T6132] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  287.935483][ T6132] Bluetooth: hci2: Suspend notifier action (1) failed: -4
[  287.953925][ T6132] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  287.977979][ T6132] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  288.016172][ T6132] Bluetooth: hci1: Suspend notifier action (1) failed: -4
[  288.038085][ T6132] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  288.085609][ T6132] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  288.122710][ T6132] Bluetooth: hci3: Suspend notifier action (1) failed: -4
[  288.144808][ T6132] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  288.170728][ T6132] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  288.295788][ T6132] Bluetooth: hci4: Suspend notifier action (1) failed: -4
[  288.594578][ T6143] loop1: detected capacity change from 0 to 64
[  289.433463][ T6143] syz.1.445: attempt to access beyond end of device
[  289.433463][ T6143] loop1: rw=2049, sector=159, nr_sectors = 1 limit=64
[  289.447885][ T6143] Buffer I/O error on dev loop1, logical block 159, lost async page write
[  289.464644][ T6143] syz.1.445: attempt to access beyond end of device
[  289.464644][ T6143] loop1: rw=2049, sector=160, nr_sectors = 1 limit=64
[  289.481191][ T6143] Buffer I/O error on dev loop1, logical block 160, lost async page write
[  289.491976][ T6143] syz.1.445: attempt to access beyond end of device
[  289.491976][ T6143] loop1: rw=2049, sector=161, nr_sectors = 1 limit=64
[  289.509346][ T6143] Buffer I/O error on dev loop1, logical block 161, lost async page write
[  289.520014][ T4284] Bluetooth: hci0: command 0x0c1a tx timeout
[  289.527996][ T6143] syz.1.445: attempt to access beyond end of device
[  289.527996][ T6143] loop1: rw=2049, sector=162, nr_sectors = 1 limit=64
[  289.542142][ T6143] Buffer I/O error on dev loop1, logical block 162, lost async page write
[  289.551266][ T6143] syz.1.445: attempt to access beyond end of device
[  289.551266][ T6143] loop1: rw=2049, sector=163, nr_sectors = 1 limit=64
[  289.817902][ T6143] Buffer I/O error on dev loop1, logical block 163, lost async page write
[  289.828169][ T6143] syz.1.445: attempt to access beyond end of device
[  289.828169][ T6143] loop1: rw=2049, sector=167, nr_sectors = 1 limit=64
[  289.841819][ T6143] Buffer I/O error on dev loop1, logical block 167, lost async page write
[  289.851017][ T6143] syz.1.445: attempt to access beyond end of device
[  289.851017][ T6143] loop1: rw=2049, sector=169, nr_sectors = 1 limit=64
[  289.867069][ T6143] Buffer I/O error on dev loop1, logical block 169, lost async page write
[  289.876490][ T6143] syz.1.445: attempt to access beyond end of device
[  289.876490][ T6143] loop1: rw=2049, sector=171, nr_sectors = 1 limit=64
[  289.920591][ T4284] Bluetooth: hci2: command 0x0c1a tx timeout
[  289.940445][ T6143] Buffer I/O error on dev loop1, logical block 171, lost async page write
[  289.990138][ T4284] Bluetooth: hci1: command 0x0c1a tx timeout
[  290.000440][ T6143] syz.1.445: attempt to access beyond end of device
[  290.000440][ T6143] loop1: rw=2049, sector=172, nr_sectors = 1 limit=64
[  290.867699][ T6147] netlink: 48 bytes leftover after parsing attributes in process `syz.4.451'.
[  290.877304][ T4284] Bluetooth: hci3: command 0x0c1a tx timeout
[  290.883609][ T4284] Bluetooth: hci4: command 0x0c1a tx timeout
[  290.965644][ T4285] EXT4-fs (loop3): unmounting filesystem.
[  290.975214][ T6143] Buffer I/O error on dev loop1, logical block 172, lost async page write
[  291.392437][ T6143] syz.1.445: attempt to access beyond end of device
[  291.392437][ T6143] loop1: rw=2049, sector=173, nr_sectors = 1 limit=64
[  291.581206][ T4284] Bluetooth: hci0: command 0x0406 tx timeout
[  292.088652][ T4284] Bluetooth: hci2: command 0x0406 tx timeout
[  292.094932][ T4284] Bluetooth: hci1: command 0x0406 tx timeout
[  292.209927][ T6143] Buffer I/O error on dev loop1, logical block 173, lost async page write
[  293.841690][ T4284] Bluetooth: hci4: command 0x0406 tx timeout
[  293.847789][ T4284] Bluetooth: hci3: command 0x0406 tx timeout
[  303.773427][ T6205] loop2: detected capacity change from 0 to 64
[  303.862343][ T6205] bio_check_eod: 5 callbacks suppressed
[  303.862401][ T6205] syz.2.466: attempt to access beyond end of device
[  303.862401][ T6205] loop2: rw=2049, sector=159, nr_sectors = 1 limit=64
[  303.882401][ T6205] buffer_io_error: 5 callbacks suppressed
[  303.882459][ T6205] Buffer I/O error on dev loop2, logical block 159, lost async page write
[  303.907100][ T6205] syz.2.466: attempt to access beyond end of device
[  303.907100][ T6205] loop2: rw=2049, sector=160, nr_sectors = 1 limit=64
[  303.921299][ T6205] Buffer I/O error on dev loop2, logical block 160, lost async page write
[  303.930636][ T6205] syz.2.466: attempt to access beyond end of device
[  303.930636][ T6205] loop2: rw=2049, sector=161, nr_sectors = 1 limit=64
[  303.945040][ T6205] Buffer I/O error on dev loop2, logical block 161, lost async page write
[  303.953999][ T6205] syz.2.466: attempt to access beyond end of device
[  303.953999][ T6205] loop2: rw=2049, sector=162, nr_sectors = 1 limit=64
[  303.967687][ T6205] Buffer I/O error on dev loop2, logical block 162, lost async page write
[  303.976755][ T6205] syz.2.466: attempt to access beyond end of device
[  303.976755][ T6205] loop2: rw=2049, sector=163, nr_sectors = 1 limit=64
[  303.991108][ T6205] Buffer I/O error on dev loop2, logical block 163, lost async page write
[  304.000062][ T6205] syz.2.466: attempt to access beyond end of device
[  304.000062][ T6205] loop2: rw=2049, sector=167, nr_sectors = 1 limit=64
[  304.013664][ T6205] Buffer I/O error on dev loop2, logical block 167, lost async page write
[  304.022958][ T6205] syz.2.466: attempt to access beyond end of device
[  304.022958][ T6205] loop2: rw=2049, sector=169, nr_sectors = 1 limit=64
[  304.037137][ T6205] Buffer I/O error on dev loop2, logical block 169, lost async page write
[  304.046998][ T6205] syz.2.466: attempt to access beyond end of device
[  304.046998][ T6205] loop2: rw=2049, sector=171, nr_sectors = 1 limit=64
[  304.060647][ T6205] Buffer I/O error on dev loop2, logical block 171, lost async page write
[  304.069932][ T6205] syz.2.466: attempt to access beyond end of device
[  304.069932][ T6205] loop2: rw=2049, sector=172, nr_sectors = 1 limit=64
[  304.083481][ T6205] Buffer I/O error on dev loop2, logical block 172, lost async page write
[  304.092476][ T6205] syz.2.466: attempt to access beyond end of device
[  304.092476][ T6205] loop2: rw=2049, sector=173, nr_sectors = 1 limit=64
[  304.106356][ T6205] Buffer I/O error on dev loop2, logical block 173, lost async page write
[  305.214496][   T32] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  305.554315][   T32] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  305.887483][   T32] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  305.899586][   T32] usb 2-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00
[  305.912356][   T32] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  306.033985][   T32] spcp8x5 2-1:1.0: SPCP8x5 converter detected
[  306.241074][   T32] usb 2-1: SPCP8x5 converter now attached to ttyUSB0
[  312.294908][   T32] usb 2-1: USB disconnect, device number 8
[  312.335695][   T32] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0
[  312.392763][   T32] spcp8x5 2-1:1.0: device disconnected
[  312.813248][ T4279] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  312.837520][ T6262] input: syz0 as /devices/virtual/input/input6
[  312.856257][ T4279] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  312.869355][ T4279] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  312.891289][ T4279] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  313.009629][ T4279] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  313.031842][ T4279] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  315.018356][   T26] audit: type=1326 audit(1787512304.012:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6257 comm="syz.3.480" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f462499e0d9 code=0x7ffc0000
[  315.042289][    C1] vkms_vblank_simulate: vblank timer overrun
[  315.188166][   T26] audit: type=1326 audit(1787512304.012:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6257 comm="syz.3.480" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f462499e0d9 code=0x7ffc0000
[  315.218376][ T4284] Bluetooth: hci5: command 0x0409 tx timeout
[  315.284180][   T26] audit: type=1326 audit(1787512304.012:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6257 comm="syz.3.480" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f462499e0d9 code=0x7ffc0000
[  315.308862][    C1] vkms_vblank_simulate: vblank timer overrun
[  315.327641][   T26] audit: type=1326 audit(1787512304.012:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6257 comm="syz.3.480" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f462499e0d9 code=0x7ffc0000
[  315.669570][   T26] audit: type=1326 audit(1787512304.012:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6257 comm="syz.3.480" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f462499e0d9 code=0x7ffc0000
[  315.693607][    C1] vkms_vblank_simulate: vblank timer overrun
[  315.712952][ T6256] chnl_net:caif_netlink_parms(): no params data found
[  316.798797][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[  316.805180][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[  317.047591][ T6256] bridge0: port 1(bridge_slave_0) entered blocking state
[  317.095509][ T6256] bridge0: port 1(bridge_slave_0) entered disabled state
[  317.119522][ T6256] device bridge_slave_0 entered promiscuous mode
[  318.255500][ T4284] Bluetooth: hci5: command 0x041b tx timeout
[  318.759500][ T6284] loop2: detected capacity change from 0 to 1024
[  319.233187][ T6256] bridge0: port 2(bridge_slave_1) entered blocking state
[  319.547234][ T6256] bridge0: port 2(bridge_slave_1) entered disabled state
[  319.605587][ T6256] device bridge_slave_1 entered promiscuous mode
[  319.731287][ T6256] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  319.850909][ T6256] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  319.975879][ T6294] netlink: 76 bytes leftover after parsing attributes in process `syz.1.486'.
[  320.324650][ T4279] Bluetooth: hci5: command 0x040f tx timeout
[  322.401741][ T4279] Bluetooth: hci5: command 0x0419 tx timeout
[  324.313065][ T6256] team0: Port device team_slave_0 added
[  324.338231][ T6256] team0: Port device team_slave_1 added
[  324.490280][ T6256] batman_adv: batadv0: Adding interface: batadv_slave_0
[  324.518394][ T6256] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  324.610837][ T6256] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  324.678781][ T6256] batman_adv: batadv0: Adding interface: batadv_slave_1
[  324.720254][ T6256] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  324.827983][ T6256] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  324.986595][ T6256] device hsr_slave_0 entered promiscuous mode
[  325.931205][ T6256] device hsr_slave_1 entered promiscuous mode
[  325.959671][ T6256] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  325.967314][ T6256] Cannot create hsr debugfs directory
[  327.746421][ T6335] loop1: detected capacity change from 0 to 128
[  327.754643][ T6335] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  327.791010][ T6335] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  327.815115][ T6335] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[  327.823889][ T6335] FAT-fs (loop1): Filesystem has been set read-only
[  330.216717][ T6256] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  330.442619][ T6256] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  330.523166][ T6256] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  330.610308][ T6256] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  331.301175][ T6348] loop2: detected capacity change from 0 to 64
[  333.518934][   T26] audit: type=1800 audit(1787512323.285:55): pid=6344 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.500" name="nexus" dev="configfs" ino=45277 res=0 errno=0
[  335.164045][ T5330] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  335.249554][ T6354] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  336.326328][ T5330] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  336.571275][ T5330] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  336.891940][ T6256] 8021q: adding VLAN 0 to HW filter on device bond0
[  336.912742][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  337.002353][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  338.681613][ T5330] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  338.770218][ T6256] 8021q: adding VLAN 0 to HW filter on device team0
[  338.810150][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  338.865025][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  338.916439][   T41] bridge0: port 1(bridge_slave_0) entered blocking state
[  338.923686][   T41] bridge0: port 1(bridge_slave_0) entered forwarding state
[  338.995838][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  339.077748][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  339.177155][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  339.225354][ T4422] bridge0: port 2(bridge_slave_1) entered blocking state
[  339.232655][ T4422] bridge0: port 2(bridge_slave_1) entered forwarding state
[  339.381296][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  339.398924][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  339.463197][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  339.526440][ T6379] netlink: 28 bytes leftover after parsing attributes in process `syz.2.509'.
[  339.537956][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  339.589495][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  339.675240][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  339.714719][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  339.754665][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  339.809573][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  339.876470][ T6256] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  339.956265][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  339.982893][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  340.543520][ T6390] usb usb1: usbfs: process 6390 (syz.2.510) did not claim interface 0 before use
[  343.530908][   T26] audit: type=1800 audit(1787512333.298:56): pid=6422 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.515" name="zoned" dev="configfs" ino=40945 res=0 errno=0
[  343.692223][   T26] audit: type=1800 audit(1787512333.378:57): pid=6422 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.515" name="power" dev="configfs" ino=40946 res=0 errno=0
[  343.878483][ T6256] 8021q: adding VLAN 0 to HW filter on device batadv0
[  344.121136][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  344.128903][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  345.353158][   T26] audit: type=1326 audit(1787512335.068:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6437 comm="syz.1.517" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef7819e0d9 code=0x7ffc0000
[  345.464885][   T26] audit: type=1326 audit(1787512335.068:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6437 comm="syz.1.517" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef7819e0d9 code=0x7ffc0000
[  345.578429][   T26] audit: type=1326 audit(1787512335.068:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6437 comm="syz.1.517" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fef7819e0d9 code=0x7ffc0000
[  345.752867][   T26] audit: type=1326 audit(1787512335.068:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6437 comm="syz.1.517" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef7819e0d9 code=0x7ffc0000
[  345.870751][   T26] audit: type=1326 audit(1787512335.068:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6437 comm="syz.1.517" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef7819e0d9 code=0x7ffc0000
[  345.970612][ T6422] loop3: detected capacity change from 0 to 32768
[  346.017342][ T6422] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.515 (6422)
[  347.011158][ T6422] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  347.083085][ T6422] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  347.102126][ T6422] BTRFS info (device loop3): using free space tree
[  348.347897][ T6485] netlink: 8 bytes leftover after parsing attributes in process `syz.4.524'.
[  348.426604][ T6422] BTRFS error (device loop3): open_ctree failed: -12
[  348.430200][ T5843] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by udevd (5843)
[  348.988703][ T6499] overlayfs: failed to clone lowerpath
[  352.112793][ T6497] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  354.463018][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  354.471945][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  354.764403][ T5330] device hsr_slave_0 left promiscuous mode
[  354.848071][ T5330] device hsr_slave_1 left promiscuous mode
[  354.860353][ T5330] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  354.902100][ T5330] batman_adv: batadv0: Removing interface: batadv_slave_0
[  355.799467][ T5330] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  355.813389][ T5330] batman_adv: batadv0: Removing interface: batadv_slave_1
[  355.893471][ T5330] device bridge_slave_1 left promiscuous mode
[  355.902243][ T5330] bridge0: port 2(bridge_slave_1) entered disabled state
[  355.961042][ T5330] device bridge_slave_0 left promiscuous mode
[  356.044249][ T5330] bridge0: port 1(bridge_slave_0) entered disabled state
[  358.242926][ T5330] device veth1_macvtap left promiscuous mode
[  358.259677][ T5330] device veth0_macvtap left promiscuous mode
[  358.303727][ T5330] device veth1_vlan left promiscuous mode
[  358.332835][ T5330] device veth0_vlan left promiscuous mode
[  360.158480][ T5330] bond1 (unregistering): Released all slaves
[  362.180815][ T6571] loop3: detected capacity change from 0 to 40427
[  362.196983][ T6571] F2FS-fs (loop3): Invalid log_blocksize (64), supports only 12
[  362.207018][ T6571] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  362.216131][ T6571] F2FS-fs (loop3): Not support 1, larger than 256
[  365.455359][ T5330] team0 (unregistering): Port device team_slave_1 removed
[  365.567463][ T5330] team0 (unregistering): Port device team_slave_0 removed
[  365.757546][ T6589] binder: BINDER_SET_CONTEXT_MGR already set
[  365.764055][ T6589] binder: 6585:6589 ioctl 4018620d 200000000040 returned -16
[  366.595333][ T5330] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  366.667691][ T5330] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  366.748858][ T4284] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  366.780189][ T4284] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  366.795539][ T4284] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  366.812034][ T4284] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  366.823119][ T4284] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  366.830638][ T4284] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  367.126111][ T5330] bond0 (unregistering): Released all slaves
[  367.297722][ T6583] netlink: 16 bytes leftover after parsing attributes in process `syz.4.542'.
[  367.316849][ T6589] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  367.520003][ T6596] loop2: detected capacity change from 0 to 512
[  367.802073][ T6596] EXT4-fs: inline encryption not supported
[  367.977699][ T6596] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  368.645294][ T6596] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2802: Unable to expand inode 11. Delete some EAs or run e2fsck.
[  368.691721][ T6596] EXT4-fs (loop2): 1 truncate cleaned up
[  368.697424][ T6596] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  369.136316][ T4284] Bluetooth: hci2: command 0x0409 tx timeout
[  370.609965][ T4270] EXT4-fs (loop2): unmounting filesystem.
[  370.887537][ T6631] loop3: detected capacity change from 0 to 64
[  370.930513][ T6631] hfs: unable to parse mount options
[  371.093500][ T6631] loop3: detected capacity change from 0 to 64
[  371.125978][ T6631] hfs: unable to parse mount options
[  371.148297][ T6592] chnl_net:caif_netlink_parms(): no params data found
[  371.191592][ T4284] Bluetooth: hci2: command 0x041b tx timeout
[  372.222621][ T6646] loop2: detected capacity change from 0 to 128
[  372.270030][ T4279] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  372.281420][ T4279] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  372.291198][ T6646] FAT-fs (loop2): Unrecognized mount option "184467440737095516150x000000000000000000000000000000000000" or missing value
[  372.311879][ T4276] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  372.321302][ T4276] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  372.333042][ T4276] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  372.340752][ T4276] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  372.373465][ T6592] bridge0: port 1(bridge_slave_0) entered blocking state
[  372.381265][ T6592] bridge0: port 1(bridge_slave_0) entered disabled state
[  372.389602][ T6592] device bridge_slave_0 entered promiscuous mode
[  372.404041][ T6592] bridge0: port 2(bridge_slave_1) entered blocking state
[  372.412152][ T6592] bridge0: port 2(bridge_slave_1) entered disabled state
[  372.420398][ T6592] device bridge_slave_1 entered promiscuous mode
[  372.449074][ T5843] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  373.793777][ T4284] Bluetooth: hci2: command 0x040f tx timeout
[  374.170276][ T6592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  374.852537][ T4284] Bluetooth: hci5: command 0x0409 tx timeout
[  376.251051][ T4284] Bluetooth: hci2: command 0x0419 tx timeout
[  376.294680][ T6592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  376.526302][ T6592] team0: Port device team_slave_0 added
[  377.438375][ T4284] Bluetooth: hci5: command 0x041b tx timeout
[  377.485030][ T6592] team0: Port device team_slave_1 added
[  377.510458][ T6676] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9)
[  377.517691][ T6676] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  379.258028][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[  379.264791][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[  379.500990][ T4284] Bluetooth: hci5: command 0x040f tx timeout
[  379.574728][ T6676] vhci_hcd vhci_hcd.0: Device attached
[  379.601288][    T7] usb 40-1: SetAddress Request (2) to port 0
[  379.619255][    T7] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd
[  379.833295][ T6592] batman_adv: batadv0: Adding interface: batadv_slave_0
[  379.840442][ T6592] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  379.874570][ T6679] vhci_hcd: connection reset by peer
[  379.891234][ T4422] vhci_hcd: stop threads
[  379.896925][ T4422] vhci_hcd: release socket
[  379.903424][ T4422] vhci_hcd: disconnect device
[  379.916055][ T6592] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  379.942181][ T6592] batman_adv: batadv0: Adding interface: batadv_slave_1
[  379.949639][ T6592] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  379.978455][ T6592] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  380.169160][ T6592] device hsr_slave_0 entered promiscuous mode
[  380.206385][ T6592] device hsr_slave_1 entered promiscuous mode
[  380.626943][ T6642] chnl_net:caif_netlink_parms(): no params data found
[  381.580957][ T4284] Bluetooth: hci5: command 0x0419 tx timeout
[  381.738925][ T6722] gfs2: not a GFS2 filesystem
[  381.770554][ T6722] hpfs: Bad magic ... probably not HPFS
[  382.287900][ T6722] tty tty4: ldisc open failed (-12), clearing slot 3
[  383.049378][ T6642] bridge0: port 1(bridge_slave_0) entered blocking state
[  383.071029][ T6642] bridge0: port 1(bridge_slave_0) entered disabled state
[  383.101090][ T6642] device bridge_slave_0 entered promiscuous mode
[  383.136975][ T6642] bridge0: port 2(bridge_slave_1) entered blocking state
[  383.144513][ T6642] bridge0: port 2(bridge_slave_1) entered disabled state
[  383.153611][ T6642] device bridge_slave_1 entered promiscuous mode
[  383.283654][ T6642] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  383.308776][ T6642] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  383.626242][ T6642] team0: Port device team_slave_0 added
[  383.742621][ T6642] team0: Port device team_slave_1 added
[  383.788353][ T6642] batman_adv: batadv0: Adding interface: batadv_slave_0
[  383.809593][ T6642] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  383.866601][ T6642] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  384.134962][ T6642] batman_adv: batadv0: Adding interface: batadv_slave_1
[  384.237984][ T6642] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  384.690978][ T6642] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  384.703533][    T7] usb 40-1: device descriptor read/8, error -110
[  385.236368][    T7] usb usb40-port1: attempt power cycle
[  386.039138][ T6642] device hsr_slave_0 entered promiscuous mode
[  386.080478][ T6642] device hsr_slave_1 entered promiscuous mode
[  386.935111][    T7] usb usb40-port1: unable to enumerate USB device
[  386.991014][ T6642] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  386.998667][ T6642] Cannot create hsr debugfs directory
[  387.233989][ T5330] device hsr_slave_0 left promiscuous mode
[  387.271174][ T5330] device hsr_slave_1 left promiscuous mode
[  387.291847][ T5330] batman_adv: batadv0: Removing interface: batadv_slave_0
[  387.309560][ T5330] batman_adv: batadv0: Removing interface: batadv_slave_1
[  387.330519][ T5330] device bridge_slave_1 left promiscuous mode
[  387.346064][ T5330] bridge0: port 2(bridge_slave_1) entered disabled state
[  387.362153][ T5330] device bridge_slave_0 left promiscuous mode
[  387.368548][ T5330] bridge0: port 1(bridge_slave_0) entered disabled state
[  388.196020][ T5330] team0 (unregistering): Port device team_slave_1 removed
[  388.257986][ T5330] team0 (unregistering): Port device team_slave_0 removed
[  388.315518][ T5330] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  388.376546][ T5330] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  388.741435][ T5330] bond0 (unregistering): Released all slaves
[  388.923110][ T6592] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  388.949825][ T6592] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  389.003874][ T6592] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  389.034944][ T6592] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  389.264547][ T6642] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  389.307385][ T6642] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  389.354951][ T6592] 8021q: adding VLAN 0 to HW filter on device bond0
[  389.362779][ T6642] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  389.384449][ T6642] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  389.401504][ T5216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  389.421209][ T5216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  389.445359][ T6592] 8021q: adding VLAN 0 to HW filter on device team0
[  389.472550][ T6305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  389.482678][ T6305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  389.495516][ T6305] bridge0: port 1(bridge_slave_0) entered blocking state
[  389.502933][ T6305] bridge0: port 1(bridge_slave_0) entered forwarding state
[  389.552738][ T6305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  389.561739][ T6305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  389.573891][ T6305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  389.585193][ T6305] bridge0: port 2(bridge_slave_1) entered blocking state
[  389.592604][ T6305] bridge0: port 2(bridge_slave_1) entered forwarding state
[  389.602161][ T6305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  389.612444][ T6305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  389.641410][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  389.665098][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  389.676171][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  389.685859][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  389.695314][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  389.724740][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  389.734962][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  389.762132][ T5216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  389.779756][ T5216] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  389.795487][ T6592] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  389.919801][ T5330] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  389.965121][ T6642] 8021q: adding VLAN 0 to HW filter on device bond0
[  390.011119][ T6642] 8021q: adding VLAN 0 to HW filter on device team0
[  390.018253][ T6305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  390.037894][ T6305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  390.089219][ T5330] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  390.107920][ T6305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  390.132476][ T6305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  390.151429][ T6305] bridge0: port 1(bridge_slave_0) entered blocking state
[  390.158694][ T6305] bridge0: port 1(bridge_slave_0) entered forwarding state
[  390.181519][ T6305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  390.268669][ T5330] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  390.292688][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  390.302533][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  390.312700][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[  390.320067][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[  390.354651][ T5330] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  390.366834][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  390.394018][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  390.403943][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  390.415462][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  390.425214][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  390.437679][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  390.449295][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  390.472048][ T6592] 8021q: adding VLAN 0 to HW filter on device batadv0
[  390.482331][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  390.490476][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  390.529672][ T6642] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  390.561450][ T6642] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  390.588811][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  390.602524][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  390.622456][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  390.653246][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  390.669628][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  390.889952][ T5330] tipc: Left network mode
[  391.344143][ T4545] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  391.363001][ T4545] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  391.437063][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  391.449713][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  391.495395][ T6592] device veth0_vlan entered promiscuous mode
[  391.506742][ T6642] 8021q: adding VLAN 0 to HW filter on device batadv0
[  391.518657][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  391.543545][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  391.558045][ T6592] device veth1_vlan entered promiscuous mode
[  391.585656][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  391.594967][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  391.615614][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  391.682850][ T4545] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  391.702475][ T4545] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  391.712147][ T4545] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  391.734654][ T6592] device veth0_macvtap entered promiscuous mode
[  391.754760][ T6592] device veth1_macvtap entered promiscuous mode
[  391.834273][ T6592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  391.849312][ T6592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  391.863474][ T6592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  391.875312][ T6592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  391.886455][ T6592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  391.898458][ T6592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  391.909278][ T6592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  391.920543][ T6592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  391.933858][ T6592] batman_adv: batadv0: Interface activated: batadv_slave_0
[  391.954438][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  391.990269][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  391.999188][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  392.017020][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  392.052222][ T6592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  392.062951][ T6592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  392.074934][ T6592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  392.088033][ T6592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  392.098663][ T6592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  392.112732][ T6592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  392.123913][ T6592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  392.135061][ T6592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  392.146981][ T6592] batman_adv: batadv0: Interface activated: batadv_slave_1
[  392.172353][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  392.187728][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  392.201669][ T6592] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  392.210419][ T6592] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  392.229787][ T6592] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  392.240092][ T6592] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  392.501440][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  392.512238][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  392.552591][ T4424] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  392.564383][ T4424] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  392.589776][ T6642] device veth0_vlan entered promiscuous mode
[  392.619147][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  392.630232][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  392.639361][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  392.668072][ T6642] device veth1_vlan entered promiscuous mode
[  392.757227][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  392.768083][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  392.787018][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  392.829293][ T4424] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  392.849486][ T4424] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  392.858076][ T5330] device hsr_slave_0 left promiscuous mode
[  392.865272][ T5330] device hsr_slave_1 left promiscuous mode
[  392.874103][ T5330] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  392.881941][ T5330] batman_adv: batadv0: Removing interface: batadv_slave_0
[  392.889926][ T5330] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  392.900136][ T5330] batman_adv: batadv0: Removing interface: batadv_slave_1
[  392.916399][ T5330] device bridge_slave_1 left promiscuous mode
[  392.926981][ T5330] bridge0: port 2(bridge_slave_1) entered disabled state
[  392.939555][ T5330] device bridge_slave_0 left promiscuous mode
[  392.948182][ T5330] bridge0: port 1(bridge_slave_0) entered disabled state
[  392.982538][ T5330] device veth1_macvtap left promiscuous mode
[  392.988771][ T5330] device veth0_macvtap left promiscuous mode
[  392.998341][ T5330] device veth1_vlan left promiscuous mode
[  393.007976][ T5330] device veth0_vlan left promiscuous mode
[  393.242411][ T5330] bond1 (unregistering): (slave veth3): Releasing active interface
[  393.414930][ T5330] bond1 (unregistering): Released all slaves
[  393.985358][ T5330] team0 (unregistering): Port device team_slave_1 removed
[  394.039676][ T5330] team0 (unregistering): Port device team_slave_0 removed
[  394.090286][ T5330] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  394.148161][ T5330] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  394.566111][ T5330] bond0 (unregistering): Released all slaves
[  394.687617][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  394.696688][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  394.733986][ T5216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  394.750517][ T5216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  394.782898][ T6642] device veth0_macvtap entered promiscuous mode
[  394.814614][ T6642] device veth1_macvtap entered promiscuous mode
[  394.903208][ T6642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  394.944604][ T6642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  394.964232][ T6642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  394.975380][ T6642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  394.986135][ T6642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  394.997352][ T6642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  395.021397][ T6642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  395.036980][ T6850] netlink: 8 bytes leftover after parsing attributes in process `syz.4.587'.
[  395.060311][ T6642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  395.110882][ T6642] batman_adv: batadv0: Interface activated: batadv_slave_0
[  395.125749][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  395.149895][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  395.201775][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  395.246222][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  395.303814][ T6642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  395.341647][ T6642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  395.373431][ T6642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  395.417113][ T6642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  396.210765][ T6642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  396.249121][ T6642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  396.289018][ T6642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  396.347533][ T6642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  396.374039][ T6642] batman_adv: batadv0: Interface activated: batadv_slave_1
[  396.466544][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  396.481989][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  396.507272][ T6642] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  396.549520][ T6642] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  396.614390][ T6642] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  396.644966][ T6865] overlayfs: missing 'lowerdir'
[  396.654962][ T6642] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  396.987646][ T4324] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  397.040904][ T4324] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  397.112305][ T4545] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  397.154603][ T4545] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  397.197562][ T4545] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  397.251821][ T4545] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  397.617308][ T6879] Bluetooth: ISO socket layer initialized
[  398.326810][    T9] Bluetooth: hci3: Frame reassembly failed (-84)
[  399.884213][ T6889] Bluetooth: hci3: received HCILL_GO_TO_SLEEP_ACK in state 2
[  400.380852][ T4284] Bluetooth: hci3: command 0x1003 tx timeout
[  400.390064][ T4279] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  400.616144][ T6898] loop6: detected capacity change from 0 to 128
[  400.722699][ T6898] FAT-fs (loop6): Unrecognized mount option "184467440737095516150x000000000000000000000000000000000000" or missing value
[  403.737838][ T6917] fuse: Bad value for 'fd'
[  408.761463][ T6954] overlayfs: overlapping lowerdir path
[  409.107529][ T6958] tmpfs: Bad value for 'nr_inodes'
[  409.123994][ T6958] netlink: 8 bytes leftover after parsing attributes in process `syz.6.592'.
[  410.423587][ T6970] tmpfs: Bad value for 'nr_inodes'
[  410.446593][ T6970] netlink: 8 bytes leftover after parsing attributes in process `syz.5.597'.
[  411.087607][ T6975] netlink: 8 bytes leftover after parsing attributes in process `syz.4.599'.
[  413.706473][ T6998] netlink: 8 bytes leftover after parsing attributes in process `syz.4.605'.
[  413.952682][ T7004] loop6: detected capacity change from 0 to 1024
[  414.254616][ T7004] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  415.658752][   T26] audit: type=1800 audit(1788560981.445:63): pid=7016 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.606" name="file1" dev="loop6" ino=15 res=0 errno=0
[  415.690446][    C1] vkms_vblank_simulate: vblank timer overrun
[  415.792908][ T6642] EXT4-fs (loop6): unmounting filesystem.
[  418.846850][ T7043] capability: warning: `syz.5.614' uses 32-bit capabilities (legacy support in use)
[  419.397926][ T7048] tmpfs: Bad value for 'nr_inodes'
[  421.704615][ T7067] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus
[  422.138625][ T7077] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[  422.158776][ T7079] loop5: detected capacity change from 0 to 1024
[  422.918238][ T7079] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  423.703693][ T6592] EXT4-fs (loop5): unmounting filesystem.
[  425.442318][ T7107] loop6: detected capacity change from 0 to 1024
[  426.403258][ T7107] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  427.305307][   T26] audit: type=1800 audit(1790133857.319:64): pid=7120 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.626" name="file1" dev="loop6" ino=15 res=0 errno=0
[  427.530218][ T6642] EXT4-fs (loop6): unmounting filesystem.
[  428.520236][ T7132] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[  429.630092][ T7144] loop6: detected capacity change from 0 to 1024
[  429.718769][ T7144] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  431.713960][   T26] audit: type=1800 audit(1791182437.803:65): pid=7144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.636" name="file1" dev="loop6" ino=15 res=0 errno=0
[  431.773054][ T6642] EXT4-fs (loop6): unmounting filesystem.
[  432.505703][ T7177] tmpfs: Bad value for 'nr_inodes'
[  435.763048][ T7204] loop3: detected capacity change from 0 to 1024
[  436.485160][ T7204] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  436.554524][ T7215] tmpfs: Bad value for 'nr_inodes'
[  436.574494][ T7215] netlink: 12 bytes leftover after parsing attributes in process `syz.2.651'.
[  437.741457][ T7213] loop6: detected capacity change from 0 to 1024
[  437.753164][   T26] audit: type=1800 audit(1792231020.066:66): pid=7222 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.649" name="file1" dev="loop3" ino=15 res=0 errno=0
[  438.082768][ T4285] EXT4-fs (loop3): unmounting filesystem.
[  438.124687][ T7213] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  438.387143][ T7229] loop5: detected capacity change from 0 to 1024
[  438.880265][ T7229] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  439.063926][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[  439.072493][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[  439.360760][ T6642] EXT4-fs (loop6): unmounting filesystem.
[  440.169230][   T26] audit: type=1800 audit(1793279598.564:67): pid=7245 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.653" name="file1" dev="loop5" ino=15 res=0 errno=0
[  440.201010][    C1] vkms_vblank_simulate: vblank timer overrun
[  440.230059][ T7236] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[  440.393648][ T6592] EXT4-fs (loop5): unmounting filesystem.
[  444.005717][ T7278] loop5: detected capacity change from 0 to 1024
[  444.593516][ T7278] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  445.486367][ T6592] EXT4-fs (loop5): unmounting filesystem.
[  445.868711][ T7300] tmpfs: Bad value for 'nr_inodes'
[  445.880031][ T7300] netlink: 12 bytes leftover after parsing attributes in process `syz.5.667'.
[  446.995008][ T7307] loop2: detected capacity change from 0 to 1024
[  447.064973][ T7310] loop3: detected capacity change from 0 to 1024
[  447.122108][ T7307] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  448.794866][   T26] audit: type=1800 audit(1793803895.406:68): pid=7318 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.670" name="file1" dev="loop2" ino=15 res=0 errno=0
[  448.829562][    C0] vkms_vblank_simulate: vblank timer overrun
[  448.919061][ T4270] EXT4-fs (loop2): unmounting filesystem.
[  448.945107][ T7310] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  449.746178][   T26] audit: type=1800 audit(1794328184.386:69): pid=7331 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.672" name="file1" dev="loop3" ino=15 res=0 errno=0
[  449.953789][ T4285] EXT4-fs (loop3): unmounting filesystem.
[  450.233226][ T7339] loop2: detected capacity change from 0 to 1024
[  451.143654][ T7339] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  451.868418][   T26] audit: type=1800 audit(1794852474.540:70): pid=7353 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.675" name="file1" dev="loop2" ino=15 res=0 errno=0
[  451.963730][ T4270] EXT4-fs (loop2): unmounting filesystem.
[  460.401659][ T7431] loop3: detected capacity change from 0 to 1024
[  461.068014][ T7431] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  462.419366][ T4285] EXT4-fs (loop3): unmounting filesystem.
[  463.854528][ T7469] loop2: detected capacity change from 0 to 1024
[  464.308980][ T7469] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  466.371625][ T7506] loop6: detected capacity change from 0 to 1024
[  466.714027][ T7506] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  467.284185][ T6642] EXT4-fs (loop6): unmounting filesystem.
[  467.588592][ T7521] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[  470.041458][ T7540] loop3: detected capacity change from 0 to 2048
[  470.267189][ T7540] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  470.277673][ T7540] ext4 filesystem being mounted at /143/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  470.532433][ T7548] netlink: 8 bytes leftover after parsing attributes in process `syz.4.724'.
[  470.635451][ T4285] EXT4-fs (loop3): unmounting filesystem.
[  473.130183][ T4270] EXT4-fs (loop2): unmounting filesystem.
[  473.291720][ T7572] tmpfs: Bad value for 'nr_inodes'
[  473.305603][ T7572] netlink: 8 bytes leftover after parsing attributes in process `syz.5.730'.
[  475.772295][ T7586] netlink: 8 bytes leftover after parsing attributes in process `syz.4.733'.
[  476.623901][ T7604] netlink: 8 bytes leftover after parsing attributes in process `syz.4.738'.
[  477.415053][ T7616] loop2: detected capacity change from 0 to 1024
[  477.526628][ T7616] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  478.476909][ T7630] loop5: detected capacity change from 0 to 2048
[  479.624920][ T4270] EXT4-fs (loop2): unmounting filesystem.
[  480.560882][ T7630] EXT4-fs: error -4 creating inode table initialization thread
[  480.575783][ T7630] EXT4-fs (loop5): mount failed
[  483.544934][ T7663] loop2: detected capacity change from 0 to 1024
[  483.656522][ T7663] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  484.618266][ T7677] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[  488.423415][ T7722] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[  489.838670][ T4270] EXT4-fs (loop2): unmounting filesystem.
[  491.170028][ T4284] Bluetooth: hci2: command 0x0406 tx timeout
[  494.612249][ T7790] loop6: detected capacity change from 0 to 1024
[  495.129270][ T7798] loop3: detected capacity change from 0 to 1024
[  495.203228][ T7790] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  495.226837][ T7802] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[  495.252596][ T7798] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  496.057197][ T6642] EXT4-fs (loop6): unmounting filesystem.
[  496.223771][ T4279] Bluetooth: hci5: command 0x0406 tx timeout
[  497.273686][ T4285] EXT4-fs (loop3): unmounting filesystem.
[  497.305389][ T7817] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[  498.727563][ T7839] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[  499.182656][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[  499.191894][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[  501.707408][ T7886] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[  502.265462][ T7895] loop3: detected capacity change from 0 to 1024
[  502.666350][ T7895] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  505.090130][   T26] audit: type=1800 audit(1800619696.908:71): pid=7926 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.801" name="file1" dev="loop3" ino=15 res=0 errno=0
[  505.188827][ T4285] EXT4-fs (loop3): unmounting filesystem.
[  506.774053][ T7957] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[  507.081977][ T7962] loop2: detected capacity change from 0 to 1024
[  507.268059][ T7962] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  508.054884][ T4270] EXT4-fs (loop2): unmounting filesystem.
[  511.232317][ T8018] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[  512.667660][ T8035] loop2: detected capacity change from 0 to 2048
[  512.768904][ T8035] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  512.781189][ T8035] ext4 filesystem being mounted at /149/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  513.694026][ T4270] EXT4-fs (loop2): unmounting filesystem.
[  525.389891][ T8268] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[  530.394501][ T8325] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[  530.616729][ T8329] loop5: detected capacity change from 0 to 1024
[  530.779017][ T8329] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  536.872554][ T8399] loop3: detected capacity change from 0 to 1024
[  536.956081][ T8399] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  538.029492][ T4285] EXT4-fs (loop3): unmounting filesystem.
[  539.143960][ T6592] EXT4-fs (loop5): unmounting filesystem.
[  540.635465][ T8433] loop3: detected capacity change from 0 to 1024
[  540.785965][ T8435] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[  540.827829][ T8433] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  541.575524][   T26] audit: type=1800 audit(1803765462.174:72): pid=8442 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.864" name="file1" dev="loop3" ino=15 res=0 errno=0
[  541.684948][ T4285] EXT4-fs (loop3): unmounting filesystem.
[  542.632161][ T8450] loop6: detected capacity change from 0 to 1024
[  542.952065][ T8450] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  543.353729][ T6642] EXT4-fs (loop6): unmounting filesystem.
[  544.208013][ T8481] loop3: detected capacity change from 0 to 1024
[  544.657959][ T8481] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  545.595538][ T4285] EXT4-fs (loop3): unmounting filesystem.
[  547.080278][ T8506] loop6: detected capacity change from 0 to 1024
[  547.996746][ T8506] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  548.753700][ T6642] EXT4-fs (loop6): unmounting filesystem.
[  549.636736][ T8529] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[  549.879493][ T8507] loop3: detected capacity change from 0 to 2048
[  550.499227][ T8507] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  550.513022][ T8507] ext4 filesystem being mounted at /177/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  550.634891][ T8543] loop5: detected capacity change from 0 to 1024
[  550.851145][ T8543] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  551.220596][ T6592] EXT4-fs (loop5): unmounting filesystem.
[  553.275271][ T8550] loop6: detected capacity change from 0 to 2048
[  553.611763][ T8550] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  553.781014][ T8550] ext4 filesystem being mounted at /56/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  555.054219][ T8602] netlink: 4 bytes leftover after parsing attributes in process `syz.4.898'.
[  555.071129][ T4285] EXT4-fs (loop3): unmounting filesystem.
[  558.137925][ T6642] EXT4-fs (loop6): unmounting filesystem.
[  559.272453][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[  559.279598][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[  560.729838][ T8663] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[  564.882780][ T8698] loop6: detected capacity change from 0 to 2048
[  565.446382][ T8698] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  565.459472][ T8698] ext4 filesystem being mounted at /62/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  565.731198][ T6642] EXT4-fs (loop6): unmounting filesystem.
[  568.840141][ T8742] netlink: 4 bytes leftover after parsing attributes in process `syz.4.930'.
[  569.781040][ T8769] fuse: Bad value for 'fd'
[  569.861946][ T8762] loop6: detected capacity change from 0 to 8192
[  569.979300][ T8762]  loop6: p1 p2 p3 p4
[  569.996665][ T8762] loop6: partition table partially beyond EOD, truncated
[  570.081958][ T8762] loop6: p2 start 201326592 is beyond EOD, truncated
[  570.130500][ T8762] loop6: p3 start 36132 is beyond EOD, truncated
[  570.150333][ T8762] loop6: p4 start 167772160 is beyond EOD, truncated
[  570.794361][ T8333] udevd[8333]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory
[  571.546944][ T8817] ip_tables: iptables: counters copy to user failed while replacing table
[  573.069150][ T8863] pit: kvm: requested 136609 ns i8254 timer period limited to 200000 ns
[  573.134818][ T8863] pit: kvm: requested 117333 ns i8254 timer period limited to 200000 ns
[  573.191840][ T8863] pit: kvm: requested 19276 ns i8254 timer period limited to 200000 ns
[  573.235664][ T8863] pit: kvm: requested 6704 ns i8254 timer period limited to 200000 ns
[  573.283733][ T8863] pit: kvm: requested 89676 ns i8254 timer period limited to 200000 ns
[  573.318536][ T8863] pit: kvm: requested 23466 ns i8254 timer period limited to 200000 ns
[  573.401491][ T8863] pit: kvm: requested 186895 ns i8254 timer period limited to 200000 ns
[  573.477428][ T8863] pit: kvm: requested 6704 ns i8254 timer period limited to 200000 ns
[  573.511995][ T8863] pit: kvm: requested 10057 ns i8254 timer period limited to 200000 ns
[  573.558314][ T8863] pit: kvm: requested 180190 ns i8254 timer period limited to 200000 ns
[  576.955114][   T26] audit: type=1326 audit(1807959802.332:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8979 comm="syz.2.1001" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141839e0d9 code=0x7ffc0000
[  577.045861][   T26] audit: type=1326 audit(1807959802.382:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8979 comm="syz.2.1001" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141839e0d9 code=0x7ffc0000
[  577.143311][   T26] audit: type=1326 audit(1807959802.382:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8979 comm="syz.2.1001" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141839e0d9 code=0x7ffc0000
[  577.286942][   T26] audit: type=1326 audit(1807959802.382:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8979 comm="syz.2.1001" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141839e0d9 code=0x7ffc0000
[  577.392916][   T26] audit: type=1326 audit(1807959802.382:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8979 comm="syz.2.1001" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7f141839e0d9 code=0x7ffc0000
[  577.502176][   T26] audit: type=1326 audit(1807959802.382:78): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=8979 comm="syz.2.1001" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141839e0d9 code=0x7ffc0000
[  577.627484][   T26] audit: type=1326 audit(1807959802.382:79): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=8979 comm="syz.2.1001" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141839e0d9 code=0x7ffc0000
[  577.695165][   T26] audit: type=1326 audit(1807959802.382:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8979 comm="syz.2.1001" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141839e0d9 code=0x7ffc0000
[  577.791196][   T26] audit: type=1326 audit(1807959802.382:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8979 comm="syz.2.1001" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141839e0d9 code=0x7ffc0000
[  577.868203][ T9001] loop5: detected capacity change from 0 to 128
[  577.948043][ T9001] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  577.966615][   T26] audit: type=1326 audit(1807959802.382:82): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=8979 comm="syz.2.1001" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f141839e0d9 code=0x7ffc0000
[  578.388382][ T6592] VFS: Lookup of 'file0' in vfat loop5 would have caused loop
[  578.412920][ T9011] tmpfs: Bad value for 'mpol'
[  578.431807][ T9011] x_tables: duplicate underflow at hook 3
[  578.442521][ T6592] VFS: Lookup of 'file0' in vfat loop5 would have caused loop
[  578.692128][ T4421] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  579.028901][ T9027] ipt_CLUSTERIP: Please specify destination IP
[  579.344862][ T4421] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  579.538447][ T4421] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  579.742346][ T4421] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  579.977485][ T4421] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  580.865747][ T4284] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  580.880160][ T4284] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  580.889946][ T4284] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  580.891210][ T9067] loop2: detected capacity change from 0 to 256
[  580.907600][ T4284] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  580.916156][ T4284] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  580.923786][ T4284] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  581.514443][ T9067] FAT-fs (loop2): IO charset iso not found
[  581.532465][ T9088] netlink: 'syz.6.1036': attribute type 1 has an invalid length.
[  581.697396][ T9088] 8021q: adding VLAN 0 to HW filter on device bond1
[  581.852787][ T9093] device bond2 entered promiscuous mode
[  581.882913][ T9093] 8021q: adding VLAN 0 to HW filter on device bond2
[  581.942770][ T9093] bond1: (slave bond2): Enslaving as an active interface with a down link
[  582.086476][ T9095] bond1: (slave ip6erspan0): making interface the new active one
[  582.127407][ T9095] device ip6erspan0 entered promiscuous mode
[  582.150453][ T9095] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link
[  582.319119][ T9067] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1030'.
[  582.332548][ T5216] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready
[  582.770490][ T9126] device bond2 entered promiscuous mode
[  582.911201][ T9070] chnl_net:caif_netlink_parms(): no params data found
[  582.957644][ T4284] Bluetooth: hci2: command 0x0409 tx timeout
[  583.645848][ T9070] bridge0: port 1(bridge_slave_0) entered blocking state
[  583.672756][ T9070] bridge0: port 1(bridge_slave_0) entered disabled state
[  583.712430][ T9070] device bridge_slave_0 entered promiscuous mode
[  583.837501][ T9070] bridge0: port 2(bridge_slave_1) entered blocking state
[  583.873112][ T9070] bridge0: port 2(bridge_slave_1) entered disabled state
[  583.906496][ T9070] device bridge_slave_1 entered promiscuous mode
[  584.496074][ T9070] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  585.014775][ T9070] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  585.023633][ T4284] Bluetooth: hci2: command 0x041b tx timeout
[  585.266956][ T4421] device hsr_slave_0 left promiscuous mode
[  585.309267][ T4421] device hsr_slave_1 left promiscuous mode
[  585.498940][ T4421] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  585.540317][ T4421] batman_adv: batadv0: Removing interface: batadv_slave_0
[  585.570964][ T4421] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  585.578805][ T4421] batman_adv: batadv0: Removing interface: batadv_slave_1
[  585.657646][ T4421] device bridge_slave_1 left promiscuous mode
[  585.673888][ T4421] bridge0: port 2(bridge_slave_1) entered disabled state
[  585.776884][ T4421] device bridge_slave_0 left promiscuous mode
[  585.817755][ T4421] bridge0: port 1(bridge_slave_0) entered disabled state
[  586.074017][ T4421] device veth1_macvtap left promiscuous mode
[  586.091309][ T4421] device veth0_macvtap left promiscuous mode
[  586.134636][ T4421] device veth1_vlan left promiscuous mode
[  586.166766][ T4421] device veth0_vlan left promiscuous mode
[  587.186534][ T4284] Bluetooth: hci2: command 0x040f tx timeout
[  589.020049][ T4421] team0 (unregistering): Port device team_slave_1 removed
[  589.082609][ T4421] team0 (unregistering): Port device team_slave_0 removed
[  589.141475][ T4421] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  589.209795][ T4421] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  589.245665][ T4284] Bluetooth: hci2: command 0x0419 tx timeout
[  589.697902][ T4421] bond0 (unregistering): Released all slaves
[  589.825571][ T9070] team0: Port device team_slave_0 added
[  589.841817][ T9208] bridge0: port 3(vlan2) entered blocking state
[  589.849024][ T9208] bridge0: port 3(vlan2) entered disabled state
[  589.856726][ T9208] device vlan2 entered promiscuous mode
[  589.863592][ T9208] device bond0 entered promiscuous mode
[  589.869902][ T9208] device bond_slave_0 entered promiscuous mode
[  589.876279][ T9208] device bond_slave_1 entered promiscuous mode
[  589.883680][ T9208] bridge0: port 3(vlan2) entered blocking state
[  589.890616][ T9208] bridge0: port 3(vlan2) entered forwarding state
[  589.903071][ T9207] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  589.912867][ T9207] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  589.921655][ T9207] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  589.933665][ T9207] device bridge_slave_0 left promiscuous mode
[  589.941722][ T9207] bridge0: port 1(bridge_slave_0) entered disabled state
[  589.958824][ T9207] device bridge_slave_1 left promiscuous mode
[  589.965312][ T9207] bridge0: port 2(bridge_slave_1) entered disabled state
[  589.975350][ T9207] device vlan2 left promiscuous mode
[  589.983265][ T9207] device bond0 left promiscuous mode
[  589.990865][ T9207] bond0: (slave bond_slave_0): Releasing backup interface
[  590.001982][ T9207] device bond_slave_0 left promiscuous mode
[  590.022173][ T9207] bond0: (slave bond_slave_1): Releasing backup interface
[  590.038147][ T9207] device bond_slave_1 left promiscuous mode
[  590.087584][ T9207] team0: Port device team_slave_0 removed
[  590.107421][ T9207] team0: Port device team_slave_1 removed
[  590.114275][ T9207] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  590.126871][ T9207] batman_adv: batadv0: Removing interface: batadv_slave_0
[  590.137767][ T9207] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  590.146653][ T9207] batman_adv: batadv0: Removing interface: batadv_slave_1
[  590.164930][ T9207] bond1: (slave bond2): Releasing active interface
[  590.172772][ T9207] bond1: (slave bond2): the permanent HWaddr of slave - a2:61:c3:2a:a3:4f - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  590.212924][ T9207] bond1: (slave ip6erspan0): Releasing active interface
[  590.221138][ T9207] device ip6erspan0 left promiscuous mode
[  590.236898][ T9207] bridge0: port 3(vlan2) entered disabled state
[  590.319276][ T9212] bond0 (unregistering): Released all slaves
[  590.373731][ T9070] team0: Port device team_slave_1 added
[  590.485487][ T9256] Illegal XDP return value 61198864 on prog  (id 29) dev syz_tun, expect packet loss!
[  590.488568][ T9070] batman_adv: batadv0: Adding interface: batadv_slave_0
[  590.582216][ T9070] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  590.649127][ T9070] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  590.697533][ T9070] batman_adv: batadv0: Adding interface: batadv_slave_1
[  590.706937][ T9261] ip_tables: iptables: counters copy to user failed while replacing table
[  590.712986][ T9070] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  590.907027][ T9070] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  590.957126][ T9263] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  590.992482][ T9263] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  591.186621][ T9070] device hsr_slave_0 entered promiscuous mode
[  591.254710][ T9070] device hsr_slave_1 entered promiscuous mode
[  591.460770][ T9285] loop3: detected capacity change from 0 to 256
[  591.609199][ T9285] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  591.693651][   T26] kauditd_printk_skb: 9 callbacks suppressed
[  591.693667][   T26] audit: type=1800 audit(1807959817.173:92): pid=9285 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1083" name="file1" dev="loop3" ino=1048728 res=0 errno=0
[  591.783045][ T9293] FAT-fs (loop3): error, corrupted file size (i_pos 196, 16779008)
[  591.830602][   T26] audit: type=1800 audit(1807959817.213:93): pid=9285 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1083" name="file1" dev="loop3" ino=1048728 res=0 errno=0
[  591.854690][ T9293] FAT-fs (loop3): Filesystem has been set read-only
[  591.975391][ T9293] FAT-fs (loop3): error, corrupted file size (i_pos 196, 16779008)
[  592.042245][ T9070] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  592.101583][ T9070] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  592.135971][ T9070] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  592.151566][ T9070] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  592.464074][ T9070] 8021q: adding VLAN 0 to HW filter on device bond0
[  592.509676][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  592.529529][ T9310] ip_tables: iptables: counters copy to user failed while replacing table
[  592.586174][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  592.625798][ T9284] FAT-fs (loop3): error, corrupted file size (i_pos 196, 16779008)
[  592.664669][ T9284] FAT-fs (loop3): error, corrupted file size (i_pos 196, 16779008)
[  592.672906][ T9284] FAT-fs (loop3): error, corrupted file size (i_pos 196, 16779008)
[  592.673520][ T9070] 8021q: adding VLAN 0 to HW filter on device team0
[  593.352423][ T6990] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  593.368741][ T6990] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  593.418119][ T6990] bridge0: port 1(bridge_slave_0) entered blocking state
[  593.425573][ T6990] bridge0: port 1(bridge_slave_0) entered forwarding state
[  593.458248][ T6990] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  593.510940][ T4469] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  593.569875][ T4469] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  593.602277][ T4469] bridge0: port 2(bridge_slave_1) entered blocking state
[  593.610268][ T4469] bridge0: port 2(bridge_slave_1) entered forwarding state
[  593.657948][ T4469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  593.687111][ T4469] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  593.800894][ T4469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  593.825567][ T4469] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  593.838149][ T4469] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  593.851010][ T4469] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  593.868547][ T4469] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  593.932117][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  593.948843][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  593.983981][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  594.013707][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  594.072095][ T9070] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  595.159492][ T6990] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  595.195773][ T6990] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  595.235840][ T9070] 8021q: adding VLAN 0 to HW filter on device batadv0
[  596.767893][ T9382] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[  596.938045][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  596.975460][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  597.103299][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  597.151897][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  597.192361][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  597.224323][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  597.369181][ T9070] device veth0_vlan entered promiscuous mode
[  597.467597][ T9070] device veth1_vlan entered promiscuous mode
[  598.016608][ T6990] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  598.178926][ T6990] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  598.253141][ T9070] device veth0_macvtap entered promiscuous mode
[  598.348985][ T6990] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  598.394187][ T6990] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  598.422126][ T9070] device veth1_macvtap entered promiscuous mode
[  598.470547][ T6990] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  598.515788][ T6990] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  598.595062][ T9070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  598.633800][ T9070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  598.683854][ T9070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  598.724065][ T9070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  598.744726][ T9070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  598.788342][ T9070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  598.830712][ T9070] batman_adv: batadv0: Interface activated: batadv_slave_0
[  598.862813][ T5216] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  598.912279][ T5216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  598.969227][ T9070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  599.034588][ T9070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  599.088570][ T9070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  599.118875][ T9070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  599.183815][ T9070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  599.261726][ T9070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  599.293829][ T9070] batman_adv: batadv0: Interface activated: batadv_slave_1
[  599.319811][ T9070] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  599.358436][ T9070] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  599.398912][ T9070] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  599.429751][ T9070] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  599.493576][ T6305] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  599.515002][ T6305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  599.826466][   T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  599.843296][   T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  599.864742][ T4469] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  600.561452][ T4545] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  600.591425][ T4545] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  600.620293][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  606.522034][ T9500] loop3: detected capacity change from 0 to 2048
[  606.891911][ T9500] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  607.003461][ T9500] ext4 filesystem being mounted at /233/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  608.980048][ T9544] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[  611.341653][ T4285] EXT4-fs (loop3): unmounting filesystem.
[  611.918817][ T9584] loop3: detected capacity change from 0 to 1024
[  612.062303][ T9584] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  615.438172][ T4285] EXT4-fs (loop3): unmounting filesystem.
[  619.806286][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[  619.813022][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[  620.753613][ T9703] loop2: detected capacity change from 0 to 1024
[  620.958155][ T9703] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  625.142724][ T4270] EXT4-fs (loop2): unmounting filesystem.
[  628.754218][ T9836] loop2: detected capacity change from 0 to 1024
[  629.552766][ T9836] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  630.043930][ T4270] EXT4-fs (loop2): unmounting filesystem.
[  635.497594][ T9900] loop2: detected capacity change from 0 to 1024
[  635.887451][ T9904] loop3: detected capacity change from 0 to 2048
[  636.223923][ T9900] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  636.235279][ T9904] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  636.246646][ T9904] ext4 filesystem being mounted at /249/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  636.704884][ T4270] EXT4-fs (loop2): unmounting filesystem.
[  636.720098][ T4285] EXT4-fs (loop3): unmounting filesystem.
[  638.838747][   T32] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  639.045072][   T32] usb 3-1: New USB device found, idVendor=05c5, idProduct=0002, bcdDevice= 0.00
[  639.069250][   T32] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  639.105058][ T9953] UDC core: g1: couldn't find an available UDC or it's busy
[  639.155978][   T32] digi_acceleport 3-1:1.0: Digi 2 port USB adapter converter detected
[  639.195734][   T32] usb 3-1: Digi 2 port USB adapter converter now attached to ttyUSB0
[  639.241652][   T32] usb 3-1: Digi 2 port USB adapter converter now attached to ttyUSB1
[  639.283051][   T32] usb 3-1: Digi 2 port USB adapter converter now attached to ttyUSB2
[  640.558853][ T8917] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  640.770798][ T8917] usb 8-1: New USB device found, idVendor=13d3, idProduct=3275, bcdDevice= 0.00
[  640.791155][ T8917] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  640.814633][ T8917] usb 8-1: Product: syz
[  640.822866][ T8917] usb 8-1: Manufacturer: syz
[  641.049251][ T8917] dvb-usb: found a 'AZUREWAVE DVB-S/S2 USB2.0 (AZ6027)' in cold state, will try to load a firmware
[  641.138033][ T4315] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  641.152088][ T8917] usb 8-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2
[  641.184316][ T8917] usb 8-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw
[  641.365932][ T4315] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  641.379350][ T4315] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  641.400481][ T4315] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 1.00
[  641.414647][ T4315] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  641.426992][ T4315] usb 4-1: Product: syz
[  641.432499][ T4315] usb 4-1: Manufacturer: syz
[  641.437721][ T4315] usb 4-1: SerialNumber: syz
[  641.448615][ T4315] usb-storage 4-1:1.0: USB Mass Storage device detected
[  641.481531][ T4315] usb-storage 4-1:1.0: Quirks match for vid 0525 pid a4a5: 10000
[  641.513050][ T4316] usb 3-1: USB disconnect, device number 7
[  641.580350][ T4316] digi_2 ttyUSB0: Digi 2 port USB adapter converter now disconnected from ttyUSB0
[  641.622226][ T4316] digi_2 ttyUSB1: Digi 2 port USB adapter converter now disconnected from ttyUSB1
[  641.656046][ T4316] digi_2 ttyUSB2: Digi 2 port USB adapter converter now disconnected from ttyUSB2
[  641.672888][ T4316] digi_acceleport 3-1:1.0: device disconnected
[  642.242365][   T32] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  642.439401][   T32] usb 3-1: config index 0 descriptor too short (expected 67, got 49)
[  642.451445][   T32] usb 3-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config
[  642.465283][   T32] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[  642.488665][   T32] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00
[  642.508326][   T32] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  642.520048][   T32] usb 3-1: Product: syz
[  642.524710][   T32] usb 3-1: Manufacturer: syz
[  642.530161][   T32] usb 3-1: SerialNumber: syz
[  642.847777][  T125] usb 4-1: USB disconnect, device number 2
[  643.498908][T10051] I/O error, dev loop3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  643.532541][T10051] ADFS-fs (loop3): error: unable to read block 3, try 0
[  643.786092][ T4284] Bluetooth: hci4: unexpected event for opcode 0x041b
[  643.815087][T10067] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3)
[  643.823999][T10067] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  643.846543][T10067] vhci_hcd vhci_hcd.0: Device attached
[  643.868028][T10068] vhci_hcd: connection closed
[  643.869534][ T6305] vhci_hcd: stop threads
[  643.879417][ T6305] vhci_hcd: release socket
[  643.884139][ T6305] vhci_hcd: disconnect device
[  644.570121][T10095] general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] PREEMPT SMP KASAN
[  644.582524][T10095] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f]
[  644.591216][T10095] CPU: 0 PID: 10095 Comm: syz.3.1261 Not tainted syzkaller #0
[  644.598976][T10095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  644.609081][T10095] RIP: 0010:wcove_typec_probe+0xd1/0x570
[  644.615000][T10095] Code: 27 00 74 13 49 8d be 90 00 00 00 e8 c9 c6 33 fb 49 8d 86 90 00 00 00 48 89 6c 24 18 48 89 28 49 83 c5 08 4c 89 e8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ef e8 20 c6 33 fb 49 8b 6d 00 4d 8d ae
[  644.637159][T10095] RSP: 0018:ffffc9000cd3fa60 EFLAGS: 00010202
[  644.644041][T10095] RAX: 0000000000000001 RBX: ffff8880206c6000 RCX: dffffc0000000000
[  644.653097][T10095] RDX: dffffc0000000000 RSI: 0000000000000000 RDI: ffff888079365488
[  644.661432][T10095] RBP: ffff8880206c6010 R08: ffff8880793654a7 R09: ffff888079365498
[  644.669866][T10095] R10: dffffc0000000000 R11: ffffed100f26ca95 R12: dffffc0000000000
[  644.677951][T10095] R13: 0000000000000008 R14: ffff888079365428 R15: 1ffff1100f26ca97
[  644.687341][T10095] FS:  00007f46258526c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  644.696407][T10095] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  644.703032][T10095] CR2: 000000110c3eb791 CR3: 00000000297d7000 CR4: 00000000003506f0
[  644.711498][T10095] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  644.721181][T10095] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  644.729813][T10095] Call Trace:
[  644.733186][T10095]  <TASK>
[  644.736153][T10095]  platform_probe+0x137/0x1c0
[  644.740973][T10095]  ? platform_uevent+0xb0/0xb0
[  644.745790][T10095]  really_probe+0x24a/0xb40
[  644.750691][T10095]  ? pm_runtime_barrier+0x147/0x1c0
[  644.755990][T10095]  __driver_probe_device+0x1f5/0x390
[  644.761332][T10095]  device_driver_attach+0xd9/0x1c0
[  644.766502][T10095]  bind_store+0x33b/0x380
[  644.771058][T10095]  ? mutex_lock_nested+0x10/0x10
[  644.776137][T10095]  ? unbind_store+0x300/0x300
[  644.781057][T10095]  ? __virt_addr_valid+0x188/0x540
[  644.786924][T10095]  ? __virt_addr_valid+0x467/0x540
[  644.792265][T10095]  ? sysfs_kf_write+0x183/0x2a0
[  644.797450][T10095]  ? sysfs_kf_read+0x350/0x350
[  644.802865][T10095]  kernfs_fop_write_iter+0x3a0/0x520
[  644.808659][T10095]  vfs_write+0x482/0x9a0
[  644.814156][T10095]  ? file_end_write+0x250/0x250
[  644.819658][T10095]  ? __fget_files+0x3fc/0x460
[  644.825705][T10095]  ? __fdget_pos+0x2ae/0x360
[  644.830608][T10095]  ? ksys_write+0x70/0x260
[  644.835762][T10095]  ksys_write+0x14d/0x260
[  644.840227][T10095]  ? __ia32_sys_read+0x80/0x80
[  644.845487][T10095]  ? lockdep_hardirqs_on+0x94/0x140
[  644.850752][T10095]  do_syscall_64+0x4c/0xa0
[  644.855337][T10095]  ? clear_bhb_loop+0x60/0xb0
[  644.860744][T10095]  ? clear_bhb_loop+0x60/0xb0
[  644.865867][T10095]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  644.871907][T10095] RIP: 0033:0x7f462499e0d9
[  644.876726][T10095] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  644.898129][T10095] RSP: 002b:00007f4625852028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  644.908470][T10095] RAX: ffffffffffffffda RBX: 00007f4624c25fa0 RCX: 00007f462499e0d9
[  644.916821][T10095] RDX: 0000000000000007 RSI: 0000200000000400 RDI: 0000000000000003
[  644.925562][T10095] RBP: 00007f4624a35024 R08: 0000000000000000 R09: 0000000000000000
[  644.934023][T10095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  644.943626][T10095] R13: 00007f4624c26038 R14: 00007f4624c25fa0 R15: 00007ffd53a12588
[  644.953830][T10095]  </TASK>
[  644.957423][T10095] Modules linked in:
[  645.126833][T10095] ---[ end trace 0000000000000000 ]---
[  645.132659][T10095] RIP: 0010:wcove_typec_probe+0xd1/0x570
[  645.138586][T10095] Code: 27 00 74 13 49 8d be 90 00 00 00 e8 c9 c6 33 fb 49 8d 86 90 00 00 00 48 89 6c 24 18 48 89 28 49 83 c5 08 4c 89 e8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ef e8 20 c6 33 fb 49 8b 6d 00 4d 8d ae
[  645.159699][T10095] RSP: 0018:ffffc9000cd3fa60 EFLAGS: 00010202
[  645.167474][T10095] RAX: 0000000000000001 RBX: ffff8880206c6000 RCX: dffffc0000000000
[  645.175994][T10095] RDX: dffffc0000000000 RSI: 0000000000000000 RDI: ffff888079365488
[  645.185145][T10095] RBP: ffff8880206c6010 R08: ffff8880793654a7 R09: ffff888079365498
[  645.197605][T10095] R10: dffffc0000000000 R11: ffffed100f26ca95 R12: dffffc0000000000
[  645.207158][T10095] R13: 0000000000000008 R14: ffff888079365428 R15: 1ffff1100f26ca97
[  645.217214][T10095] FS:  00007f46258526c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  645.239734][T10095] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  645.247047][T10095] CR2: 00007fff275f9378 CR3: 00000000297d7000 CR4: 00000000003506f0
[  645.276134][T10095] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  645.288217][T10095] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  645.298107][T10095] Kernel panic - not syncing: Fatal exception
[  645.306291][T10095] Kernel Offset: disabled
[  645.310640][T10095] Rebooting in 86400 seconds..