last executing test programs:

3m42.534631691s ago: executing program 3 (id=131):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
r0 = io_uring_setup(0x4, &(0x7f0000000040)={0x0, 0x73e9, 0x1c410, 0x4, 0x19c})
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xffffffff80000000, 0x0, 0x0)

3m42.431865867s ago: executing program 3 (id=133):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000180)={'pcl726\x00', [0x4f37, 0x7, 0x3, 0x8, 0x3, 0xb, 0x4, 0x7, 0xa, 0x9202, 0x402, 0xfffffff6, 0x0, 0x1f, 0x10006, 0x101, 0xffffffff, 0x7, 0x3, 0x40000006, 0x6, 0x7fffffff, 0x9, 0x5, 0x5, 0xe69, 0x3d, 0x6, 0x6, 0x0, 0xfffffffe]})

3m42.239400209s ago: executing program 3 (id=136):
syz_mount_image$bfs(&(0x7f0000000100), &(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, &(0x7f0000000500)=ANY=[], 0xc, 0xb2, &(0x7f0000000900)="$eJzs0rFJBEEYBeA3h6ciBuYGdnA9XAXWcFx4l220YrT92IRgagnbgcGmJiPrTGIuiPB9wbz5ecnA/O+fL/eZkocpqbXe5DtqrRepw/h0OpyHcXs6nJNs85am9LwK/9ymf+c+bQfW+WPfutL72yTz8nycl3JszeNry8u/ezgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/KJy93PeZLfr1+v1+AoAAP//pBMb5A==")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0)
pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0)

3m41.904200978s ago: executing program 3 (id=140):
syz_mount_image$jfs(&(0x7f0000000180), &(0x7f0000000100)='./file0\x00', 0x2010880, &(0x7f00000008c0)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=0x0, @ANYBLOB="2c6e6f696e746567726974792c6e6f646973636172642c6e6f646973636172642c6572726f72733d636f6e74696e75652c696f636861727365743d69736f383835392d332c6469736361726400726573697a652c71756f74612c75737271756f74612c726573697a653d3078303030303030303030303030303d30372c696e746567726974792c646973636172642c6e6f71756f74612c6e6f71756f74612c657569643c8c72c5bf762ab3dd5153bdd55a1a26f2c6a42c1df48b34291ea0696f2f1f0a7b31c91bccf7f4707502478f37599eb13d60653683e6a858f2a54586fd6dc9da99078d3e365b7fe2d52d0591c9c049673c6720ed91bb", @ANYRESDEC=0x0, @ANYRES16, @ANYRESHEX, @ANYRESDEC, @ANYRESOCT=0x0, @ANYRES8, @ANYRES64], 0xfe, 0x60ee, &(0x7f0000001080)="$eJzs3UuPHFfZB/Cnr3PxG2eURZTXQmjihEsI8TUYQ4AkC1iwyQJ5i2xNJpGFA8g2yIksPNFsWLDiE4CQWCLEErHgA2TBlh0rVliykUBZUahmzvFUt7vdY8bT1Z7z+0njqqdO9fSp+Xf1xVXVJwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA+O53vne2ExGXf5oWrEX8X/QiuhErdb0eESvra3n9fkS8EDvN8XxEDJYi6tvv/PNsxOsR8cnxiHv3b2/Ui8/tsx/f/v1ff/P9Y+/85XeD0//+w83eG9PWu3XrF//6452DbTMAAACUpqqqqpM+5p9In++7bXcKAJiL/PpfJXn5ka9/+fd3/rRI/VGr1Wq1eg51UzXZnWYREVvN29TvGRyOB4CnzFZ82nYXaJH8i9aPiGNtdwJYaJ22O8ChuHf/9kYn5dtpvh6s77bnc0FG8t/qPLi+Y9p0lvFzTOb1+NqOXjw3pT8rc+rDIsn5d8fzv7zbPkzrHXb+8zIt/+HupU/Fyfn3xvMfc3Ty707Mv1Q5//5j5d+TPwAAAAAALLD8//9rLR//XTr4puzLo47/rs+pDwAAAAAAAADwpB10/L8HjP8HAAAAC6v+rF771fG9ZdO+i61efqkT8czY+kBh0sUyq233AwAAAAAAAAAAAABK0t89h/dSJ2IQEc+srlZVVf80jdeP66C3f9qVvv1Qsraf5AEAYNcnx8eu5e9ELEfEpfRdf4PV1dWqWl5ZrVarlaX8fna4tFytND7X5mm9bGm4jzfE/WFV/7Llxu2aZn1entU+/vvq+xpWvX107AkZpL/mlOaWwgaAZPfV6J5XpCOmqp6d9uYDRtj/jx77P/vR9uMUAAAAOHxVVVWd9HXeJ9Ix/27bnQIA5iK//o8fFziUOuJwf79arVar1epH1k3VZHeaRURsNW9Tv2cwHD8APGW24tO2u0CL5F+0fkS80HYngIXWabsDHIp7929vdFK+nebrQRrfPZ8LMpL/Vmfndvn2k6azjJ9jMq/H13b04rkp/Xl+Tn1YJDn/7nj+l3fbh2m9w85/XqblX2/nWgv9aVvOvzee/5ijk393Yv6lyvn3Hyv/nvwBAAAAAGCB5f//X3P8N28yAAAAAAAAADx17t2/vZGve83H/z8zYT3Xfx5NOf+O/IuU8++O5f/FsfV6jfm7b+/l/8/7tzd+e/Mf/5+n+81/Kc900iOrkx4RnXRPnX6aHmTrHrY96A3rexp0ur1+OuenGrwXV+NabMaZkXW76e+x1352pL3u6WCk/dxIe/+h9vMj7YP0vQPVSm4/FRvxo7gW7+60121LM7Z/eUZ7NaM959+z/xcp599v/NT5r6b2zti0dvfj7kP7fXM66X7euvrZn585/M2ZaTt6D7atqd6+ky30Z+dvcmwYP7mxef3UrSs3b14/G2kysvRcpMkTlvMf7Pws7T3/v7Tbnp/3m/vr3Y+Hj53/otiO/tT8X2rM19v7ypz71oac/zD95PzfTe2T9/+nOf/p+/+rLfQHAAAAAAAAAAAAAAAAHqWqqp1LRN+KiAvp+p+2rs0EAOYrv/5XSV6uVqvVarX66NVN1WRvNouI+HPzNvV7hp9N+mUAwCL7T0T8re1O0Br5Fyx/3189fbntzgBzdePDj35w5dq1zes32u4JAAAAAAAAAPC/yuN/rjfGf345ItbG1hsZ//XtWD/o+J/9PPNggNEnPND3FNvdYa/bGG78xdgZn/vUtPG/T8ajx//uz7i/wYz24Yz2pRntyxOX7qU18UKPhpz/i43xzuv8T4wNv17C+K/jY96XIOd/svF4rvP/wth6zfyrXy9c/lv7XXE7uiP5n775wY9P3/jwo9eufnDl/c33N394/uzZM+cvXLh48eLp965e2zyz++/h9HoB5Pzz2NfOAy1Lzj9nLv+y5Pw/l2r5lyXn//lUy78sOf/8fk/+Zcn5588+8i9Lzv+VVMu/LDn/L6Va/mXJ+b+aavmXJef/5VTLvyw5/9dSLf+y5PxPpVr+Zcn5n071PvL39fBHSM4/H+Gy/5cl55/PbJB/WXL+51It/7Lk/M+nWv5lyfm/nmr5lyXn/5VUy78sOf8LqZZ/WXL+X021/MuS87+YavmXJef/tVTLvyw5/6+nWv5lyfm/kWr5lyXn/41Uy78sOf9vplr+Zcn5fyvV8i9Lzv/NVMu/LHvf/2/GjBkzeabtZyYAAAAAAAAAAAAAYNw8TiduexsBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/sgMHAgAAAABA/q+NUFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYUdOBAAAAAAAPJ/bYSqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoq7N1rjFxnfT/wM3ux1w4hBkJw8jewSYwxzpJdX+IL/7qYcG2AUiCh0Au2612bBd/w2iVQJJsGSiSMiiqqpi/aAkJtpKrCqnhBK0rzourlVWlf0DcVVSWkRlVAAQmprShbzZzneTwznp2z9o7Xs+f5fKT45905M+fMmWdm97vOdwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB2975x7rONoiia/7X+2FQUL2j+fcPkptbnXnerjxAAAABYqf9t/fn8HekTh5ZxpbZt/u4V//j1xcXFxeL9o787/sXFxXTBZFGMry+K1mXRlX//QKN9m+CJYqIx0vbxSMXuRysuH6u4fLzi8nUVl6+vuHyi4vJrTsA1NpQ/j2nd2NbWXzeVp7S4sxhvXba1x7WeaKwfGYk/y2lptK6zOH68mC9OFnPFTMf25baN1vbfvLe5r7cVcV8jbfva0lwhP/zksXgMjXCOt3bs6+ptRt9/QzH5ox9+8tgfn3/u7l6z8jR03F55nNvvax7np8NnymNtFOvTOYnHOdJ2nFt6PCajHcfZaF2v+ffu43x+mcc5evUwV1X3Yz5RjLT+/u3WeRpr/7FeOk9bwuf+6/6iKC5dPezuba7ZVzFSbOz4zMjVx2eiXJHN22gupRcXY9e1Tu9dxjptztmtneu0+zkRH/97w/XGljiG9ofp+59ad83jfr3rNGre66WeK91rcNDPlWFZg3FdfLt1p5/suQa3hvv/yW1Lr8Gea6fHGkz3u20N3le1BkfWjbaOOT0IjdZ1rq7BnR3bj7b21GjNZ7f1X4PT50+dnV74+CdeO3/q6Im5E3Ond+/cObN77979+/dPH58/OTdT/nmDZ3v4bSxG0nPgvnDu4nPg1V3bti/VxS8P7nk40ed5uKlr20E/D8e671xjdZ6Q167p8rnxaPOkT1weKZZ4jrUenx0rfx6m+932PBxrex72/JrS43k4toznYXObszuW9z3LWNt/vY7hZn0t2NS2Bru/H+leg4P+fmRY1uBEWBf/umPprwVbwvE+OXW934+MXrMG090Nrz3Nz6Tv9yf2t0avdXlP84Lb1hUXFubOPfj40fPnz+0swlgVL2lbK93rdWPbfSquWa8j171eD82/4sl7enx+UzhXE69t/jGx5GPV3GbPg/0fq9ZXt97ns+Ozu4owBmy1z2evr+bN85myZJ/z2dzm09Mr/1485dK219/xJV5/Y+7/abm/dFNPjI6Plc/f0XR2xjtejzsfqrHWa1ejte/np5f3ejwe/lvt1+M7+7web+7adtCvx+Pddy6+HjeqftqxMt2P50RYJydn+r8eN7fZvOt61+RY39fj+8NshPP/mpAUUi5qWztLrdu0r7Gx8XC/xuIeOtfp7o7tx0M2a+7r6V03tk6331/e1mi6d1et1jqd7Np20Os0vV4ttU4bVT99uzHdj+dEWBd37u6/TpvbPLNn5a+dG+Jf214711WtwfHRdc1jHk+LsHy9X9wQ1+CDxbHiTHGymG1duq61nhqtfU09tLw1uC78t9qvlZv7rMHtXdsOeg2mr2NLrb3G2LV3fgC6H8+JsC6eeqj/Gmxu86Z9g/3edXv4TNqm7XvX7p+vLfUzr3u6TtPN/JlX8zj/Zl//n802tzm5/3pzZv/z9ED4zG09zlP383ep59RssTrnaXM4zuf2L32emsfT3OaLB5a5ng4VRXHxow+3ft4b/n3lzy985+sd/+7S6990Ln704R/cfvxvr+f4AVj7flqOjeXXurZ/mVrOv/8DAAAAa0LM/SNhJvI/AAAA1EbM/fH/Ck/kfwAAAKiNmPvHwkwyyf+b3/Tc/E8vFqmZvxjEy9NpeKTcLnZcZ8LHk4tXNT//8FfnfvyXF5e375GiKH7yyG/03H7zI/G4SpPhOK+8ufPz117x4rL2f+Sxq9u199e/FG4/3p/lLoNeFdyZoii+ecfnW/uZ/MDl1nzmkSOt+Z5LTz7R3Ob5A+XH8frPvqTc/g9C+ffQ8aMd1382nIfvhTnz9t7nI17va5dfs2Xf+67uL16vcd8LW3f7qQ+Wtxt/T84Xnii3j+d5qeP/q889/bXm9o+/qvfxXxzpffxPh9v9apj//fJy+/bHoPlxvN5nwvHH/cXrPfiVb/U8/iufLbc/+5ZyuyNhxv1vDx9vfctz8+3n6/HG0Y77Vby13C7uf+Y7v926PN5evP3u4584fLnjfHSvj2f+ubyd6a7t4+fjfqK/6Np/83ba12fc/9O/daTjPFft/8p7nn1583a79/9A13ajXdfv/o1Nf/iZz/fcXzyeQ392tuP+HHp3eB6H/T/1wbAew+X/c+XzHfuNjry78/Unbv+lTRc77k/0th+V+7/y+hOt+R+TP/79215w+wsvvbJ57ori2+8tb69q/yf+6EzH8X/5rh2txyNeHjv63ftfStz/uY9NnT6zcGF+tu2stn53zjvK41k/sWFj83jvCK+t3R8fPnP+Q3PnJmcmZ4pisr6/Qu+GfSXMH5Tj0vVef8dj4fG85/e+uXHbP30ufv5fHi0/f/nt5detV4ftvhA+v6l8/BYbK9z/U/fe1Xp+N54pP+7osQ/Alq3/uX9ZG4b73/19QVzvZ1/6odZ5aF7W+roRn9crPP7vzpa3841wXhfDb2a+766r+2vfPv5uhMvvLZ/vKz5/4WUuPq5/Eh7vd36vvP14XPH+fjd8H/OtzZ2vd3F9fOPiSPftt36Lx6XwelJcKi+PW8Xzffn5u3oeXvw9JMWlu1sf/066nbuv624uZeHjC9Mn509feHz6/NzC+emFj3/i8KkzF06fP9z6XZ6HP1x1/auvTxtbr0+zc3v3FDMbiqI4U8yswgvWzTn+5t+Wd/xnHzs2u29m2+zc8aMXjp9/7OzcuRPHFhaOzc0ubDt6/Pjcx6quPz97cOeuA7v37Zo6MT97cP+BA7sPTM2fPtM8jPKgKuyd+cjU6XOHW1dZOLjnwM6HHtozM3XqzOzcwX0zM1MXqq7f+to01bz2r0+dmzt59Pz8qbmphflPzB3ceWDv3l2Vvw3w1NnjC5PT5y6cnr6wMHduurwvk+dbn25+7au6PvW08G/l97PdGuUv4ive9cDe9PtZm776qSVvqtyk6xeIPhd+F80/vOjs/uV8HHP/eJhJJvkfAAAAchBz/7owE/kfAAAAaiPm/vVhJvI/AAAA1EbM/RNhJpnkf/1//f/l9f/Ly/X/8+r/n/1o2Std6/3/2J/X/8/DLe7/r3j/+v/6//Xr/y+/P7/Wj1//X/+faw1b/z/m/g1FkWX+BwAAgBzE3L8xzET+BwAAgNqIuf+2MBP5HwAAAGoj5v4XhJlkkv/1/5fV/99VVbiqf//f+//r/xdrs/8fHxz9/2xcd//+fY92fKj/H+j/6//r/+v/6/+zYuNLXnKr+v8x998eZpJJ/gcAAIAcxNz/wjAT+R8AAABqI+b+O8JM5H8AAACojZj7N4WZZJL/9f+9/7/+v/5/rfv/K33//7aD0f9fG7z/f3/6/xVuuP8/of+/Fvv/44M9/uHu/1cevv4/N8Wwvf9/zP0vCjPJJP8DAABADmLuf3GYifwPAAAAtRFz/0vCTOR/AAAAqI2Y++8MM8kk/+v/6//r/+v/6//33n/1+/+Xf9P/Hy76//3p/1fw/v959f8HfPzD3f8f9Pv/j7+5+/r6//QybP3/mPtfGmaSSf4HAACAHMTcf1eYifwPAAAAtRFz/8vCTOR/AAAAqI2Y+zeHmWSS//X/9f/1//X/9f9777+6/1/S/x8u+v/96f9X0P/X/9f/X17/v8c3v/r/9DJs/f+Y++8OM8kk/wMAAEAOYu6/J8xE/gcAAIDaiLn//4WZyP8AAABQGzH3bwkzyST/6//r/+v/59X/f2Cd/r/+f73p//en/19B/1//X/9/me//f63r6f+vr7oxamPY+v8x9788zCST/A8AAAA5iLn/FWEm8j8AAADURsz9rwwzkf8BAACgNmLunwwzyST/6//Xq///p3/91CsL/X/9/4r917T/H5eB/n/m9P/70/+voP+v/6//vyr9f/IxbP3/mPvvDTPJJP8DAABADmLuvy/MRP4HAACA2oi5//4wE/kfAAAAaiPm/q1hJpnkf/3/evX/I/1//f9++69p/z/R/8+b/n8PbU9S/f8K+v/6/9n3/+N3v/r/DMaw9f9j7n9VmEkm+R8AAAByEHP/tjAT+R8AAABqI+b+V4eZyP8AAABQGzH3bw8zyST/6//r/+v/6//r//fev/7/2qT/35/+fwX9f/3/7Pv/3v+fwRq2/n/M/a8JM8kk/wMAAEAOYu7fEWYi/wMAAEBtxP9/s/z/XuV/AAAAqKOY+6fCTDLJ//r/+v859f8b+v/6//r/taf/35/+fwX9f/1//X/9fwZq2Pr/Mfe/Nswkk/wPAAAAOYi5/8EwE/kfAAAAaiPm/ukwE/kfAAAAaiPm/pkwk0zyv/6//n9O/X/v/6//r/9ff/r//en/V9D/1/+vW/+/KPT/uaWGrf8fc//OMJNM8j8AAADkIOb+XWEm8j8AAADURsz9u8NM5H8AAACojZj794SZZJL/9f/1//X/9f/1/3vvX/9/bdL/70//v4L+v/5/3fr/3v+fW2zY+v8x9z8UZpJJ/gcAAIAcxNy/N8xE/gcAAIDaiLl/X5iJ/A8AAAC1EXP//jCTTPK//n9N+v+/+fcd+9b/1//vt//B9P836P+Hqf8/XGra/+9+Wtww/f8K+v/6//r/+v8M1LD1/2PuPxBmkkn+BwAAgBzE3P+6MBP5HwAAAGoj5v7/H2Yi/wMAAEBtxNz/M2EmmeR//f+a9P+76P/r//fbv/f/1/+vs5r2/wdG/7+C/r/+v/6//j8DdfP7//Fvy+v/x9x/MMwkk/wPAAAAOYi5/2fDTOR/AAAAqI2Y+18fZiL/AwAAQG3E3H8ozCST/K//r/+v/6//f3P6/68vug1j/7+5ePT/60X/vz/9/wr6//r/+v/6/wzUsL3/f8z9bwgzyST/AwAAQA5i7n84zET+BwAAgNqIuf+NYSbyPwAAANRGzP1vCjPJJP/r/+v/6/+vTv9/PLv+v/f/76b/vzr0//vT/6+g/6//r/+v/89ADVv/P+b+N4eZZJL/AQAAIAcx978lzET+BwAAgNqIuf+tYSbyPwAAANRGzP1vCzPJJP/r/+v/6/97/3/9/9771/9fm/T/+9P/L40sdQD6//r/+v/6/wzUsPX/Y+7/uTCTTPI/AAAA5CDm/kfCTOR/AAAAqI2Y+98eZiL/AwAAQG3E3P+OMJNM8r/+v/6//r/+v/5/7/3r/69N+v/96f9X0P/X/9f/1/9noIat/x9z/zvDTDLJ/wAAAJCDmPt/PsxE/gcAAIDaiLn/XWEm8j8AAADURsz9vxBmkkn+1//X/9f/1/8feP+/KIpLw9b/b15J/z8L+v/96f9X6NH/X6//r/+v/6//zw0btv5/zP3vDjPJJP8DAABADmLuf0+YifwPAAAAtRFz/3vDTOR/AAAAqI2Y+x8NM8kk/+v/Z9n/T3dZ/7+k/+/9/3vtX/9/bdL/70//v4L3/9f/1//X/2eghq3/H3P/Y2EmmeR/AAAAyEHM/e8LM5H/AQAAoDZi7v/FMBP5HwAAAGoj5v73h5lkkv/1/7Ps/3v//1Xr/491rI+c+v8TbY9nWpf6//r/q0D/vz/9/wr6//r/w9z/D6t5wxLX1/9nGA1b/z/m/g+EmWSS/wEAACAHMff/UpiJ/A8AAAC1EXP/L4eZyP8AAABQGzH3/0qYSSb5X/9f/1//3/v/e///3vvX/1+b9P/70/+voP+v/z/M/f8K+v8Mo2Hr/8fc/6thJpnkfwAAAMhBzP0fDDOR/wEAAKA2Yu4/HGYi/wMAAEBtxNx/JMwkk/yv/9/d/4/vqKr/r/+v/6//r/+/Fg2u//+y24tC/1//X/9f/1//X/+flRi2/n/M/UfDTDLJ/wAAAJCDmPt/LcxE/gcAAIDaiLn/WJiJ/A8AAAC1EXP/bJhJJvlf/9/7/w+q//8T/X/9/0D/vzf9/9Xh/f/70/+voP+v/6//r//PQA1b/z/m/rkwk0zyPwAAANRY+nFwzP3Hw0zkfwAAAKiNmPtPhJnI/wAAAFAbMfd/KMwkk/yv/6//7/3/b0X/f6xje/3/kv6//v8g6P/3p/9fQf9f/1//X/+fgRq2/n/M/fNhJpnkfwAAAMhBzP0fDjOR/wEAAKA2Yu7/SJiJ/A8AAAC1EXP/yTCTTPK//r/+f+79/0ZRXPL+//r/vfav/7826f/3p/9fQf9f/1//X/+fgRq2/n/M/afCTDLJ/wAAAJCDmPtPh5nI/wAAAFAbMfefCTOR/wEAAKA2Yu4/G2aSSf7X/9f/z73/X9yS9///P/buo0nOs+rjcNslW9IKPgJrVixhA1+BLTuqWFIsAJODMTmDyTmYnHNOJuecs8k5mmioEsXonKPQraclTXv6ee5zXZvzSoXcIzSvXX9cv7rP/c/r/0/T/+v/d2Gtvz92ab/+gv3/He54zd31/zvo/zf9E/MM/b/+f8lfv/5f/8+6ufX/ufvvHbc02f8AAADQQe7++8Qt9j8AAAAMI3f/feMW+x8AAACGkbv/mrilyf7X/+v/9f/6/3P6/xv1//r/ZfP+/7T99//T9P/6/yV//fp//T/r5tb/5+6/X9zSZP8DAABAB7n77x+32P8AAAAwjNz9D4hb7H8AAAAYRu7+B8YtTfa//l//r//X/3v/f/Pn6/+XSf8/Tf+/hf5f/6//1/+zU3Pr/3P3PyhuabL/AQAAoIPc/Q+OW+x/AAAAGEbu/ofELfY/AAAADCN3/0Pjlib7X/+v/9f/6//1/5s/X/+/TDeszvw9Qf+/Tv+/xZb+f7XS/0+56H5+829vOV//Bej/9f+sm1v/n7v/YXFLk/0PAAAAHeTuf3jcYv8DAADAMHL3Xxu32P8AAAAwjNz9j4hbmux//b/+X/+v/9f/b/58/f8yef9/2uH7/9vf9l736Nv/e/9/mvf/9f/6f843t/4/d/91cUuT/Q8AAAAd5O5/ZNxi/wMAAMAwcvc/Km6x/wEAAGAYufsfHbc02f/6/zb9/0Htov/X/+v/9f+j0/9P8/7/Fgd/mztZP9T/6//1//p/Dmdu/X/u/sfELU32PwAAAHSQu/+xcYv9DwAAAMPI3f+4uMX+BwAAgGHk7n983NJk/+v/2/T/3v/X/+v/9f8t6P+n6f+3GOX9/8v8rtl3P39Y+/769f/6f9bNrf/P3f+EuKXJ/gcAAIAOcvc/MW6x/wEAAGAYufufFLfY/wAAADCM3P1Pjlua7H/9v/5/Gf1/foL+X/+v/9f/T9P/T9P/bzFK/3+Z9t3PL/3r1//r/1k3t/4/d/9T4pYm+x8AAAA6yN3/1LjF/gcAAIBh5O5/Wtxi/wMAAMAwcvc/PW5psv/1//r/ZfT/3v/X/+v/9f8XR/8/Tf+/hf5f/6//1/+zU3Pr/3P3Xx+3NNn/AAAA0EHu/mfELfY/AAAADCN3/zPjFvsfAAAAhpG7/1lxS5P9r//X/+v/9f/6/82fr/9fJv3/NP3/Fvp//b/+X//PTs2o/z/rV51YPTtuabL/AQAAoIPc/c+JW+x/AAAAGEbu/ufGLfY/AAAADCN3//Pilib7X/8/m/7/IOcbq/8/uVqt9P+rpv3/ybP+POv7Uv+v/z8C+v9pnfr/O+v/L9m++/mlf/36f/0/62bU/x/8OHf/8+OWJvsfAAAAOsjd/4K4xf4HAACAYeTuf2HcYv8DAADAMHL3vyhuabL/9f+z6f8PjNX/e////O+PTv2/9//X6f+Phv5/Wqf+/3I+X/+v/9f/6//Zrbn1/7n7Xxw3XX3VZf8WAQAAgJnJ3f+SuKXJv/8HAACADnL3vzRusf8BAABgoa5f+5nc/S+LW5rsf/3/bvv/q8/6Of2//v/87w/9v/5f/3/r0/9P0/9vof/X/+v/9f/s1Nz6/9z9L49bmux/AAAA6CB3/w1xi/0PAAAAw8jd/4q4xf4HAACAYeTuf2Xc0mT/6/+9/6//1//r/zd/vv5/mfT/0/T/W+j/9f/77f+Pn/k/9f+M4RL6/1OnTl17q/f/uftfFbc02f8AAADQQe7+V8ct9j8AAAAMI3f/a+IW+x8AAACGkbv/tXFLk/2v/2/a/+e3uv7/gP5f/7/p8/X/y6T/n6b/30L/r//3/r/+n52a2/v/uftfF7c02f8AAADQQe7+18ct9j8AAAAMI3f/G+IW+x8AAACGkbv/jXFLk/2v/2/a/3v/X/+v/z/q/v+Wlf7/SCyi/z954c+fe/9/nf5f/z+hXf9/1zud80P9v/6fdXPr/3P3vyluabL/AQAAoIPc/W+OW+x/AAAAGEbu/rfELfY/AAAADCN3/1vjpmNN9r/+X/+v/9f/6/83f/4Rv/9/9Wq10v/vwCL6/wlz7/+9/6//n9Ku/z+P/l//z7q59f+5+98WtzTZ/wAAANBB7v63xy32PwAAAAwjd/874hb7HwAAAIaRu/+dcUuT/a//1//r//X/w/f/1y2i//f+/47o/6fp/7fQ/+v/9f/6f47Evvr/3P3vilua7H8AAADoIHf/u+MW+x8AAACGkbv/PXGL/Q8AAADDyN3/3rilyf7X/+v/9f/6/+Oz6/9PnPPXa/L+v/5/R/T/0/T/W+j/9f/6/+v1/+zS3N7/z93/vrilyf4HAACADnL3vz9u/U+39j8AAAAMI3f/B+IW+x8AAACGkbv/g3FLk/2v/9f/6//1/8O//6//b0X/P03/v4X+X/+v//f+Pzs1t/4/d/+H4pYm+x8AAAA6yN3/4bjF/gcAAIBh5O7/SNxi/wMAAMAwcvffGLc02f/6f/2//l//r/8//Weo/x+D/n/a0fT/J/X/+v/q56+I/y/Q/+v/t/16xjS3/j93/0fjlib7HwAAADrI3f+xuMX+BwAAgGHk7v943GL/AwAAwCId2/Bzufs/Ebc02f/6f/2//n8u/f+JtT9H/f9p3v/X/18K/f807/9vof+/xH7+duf8aGnv/5//zy/9v/6f3Ztb/5+7/5NxS5P9DwAAAB3k7v9U3GL/AwAAwDBy9386brH/AQAAYBi5+z8TtzTZ//p//b/+fy79v/f/9f/6/13Q/0/T/2+h/9/r+/lL//r1//p/1s2t/8/d/9m4pcn+BwAAgA5y938ubrH/AQAAYBi5+z8ft9j/AAAAMIyD3Z9xWcP9r//X/+v/9f/6/82fr/9fJv3/NP3/Fvp//b/+X//PTs2t///Cwa86sfpi3NJk/wMAAEAHufu/FLfY/wAAADCM3P1fjlvsfwAAABhG7v6vxC1N9r/+X/+/jP7/1KlT1+r/9f/n/n7O9P836f8p+v9p+v8t9P/6f/2//p+dmlv/n7v/q3FLk/0PAAAAHeTu/1rcYv8DAADAMHL3fz1usf8BAABgGLn7vxG3NNn/+v8Z9P8n9P/e/9f/r7z/r//fEf3/NP3/FiP2/ycu/re/737+sPb99ev/9f+sm1v/n7v/m3FLk/0PAAAAHeTu/1bcYv8DAADAMHL3fztusf8BAABgGLn7vxO3NNn/+v+j6////99dl/f/T642f/36f/2//l//f2vT/0/T/28xYv9/Cfbdzy/969f/6/9ZN7f+P3f/d+OWJvsfAAAAOsjd/724xf4HAACAYeTu/37cYv8DAADAMHL3/yBuabL/9f8zeP9/wP7f+/+bvz/0/7Pu/6/U/49B/z9N/7+F/l//r//fUf+f3836/+7m1v/n7v9h3NJk/wMAAEAHuft/FLfY/wAAADCM3P0/jlvsfwAAABhG7v6b4paz9v+mtnsU+n/9v/5f/6//3/z5+v9l0v9Pu9j+//jqcP1/0v/r//X/Xft/7/9z2tz6/9z9P4lb/Pt/AAAAWJyrLvDzuft/GrfY/wAAADCM3P0/i1vsfwAAABhG7v6fxy03X7mvL+lI6f/1//p//b/+f/Pn6/+XSf8/zfv/W+j/d9HP30X/P0b/v1rp/zm8ufX/uft/Ebf49/8AAAAwjNz9v4xb7H8AAAAYRu7+X8Ut9j8AAAAMI3f/r+OWJvtf/6//P2T/f5Bm6v9P0/+fpv/fTP9/NPT/0/T/W+j/vf+v//f+Pzs1t/4/d/9v4pYm+x8AAAA6yN3/27jF/gcAAIBh5O7/Xdxi/wMAAMAwcvf/Pm5psv/31v/Hf9X6/8X3/97/1//r//X/s6L/n6b/30L/r//X/+v/2alL6f9PTv+ldtL/5+7/Q9zSZP8DAABAB7n7/xi32P8AAAAwjNz9f4pb7H8AAAAYRu7+P8ctTfa/9//1//p//b/+f/Pn6/+XSf8/Tf+/Wf1B6f/1//p//T87Nbf3/3P3/yVuabL/AQAAoIPc/X+NW+x/AAAAGEbu/pvjFvsfAAAAhpG7/29xS5P937f/P7bS/+v/k/5f/7/p8/X/y6T/n7bP/v9ut9n+sd7/33v/n1+C/l//r/9nJ+bW/+fu/3vc0mT/AwAAQAe5+/8Rt9j/AAAAMIzc/f+MW+x/AAAAGEbu/n/FLU32/5b+/3j9B4fr/73/v9L/F/2//n/T5+v/l0n/P837/1vo/73/r//faf9/hf6/vcvp/++5+S+1k/4/d/+/45Ym+x8AAAA6yN1/S9xi/wMAAMAwcvf/J26x/wEAAGAYufv/G7c02f993//X/6/0/0X/r//f9Pn6/2XS/0/T/2+h/9f/6/+9/89Oze39/9z9/wsAAP//wqZYgw==")
mkdir(&(0x7f0000000040)='./bus\x00', 0x10b)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c})

3m40.677610809s ago: executing program 3 (id=149):
syz_mount_image$btrfs(&(0x7f0000000180), &(0x7f0000005140)='./file1\x00', 0x0, &(0x7f0000000140)={[{}, {@nossd}, {@nodatasum}, {@barrier}, {@notreelog}]}, 0x1, 0x50ed, &(0x7f000000a2c0)="$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")
r0 = open(&(0x7f0000000080)='./file1\x00', 0x145142, 0x0)
read$FUSE(r0, 0x0, 0x0)

3m39.924368714s ago: executing program 3 (id=150):
syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000f40)='./file1\x00', 0xa00010, &(0x7f00000001c0)=ANY=[@ANYRES64=0x0, @ANYRESDEC=0x0, @ANYRES8=0x0, @ANYRES64, @ANYRES64, @ANYRES64], 0x1, 0xc5a, &(0x7f0000001040)="$eJzs3U9sHNd9B/DfGy3FldxWTOwqThoHm7ZIZcVy9S+mYhXOqqbZBpBlIRRzC8CVuFIXpkiCpBrZSAumlx56CFAUPeTEojUKpGhgNEXQI9O6QHLxocipJ6KFjaDogSkCBCgQMJjZt+KSIm3ZJCVK/nxs8js7897sezPrGZrgmxcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQMTvv3Th5Km0xYYDD6AxAMB9cWnsKydPb3X/BwAeWVe2+/9/AAAAAAAAAAAAAABgv0hRxOORYvbSapqoXnfVL3YGbt0eHxndutqhVNU8UJUvv+qnTp85+4Xnhs/18mJn+j3q77ZPxStjVy40Xpy5OTvXnp9vTzbGpzvXZibb97yHndbf7Hh1ABo3X701ef36fOP0s2c2bL499O7gY0eHzg8/feKpXtnxkdHRsfUi9f7ytQ/dkK7tRngcjCJORIpnvvuT1IqIInZ+LOr399xvdqjqxPGqE+Mjo1VHpjqt6YVy4+XegSgiGn2Vmr1jtPW5iNrAfe3D9poRi2XzywYfL7s3Ntuaa12dajcut+YWOgudmenLqdvasj+NKOJciliKiJXBu3c3EEXUIsW3j6ymq/mpH9Vx+Hw1MHj7dhR72Md7ULazMRCxVDwE52wfG4wiXo4UP3vrWFzL15nqWvO5iJfL/H7EG2W+EJHKD8bZiHe2+BzxcKpFEX9Rnv/zq2myuh70risXv9r48vT1mb6yvevKB7w/3HWleED3h0Ob8v7Y59emehTRqq74q+nD/7ADAAAAAAAAAAAAAAAAwG47FEV8MlK89B9/XI0rjmpc+pHzw38w9Kv9Y8affJ/9lGWfjYjF4t7G5B7MAwMvp8spPeCxxB9l9SjiT/L4v2++T1mnCQAAAAAAAAAAAAAAAAAAYC8V8eNI8fzbx9JS9M8p3pm+0bjSujrVnRW2N/dvb870tbW1tUbqZjPnRM7FnEs5l3Ou5Iwi18/ZzDmRczHnUs7lnCs540Cun7OZcyLnYs6lnMs5V3JGLdfP2cw5kXMx51LO5ZwrOWOfzN0LAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAoKaKIX0SKb319NUWKiGbERHRzefBBtw4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKA2mIr4XKRp/2LyzrhYRqfq361j57Ww0D5b58WgOl/lCNC/kbFVZa37zAbSfnRlIRfwoUgzW37xzwvP5H+i+uvMxiDe+sf7qU7VuHuhtHHp38LGjR84Pj37mye2W01YNOH6xM33rdmN8ZHR0rG91Lb/7x/vWDeX3LXan60TE/Guvv9qamvqbn0ZUC+25vObeF8qPwAev9TAupNpHpacWqoWo7YtmPJi+b1B/UBco9lR5/38nUvzu2//Zu+F37//1+JXuqzt3+Pj5n67f/5/fvKN7vP/XNtfL9//ynr7V/f/xvnXP559GBmoR9YWbswNHI+rzr71+onOzdaN9oz199uTJLw4Pf/HMyYGDEfXrnal239KuHC4AAAAAAAAAAAAAAACA+ycV8aVI0frRampExO1qvNbQ+eGnTzx1IA5U4602jNt+ZezKhcaLMzdn59rz8+3Jxvh059rMZPte365eDfcaHxndk868r0N73P5D9RdnZl+b69z4o4Uttx+uX7g6vzDXurb15jgURUSzf83xqsHjI6NVo6c6remq6uUtB9N/cAOpiP+KFNfONtJn87o8/n/zCP8N4/8XN+9oF8f/f+bw+vi/j/UVLd8zpSJ+Hil+5y+fjM9W7Twcdx2zXO7vIsXxc5/O5eJgWa7Xhu5zBbojA8uyP40U//SLjWV74yEfXy976gMd3IdAef6PRIrv/fl34jfzuo3Pf9j6/B/evKM9ev7DE33rDq8/r6A9N7/jrpPP/4lI8cLjb8ZvVWv+/z2f/9F79saxbuH153Ps0fn/9b51Q/l9f3u3Og8AAAAAAAAAAPAQG0hF/H2k+MFoLT2X193L3/9Nbt7RHv391yf61k1u+Pu/vVvY8UEFAAAAgH1iIBXx40hxY+HNO2OoN47/7hv/+Xvr4z9H0qat1e/5fq16bsBu/v6v31B+34mddxsAAAAAAAAAAAAAAAAAAAD2lZSKeC7Ppz5Rjeef3HY+9eVI8dL/PJPLpaNlud488EPV9/qlmekTF6amZuqx0Lo61W6Mzbautcu6T0SK1b/9dK77pWp+9d5889053tfnYp+LFKP/0CvbnYu9Nzf5E+tlT5VlPxYp/vsfN5bNU1PnuaOrsqfLsn8dKb72L72ya2vl1l7Zo+tlz5RlvxMpfvi1Rm+/h8v99p6P+on1ss9emyl2/6QAAAAAAAAAAAAAAAAAAADwkTOQivizSPG/N5fujOXP8/8P9L2svPGNvvn+N7ldzfM/VM3/v93yh5n/v3quwOJ27woAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI+mFEW8HilmL62m5cHydVf9Ymf61u3xkdGtqx1KVc0DVfnyq37q9JmzX3hu+Fwv37v+bvtkvDJ25ULjxZmbs3Pt+fn2ZGN8unNtZrJ9z3vYaf3NjlcHoHHz1VuT16/PN04/e2bD5ttD7w4+dnTo/PDTJ55ajIiy7PjI6OhYX5nawId+97ukbdYfjCL+KlI8892fpB8MRhSx82PxPp+dvXao6sTxqhPjI6NVR6Y6remFcuPl3oEoIhp9lZq9Y5TP216eix1pRpSfl6Js8PGye2OzrbnW1al243JrbqGz0JmZvpy6rS3704gizqWIpYhYGbx7dwNRxKuR4ttHVtO/DkYc6B2Hz18a+8rJ09u3o9jDPt6Dsp2NgYil4iE4Z/vYYBTxz5HiZ28di38bjKhF9ys+F/Fymd+PeCO65zuVH4yzEe9s8Tni4VSLIv6vPP/nV9Nbg+X1oHddufjVxpenr8/0le1dVx76+8P9tM+vTfUo4ofVFX81/bv/rgEAAAAAAAAAAAAAAAD2kSJ+I1I8//axVI0PvjOmuDN9o3GldXWqO6yvN/avN2Z6bW1trZG62cw5kXMx51LO5ZwrOaPI9XM2y6yvrU3k14s5l3Iu51zJGQdy/ZzNnBM5F3Mu5VzOuZIzarl+zmbOiZyLOZdyLudcyRn7ZOweAAAAAAAAAAAAAAAAAADwaCmqf1J86+uraW2wO7/0RHRz2Xygj7xfBgAA//8XrPrB")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000080)=""/234, 0xea)

3m39.485660079s ago: executing program 32 (id=150):
syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000f40)='./file1\x00', 0xa00010, &(0x7f00000001c0)=ANY=[@ANYRES64=0x0, @ANYRESDEC=0x0, @ANYRES8=0x0, @ANYRES64, @ANYRES64, @ANYRES64], 0x1, 0xc5a, &(0x7f0000001040)="$eJzs3U9sHNd9B/DfGy3FldxWTOwqThoHm7ZIZcVy9S+mYhXOqqbZBpBlIRRzC8CVuFIXpkiCpBrZSAumlx56CFAUPeTEojUKpGhgNEXQI9O6QHLxocipJ6KFjaDogSkCBCgQMJjZt+KSIm3ZJCVK/nxs8js7897sezPrGZrgmxcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQMTvv3Th5Km0xYYDD6AxAMB9cWnsKydPb3X/BwAeWVe2+/9/AAAAAAAAAAAAAABgv0hRxOORYvbSapqoXnfVL3YGbt0eHxndutqhVNU8UJUvv+qnTp85+4Xnhs/18mJn+j3q77ZPxStjVy40Xpy5OTvXnp9vTzbGpzvXZibb97yHndbf7Hh1ABo3X701ef36fOP0s2c2bL499O7gY0eHzg8/feKpXtnxkdHRsfUi9f7ytQ/dkK7tRngcjCJORIpnvvuT1IqIInZ+LOr399xvdqjqxPGqE+Mjo1VHpjqt6YVy4+XegSgiGn2Vmr1jtPW5iNrAfe3D9poRi2XzywYfL7s3Ntuaa12dajcut+YWOgudmenLqdvasj+NKOJciliKiJXBu3c3EEXUIsW3j6ymq/mpH9Vx+Hw1MHj7dhR72Md7ULazMRCxVDwE52wfG4wiXo4UP3vrWFzL15nqWvO5iJfL/H7EG2W+EJHKD8bZiHe2+BzxcKpFEX9Rnv/zq2myuh70risXv9r48vT1mb6yvevKB7w/3HWleED3h0Ob8v7Y59emehTRqq74q+nD/7ADAAAAAAAAAAAAAAAAwG47FEV8MlK89B9/XI0rjmpc+pHzw38w9Kv9Y8affJ/9lGWfjYjF4t7G5B7MAwMvp8spPeCxxB9l9SjiT/L4v2++T1mnCQAAAAAAAAAAAAAAAAAAYC8V8eNI8fzbx9JS9M8p3pm+0bjSujrVnRW2N/dvb870tbW1tUbqZjPnRM7FnEs5l3Ou5Iwi18/ZzDmRczHnUs7lnCs540Cun7OZcyLnYs6lnMs5V3JGLdfP2cw5kXMx51LO5ZwrOWOfzN0LAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAoKaKIX0SKb319NUWKiGbERHRzefBBtw4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKA2mIr4XKRp/2LyzrhYRqfq361j57Ww0D5b58WgOl/lCNC/kbFVZa37zAbSfnRlIRfwoUgzW37xzwvP5H+i+uvMxiDe+sf7qU7VuHuhtHHp38LGjR84Pj37mye2W01YNOH6xM33rdmN8ZHR0rG91Lb/7x/vWDeX3LXan60TE/Guvv9qamvqbn0ZUC+25vObeF8qPwAev9TAupNpHpacWqoWo7YtmPJi+b1B/UBco9lR5/38nUvzu2//Zu+F37//1+JXuqzt3+Pj5n67f/5/fvKN7vP/XNtfL9//ynr7V/f/xvnXP559GBmoR9YWbswNHI+rzr71+onOzdaN9oz199uTJLw4Pf/HMyYGDEfXrnal239KuHC4AAAAAAAAAAAAAAACA+ycV8aVI0frRampExO1qvNbQ+eGnTzx1IA5U4602jNt+ZezKhcaLMzdn59rz8+3Jxvh059rMZPte365eDfcaHxndk868r0N73P5D9RdnZl+b69z4o4Uttx+uX7g6vzDXurb15jgURUSzf83xqsHjI6NVo6c6remq6uUtB9N/cAOpiP+KFNfONtJn87o8/n/zCP8N4/8XN+9oF8f/f+bw+vi/j/UVLd8zpSJ+Hil+5y+fjM9W7Twcdx2zXO7vIsXxc5/O5eJgWa7Xhu5zBbojA8uyP40U//SLjWV74yEfXy976gMd3IdAef6PRIrv/fl34jfzuo3Pf9j6/B/evKM9ev7DE33rDq8/r6A9N7/jrpPP/4lI8cLjb8ZvVWv+/z2f/9F79saxbuH153Ps0fn/9b51Q/l9f3u3Og8AAAAAAAAAAPAQG0hF/H2k+MFoLT2X193L3/9Nbt7RHv391yf61k1u+Pu/vVvY8UEFAAAAgH1iIBXx40hxY+HNO2OoN47/7hv/+Xvr4z9H0qat1e/5fq16bsBu/v6v31B+34mddxsAAAAAAAAAAAAAAAAAAAD2lZSKeC7Ppz5Rjeef3HY+9eVI8dL/PJPLpaNlud488EPV9/qlmekTF6amZuqx0Lo61W6Mzbautcu6T0SK1b/9dK77pWp+9d5889053tfnYp+LFKP/0CvbnYu9Nzf5E+tlT5VlPxYp/vsfN5bNU1PnuaOrsqfLsn8dKb72L72ya2vl1l7Zo+tlz5RlvxMpfvi1Rm+/h8v99p6P+on1ss9emyl2/6QAAAAAAAAAAAAAAAAAAADwkTOQivizSPG/N5fujOXP8/8P9L2svPGNvvn+N7ldzfM/VM3/v93yh5n/v3quwOJ27woAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI+mFEW8HilmL62m5cHydVf9Ymf61u3xkdGtqx1KVc0DVfnyq37q9JmzX3hu+Fwv37v+bvtkvDJ25ULjxZmbs3Pt+fn2ZGN8unNtZrJ9z3vYaf3NjlcHoHHz1VuT16/PN04/e2bD5ttD7w4+dnTo/PDTJ55ajIiy7PjI6OhYX5nawId+97ukbdYfjCL+KlI8892fpB8MRhSx82PxPp+dvXao6sTxqhPjI6NVR6Y6remFcuPl3oEoIhp9lZq9Y5TP216eix1pRpSfl6Js8PGye2OzrbnW1al243JrbqGz0JmZvpy6rS3704gizqWIpYhYGbx7dwNRxKuR4ttHVtO/DkYc6B2Hz18a+8rJ09u3o9jDPt6Dsp2NgYil4iE4Z/vYYBTxz5HiZ28di38bjKhF9ys+F/Fymd+PeCO65zuVH4yzEe9s8Tni4VSLIv6vPP/nV9Nbg+X1oHddufjVxpenr8/0le1dVx76+8P9tM+vTfUo4ofVFX81/bv/rgEAAAAAAAAAAAAAAAD2kSJ+I1I8//axVI0PvjOmuDN9o3GldXWqO6yvN/avN2Z6bW1trZG62cw5kXMx51LO5ZwrOaPI9XM2y6yvrU3k14s5l3Iu51zJGQdy/ZzNnBM5F3Mu5VzOuZIzarl+zmbOiZyLOZdyLudcyRn7ZOweAAAAAAAAAAAAAAAAAADwaCmqf1J86+uraW2wO7/0RHRz2Xygj7xfBgAA//8XrPrB")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000080)=""/234, 0xea)

2m54.361824251s ago: executing program 4 (id=448):
unshare(0x2c020400)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000001b00))

2m54.067472778s ago: executing program 4 (id=451):
unshare(0x28000600)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)

2m53.85913277s ago: executing program 4 (id=453):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x70bd26, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x8000)

2m53.581322307s ago: executing program 4 (id=455):
syz_mount_image$minix(&(0x7f0000000440), &(0x7f0000000280)='./control\x00', 0x4, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0], 0x5, 0x1d3, &(0x7f0000000d80)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c})

2m52.919503795s ago: executing program 4 (id=461):
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x89b0, &(0x7f0000000040)={'macvlan0\x00', 0x1000})

2m52.467448161s ago: executing program 4 (id=468):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000000)={0x0, 0x3000000, 0xb, 0x2, 0x100, &(0x7f0000000600)="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"})
ioctl$VT_RELDISP(r0, 0x5605)

2m52.018221248s ago: executing program 33 (id=468):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000000)={0x0, 0x3000000, 0xb, 0x2, 0x100, &(0x7f0000000600)="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"})
ioctl$VT_RELDISP(r0, 0x5605)

1m3.919327911s ago: executing program 2 (id=1334):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000006040)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x10, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x40000}]}]}]}, 0x3c}}, 0x0)

1m3.570262482s ago: executing program 2 (id=1337):
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[<r1=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f00000002c0)={r1, 0x0, 0x8, 0x0, 0x1000000000003})

1m3.347714735s ago: executing program 2 (id=1341):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8982, &(0x7f0000000100)={0x6, 'team_slave_1\x00', {}, 0x3ff})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000140)={0x0, 'dummy0\x00', {0x2}, 0x81})

1m2.883799522s ago: executing program 2 (id=1347):
syz_mount_image$exfat(&(0x7f0000000240), &(0x7f0000000100)='./file0\x00', 0x4800, &(0x7f0000000380)={[{@allow_utime={'allow_utime', 0x3d, 0x1ff}}, {@gid}, {@utf8}, {@gid}, {@iocharset={'iocharset', 0x3d, 'cp863'}}, {@keep_last_dots}, {@iocharset={'iocharset', 0x3d, 'macinuit'}}, {@time_offset={'time_offset', 0x3d, 0xc}}, {@errors_continue}, {@errors_remount}]}, 0x1, 0x152a, &(0x7f00000037c0)="$eJzs3AuYjtX6MPD7Xms9Y0zS2ySHYa11P7zJYZkkySFJDkmSJElOCUmTbElIDDklDUlIDkNyGEJymJg0zufzISFJmiQJySlZ36X47Hb17b3/9W37+s/9u67nsu53Pfd61vPe72E9j5n5pvOQGo1qVm1ARPCn4C//JANALAAMAIBrACAAgLLxZeMv9OeUmPznDsL+Wg+lXekZsCuJ65+9cf2zN65/9sb1z964/tkb1z974/pnb1x/xrKzTdMKXMtb9t3+8vv/OS8/xPf//9vx9///IlmlxnyxptT1XQBi/tUUrn/2xvX/Xyv4V3bi+mdvXP/sKvZKT4D9F+D3f3aQ4w97uP7ZG9efsezsSt9/vtIbRLL3c3ClX3+MMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxrKH0/4yBQCX2ld6XowxxhhjjDHGGPvr+BxXegaMMcYYY4wxxhj7/w9BgAQFAcRADoiFnBAHAgCuhtxwDUTgWoiH6yAPXA95IR/khwKQAAWhEGgwYIEghMJQBKJwAxSFG6EYFIcSUBIclIJEuAlKw81QBm6BsnArlIPboDxUgIpQCW6HynAHVIE7oSrcBdWgOtSAmnA31IJ7oDbcC3XgPqgL90M9eADqw4PQAB6ChvAwNIJHoDE8Ck2gKTSD5tDif5T/AnSHF6EH9IRk6AW94SXoA32hH/SHAfAyDIRXYBC8CikwGIbAazAUXodh8AYMhxEwEt6EUfAWjIYxMBbGQSqMhwnwNkyEd2ASTIYpMBXSYBpMh3dhBsyEWfAezIb3YQ7MhXkwH9LhA1gACyEDPoRF8BFkwmJYAkthGSyHFbASVsFqWANrYR2shw2wETbBZtgCW2EbbIcd8DHshE9gF+yGPfAp7IXP/s38U/+Q3wUBAQUKVKgwBmMwFmMxDuMwF+bC3JgbIxjBeIzHPJgH82JezI/5MQETsBAWQoMGCQkLY2GMYhSLYlEshsWwBJZAhw4TMRFL481YBstgWSyL5bAclscKWAErYSWsjJWxClbBqlgVq2E1rIE18G68G3thbayNdbAO1sW6l25PYQNsgA2xITbCRtgYG2MTbILNsBm2wBbYEltiK2yFbbANtsW22A7bYRImYXtsjx2wA3bEjtgJO2Fn7IxdsCt2zXohB+CL+CL2xGqiF/bG3tgHU3L0w/7YH1/GgfgKvoKvYgoOxiH4Gr6Gr+MwPInDcQSOxJFYWbyFo3EMkhiHqZiKE3ACTsSJOAkn42Scimk4DafjdJyBM3Emvoez8X18H+fiXJyP6ZiOC3AhZmAGLsJTmImLcQkuxWW4HJfhSlyFK3ENrsU1uB7X40bciJtxM27Frbgdt+PHqADwE9yNuzEF9+Je3If7cD/uxwN4ALMwCw/iQTyEh/AwHsYjeASP4jE8jsfwBJ7Ak3gKT+NpPItn8Rw+l/BVw4+Lr04BcYESSsSIGBErYkWciBO5RC6RW+QWERER8SJe5BF5RF6RV+QX+UWCSBCFRCFhhBEkwhgAEFERFUVFUVFMFBMlRAnhhBOJIlGUFqVFGVFGlBW3inLiNlFeVBCtXSVRSVQWbVwVcaeoKqqKaqK6qCFqipqilqglaovaoo6oI+qKuqKeeEDUF72wHz4kLlSmkRiMjcUQbCKaCnnxE6ylGIatRGvRRjwhRuBwbCdauiTxtGgvRmMH8TcxBp8VncQ47CyeF11EV9FNvCC6i1auh+gpJmEv0VtMxT6ir+gn+osZWF28h7Nz1hCvihQxWAwRr4n5+LoYJt4Qw8UIMVK8KUaJt8RoMUaMFeNEqhgvJoi3xUTxjpgkJospYqpIE9PEdPGumCFmilniPTFbvC/miLlinpgv0sUHYoFYKDLEh2KR+EhkisViiVgqlonlYoVYKVaJ1WKNWCvWifVig9goNonNYovYKraJ7WKH+FjsFJ+IXWK32CM+FXvFZ2Kf+FzsF1+IA+JLkSW+EgfF1+KQ+EYcFt+KI+I7cVQcE8fF9+KE+EGcFKfEaXFGnBU/inPiJ3FeeAESpZBSKhnIGJlDxsqcMk5eJXPJ4OKze62Ml9fJPPJ6mVfmk/llAZkgC8pCUksjrSQZysKyiIzKG2RReaMsJovLErKkdLKUTJQ3ydLyZllG3iLLyltlOXmbLC8ryIqykrxdVpZ3SIj8coxqsrqsIWvKu2Uy3CNry3tlHXmfrCvvl/XkA7K+fFA2kA/JhvJh2Ug+IhvLR2UT2VQ2k81lC/mYbCkfl61ka9lGPiHbyidlO/mUTJJPy/bSX3yJPCs7yedkZ/m87CK7ym7yJ3leetlD9pTQC2Rv+ZLsI/vKfrK/HCBflgPlK3KQfFWmyMFyiHxNDpWvy2HyDTlcjpAj5ZtylHxLjpZj5Fg5TqbK8XKCfFtOlO/ISXKynCKnyjQ5Tfa7ONIsKf9p/tu/kz/o56NvlJvkZrlFbpXb5Ha5Q34sd8qdcpfcJffIPXKv3Cv3yX1yv9wvD8gDMktmyYPyoDwkD8nD8rA8Io/Io/KYPCO/lyfkD/KkPCVPyTPyrDwrz118DkChEkoqpQIVo3KoWJVTxamrVC51tcqtrlERda2KV9epPOp6lVflU/lVAZWgCqpCSiujrCIVqsKqiIqqG/DiC0aVUCWVU6VUorrp38lXRdWNqpgq/qv8S/NL/oP5tVAtVEvVUrVSrVQb1Ua1VW1VO9VOJakk1V61Vx1UB9VRdVSdVCfVWXVWXVQX1U11U91Vd9VD9VDJKln1Vi+pPqqv6qf6qwHqZTVQDVSD1CCVolLUEDVEDVVD1TA1TA1Xw9VINVKNUqPUaDVajVVjVapKVRPUBDVRTVST1CQ1RU1RaSpNTVfT1Qw1Q81Ss9RsNVvNUXPUPDVPpat0tUAtUBkqQy1Si1SmWqwWq6VqqVqulquVaqVarVartWqtWq/Wq0y1SW1SW9QWtU1tUzvUDrVT7VS71C61R+1Re9VetU/tU/vVfnVAHVBZKksdVAfVIXVIHVaH1RF1RB1VR9VxdVydUCfUSXVSnVan1Vl1Vp1T59R5df7Csi8QgQhUoIKYICaIDWKDuCAuyBXkCnIHuYNIEAnig/ggT3B9kDfIF+QPCgQJQcGgUKADE9hAXCx6NLghKBrcGBQLigclgpKBC0oFicFNQeng5qBMcEtQNrg1KBfcFpQPKgQVg0rB7UHl4I6gSnBnUDW4K6gWVA9qBDWDu4NawT1B7eDeoE5wX1A3uD+oFzwQ1A8eDBoEDwUNg4eDRsEjQePg0aBJ0DRoFjQPWvyl43t/Mt/jrofuqZN1L91bv6T76L66n+6vB+iX9UD9ih6kX9UperAeol/TQ/Xreph+Qw/XI/RI/aYepd/So/UYPVaP06l6vJ6g39YT9Tt6kp6sp+ipOk1P09P1u3qGnqln6ff0bP2+nqPn6nl6vk7XH+gFeqHO0B/qRfojnakX6yV6qUa9XK/QK/UqvVqv0Wv1Or1eb9Ab9Sa9WW/RW/U2vV3v0B/rnfoTvUvv1nv0p3qv/kzv05/r/foLfUB/qbP0V/qg/lof0t/ow/pbfUR/p4/qY/q4/l6f0D/ok/qUPq3P6LP6R31O/6TPa39hcX/h690oo0yMiTGxJtbEmTiTy+QyuU1uEzERE2/iTR6Tx+Q1eU1+k98kmARTyBQyF5AhU9gUNlETNUVNUVPMFDMlTAnjjDOJJtGUNqVNGVPGlDVlTTlTzpQ35U1FU9Hcbm43d5g7zJ3mTnOXuctUN9VNTVPT1DK1TG1T29QxdUxdU9fUM/VMfVPfNDANTEPT0DQyjUxj09g0MU1MM9PMtDAtTEvT0rQyrUwb08a0NW1NO9POJJkk0960Nx1MB9PRdDSdTCfT2XQ2XUwX0810M91Nd9PD9DDJJtn0Nr1NH9PH9DP9zAAzwAw0A80gM8ikmBQzxAwxQ81QM8wMM8PNCDPywkLVvGVGmzFmrBlnUk2qmWAmmIlmoplkJpkpZopJM2lmupluZpgZZpaZZWab2WaOmWPmmXkm3aSbBWaByTAZZpFZZDJNpllilphlZplZYVaYVWaVWWPWmHWwzmwwG8wms8lsMVvMNrPN7DA7zE6z0+wyu8wes8fsNXvNPrPP7Df7zQFzwGSZLHPQHDSHzCFz2Bw2R8wRc9QcNcfNcXPCnDAnzUlz2pw2Z02+i9+X3sTanDbOXmVz2attbnuN/cc4vy1gE2xBW8hqm9fm+1VsrLXFbHFbwpa0zpayifam38TlbQVb0Vayt9vK9g5b5TdxLXuPrW3vtXXsfbamvftXcV17v61nH7H1EQFsU9vQNreN7CO2sX3UNrFNbTPb3La1T9p29imbZJ+27e0zv4kX2IV2lV1t19i1dpfdbU/bM/aQ/caetT/aHranHWBftgPtK3aQfdWm2MG/iUfaN+0o+5YdbcfYsXbcb+IpdqpNs9PsdPuunWFn/iZOtx/Y2TbDzrFz7Tw7/+f4wpwy7Id2kf3IZtoAltildpldblfYlf93rkvtervBbrQ77Sd2i91qt9ntdselhbDdbffYT+1e+5k9aL+2++0X9oA9bLPsVz/HF87vsP3WHrHf2aP2mD1uv7cn7A/qUvaFc//e/mTPW2+BkIAkKQoohnJQLOWkOLqKctHVlJuuoQhdS/F0HeWh6ykv5aP8VIASqCAVIk2GLBGFVJiKUJRuoEvTK0ElyVEpSqSbqDTdTGXoFipLt1I5uo3KUwWqSJXodqpMd1AVupOq0l1UjapTDapJd1Mtuodq071Uh+6junQ/1aMHqD49SA3oIWpID1MjeoQa06PUhJpSM2pOLegxakmPUytqTW3oCWpLT1I7eoqS6GlqT89QB/obdaRnqRM9R53peepCXakbvUDd6UXqQT0pmXpRb3qJ+lBf6kf9aQC9TAPpFRpEr1IKDaYh9BoNpddpGL1Bw2kEjaQ3aRS9RaNpDI2lcZRK42kCvU0T6R2aRJNpCk2lNJpG0+ldmkEzaRa9R7PpfZpDc2kezad0+oAW0ELKoA9pEX1EmbSYltBSWkbLaQWtpFW0mtbQWlpH62kDbaRNtJm20FbaRttpB31MO+kT2kW7aQ99SnvpM9pHn9N++oIO0JeURV/RQfqaDtE3dJi+9T3pOzpKx+g4fU8n6Ac6SafoNJ2hs/QjnaOf6Dx5ghBDEcpQhUEYE+YIY8OcYVx4VZgrvDrMHV4TRsJrw/jwujBPeH2YN8wX5g8LhAlhwbBQqEMT2pDCMCwcFgmj4Q1h0fDGsFhYPCwRlgxdWCpMDG8KS4c3h2XCW8Ky4a1hufC2sHxYIXzkvkrh7WHl8I6wSnhnWDW8K6wWVg9rhDXDu8Na4T1h7fDesE54X1gmvD+sFz4Q1g8fDBuED4UNw4fDRuEjYePw0bBJ2DRsFjYPW4SPhS3Dx8NWYeuwTfhE2DZ8MmwXPhUmhU+H7cNnfu6/f+Ef9yeHvcLe4UvhS6H398p50fnR9OgH0QXRhdGM6IfRRdGPopnRxdEl0aXRZdHl0RXRldFV0dXRNdG10XXR9dEN0Y1R72vmAIdOOOmUC1yMy+FiXU4X565yudzVLre7xkXctS7eXefyuOtdXpfP5XcFXIIr6Ao57YyzjlzoCrsiLupucEXdja6YK+5KuJLOuVIu0TV3LVwL19I97lq51q6Ne8I94Z50T7qn3FPuadfePeM6uL+5ju5Z18k9555zz7surqvr5l5w3d343L+8J5Ndb9fb9XF9XD/Xzw1wA9xAN9ANcoNciktxQ9wQN9QNdcPcMDfcDXcj3Ug3yo1yo91oN9aNdaku1U1wE9xEN9FNcpPcFDfFpbk0N91NdzPcDFd55s83GH/h5rl0l+4WuAtrxgy3yC1ymS7TLXFL3DK3zK1wK9wqt8qtcWvcOrfObXAb3Ca3yW1xW9w2t83tcDvcTrfT7fLXXBxvr9vn9rn9br874L50We4rd9B97Q65b9xh96074r5zR90xd9x97064H9xJd8qddmfcWfejO+d+cuedd6mR8ZEJkbcjEyPvRCZFJkemRKZG0iLTItMj70ZmRGZGZkXei8yOvB+ZE5kbmReZH0mPfBBZEFkYyYh8GFkU+SiSGVkcWRJZGlkWWR7xvuCW0Bf2RXzU3+CL+ht9MV/cl/AlvfOlfKK/yZf2N/sy/hZf1t/qy/nbfHlfwVf0j/omvqlv5pv7Fv4x39I/7lv51r6Nf8K39U/6dv4pn+Sf9u39M76D/5vv6J/1nfxzvrN/3nfxXX03/4Lv7l/0PXxPn+x7+d7+Jd/H9/X9fH8/wL/sB/pX/CD/qk/xg/0Q/5of6l/3w/wbfrgf4UfGvOlHXbpEhnE+1Y/3E/zbfqJ/x0/yk/0UP9Wn+Wl+un/Xz/Az/Sz/np/t3/dz/Fw/z8/36f4Dv8Av9Bn+Q7/If+Qz/eJLN5X9Cr/Sr/Kr/Rq/1q/z6/0Gv9Fv8pv9Fr/Vb/Pb/Q7/sd/pP/G7/G6/x3/q9/rP/D7/ud/vv/AH/Jc+y3/lD/qv/SH/jT/sv/VH/Hf+qD/mj/vv/Qn/gz/pT/nT/ow/63/05/xP/jz/zhpjjDHG2L9k/OWm+HXPL8v2Xr+TI/5u594AcPXWAll/339hRbku7y/tviKhbQQAnu7Z+aFLW7VqycnJF/fNlBAUmQtw6X+CLoiBy/FiaANPQhK0htK/O/++outZ+ifjR28FiPu7nFi4HF8e/3MATP6d8R97YuSCcuHp+P/H+HMBihW5nJMTLseLoc3P91daQ5k/mH++lv9k/jm/SAVo9Xc5ueByfHn+ifA4PANJv9qTMcYYY4wxxhj7RV9RseOl689LP/H5e9fnCepyTg64HP+z63PGGGOMMcYYY4xdec927fbUY0lJrTv++40q/6OsXzeu+uOuxvCnRubGv9vwHuDSIwoA/uSAABca8j95Fpv/I8dKufjW+ceuZWd8AP8dpfwrGlf4g4kxxhhjjDH2l7u86P/14+pKTYgxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGMuG/hN/TuxKnyNjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDF2pf2fAAAA//9Z+/79")
open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)

1m2.484388246s ago: executing program 2 (id=1352):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x4f29, 0x80000002, 0x10000, 0x4, 0x0, 0x2, 0x8, 0x7, 0xa, 0x10000100, 0x2, 0x1, 0x1, 0x9, 0x8, 0x101, 0x0, 0x1a449, 0x18003, 0x40000003, 0x2, 0xcaa7, 0x0, 0x8, 0xb, 0xe69, 0x3c, 0x8, 0x6, 0x0, 0xfffffff8]})

1m2.007329593s ago: executing program 2 (id=1359):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r0)
sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r1, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x7, @link='broadcast-link\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x40004)

1m1.539666321s ago: executing program 34 (id=1359):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r0)
sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r1, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x7, @link='broadcast-link\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x40004)

2.981115636s ago: executing program 0 (id=1796):
r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301)
ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200))
ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000000000)=0x1)

2.661618565s ago: executing program 0 (id=1800):
socket$kcm(0x22, 0x2, 0x21)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
close_range(r0, 0xffffffffffffffff, 0x0)

2.411399679s ago: executing program 0 (id=1804):
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@private1, @in=@broadcast, 0x4e23, 0xb, 0x4e22, 0xd9, 0x2, 0x20, 0x80, 0x6c}, {0xffffffffffffffff, 0x7, 0x3, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x0, 0x4, 0xfffffffffffffffa}, {0x0, 0x32b, 0x1, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d2, 0xff}, 0x2, @in6=@loopback, 0x0, 0x0, 0x2, 0x2, 0xf518, 0x6, 0x10000}}, 0xe8)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000003a000b00000000000000000003000000c1fe0080130003000d34d8026a2cb9"], 0x2c}}, 0x0)

2.38551666s ago: executing program 1 (id=1805):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0)
sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x1c, r1, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)

2.247493098s ago: executing program 0 (id=1806):
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x2000000, &(0x7f0000000a00)=ANY=[@ANYBLOB="6c617a7974696d652c6e6f696e6c696e655f78617474722c6c617a7974696d652c6e6f626172726965722c6163746976655f6c6f67733d342c757365725f78617474722c6d6f64653d6c66732c616c6c6f635f6d6f64653d64656661756c742c00be9ee044c45511e65887f6fac9eba6d787c3684a836f23dbf8ad3dd5931c08b46ea5952a332ad2ced40c98a2affa2dad4d623f9ff3ffa81e45095548ab6200f069d0f63d20fd71d3043b0dd5c4cf9785f3f531abc19bc1678f5e0b33006bd1049ca45fd8500d67a5aa6e1c23d9"], 0x1, 0x5514, &(0x7f0000013680)="$eJzs3M1rI2UcB/Bf2u2+uxbx4G0HFqGFTdh0X9Dbqrv4gl2KLwdPmiZpyG6SKU2a1p48eBQP/iei4Mmjf4MHz97Eg+JNWMk8U9n6gkqzjd1+PjD9zjyZ/Ob3hNLyTEICOLEWs19+qsSlOBcR8xFxMaLYr5Rb4XaK5yLickTMPbJVyvHfB05HxPmIuDQpnmpWyoc+uzq+cvPHN37++tszpy58/tV3s5s1MGvPR0R/M+3v9FPmnZT3y/HGuFtk/8a4zPRA/0F5nKfcaa8XFXYa++c1irzeSefnm9vDSW70Gs1JdrobxfjmIF1wOO7s1ymecL+xVRy32utFdod5kZ291NfuXvrbtjccpTqtst6HRfkYjfYzjbd322k+mw+KbA5G5Xiqm7fau5Mcl1leLpp5r1X0sX6YV/r/7c3uYHs3G7e3ht18kN2s1V+o1W9V61t5qz1q36g2+q1bN7KlTm9yWnXUbvRvd/K802vXmnl/OVvqNJvVej1butNe7zYGWb1eu167Vr25XO5dzV69927Wa2VLk3y5O9gedXvDbCPfytIzlrOV2vUXl7Mr9ezt1bVs7a27d1fX3nn/znv3Xlp9/ZXypD+1lS2tXFtZqdavVVfqy8d3/pP/9f9p/h+XTU9x/nAolVk3AHD8WP8D0/fwH8847uv/sP6fCuv/kz1/OBTrfwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAE+v7hS9eK3YW0/GFcvypcuiZ8rgSEXMR8fAvzMfpAzXnyzoLf3P+wh96+KYSRYXJNc6U2/mIuF1uvz79uF8FAAAAeHJ9+dHlT9NqPf1YnHVDHKV002bu4gdTqleJiIXFH6ZQJcqbTfHs4btKJr/fp2J3StWKG1hnp1Qs3XI7Na1q/8r8gTj7SFRSzB1pOwAAwJE4uBI42lUIAAAAR+mTWTfAbBTvtJafxS8/wH8mRfmG4LkDRwAAAMAxVJl1AwAAAMBjV6z/ff8fAAAAPNnS9/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAb+zcTU7qUBQH8NOWvsf7yiPGuVtxBstwCQ4dGhbgJlgCbsENsAacuQQDhrYoNZgY+xXJ75e0t7chf06ZnXtJAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACALj3my9n97cVd05zNtpl2ngYAAAA4Zp0vZ8XFpJz/qe7/q26dVfMkItKIONa7Z/GjlplVOfkHn8/f1fAQUSTsvuNndfyOiMvqeP7f9a8AAAAAp2s1X0zLbr08TYYuiO6NX6/KRZv071VLyUlE5JOnrwdss4NJujudt1BWYZc8ipuW0ooFrHFLYeWS26ittE/JasP4YEjKIe21HAAAoBf1TqDfLgQAAIA+XQ9dAMNIYr+Vud8LLv55/7Yh+Ks2AwAAAL6hZOgCAAAAgM4V/b/3/wEAAMBpK9//BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQJfW+XK2mi+mTXM222baeRoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAF/bnHQVCIAzCYO/6zmTuf1hp0NTUpAqEj78xGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAN7/7y/+JqXEmmXttLD2PJGunxtapsXduHP1hfP0aAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC42J+XFAiBIIiCOeN/J33/w0qCnkGECGh4VFGLBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCLfvfL/4mpcSaZO20sHY8ka1eNravG3oPG0YPx9m8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC42Lmf3yiqOADg39lfWJRYq+mhxmjiQS9SFgS5etA0HvwTTJqyYHXxB/QghJj04s30ZsLF6NEYE0298T9whoQL3jj0gIknD5qZnWkfK+giMLPtfj7Jm/ed2WHe9w1N0++8aQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgMrO23txO9/Mj+JWeezG3StreX9zrM9d27q1lLc8zupMen94Kd3JFptLBAAAgNnRrur7iLjd3V7J+9Z8Uf93q3Pymv+7I6O4qufH6/6qr2r/vP36y50XdgeaH42TX/Ts+nBw7J+pdJ7cLKfbs/95Rqe488Wzl3bxH9J6b/P5nW5xP7Ovr19/p1eEh+rIFgD4P45WfRlUPw/lfb/JxACYGZ2k8K7q//Z8szkBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1KG3GU9XcRYRS529OHfz7pW1oh/bv7Z1a6lqp65e3UqvmV+iGxFn14eDY3VNZB+4eOnyx6vD4eDCfYO5iHjAR48evBwRj//K8XD/6oMJzol47HMX1Bi0yq/1aclnfwQNf2MCAODA6ZYtr+tvd7dX8mPZQsRf399b/7+WxJHW/2N9Wv/f+fDUjXSstP7v1zbDKfHNkQd+tLxx/rPli5cuv7F+fvXc4NzgkzeP99/qnzh98uTp5eJZybInJgAAADyaXtnS+r+1ELEztv5/OIljwvr/82/7X6ZjtWe5/v8Xe4t+TWcCAAAw25575Y/fs/scz3q9+GJ1Y+NCf7Td3T8+2jaQ6kM7VLa0/m8vNJ0VAAAAUIedzeye9f8zSRwTrv8/88OLP6XXbEfEXLn+f3Tt0+GZ+qbTkD8nOquOXyd+4lMFAABgqs2VLV3/7xbv/7d2X3loRcTrrxZhVv4ZwInq//a7X/2YjpW+/3+ixjlOo9bi6H4U/WJEZ7HpjAAAADjInipbXuz/1t1e+ejnw+/3vP8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAULe/AwAA///lFT7r")
open(&(0x7f0000000080)='./file1\x00', 0x66842, 0x90)
lsetxattr$system_posix_acl(&(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="02000000010000000000f400040000000000000020"], 0x1c, 0x0)

2.119586206s ago: executing program 5 (id=1807):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r0, &(0x7f00000001c0)='g', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}, 0x2}, 0x1c)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, 0x0, 0x0)

2.119413346s ago: executing program 1 (id=1808):
setrlimit(0x2, &(0x7f00000000c0)={0x2000000, 0xffffffffffffffff})
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x300000a, 0x32, 0xffffffffffffffff, 0x0)

1.87205427s ago: executing program 1 (id=1809):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000440)={0x7}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="840000001a000100000000000000000080"], 0x84}}, 0x20048010)

1.735455968s ago: executing program 1 (id=1810):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, 0x0)

1.735224508s ago: executing program 6 (id=1811):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6)
ioctl$sock_bt_hci(r0, 0x800448d5, 0x0)

1.511442331s ago: executing program 6 (id=1812):
r0 = add_key$user(&(0x7f0000002100), &(0x7f0000002180)={'syz', 0x1}, &(0x7f00000021c0)='b', 0x1, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f0000000040), &(0x7f0000002340)={'syz', 0x3}, &(0x7f0000000100)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b959acafd2c12863045265bcbc2c9426ac3f614746b436fe86a72dc642dd67d970604a69b4f22cd0076beedc18056ab4bea4c825b69a7a77adcd5488684872b1bb9eb84586549e11b080468668e8fd0e52ce0705a", 0xc0, 0xffffffffffffffff)
keyctl$dh_compute(0x17, &(0x7f0000000200)={r0, r1, r0}, &(0x7f0000000280)=""/174, 0xae, &(0x7f00000003c0)={&(0x7f0000000340)={'sha512\x00'}})

1.466425364s ago: executing program 1 (id=1813):
syz_mount_image$jfs(&(0x7f0000000100), &(0x7f00000000c0)='./file1\x00', 0x1010006, &(0x7f0000000480)=ANY=[@ANYBLOB='quota,noquota,discard=0x0000000000000007,discard=0x00000000000004e5,uid=', @ANYRESHEX=0x0, @ANYBLOB=',nointegrity,gid=', @ANYRESHEX=0x0, @ANYBLOB=',iocharset=koi8-u,uid=', @ANYRESHEX=0xee01, @ANYBLOB='\x00'], 0x24, 0x61b6, &(0x7f00000075c0)="$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")
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000280)='./bus\x00', 0x810408, 0x0, 0xff, 0x0, &(0x7f00000007c0))
rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000a00)='./bus/file0\x00')

1.385382759s ago: executing program 6 (id=1814):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000005c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x1000000000000, &(0x7f0000000340)="cb"})

1.124439184s ago: executing program 6 (id=1815):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x503, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x5}, 0x20000000)

1.120258194s ago: executing program 0 (id=1816):
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e25, 0x2, @mcast2, 0xb}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)

1.032042199s ago: executing program 5 (id=1817):
syz_mount_image$romfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f00000001c0), 0x1, 0x12d, &(0x7f0000000200)="$eJzs2r9Kw1AUBvCjCEIfwamQgHXIf62DuyA4+QSG9t704o23JIK0U/EFFIfrI7i6iW4+QmafQN/AKZI2sTZ316Hfb7kfOZeTZDnTcTKVBjx3iPZm92cfm5lKu/3ocMADHtPCCRF1q1CU5YNLhvOfelHOXOOC9VqfvUSfvnAhWWj2AAAAAAAAAAAAAAAAAAAAAABYE9ZnHTojrR65kCz4Vc0n04tYSpblzROb6h0d4lodVfejlX69LyJ7vr8j9PFNVfdX6nbTaXek1Ub7fd5VOvbyydQRaZywhF2GYdT3933/IPTmvbx2R/uu/iYqyuexuU9kPy33id59c5+IOotja0fo2+t29+X/IyAgIDShPT9ouB1Zb9X8cAdKDv9wfhgTDeCffAcAAP//NHw5bA==")
r0 = open(&(0x7f00000000c0)='.\x00', 0x808000, 0x0)
getdents(r0, &(0x7f0000001fc0)=""/184, 0x20002078)

728.108357ms ago: executing program 5 (id=1818):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x18, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x90}}, 0x0)

523.536049ms ago: executing program 5 (id=1819):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180000000000000000008000540000000000500010001"], 0x24}}, 0x0)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000280)={0x24, 0x1, 0x4, 0x5, 0x0, 0x0, {}, [@NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x20000808)

480.878891ms ago: executing program 6 (id=1820):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xc, 0x1}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x37)

386.391847ms ago: executing program 5 (id=1821):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000280), &(0x7f0000000000)=""/6, 0x2}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r0}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20)

273.303004ms ago: executing program 6 (id=1822):
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000000)='./file1\x00', 0x1000801, &(0x7f0000002180)=ANY=[], 0xff, 0x23b, &(0x7f0000002540)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0)
getdents64(r0, 0x0, 0x0)

196.885828ms ago: executing program 5 (id=1823):
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0)

3.493269ms ago: executing program 1 (id=1824):
syz_mount_image$ext4(&(0x7f0000002180)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008802, &(0x7f0000000000)={[{@jqfmt_vfsv1}, {@abort}, {@discard}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@data_ordered}, {@mblk_io_submit}, {@usrquota}, {@nodioread_nolock}, {@errors_remount}, {}, {@auto_da_alloc}]}, 0x9, 0x606, &(0x7f0000000600)="$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")
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCGSOFTCAR(r0, 0x5414, &(0x7f0000000040))

0s ago: executing program 0 (id=1825):
timer_create(0x2, 0x0, &(0x7f0000044000)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x9}}, 0x0)
timer_settime(r0, 0x1, &(0x7f00000000c0)={{0x77359400}, {0x0, 0x989680}}, &(0x7f0000000100))

kernel console output (not intermixed with test programs):

r at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  230.286100][ T5813] XFS (loop2): Please unmount the filesystem and rectify the problem(s)
[  230.717695][ T9069] loop2: detected capacity change from 0 to 1024
[  230.748241][ T9069] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[  230.770842][ T9069] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869)
[  230.797472][ T9069] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  230.829712][ T9069] EXT4-fs error (device loop2): ext4_get_journal_inode:5816: inode #5: comm syz.2.1067: unexpected bad inode w/o EXT4_IGET_BAD
[  230.869730][ T9077] loop0: detected capacity change from 0 to 64
[  230.884090][ T9069] EXT4-fs (loop2): no journal found
[  230.889729][ T9069] EXT4-fs (loop2): can't get journal size
[  230.929711][ T9069] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8800e11c, mo2=0102]
[  230.945038][ T9074] bridge0: port 1(bridge_slave_0) entered disabled state
[  230.990129][ T9074] bridge0: port 2(bridge_slave_1) entered disabled state
[  231.003443][ T9069] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  231.206806][ T5769] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  231.247008][ T9083] loop0: detected capacity change from 0 to 256
[  231.360197][ T9079] bridge0: port 1(bridge_slave_0) entered blocking state
[  231.367524][ T9079] bridge0: port 1(bridge_slave_0) entered forwarding state
[  231.409478][ T9079] bridge0: port 2(bridge_slave_1) entered blocking state
[  231.416738][ T9079] bridge0: port 2(bridge_slave_1) entered forwarding state
[  231.869708][ T9094] hpfs: Bad magic ... probably not HPFS
[  231.893018][ T9094] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000).
[  231.925865][ T9094] qnx6: wrong signature (magic) in superblock #1.
[  231.945282][ T9094] qnx6: unable to read the first superblock
[  232.223837][ T9081] loop1: detected capacity change from 0 to 32768
[  232.245668][ T9104] loop0: detected capacity change from 0 to 256
[  232.372218][ T9104] FAT-fs (loop0): Directory bread(block 64) failed
[  232.407771][ T9104] FAT-fs (loop0): Directory bread(block 65) failed
[  232.414489][ T9104] FAT-fs (loop0): Directory bread(block 66) failed
[  232.449146][ T9104] FAT-fs (loop0): Directory bread(block 67) failed
[  232.478401][ T9104] FAT-fs (loop0): Directory bread(block 68) failed
[  232.485003][ T9104] FAT-fs (loop0): Directory bread(block 69) failed
[  232.528571][ T9104] FAT-fs (loop0): Directory bread(block 70) failed
[  232.535183][ T9104] FAT-fs (loop0): Directory bread(block 71) failed
[  232.575716][ T9104] FAT-fs (loop0): Directory bread(block 72) failed
[  232.621443][ T9104] FAT-fs (loop0): Directory bread(block 73) failed
[  233.139740][ T9121] loop1: detected capacity change from 0 to 2048
[  233.259799][ T9121]  loop1: p2 p3 < > p4 < p5 >
[  233.264946][ T9121] loop1: partition table partially beyond EOD, truncated
[  233.314544][ T9121] loop1: p3 start 4225 is beyond EOD, truncated
[  233.331318][ T9089] loop2: detected capacity change from 0 to 32768
[  233.354085][ T9129] loop0: detected capacity change from 0 to 256
[  233.411916][ T9089] gfs2: fsid=norgrplvb: Trying to join cluster "lock_nolock", "norgrplvb"
[  233.456952][ T9089] gfs2: fsid=norgrplvb: Now mounting FS (format 0)...
[  233.514395][ T9129] FAT-fs (loop0): Directory bread(block 64) failed
[  233.527247][ T9129] FAT-fs (loop0): Directory bread(block 65) failed
[  233.533960][ T9129] FAT-fs (loop0): Directory bread(block 66) failed
[  233.555548][ T9129] FAT-fs (loop0): Directory bread(block 67) failed
[  233.600655][ T9129] FAT-fs (loop0): Directory bread(block 68) failed
[  233.660713][ T9129] FAT-fs (loop0): Directory bread(block 69) failed
[  233.701102][ T9129] FAT-fs (loop0): Directory bread(block 70) failed
[  233.742769][ T9089] gfs2: fsid=norgrplvb.s: journal 0 mapped with 5 extents in 0ms
[  233.755622][ T9129] FAT-fs (loop0): Directory bread(block 71) failed
[  233.788815][ T9129] FAT-fs (loop0): Directory bread(block 72) failed
[  233.807353][ T9129] FAT-fs (loop0): Directory bread(block 73) failed
[  233.873263][ T5908] udevd[5908]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory
[  233.886145][ T5773] udevd[5773]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory
[  233.899706][ T5781] udevd[5781]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[  234.008483][ T9089] gfs2: fsid=norgrplvb.s: first mount done, others may mount
[  234.801268][ T9162] loop0: detected capacity change from 0 to 4096
[  234.831238][ T9162] EXT4-fs: Ignoring removed mblk_io_submit option
[  234.887266][    T9] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  234.897508][ T9162] EXT4-fs (loop0): Test dummy encryption mode enabled
[  234.930576][ T9162] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  235.036754][ T9171] program syz.2.1100 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  235.102698][    T9] usb 6-1: Using ep0 maxpacket: 16
[  235.146963][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  235.187186][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  235.196990][    T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  235.258950][    T9] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  235.285646][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  235.315592][    T9] usb 6-1: config 0 descriptor??
[  235.415918][ T9162] fscrypt: AES-256-XTS using implementation "xts-aes-aesni"
[  235.522806][ T9183] loop2: detected capacity change from 0 to 512
[  235.601929][ T9183] EXT4-fs error (device loop2): ext4_orphan_get:1398: inode #15: comm syz.2.1108: iget: bad i_size value: 38620345925642
[  235.629200][ T9183] EXT4-fs error (device loop2): ext4_orphan_get:1403: comm syz.2.1108: couldn't read orphan inode 15 (err -117)
[  235.643381][ T9183] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  235.715974][ T5769] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  235.814257][    T9] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0
[  235.837584][    T9] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0
[  235.844881][    T9] microsoft 0003:045E:07DA.0013: unbalanced collection at end of report description
[  235.894304][    T9] microsoft 0003:045E:07DA.0013: parse failed
[  235.927602][    T9] microsoft: probe of 0003:045E:07DA.0013 failed with error -22
[  235.952328][ T5765] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  236.040494][    T9] usb 6-1: USB disconnect, device number 8
[  236.159526][ T9196] loop1: detected capacity change from 0 to 64
[  236.171283][ T9194] loop0: detected capacity change from 0 to 256
[  236.202643][ T9194] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d)
[  237.067657][ T9222] loop2: detected capacity change from 0 to 1024
[  237.098889][ T9222] hfsplus: gid requires an argument
[  237.105744][ T9222] hfsplus: unable to parse mount options
[  237.166743][ T9228] loop0: detected capacity change from 0 to 736
[  237.279941][ T9230] loop1: detected capacity change from 0 to 512
[  237.288656][ T9230] EXT4-fs: Ignoring removed oldalloc option
[  237.376992][ T9230] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: comm syz.1.1133: Parent and EA inode have the same ino 15
[  237.492000][ T9230] EXT4-fs (loop1): 1 orphan inode deleted
[  237.504829][ T9230] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  237.710757][ T5767] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  237.732660][ T9242] loop0: detected capacity change from 0 to 256
[  237.851785][ T9242] FAT-fs (loop0): Directory bread(block 64) failed
[  237.877504][ T9242] FAT-fs (loop0): Directory bread(block 65) failed
[  237.884208][ T9242] FAT-fs (loop0): Directory bread(block 66) failed
[  237.920920][ T9242] FAT-fs (loop0): Directory bread(block 67) failed
[  237.943552][ T9242] FAT-fs (loop0): Directory bread(block 68) failed
[  237.969900][ T9242] FAT-fs (loop0): Directory bread(block 69) failed
[  237.986840][ T9242] FAT-fs (loop0): Directory bread(block 70) failed
[  238.014760][ T9242] FAT-fs (loop0): Directory bread(block 71) failed
[  238.047915][ T9242] FAT-fs (loop0): Directory bread(block 72) failed
[  238.054527][ T9242] FAT-fs (loop0): Directory bread(block 73) failed
[  238.227270][ T5851] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  238.427270][ T5851] usb 6-1: Using ep0 maxpacket: 16
[  238.452065][ T5851] usb 6-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[  238.487525][ T5851] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  238.522689][ T5851] usb 6-1: Product: syz
[  238.537300][ T5851] usb 6-1: Manufacturer: syz
[  238.541969][ T5851] usb 6-1: SerialNumber: syz
[  238.570663][ T5851] usb 6-1: config 0 descriptor??
[  238.579326][ T9256] loop1: detected capacity change from 0 to 64
[  238.599661][ T5851] visor 6-1:0.0: Sony Clie 3.5 converter detected
[  238.618625][ T9257] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1142'.
[  238.631132][ T9254] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1142'.
[  239.034978][ T5851] usb 6-1: Sony Clie 3.5 converter now attached to ttyUSB0
[  239.231820][ T9271] usb usb1: check_ctrlrecip: process 9271 (syz.2.1150) requesting ep 01 but needs 81
[  239.253533][ T6136] usb 6-1: USB disconnect, device number 9
[  239.267931][ T6136] clie_3.5 ttyUSB0: Sony Clie 3.5 converter now disconnected from ttyUSB0
[  239.277063][ T6136] visor 6-1:0.0: device disconnected
[  239.369981][ T9273] loop1: detected capacity change from 0 to 64
[  239.463011][   T28] audit: type=1800 audit(1769604505.183:60): pid=9273 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1151" name="file1" dev="loop1" ino=8 res=0 errno=0
[  239.633268][ T9277] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1153'.
[  239.702209][ T9264] loop0: detected capacity change from 0 to 32768
[  239.736169][ T9264] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  239.901659][ T9264] XFS (loop0): Ending clean mount
[  239.910064][ T9264] XFS (loop0): Quotacheck needed: Please wait.
[  240.055571][ T9264] XFS (loop0): Quotacheck: Done.
[  240.203204][ T5765] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  240.334303][ T9305] loop5: detected capacity change from 0 to 128
[  240.413692][ T5773] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  240.468242][ T9308] EXT4-fs: Ignoring removed oldalloc option
[  240.641719][ T9308] EXT4-fs (loop2): 1 truncate cleaned up
[  240.689201][ T9308] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  240.830578][ T9315] hfsplus: request for non-existent node 3 in B*Tree
[  240.890558][ T9315] hfsplus: request for non-existent node 3 in B*Tree
[  240.948849][ T5769] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  241.561298][ T9311] set_capacity_and_notify: 2 callbacks suppressed
[  241.561316][ T9311] loop1: detected capacity change from 0 to 32768
[  241.634520][ T9311] ERROR: (device loop1): dbAlloc: the hint is outside the map
[  241.634520][ T9311] 
[  241.656340][ T9311] ERROR: (device loop1): remounting filesystem as read-only
[  241.665378][ T9334] loop5: detected capacity change from 0 to 2048
[  241.688167][ T9334] EXT4-fs: Ignoring removed mblk_io_submit option
[  241.760331][ T9334] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  241.792070][   T28] audit: type=1800 audit(1769604507.513:61): pid=9334 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1177" name="file1" dev="loop5" ino=15 res=0 errno=0
[  241.886584][ T7278] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  241.897575][ T6136] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  242.017389][ T9343] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1182'.
[  242.055461][ T9343] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1182'.
[  242.107307][ T6136] usb 3-1: Using ep0 maxpacket: 32
[  242.121410][ T6136] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  242.153022][ T6136] usb 3-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00
[  242.187467][ T6136] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  242.227973][ T6136] usb 3-1: config 0 descriptor??
[  242.503224][ T9358] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1186'.
[  242.644068][ T9360] smc: net device bond0 applied user defined pnetid SYZ0
[  242.675195][ T6136] elo 0003:04E7:0009.0014: hidraw0: USB HID v0.00 Device [HID 04e7:0009] on usb-dummy_hcd.2-1/input0
[  242.861103][ T5851] usb 3-1: USB disconnect, device number 12
[  242.987868][ T9367] tipc: Started in network mode
[  242.997226][ T9367] tipc: Node identity , cluster identity 4711
[  243.019576][ T9367] tipc: Failed to obtain node identity
[  243.025185][ T9367] tipc: Enabling of bearer <eth:wg0> rejected, failed to enable media
[  243.182072][ T9348] loop5: detected capacity change from 0 to 40427
[  243.193472][ T9369] netlink: 'syz.0.1191': attribute type 2 has an invalid length.
[  243.225983][ T9348] F2FS-fs (loop5): invalid crc value
[  243.241760][ T9348] F2FS-fs (loop5): Found nat_bits in checkpoint
[  243.362458][ T9348] F2FS-fs (loop5): Start checkpoint disabled!
[  243.382864][ T9348] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[  243.399051][ T9362] loop1: detected capacity change from 0 to 32768
[  243.556467][ T9375] loop2: detected capacity change from 0 to 256
[  243.634898][ T9375] FAT-fs (loop2): Directory bread(block 64) failed
[  243.644821][ T9375] FAT-fs (loop2): Directory bread(block 65) failed
[  243.660435][   T48] kworker/u4:3: attempt to access beyond end of device
[  243.660435][   T48] loop1: rw=1, sector=2621792, nr_sectors = 8 limit=32768
[  243.685282][ T9375] FAT-fs (loop2): Directory bread(block 66) failed
[  243.715559][ T9375] FAT-fs (loop2): Directory bread(block 67) failed
[  243.725774][ T9375] FAT-fs (loop2): Directory bread(block 68) failed
[  243.731378][  T113] blkno = 5002c, nblocks = 1
[  243.737036][  T113] ERROR: (device loop1): dbUpdatePMap: blocks are outside the map
[  243.737036][  T113] 
[  243.746155][ T9375] FAT-fs (loop2): Directory bread(block 69) failed
[  243.763785][ T9375] FAT-fs (loop2): Directory bread(block 70) failed
[  243.765847][  T113] ERROR: (device loop1): remounting filesystem as read-only
[  243.777944][ T9375] FAT-fs (loop2): Directory bread(block 71) failed
[  243.791829][ T9375] FAT-fs (loop2): Directory bread(block 72) failed
[  243.792152][   T32] kworker/u4:2: attempt to access beyond end of device
[  243.792152][   T32] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  243.807417][ T9375] FAT-fs (loop2): Directory bread(block 73) failed
[  243.824304][   T32] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  244.410051][ T9383] netlink: 4436 bytes leftover after parsing attributes in process `syz.1.1194'.
[  244.422380][ T9383] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096
[  245.016821][ T9381] loop5: detected capacity change from 0 to 32768
[  245.076821][ T9381] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  245.281709][ T9381] XFS (loop5): Ending clean mount
[  245.300732][ T9381] XFS (loop5): Quotacheck needed: Please wait.
[  245.316245][ T9379] loop2: detected capacity change from 0 to 65536
[  245.395396][ T9379] XFS (loop2): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  245.456367][ T9381] XFS (loop5): Quotacheck: Done.
[  245.475232][ T9379] XFS (loop2): Ending clean mount
[  245.518105][  T968] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  245.543620][ T7278] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  245.563885][ T5769] XFS (loop2): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  245.733997][  T968] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  245.744535][  T968] usb 2-1: New USB device found, idVendor=11ff, idProduct=3331, bcdDevice= 0.00
[  245.755086][  T968] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  245.784982][  T968] usb 2-1: config 0 descriptor??
[  246.168128][ T9416] loop5: detected capacity change from 0 to 128
[  246.198246][ T9416] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  246.226747][  T968] gembird 0003:11FF:3331.0015: unknown main item tag 0x0
[  246.238298][ T9416] hpfs: filesystem error: improperly stopped
[  246.252531][  T968] gembird 0003:11FF:3331.0015: unknown main item tag 0x0
[  246.259877][ T9416] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  246.259944][ T9416] hpfs: You really don't want any checks? You are crazy...
[  246.260514][ T9416] hpfs: hpfs_map_sector(): read error
[  246.284916][ T9416] hpfs: code page support is disabled
[  246.294421][  T968] gembird 0003:11FF:3331.0015: unknown main item tag 0x0
[  246.305286][  T968] gembird 0003:11FF:3331.0015: unknown main item tag 0x0
[  246.313550][  T968] gembird 0003:11FF:3331.0015: unknown main item tag 0x0
[  246.325137][ T9416] hpfs: hpfs_map_4sectors(): unaligned read
[  246.325893][  T968] gembird 0003:11FF:3331.0015: hidraw0: USB HID v0.00 Device [HID 11ff:3331] on usb-dummy_hcd.1-1/input0
[  246.357657][ T9416] hpfs: hpfs_map_4sectors(): unaligned read
[  246.363628][ T9416] hpfs: filesystem error: unable to find root dir
[  246.422154][ T9416] hpfs: hpfs_map_4sectors(): unaligned read
[  246.441481][  T968] usb 2-1: USB disconnect, device number 16
[  246.537285][ T9419] fido_id[9419]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  246.721051][ T9422] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  246.984259][ T9431] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1211'.
[  247.527793][ T9448] bridge0: port 1(bridge_slave_0) entered disabled state
[  247.559113][ T9448] bridge0: port 2(bridge_slave_1) entered disabled state
[  247.779313][ T9451] bridge0: port 1(bridge_slave_0) entered blocking state
[  247.786595][ T9451] bridge0: port 1(bridge_slave_0) entered forwarding state
[  247.826524][ T9451] bridge0: port 2(bridge_slave_1) entered blocking state
[  247.833840][ T9451] bridge0: port 2(bridge_slave_1) entered forwarding state
[  247.894066][ T9459] loop0: detected capacity change from 0 to 4096
[  247.910431][ T9459] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512).
[  248.385369][ T9473] loop0: detected capacity change from 0 to 256
[  248.490736][ T9473] FAT-fs (loop0): Directory bread(block 64) failed
[  248.499989][ T9473] FAT-fs (loop0): Directory bread(block 65) failed
[  248.506665][ T9473] FAT-fs (loop0): Directory bread(block 66) failed
[  248.537971][ T9473] FAT-fs (loop0): Directory bread(block 67) failed
[  248.557636][ T9473] FAT-fs (loop0): Directory bread(block 68) failed
[  248.564256][ T9473] FAT-fs (loop0): Directory bread(block 69) failed
[  248.608065][ T9473] FAT-fs (loop0): Directory bread(block 70) failed
[  248.614675][ T9473] FAT-fs (loop0): Directory bread(block 71) failed
[  248.655056][ T9473] FAT-fs (loop0): Directory bread(block 72) failed
[  248.677930][ T9473] FAT-fs (loop0): Directory bread(block 73) failed
[  248.710916][ T9477] loop2: detected capacity change from 0 to 164
[  249.112154][ T9483] loop2: detected capacity change from 0 to 2048
[  249.127999][ T9485] sg_write: data in/out 124/12 bytes for SCSI command 0xdf-- guessing data in;
[  249.127999][ T9485]    program syz.0.1236 not setting count and/or reply_len properly
[  249.150665][ T9483] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  249.222017][ T9483] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  249.254779][ T9468] loop1: detected capacity change from 0 to 32768
[  249.265685][ T9483] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
[  249.299768][ T9468] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.1228 (9468)
[  249.300604][ T9483] UDF-fs: Scanning with blocksize 512 failed
[  249.361591][ T9468] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  249.382743][ T9468] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  249.391148][ T9483] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  249.412834][ T9468] BTRFS info (device loop1): setting nodatacow, compression disabled
[  249.426394][ T9468] BTRFS info (device loop1): force clearing of disk cache
[  249.459022][ T9468] BTRFS info (device loop1): enabling ssd optimizations
[  249.475850][ T9468] BTRFS info (device loop1): using spread ssd allocation scheme
[  249.501245][ T9483] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  249.517404][ T9468] BTRFS info (device loop1): turning off barriers
[  249.540315][ T9468] BTRFS info (device loop1): disabling free space tree
[  249.557607][ T9468] BTRFS info (device loop1): not using ssd optimizations
[  249.573659][ T9468] BTRFS info (device loop1): not using spread ssd allocation scheme
[  249.582778][ T9483] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  249.787962][ T9468] BTRFS info (device loop1): rebuilding free space tree
[  249.813648][   T28] audit: type=1326 audit(1769604515.533:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9509 comm="syz.5.1242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd12259aeb9 code=0x7ffc0000
[  249.869263][   T28] audit: type=1326 audit(1769604515.533:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9509 comm="syz.5.1242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd12259aeb9 code=0x7ffc0000
[  249.903405][ T9513] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1241'.
[  249.920380][ T9513] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1241'.
[  249.930063][ T9468] BTRFS info (device loop1): disabling free space tree
[  249.948810][ T9468] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  249.977600][   T28] audit: type=1326 audit(1769604515.573:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9509 comm="syz.5.1242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd12259aeb9 code=0x7ffc0000
[  250.017248][ T9468] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  250.059718][   T28] audit: type=1326 audit(1769604515.573:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9509 comm="syz.5.1242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd12259aeb9 code=0x7ffc0000
[  250.172089][   T28] audit: type=1326 audit(1769604515.623:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9509 comm="syz.5.1242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7fd12259aeb9 code=0x7ffc0000
[  250.246625][   T28] audit: type=1326 audit(1769604515.623:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9509 comm="syz.5.1242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd12259aeb9 code=0x7ffc0000
[  250.283429][   T28] audit: type=1326 audit(1769604515.623:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9509 comm="syz.5.1242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd12259aeb9 code=0x7ffc0000
[  250.480383][ T5767] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  251.253406][ T9530] loop2: detected capacity change from 0 to 32768
[  251.333509][ T9530] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  251.524225][ T5769] ocfs2: Unmounting device (7,2) on (node local)
[  251.874148][ T9554] loop5: detected capacity change from 0 to 2048
[  251.888663][ T9556] bridge0: port 1(bridge_slave_0) entered disabled state
[  251.909081][ T9556] bridge0: port 2(bridge_slave_1) entered disabled state
[  251.918490][ T9554] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  252.085733][ T9557] bridge0: port 1(bridge_slave_0) entered blocking state
[  252.093087][ T9557] bridge0: port 1(bridge_slave_0) entered forwarding state
[  252.105834][ T9557] bridge0: port 2(bridge_slave_1) entered blocking state
[  252.113145][ T9557] bridge0: port 2(bridge_slave_1) entered forwarding state
[  252.779478][ T9577] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1271'.
[  253.196692][ T9594] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1279'.
[  253.237312][   T23] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  253.455628][   T23] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11
[  253.475243][   T23] usb 6-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.00
[  253.486050][   T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  253.497390][   T23] usb 6-1: config 0 descriptor??
[  253.657321][  T788] usb 3-1: new full-speed USB device number 13 using dummy_hcd
[  253.843272][  T788] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  253.856772][  T788] usb 3-1: New USB device found, idVendor=056a, idProduct=032f, bcdDevice= 0.00
[  253.866097][  T788] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  253.881174][  T788] usb 3-1: config 0 descriptor??
[  253.890053][ T9601] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  253.920667][   T23] logitech 0003:046D:CA03.0016: ignoring exceeding usage max
[  253.929819][   T23] logitech 0003:046D:CA03.0016: unbalanced delimiter at end of report description
[  253.942099][   T23] logitech 0003:046D:CA03.0016: parse failed
[  253.948865][   T23] logitech: probe of 0003:046D:CA03.0016 failed with error -22
[  254.181713][  T968] usb 6-1: USB disconnect, device number 10
[  254.323626][  T788] wacom 0003:056A:032F.0017: hidraw0: USB HID v0.05 Device [HID 056a:032f] on usb-dummy_hcd.2-1/input0
[  254.543685][  T788] usb 3-1: USB disconnect, device number 13
[  254.916322][ T9616] loop1: detected capacity change from 0 to 1024
[  254.928000][ T9616] EXT4-fs: Ignoring removed nobh option
[  254.933625][ T9616] EXT4-fs: inline encryption not supported
[  254.951377][ T9616] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  255.030087][ T9616] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  255.080565][ T9616] EXT4-fs error (device loop1): __ext4_remount:6752: comm syz.1.1288: Abort forced by user
[  255.114862][ T9616] EXT4-fs (loop1): Remounting filesystem read-only
[  255.153362][ T9616] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000.
[  255.211056][ T9623] loop2: detected capacity change from 0 to 4096
[  255.237058][ T9623] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512).
[  255.268803][ T5767] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  255.335187][ T9623] ntfs3: loop2: Failed to initialize $Extend/$Reparse.
[  255.500752][   T48] ntfs3: loop2: ino=1a, ntfs3_write_inode failed, -22.
[  255.518614][ T5769] ntfs3: loop2: ino=1a, ntfs_sync_fs failed, -22.
[  255.841181][ T9640] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1298'.
[  255.875836][ T9640] syz_tun: entered promiscuous mode
[  255.885449][ T9640] macsec2: entered allmulticast mode
[  255.893181][ T9640] syz_tun: entered allmulticast mode
[  255.905092][ T9640] syz_tun: left allmulticast mode
[  255.910998][ T9640] syz_tun: left promiscuous mode
[  255.934244][ T1288] ieee802154 phy0 wpan0: encryption failed: -22
[  255.941964][ T1288] ieee802154 phy1 wpan1: encryption failed: -22
[  256.086651][ T9644] MTD: Couldn't look up 'memory.events': -15
[  256.363385][ T9639] loop1: detected capacity change from 0 to 32768
[  256.487812][ T9639] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  256.636363][ T9656] loop2: detected capacity change from 0 to 764
[  256.686735][ T9656] Symlink component flag not implemented
[  256.709239][ T5767] ocfs2: Unmounting device (7,1) on (node local)
[  256.712127][ T9656] Symlink component flag not implemented (116)
[  256.789446][ T9654] loop0: detected capacity change from 0 to 4096
[  256.894793][ T9658] loop1: detected capacity change from 0 to 2048
[  257.033982][ T9662] loop2: detected capacity change from 0 to 128
[  257.039486][ T9654] ntfs3: loop0: ino=0, "file0" failed to extend initialized size to 8fecc.
[  257.077834][ T9658] Alternate GPT is invalid, using primary GPT.
[  257.128402][ T9658]  loop1: p2 p3 p7
[  257.155962][ T9660] loop5: detected capacity change from 0 to 4096
[  257.168794][ T9662] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  257.187481][ T9660] ntfs3: loop5: Different NTFS sector size (4096) and media sector size (512).
[  257.289292][ T9662] ext4 filesystem being mounted at /317/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  257.321516][ T5135] Alternate GPT is invalid, using primary GPT.
[  257.337358][ T5135]  loop1: p2 p3 p7
[  257.578429][ T5766] udevd[5766]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory
[  257.591763][ T5777] udevd[5777]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory
[  257.595938][ T5773] udevd[5773]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory
[  257.734212][ T5781] udevd[5781]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory
[  257.738007][ T5908] udevd[5908]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory
[  257.761065][ T5773] udevd[5773]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory
[  257.815525][ T5769] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  257.955298][ T9677] loop0: detected capacity change from 0 to 2048
[  257.988594][ T9677] EXT4-fs: Ignoring removed oldalloc option
[  258.030468][ T9677] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  258.073470][ T9677] EXT4-fs error (device loop0): ext4_ext_precache:627: inode #2: comm syz.0.1314: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5)
[  258.149654][ T5765] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  258.342239][ T9688] loop1: detected capacity change from 0 to 512
[  258.389358][ T9688] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  258.436975][ T9688] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock
[  258.492572][ T9688] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock
[  258.547206][ T9688] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 1 overlaps superblock
[  258.571830][ T9688] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  258.579918][ T9688] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=a040e01c, mo2=0000]
[  258.589608][ T9688] EXT4-fs (loop1): failed to initialize system zone (-117)
[  258.596975][ T9688] EXT4-fs (loop1): mount failed
[  258.622602][   T28] audit: type=1326 audit(1769604524.343:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9694 comm="syz.5.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd12259aeb9 code=0x7ffc0000
[  258.697611][   T28] audit: type=1326 audit(1769604524.343:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9694 comm="syz.5.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd12259aeb9 code=0x7ffc0000
[  258.787541][   T28] audit: type=1326 audit(1769604524.343:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9694 comm="syz.5.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fd12259aeb9 code=0x7ffc0000
[  258.874803][   T28] audit: type=1326 audit(1769604524.343:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9694 comm="syz.5.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd12259ac22 code=0x7ffc0000
[  258.962625][   T28] audit: type=1326 audit(1769604524.453:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9694 comm="syz.5.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd12255b78e code=0x7ffc0000
[  259.047634][   T28] audit: type=1326 audit(1769604524.653:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9694 comm="syz.5.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fd12259ace7 code=0x7ffc0000
[  259.118767][   T28] audit: type=1326 audit(1769604524.663:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9694 comm="syz.5.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd12255b78e code=0x7ffc0000
[  259.180918][ T9706] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x46ae1815, utbl_chksum : 0xe619d30d)
[  259.194113][   T28] audit: type=1326 audit(1769604524.663:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9694 comm="syz.5.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd12259ab4b code=0x7ffc0000
[  259.215081][ T9706] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 17179869186)
[  259.216362][    C0] vkms_vblank_simulate: vblank timer overrun
[  259.374645][   T28] audit: type=1326 audit(1769604524.663:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9694 comm="syz.5.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fd12255b78e code=0x7ffc0000
[  259.473253][   T28] audit: type=1326 audit(1769604524.663:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9694 comm="syz.5.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fd12255b78e code=0x7ffc0000
[  259.499052][ T9706] exFAT-fs (loop2): error, invalid access to FAT free cluster (entry 0x00000006)
[  259.546011][ T9706] exFAT-fs (loop2): Filesystem has been set read-only
[  259.643977][ T9717] EXT4-fs (loop0): Test dummy encryption mode enabled
[  259.702032][ T9717] EXT4-fs (loop0): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  259.730470][ T9717] EXT4-fs error (device loop0): htree_dirblock_to_tree:1083: inode #2: comm syz.0.1332: Directory hole found for htree leaf block 0
[  259.800828][ T5765] EXT4-fs (loop0): unmounting filesystem 00000005-0000-0000-0000-000000000000.
[  259.868528][ T9714] ntfs: volume version 3.1.
[  260.564013][ T9744] set_capacity_and_notify: 4 callbacks suppressed
[  260.564029][ T9744] loop5: detected capacity change from 0 to 2048
[  260.669412][ T9744] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found!
[  260.708311][ T9744] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  260.884641][ T9754] loop2: detected capacity change from 0 to 256
[  260.912364][ T9754] exfat: Deprecated parameter 'utf8'
[  260.970300][ T9754] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x3f800a9b, utbl_chksum : 0xe619d30d)
[  261.082804][ T5773] udevd[5773]: symlink '../../loop5' '/dev/disk/by-diskseq/595.tmp-b7:5' failed: Read-only file system
[  261.092289][ T5908] udevd[5908]: symlink '../../loop2' '/dev/disk/by-diskseq/594.tmp-b7:2' failed: Read-only file system
[  261.153929][ T5908] udevd[5908]: symlink '../../loop2' '/dev/disk/by-uuid/1234-1234.tmp-b7:2' failed: Read-only file system
[  261.229410][ T9759] loop5: detected capacity change from 0 to 1024
[  261.276930][ T5781] udevd[5781]: symlink '../../loop2' '/dev/disk/by-diskseq/594.tmp-b7:2' failed: Read-only file system
[  261.656036][ T9773] loop0: detected capacity change from 0 to 64
[  261.785830][ T1009] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  261.940869][ T1009] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  262.055807][ T1009] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  262.158863][ T1009] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  262.342547][ T9779] loop0: detected capacity change from 0 to 8192
[  262.387997][ T9779] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  262.477379][ T9779] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[  262.552882][ T9779] REISERFS (device loop0): using ordered data mode
[  262.568343][ T5813] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  262.602560][ T9779] reiserfs: using flush barriers
[  262.674542][ T5781] udevd[5781]: symlink '../../loop0' '/dev/disk/by-diskseq/601.tmp-b7:0' failed: Read-only file system
[  262.677562][ T9779] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  262.715380][ T5781] udevd[5781]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system
[  262.778492][ T9779] REISERFS (device loop0): checking transaction log (loop0)
[  262.811011][ T5781] udevd[5781]: symlink '../../loop0' '/dev/disk/by-uuid/12312308-1233-1233-1231-123413412412.tmp-b7:0' failed: Read-only file system
[  262.828285][ T5813] usb 6-1: too many endpoints for config 0 interface 0 altsetting 253: 65, using maximum allowed: 30
[  262.834094][ T9779] REISERFS (device loop0): Using r5 hash to sort names
[  262.861445][ T9779] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  262.876058][ T5813] usb 6-1: config 0 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 65
[  262.921094][ T5813] usb 6-1: config 0 interface 0 has no altsetting 0
[  262.928299][ T5813] usb 6-1: New USB device found, idVendor=056a, idProduct=00c0, bcdDevice= 0.00
[  262.947990][ T9779] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[  262.976171][ T5813] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  263.007419][ T5813] usb 6-1: config 0 descriptor??
[  263.097877][ T5773] udevd[5773]: symlink '../../loop0' '/dev/disk/by-diskseq/601.tmp-b7:0' failed: Read-only file system
[  263.163776][ T5773] udevd[5773]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system
[  263.230706][ T5773] udevd[5773]: symlink '../../loop0' '/dev/disk/by-uuid/12312308-1233-1233-1231-123413412412.tmp-b7:0' failed: Read-only file system
[  263.296071][ T5774] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  263.320495][ T5774] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  263.330093][ T5774] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  263.358824][ T5774] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  263.369499][ T5774] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  263.378540][ T5774] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  263.424644][ T5773] udevd[5773]: symlink '../../loop0' '/dev/disk/by-diskseq/601.tmp-b7:0' failed: Read-only file system
[  263.486363][ T5813] wacom 0003:056A:00C0.0018: hidraw0: USB HID v1.00 Device [HID 056a:00c0] on usb-dummy_hcd.5-1/input0
[  263.564809][ T5773] udevd[5773]: symlink '../../loop0' '/dev/disk/by-diskseq/601.tmp-b7:0' failed: Read-only file system
[  263.666025][ T5773] udevd[5773]: symlink '../../loop0' '/dev/disk/by-diskseq/602.tmp-b7:0' failed: Read-only file system
[  263.756466][ T5813] usb 6-1: USB disconnect, device number 11
[  263.810514][ T9801] fido_id[9801]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[  263.937998][ T5781] udevd[5781]: symlink '../../loop0' '/dev/disk/by-diskseq/602.tmp-b7:0' failed: Read-only file system
[  263.962345][ T9813] loop0: detected capacity change from 0 to 64
[  264.558596][ T9794] chnl_net:caif_netlink_parms(): no params data found
[  265.045855][ T9794] bridge0: port 1(bridge_slave_0) entered blocking state
[  265.092524][ T9794] bridge0: port 1(bridge_slave_0) entered disabled state
[  265.128070][ T9794] bridge_slave_0: entered allmulticast mode
[  265.135538][ T9794] bridge_slave_0: entered promiscuous mode
[  265.255942][ T1009] hsr_slave_0: left promiscuous mode
[  265.281888][ T9849] loop1: detected capacity change from 0 to 512
[  265.306873][ T1009] hsr_slave_1: left promiscuous mode
[  265.338008][ T9849] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  265.359879][ T1009] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  265.389032][ T9849] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a80ec01c, mo2=0003]
[  265.417533][ T1009] batman_adv: batadv0: Removing interface: batadv_slave_0
[  265.447573][ T5776] Bluetooth: hci3: command tx timeout
[  265.456501][ T9849] System zones: 1-2, 4-12, 8-8
[  265.514152][ T1009] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  265.524015][ T9860] loop0: detected capacity change from 0 to 2048
[  265.526079][ T9849] EXT4-fs error (device loop1): ext4_orphan_get:1398: inode #15: comm syz.1.1382: iget: bad i_size value: 38620345925642
[  265.560131][ T1009] batman_adv: batadv0: Removing interface: batadv_slave_1
[  265.587700][ T9849] EXT4-fs error (device loop1): ext4_orphan_get:1403: comm syz.1.1382: couldn't read orphan inode 15 (err -117)
[  265.618846][ T1009] bridge_slave_1: left allmulticast mode
[  265.644108][ T9860] Alternate GPT is invalid, using primary GPT.
[  265.655198][ T9849] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  265.667866][ T1009] bridge_slave_1: left promiscuous mode
[  265.668176][ T1009] bridge0: port 2(bridge_slave_1) entered disabled state
[  265.685353][ T9860]  loop0: p2 p3 p7
[  265.714055][ T1009] bridge_slave_0: left allmulticast mode
[  265.761329][ T1009] bridge_slave_0: left promiscuous mode
[  265.792636][ T1009] bridge0: port 1(bridge_slave_0) entered disabled state
[  265.904468][ T1009] batadv_slave_1: left promiscuous mode
[  265.929512][ T5767] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  265.960486][ T1009] veth1_macvtap: left promiscuous mode
[  265.968840][ T1009] veth0_macvtap: left promiscuous mode
[  265.994434][ T9870] loop0: detected capacity change from 0 to 256
[  265.999871][ T1009] veth1_vlan: left promiscuous mode
[  266.006163][ T1009] veth0_vlan: left promiscuous mode
[  266.073625][   T28] kauditd_printk_skb: 22 callbacks suppressed
[  266.073642][   T28] audit: type=1800 audit(1769604531.793:92): pid=9870 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1388" name="file1" dev="loop0" ino=1048797 res=0 errno=0
[  266.719881][ T5813] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  266.931647][ T5813] usb 2-1: unable to get BOS descriptor or descriptor too short
[  266.944566][ T5813] usb 2-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config
[  266.959989][ T5813] usb 2-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db
[  266.969411][ T5813] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  266.977533][ T5813] usb 2-1: Product: syz
[  266.982435][ T5813] usb 2-1: Manufacturer: syz
[  266.987403][ T5813] usb 2-1: SerialNumber: syz
[  267.351723][ T1009] team0 (unregistering): Port device team_slave_1 removed
[  267.415197][ T1009] team0 (unregistering): Port device team_slave_0 removed
[  267.482441][ T1009] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  267.527822][ T5776] Bluetooth: hci3: command tx timeout
[  267.559420][ T1009] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  267.913183][ T5813] usb 2-1: reset high-speed USB device number 17 using dummy_hcd
[  267.998791][ T1009] bond0 (unregistering): Released all slaves
[  268.119088][ T9794] bridge0: port 2(bridge_slave_1) entered blocking state
[  268.128076][ T9794] bridge0: port 2(bridge_slave_1) entered disabled state
[  268.135337][ T9794] bridge_slave_1: entered allmulticast mode
[  268.145694][ T5813] usb 2-1: unable to get BOS descriptor or descriptor too short
[  268.145712][ T9794] bridge_slave_1: entered promiscuous mode
[  268.256767][ T9794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  268.295942][ T9794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  268.361429][ T9794] team0: Port device team_slave_0 added
[  268.379216][ T9794] team0: Port device team_slave_1 added
[  268.400726][ T5813] usb 2-1: USB disconnect, device number 17
[  268.446605][ T9794] batman_adv: batadv0: Adding interface: batadv_slave_0
[  268.453992][ T9794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  268.515778][ T9794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  268.538511][ T5773] udevd[5773]: symlink '../../loop5' '/dev/disk/by-diskseq/597.tmp-b7:5' failed: Read-only file system
[  268.581074][ T9794] batman_adv: batadv0: Adding interface: batadv_slave_1
[  268.597279][ T9794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  268.677266][ T9794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  268.817207][ T9794] hsr_slave_0: entered promiscuous mode
[  268.827782][ T9794] hsr_slave_1: entered promiscuous mode
[  268.844015][ T9794] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  268.861584][ T9794] Cannot create hsr debugfs directory
[  268.918335][ T1009] IPVS: stop unused estimator thread 0...
[  269.064013][ T5773] udevd[5773]: symlink '../../loop1' '/dev/disk/by-diskseq/609.tmp-b7:1' failed: Read-only file system
[  269.321299][ T5773] udevd[5773]: symlink '../../loop1' '/dev/disk/by-diskseq/609.tmp-b7:1' failed: Read-only file system
[  269.383958][ T9885] loop5: detected capacity change from 0 to 32768
[  269.414453][ T9885] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.1393 (9885)
[  269.494848][ T9885] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  269.532476][ T9885] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm
[  269.578773][ T9885] BTRFS info (device loop5): using free space tree
[  269.601051][ T5781] udevd[5781]: symlink '../../loop0' '/dev/disk/by-diskseq/610.tmp-b7:0' failed: Read-only file system
[  269.614066][ T5776] Bluetooth: hci3: command tx timeout
[  269.632943][ T6042] udevd[6042]: symlink '../../loop1' '/dev/disk/by-diskseq/609.tmp-b7:1' failed: Read-only file system
[  269.672645][ T9794] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  269.723560][ T9794] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  269.773389][ T5773] udevd[5773]: symlink '../../loop5' '/dev/disk/by-diskseq/611.tmp-b7:5' failed: Read-only file system
[  269.788385][ T9794] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  269.805553][ T9885] BTRFS info (device loop5): enabling ssd optimizations
[  269.828977][ T5773] udevd[5773]: symlink '../../loop5' '/dev/disk/by-uuid/395ef67a-297e-477c-816d-cd80a5b93e5d.tmp-b7:5' failed: Read-only file system
[  269.830439][ T9885] BTRFS info (device loop5): auto enabling async discard
[  269.859115][ T9794] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  269.871692][ T5781] udevd[5781]: symlink '../../loop1' '/dev/disk/by-diskseq/609.tmp-b7:1' failed: Read-only file system
[  269.965744][ T5908] udevd[5908]: symlink '../../loop0' '/dev/disk/by-diskseq/610.tmp-b7:0' failed: Read-only file system
[  270.048815][ T5781] udevd[5781]: symlink '../../loop1' '/dev/disk/by-diskseq/609.tmp-b7:1' failed: Read-only file system
[  270.210568][ T9936] loop1: detected capacity change from 0 to 512
[  270.253830][ T9939] loop0: detected capacity change from 0 to 256
[  270.274571][ T7278] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  270.288431][ T9939] exfat: Deprecated parameter 'utf8'
[  270.293928][ T9939] exfat: Deprecated parameter 'namecase'
[  270.339580][ T9936] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  270.357989][ T9794] 8021q: adding VLAN 0 to HW filter on device bond0
[  270.388540][ T9794] 8021q: adding VLAN 0 to HW filter on device team0
[  270.401344][ T1009] bridge0: port 1(bridge_slave_0) entered blocking state
[  270.408551][ T1009] bridge0: port 1(bridge_slave_0) entered forwarding state
[  270.446795][   T28] audit: type=1800 audit(1769604536.163:93): pid=9936 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1400" name="bus" dev="loop1" ino=18 res=0 errno=0
[  270.498048][   T48] bridge0: port 2(bridge_slave_1) entered blocking state
[  270.505240][   T48] bridge0: port 2(bridge_slave_1) entered forwarding state
[  270.515696][ T9939] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d)
[  270.753850][ T5767] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  270.823520][ T9794] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  270.959728][ T9952] loop1: detected capacity change from 0 to 64
[  271.135508][ T9946] loop5: detected capacity change from 0 to 4096
[  271.454078][ T9962] loop1: detected capacity change from 0 to 512
[  271.533679][ T9946] ntfs3: loop5: failed to convert "0080" to macceltic
[  271.569871][ T9962] EXT4-fs error (device loop1): ext4_orphan_get:1403: comm syz.1.1406: couldn't read orphan inode 26 (err -116)
[  271.630045][ T9946] ntfs3: loop5: failed to convert name for inode 1e.
[  271.668848][ T9962] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  271.697465][ T5776] Bluetooth: hci3: command tx timeout
[  271.758888][ T9962] ext4 filesystem being mounted at /347/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  271.987952][ T9794] 8021q: adding VLAN 0 to HW filter on device batadv0
[  272.035383][ T5767] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  272.305673][ T9980] use of bytesused == 0 is deprecated and will be removed in the future,
[  272.345043][ T9980] use the actual size instead.
[  272.462271][ T9984] loop0: detected capacity change from 0 to 512
[  272.535310][ T9984] EXT4-fs (loop0): #blocks per group too big: 466944
[  272.667533][ T9989] sctp: [Deprecated]: syz.1.1414 (pid 9989) Use of int in max_burst socket option deprecated.
[  272.667533][ T9989] Use struct sctp_assoc_value instead
[  272.885199][ T9995] sock: sock_set_timeout: `syz.5.1416' (pid 9995) tries to set negative timeout
[  273.008263][ T9999] random: crng reseeded on system resumption
[  273.252003][ T9794] veth0_vlan: entered promiscuous mode
[  273.290674][ T9794] veth1_vlan: entered promiscuous mode
[  273.414081][ T9794] veth0_macvtap: entered promiscuous mode
[  273.451587][ T9794] veth1_macvtap: entered promiscuous mode
[  273.524099][ T9794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  273.562970][ T5773] udevd[5773]: symlink '../../loop5' '/dev/disk/by-diskseq/621.tmp-b7:5' failed: Read-only file system
[  273.567403][ T9794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  273.633077][ T5781] udevd[5781]: symlink '../../loop1' '/dev/disk/by-diskseq/622.tmp-b7:1' failed: Read-only file system
[  273.644354][ T9794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  273.675660][ T9794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  273.696290][ T9794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  273.731790][ T9794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  273.764363][ T9794] batman_adv: batadv0: Interface activated: batadv_slave_0
[  273.825173][ T9794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  273.846628][ T5773] udevd[5773]: symlink '../../loop1' '/dev/disk/by-diskseq/622.tmp-b7:1' failed: Read-only file system
[  273.856516][ T9794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  273.877188][ T9794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  273.914608][ T9794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  273.945172][ T9794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  273.984288][ T5773] udevd[5773]: symlink '../../loop5' '/dev/disk/by-diskseq/621.tmp-b7:5' failed: Read-only file system
[  273.986920][ T9794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  274.037980][ T9794] batman_adv: batadv0: Interface activated: batadv_slave_1
[  274.074417][ T9794] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  274.089826][ T9794] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  274.110090][ T5773] udevd[5773]: symlink '../../loop1' '/dev/disk/by-diskseq/622.tmp-b7:1' failed: Read-only file system
[  274.121271][ T9794] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  274.121308][ T9794] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  274.210290][T10025] loop1: detected capacity change from 0 to 512
[  274.280276][T10025] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock
[  274.309593][ T5781] udevd[5781]: symlink '../../loop5' '/dev/disk/by-diskseq/621.tmp-b7:5' failed: Read-only file system
[  274.335130][T10025] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock
[  274.364247][T10025] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 1 overlaps superblock
[  274.390557][ T5773] udevd[5773]: symlink '../../loop1' '/dev/disk/by-diskseq/625.tmp-b7:1' failed: Read-only file system
[  274.420652][T10025] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  274.435855][T10025] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c040e01c, mo2=0080]
[  274.450764][ T5773] udevd[5773]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system
[  274.458982][T10025] EXT4-fs (loop1): orphan cleanup on readonly fs
[  274.522324][ T5781] udevd[5781]: symlink '../../loop0' '/dev/disk/by-diskseq/624.tmp-b7:0' failed: Read-only file system
[  274.538652][T10025] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.1424: bg 0: block 34: padding at end of block bitmap is not set
[  274.572279][ T5773] udevd[5773]: symlink '../../loop1' '/dev/disk/by-diskseq/625.tmp-b7:1' failed: Read-only file system
[  274.603383][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  274.622352][T10025] Quota error (device loop1): write_blk: dquota write failed
[  274.630159][T10025] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota
[  274.640580][T10025] EXT4-fs error (device loop1): ext4_acquire_dquot:6949: comm syz.1.1424: Failed to acquire dquot type 1
[  274.653475][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  274.670405][T10025] EXT4-fs (loop1): 1 truncate cleaned up
[  274.684170][    T9] usb 6-1: new full-speed USB device number 12 using dummy_hcd
[  274.711229][T10031] bond_slave_0: entered promiscuous mode
[  274.717290][T10031] bond_slave_1: entered promiscuous mode
[  274.724496][T10031] macvtap1: entered allmulticast mode
[  274.730890][T10025] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  274.767348][T10031] bond0: entered allmulticast mode
[  274.772888][T10031] bond_slave_0: entered allmulticast mode
[  274.783711][T10031] bond_slave_1: entered allmulticast mode
[  274.795149][T10031] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  274.812435][T10031] bond0: left allmulticast mode
[  274.827442][T10031] bond_slave_0: left allmulticast mode
[  274.833087][T10031] bond_slave_1: left allmulticast mode
[  274.841138][T10031] bond_slave_0: left promiscuous mode
[  274.846663][T10031] bond_slave_1: left promiscuous mode
[  274.854205][ T5767] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  274.896504][    T9] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  274.915072][    T9] usb 6-1: config 0 has no interface number 0
[  274.932746][    T9] usb 6-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e
[  274.965538][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  274.983709][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  274.995610][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  275.022019][    T9] usb 6-1: config 0 descriptor??
[  275.051329][    T9] usb 6-1: selecting invalid altsetting 1
[  275.073264][    T9] dvb_ttusb_budget: ttusb_init_controller: error
[  275.095176][    T9] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  275.277643][  T968] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  275.308393][    T9] DVB: Unable to find symbol cx22700_attach()
[  275.430379][    T9] DVB: Unable to find symbol tda10046_attach()
[  275.446850][    T9] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[  275.480431][  T968] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  275.500331][    T9] usb 6-1: USB disconnect, device number 12
[  275.510808][  T968] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  275.564354][  T968] usb 2-1: New USB device found, idVendor=28bd, idProduct=0935, bcdDevice= 0.00
[  275.605597][  T968] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  275.643175][T10048] vivid-000: disconnect
[  275.654188][  T968] usb 2-1: config 0 descriptor??
[  275.672396][T10047] vivid-000: reconnect
[  276.126744][  T968] input: HID 28bd:0935 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:28BD:0935.0019/input/input18
[  276.152942][T10065] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  276.204558][T10065] CIFS mount error: No usable UNC path provided in device string!
[  276.204558][T10065] 
[  276.218471][  T968] uclogic 0003:28BD:0935.0019: input,hidraw0: USB HID vff.fd Mouse [HID 28bd:0935] on usb-dummy_hcd.1-1/input0
[  276.240834][T10065] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  276.391160][  T968] usb 2-1: USB disconnect, device number 18
[  276.482729][T10067] fido_id[10067]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  276.989280][T10086] program syz.0.1443 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  277.179556][T10092] loop0: detected capacity change from 0 to 256
[  277.221549][T10092] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d)
[  277.736628][T10084] loop5: detected capacity change from 0 to 32768
[  277.822015][T10084] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  277.963858][T10084] XFS (loop5): Ending clean mount
[  278.011750][T10084] XFS (loop5): Quotacheck needed: Please wait.
[  278.155206][T10084] XFS (loop5): Quotacheck: Done.
[  278.361662][ T7278] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  278.488702][ T5774] Bluetooth: hci1: command 0x0406 tx timeout
[  278.574563][ T5781] udevd[5781]: symlink '../../loop5' '/dev/disk/by-diskseq/629.tmp-b7:5' failed: Read-only file system
[  278.679215][ T5773] udevd[5773]: symlink '../../loop5' '/dev/disk/by-diskseq/629.tmp-b7:5' failed: Read-only file system
[  278.719323][T10115] loop0: detected capacity change from 0 to 32768
[  278.762329][T10115] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.1450 (10115)
[  278.835293][ T5781] udevd[5781]: symlink '../../loop1' '/dev/disk/by-diskseq/626.tmp-b7:1' failed: Read-only file system
[  278.889840][T10115] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  278.937751][T10115] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  278.951255][T10115] BTRFS info (device loop0): enabling auto defrag
[  278.987619][T10135] bond_slave_0: entered promiscuous mode
[  278.993361][T10135] bond_slave_1: entered promiscuous mode
[  278.999378][T10115] BTRFS info (device loop0): using free space tree
[  279.039185][ T5773] udevd[5773]: symlink '../../loop0' '/dev/disk/by-diskseq/631.tmp-b7:0' failed: Read-only file system
[  279.050794][T10135] macvtap2: entered allmulticast mode
[  279.050818][T10135] bond0: entered allmulticast mode
[  279.050831][T10135] bond_slave_0: entered allmulticast mode
[  279.050847][T10135] bond_slave_1: entered allmulticast mode
[  279.074854][T10135] 8021q: adding VLAN 0 to HW filter on device macvtap2
[  279.077706][ T5773] udevd[5773]: symlink '../../loop0' '/dev/disk/by-uuid/c9fe44da-de57-406a-8241-57ec7d4412cf.tmp-b7:0' failed: Read-only file system
[  279.144719][T10135] bond0: left allmulticast mode
[  279.162607][T10135] bond_slave_0: left allmulticast mode
[  279.180595][T10135] bond_slave_1: left allmulticast mode
[  279.192860][ T5781] udevd[5781]: symlink '../../loop5' '/dev/disk/by-diskseq/630.tmp-b7:5' failed: Read-only file system
[  279.213093][T10115] BTRFS info (device loop0): enabling ssd optimizations
[  279.215102][T10135] bond_slave_0: left promiscuous mode
[  279.228042][T10135] bond_slave_1: left promiscuous mode
[  279.247583][T10115] BTRFS info (device loop0): auto enabling async discard
[  279.521876][ T5781] udevd[5781]: symlink '../../loop5' '/dev/disk/by-diskseq/630.tmp-b7:5' failed: Read-only file system
[  279.646196][ T5765] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  279.672057][ T5781] udevd[5781]: symlink '../../loop1' '/dev/disk/by-diskseq/626.tmp-b7:1' failed: Read-only file system
[  279.714875][T10164] loop5: detected capacity change from 0 to 2048
[  279.766859][T10166] netlink: 532 bytes leftover after parsing attributes in process `syz.1.1462'.
[  279.781935][T10164] EXT4-fs: Ignoring removed mblk_io_submit option
[  279.863201][ T5781] udevd[5781]: symlink '../../loop5' '/dev/disk/by-diskseq/632.tmp-b7:5' failed: Read-only file system
[  279.886782][T10164] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  279.918760][ T5781] udevd[5781]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system
[  279.986089][T10175] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1461'.
[  280.002242][T10175] netlink: 'syz.0.1461': attribute type 1 has an invalid length.
[  280.119800][T10164] EXT4-fs error (device loop5): ext4_validate_block_bitmap:439: comm syz.5.1460: bg 0: block 234: padding at end of block bitmap is not set
[  280.201747][ T5773] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop0 scanned by udevd (5773)
[  280.203996][T10164] EXT4-fs (loop5): Remounting filesystem read-only
[  280.508289][ T7278] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  281.492551][T10195] loop5: detected capacity change from 0 to 32768
[  281.560869][T10195] (syz.5.1468,10195,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  281.629164][T10195] (syz.5.1468,10195,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  281.698829][T10195] JBD2: Ignoring recovery information on journal
[  281.827608][T10195] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  282.005567][T10195] syz.5.1468: attempt to access beyond end of device
[  282.005567][T10195] loop5: rw=2051, sector=28680, nr_sectors = 28664 limit=32768
[  282.037385][T10195] (syz.5.1468,10195,0):ocfs2_trim_group:7510 ERROR: status = -5
[  282.047946][T10195] (syz.5.1468,10195,0):ocfs2_trim_mainbm:7621 ERROR: status = -5
[  282.234862][ T7278] ocfs2: Unmounting device (7,5) on (node local)
[  282.597389][T10231] loop1: detected capacity change from 0 to 1024
[  282.627705][T10231] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  282.656912][T10235] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1478'.
[  282.676250][T10237] loop0: detected capacity change from 0 to 22
[  282.708925][T10237] MTD: Attempt to mount non-MTD device "/dev/loop0"
[  282.718272][T10237] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  282.745296][T10231] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  283.006367][ T5767] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  283.044960][T10246] sg_write: data in/out 124/1 bytes for SCSI command 0x75-- guessing data in;
[  283.044960][T10246]    program syz.6.1485 not setting count and/or reply_len properly
[  283.237287][ T5813] usb 6-1: new full-speed USB device number 13 using dummy_hcd
[  283.345600][T10256] sctp: [Deprecated]: syz.6.1489 (pid 10256) Use of int in max_burst socket option.
[  283.345600][T10256] Use struct sctp_assoc_value instead
[  283.430530][T10259] loop0: detected capacity change from 0 to 64
[  283.452876][T10259] hfs: gid requires an argument
[  283.467817][T10259] hfs: unable to parse mount options
[  283.474683][ T5813] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  283.507162][ T5813] usb 6-1: New USB device found, idVendor=056a, idProduct=0059, bcdDevice= 0.00
[  283.551464][ T5813] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  283.569110][ T5773] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  283.574420][ T5813] usb 6-1: config 0 descriptor??
[  283.597430][ T5908] udevd[5908]: symlink '../../loop1' '/dev/disk/by-diskseq/640.tmp-b7:1' failed: Read-only file system
[  283.681659][ T5773] udevd[5773]: symlink '../../loop0' '/dev/disk/by-diskseq/641.tmp-b7:0' failed: Read-only file system
[  283.706898][ T5781] udevd[5781]: symlink '../../loop1' '/dev/disk/by-diskseq/640.tmp-b7:1' failed: Read-only file system
[  283.723641][ T5773] udevd[5773]: symlink '../../loop0' '/dev/disk/by-diskseq/641.tmp-b7:0' failed: Read-only file system
[  283.747924][T10264] loop6: detected capacity change from 0 to 2048
[  283.821515][ T5773] udevd[5773]: symlink '../../loop0' '/dev/disk/by-diskseq/641.tmp-b7:0' failed: Read-only file system
[  283.886765][ T5773] udevd[5773]: symlink '../../loop0' '/dev/disk/by-diskseq/641.tmp-b7:0' failed: Read-only file system
[  283.921391][ T5908] udevd[5908]: symlink '../../loop6' '/dev/disk/by-diskseq/643.tmp-b7:6' failed: Read-only file system
[  284.029946][T10271] loop0: detected capacity change from 0 to 1024
[  284.052326][ T5781] udevd[5781]: symlink '../../loop6' '/dev/disk/by-diskseq/643.tmp-b7:6' failed: Read-only file system
[  284.065916][ T5813] wacom 0003:056A:0059.001A: hidraw0: USB HID v10.00 Device [HID 056a:0059] on usb-dummy_hcd.5-1/input0
[  284.155573][ T5781] udevd[5781]: symlink '../../loop6' '/dev/disk/by-diskseq/643.tmp-b7:6' failed: Read-only file system
[  284.226035][ T5773] udevd[5773]: symlink '../../loop0' '/dev/disk/by-diskseq/644.tmp-b7:0' failed: Read-only file system
[  284.333204][   T27] usb 6-1: USB disconnect, device number 13
[  284.367265][T10272] fido_id[10272]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory
[  284.614280][T10266] loop1: detected capacity change from 0 to 32768
[  284.669006][T10266] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  284.716469][T10284] loop6: detected capacity change from 0 to 512
[  284.765136][T10284] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  284.789561][ T5767] ocfs2: Unmounting device (7,1) on (node local)
[  284.824366][T10284] EXT4-fs (loop6): 1 truncate cleaned up
[  284.849362][T10284] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  285.104791][T10291] program syz.1.1503 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  285.152491][ T9794] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  285.558184][T10289] loop5: detected capacity change from 0 to 32768
[  285.646472][T10289] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  285.737200][T10289] (syz.5.1504,10289,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is too small for name_len - offset=16, inode=65, rec_len=16, name_len=64
[  285.854773][ T7278] ocfs2: Unmounting device (7,5) on (node local)
[  286.223286][T10295] loop1: detected capacity change from 0 to 40427
[  286.237750][T10295] F2FS-fs (loop1): Small segment_count (9 < 1 * 24)
[  286.245711][T10295] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  286.276788][T10295] F2FS-fs (loop1): Found nat_bits in checkpoint
[  286.399622][T10295] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  286.406735][T10295] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  286.497209][   T28] audit: type=1800 audit(1769604552.213:94): pid=10295 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1514" name="bus" dev="loop1" ino=10 res=0 errno=0
[  286.519149][T10313] loop6: detected capacity change from 0 to 1024
[  286.589340][ T5767] syz-executor: attempt to access beyond end of device
[  286.589340][ T5767] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  286.622002][ T5767] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  286.727900][ T1337] hfsplus: b-tree write err: -5, ino 4
[  286.794387][T10315] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  286.807260][T10315] ext4 filesystem being mounted at /206/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  286.918170][   T28] audit: type=1326 audit(1769604552.643:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10320 comm="syz.6.1515" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd10fb9aeb9 code=0x0
[  286.925039][ T7278] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  287.859220][T10343] set_capacity_and_notify: 1 callbacks suppressed
[  287.859238][T10343] loop0: detected capacity change from 0 to 256
[  287.874440][T10329] loop5: detected capacity change from 0 to 40427
[  287.924454][T10329] F2FS-fs (loop5): build fault injection attr: rate: 14, type: 0x7ffff
[  287.947635][T10329] F2FS-fs (loop5): Image doesn't support compression
[  287.954611][T10329] F2FS-fs (loop5): build fault injection attr: rate: 0, type: 0x1c
[  287.984246][T10329] F2FS-fs (loop5): invalid crc value
[  288.018313][T10329] F2FS-fs (loop5): Found nat_bits in checkpoint
[  288.143643][T10343] FAT-fs (loop0): Directory bread(block 64) failed
[  288.160852][T10343] FAT-fs (loop0): Directory bread(block 65) failed
[  288.185587][T10329] F2FS-fs (loop5): inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x68b/0x9b0
[  288.197311][T10343] FAT-fs (loop0): Directory bread(block 66) failed
[  288.197348][T10343] FAT-fs (loop0): Directory bread(block 67) failed
[  288.197467][T10343] FAT-fs (loop0): Directory bread(block 68) failed
[  288.197496][T10343] FAT-fs (loop0): Directory bread(block 69) failed
[  288.197591][T10343] FAT-fs (loop0): Directory bread(block 70) failed
[  288.197619][T10343] FAT-fs (loop0): Directory bread(block 71) failed
[  288.197713][T10343] FAT-fs (loop0): Directory bread(block 72) failed
[  288.197741][T10343] FAT-fs (loop0): Directory bread(block 73) failed
[  288.401109][T10355] loop1: detected capacity change from 0 to 1024
[  288.461628][T10329] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  288.471456][T10355] EXT4-fs: Ignoring removed nobh option
[  288.507338][T10355] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (1764!=20869)
[  288.549443][T10355] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  288.617469][T10355] EXT4-fs (loop1): can't mount with journal_checksum, fs mounted w/o journal
[  288.635080][ T6042] udevd[6042]: symlink '../../loop6' '/dev/disk/by-diskseq/656.tmp-b7:6' failed: Read-only file system
[  288.663598][ T5908] udevd[5908]: symlink '../../loop0' '/dev/disk/by-diskseq/659.tmp-b7:0' failed: Read-only file system
[  288.698761][ T5781] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  288.733173][ T5773] udevd[5773]: symlink '../../loop5' '/dev/disk/by-diskseq/660.tmp-b7:5' failed: Read-only file system
[  288.762125][ T5908] udevd[5908]: symlink '../../loop0' '/dev/disk/by-diskseq/662.tmp-b7:0' failed: Read-only file system
[  288.798554][ T5773] udevd[5773]: symlink '../../loop5' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:5' failed: Read-only file system
[  288.845364][ T5781] udevd[5781]: symlink '../../loop1' '/dev/disk/by-diskseq/661.tmp-b7:1' failed: Read-only file system
[  288.883878][ T5908] udevd[5908]: symlink '../../loop6' '/dev/disk/by-diskseq/656.tmp-b7:6' failed: Read-only file system
[  288.915071][ T5773] udevd[5773]: symlink '../../loop0' '/dev/disk/by-diskseq/662.tmp-b7:0' failed: Read-only file system
[  288.947817][ T5781] udevd[5781]: symlink '../../loop1' '/dev/disk/by-diskseq/661.tmp-b7:1' failed: Read-only file system
[  288.970955][ T5773] udevd[5773]: symlink '../../loop1' '/dev/disk/by-diskseq/661.tmp-b7:1' failed: Read-only file system
[  288.982328][ T7278] F2FS-fs (loop5): inject page alloc in f2fs_grab_cache_page of f2fs_grab_meta_page+0x67/0x200
[  289.010670][T10364] netlink: 88 bytes leftover after parsing attributes in process `syz.6.1529'.
[  289.284229][T10371] loop0: detected capacity change from 0 to 4096
[  289.292605][T10375] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1534'.
[  289.334520][T10371] NILFS error (device loop0): nilfs_bmap_lookup_at_level: broken bmap (inode number=6)
[  289.345357][T10376] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  289.364768][T10371] NILFS (loop0): mounting fs with errors
[  289.467756][T10371] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=2)
[  289.491622][T10371] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=2)
[  289.507900][T10371] NILFS error (device loop0): nilfs_readdir: bad page in #2
[  289.767421][T10382] loop0: detected capacity change from 0 to 2048
[  289.807001][T10382] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  289.821933][T10380] loop1: detected capacity change from 0 to 4096
[  289.841558][T10380] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512).
[  289.851044][T10382] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  289.999805][T10380] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  290.384558][T10396] tmpfs: Cannot change global quota limit on remount
[  290.614847][T10403] loop5: detected capacity change from 0 to 64
[  290.944865][T10411] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1551'.
[  291.282610][T10398] loop0: detected capacity change from 0 to 32768
[  291.312686][T10398] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  291.491204][T10398] XFS (loop0): Ending clean mount
[  291.558573][ T5765] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  291.747288][   T27] usb 2-1: new full-speed USB device number 19 using dummy_hcd
[  291.930551][   T27] usb 2-1: New USB device found, idVendor=0b05, idProduct=1807, bcdDevice= 0.00
[  291.959254][   T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  291.990187][   T27] usb 2-1: config 0 descriptor??
[  292.077830][T10451] loop0: detected capacity change from 0 to 8
[  292.125297][T10451] SQUASHFS error: zlib decompression failed, data probably corrupt
[  292.134074][T10451] SQUASHFS error: Failed to read block 0x185: -5
[  292.141284][T10451] SQUASHFS error: Unable to read metadata cache entry [183]
[  292.165509][T10448] loop5: detected capacity change from 0 to 4096
[  292.282196][T10448] ntfs: volume version 3.1.
[  292.478806][   T27] asus 0003:0B05:1807.001B: hidraw0: USB HID v1.01 Device [HID 0b05:1807] on usb-dummy_hcd.1-1/input0
[  292.526495][   T27] asus 0003:0B05:1807.001B: Asus input not registered
[  292.558231][   T27] asus: probe of 0003:0B05:1807.001B failed with error -12
[  292.674844][T10455] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  292.724259][   T27] usb 2-1: USB disconnect, device number 19
[  292.731066][T10455] ntfs3: loop0: Failed to load $Extend (-22).
[  292.765031][T10455] ntfs3: loop0: Failed to initialize $Extend.
[  292.915711][T10455] ntfs3: loop0: ino=1e, "file1" attr_set_size
[  292.966034][T10465] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  292.988184][T10465] comedi comedi3: 8255: I/O port conflict (0x2,4)
[  293.015313][T10465] comedi comedi3: 8255: I/O port conflict (0x2,4)
[  293.039826][T10465] comedi comedi3: 8255: I/O port conflict (0x5c952399,4)
[  293.070766][T10465] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  293.096205][T10465] comedi comedi3: 8255: I/O port conflict (0x3ff,4)
[  293.117716][T10465] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  293.147649][T10465] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  293.170827][T10465] comedi comedi3: 8255: I/O port conflict (0x9,4)
[  293.186383][T10465] comedi comedi3: 8255: I/O port conflict (0x9,4)
[  293.205198][T10465] comedi comedi3: 8255: I/O port conflict (0x6,4)
[  293.236308][T10465] comedi comedi3: 8255: I/O port conflict (0x4,4)
[  293.356009][T10475] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1572'.
[  293.649148][T10485] program syz.1.1584 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  293.663786][ T5773] udevd[5773]: symlink '../../loop5' '/dev/disk/by-diskseq/679.tmp-b7:5' failed: Read-only file system
[  293.723553][ T5781] udevd[5781]: symlink '../../loop0' '/dev/disk/by-diskseq/680.tmp-b7:0' failed: Read-only file system
[  293.806543][ T5773] udevd[5773]: symlink '../../loop1' '/dev/disk/by-diskseq/670.tmp-b7:1' failed: Read-only file system
[  293.905562][ T5773] udevd[5773]: symlink '../../loop0' '/dev/disk/by-diskseq/680.tmp-b7:0' failed: Read-only file system
[  294.079076][ T5773] udevd[5773]: symlink '../../loop0' '/dev/disk/by-diskseq/680.tmp-b7:0' failed: Read-only file system
[  294.262432][ T5773] udevd[5773]: symlink '../../loop0' '/dev/disk/by-diskseq/680.tmp-b7:0' failed: Read-only file system
[  294.384745][ T5773] udevd[5773]: symlink '../../loop6' '/dev/disk/by-diskseq/656.tmp-b7:6' failed: Read-only file system
[  294.477800][ T5773] udevd[5773]: symlink '../../loop0' '/dev/disk/by-diskseq/680.tmp-b7:0' failed: Read-only file system
[  294.548861][T10514] set_capacity_and_notify: 1 callbacks suppressed
[  294.548880][T10514] loop0: detected capacity change from 0 to 1024
[  294.614859][ T5781] udevd[5781]: symlink '../../loop6' '/dev/disk/by-diskseq/656.tmp-b7:6' failed: Read-only file system
[  294.703396][   T28] audit: type=1800 audit(1769604560.423:96): pid=10514 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1583" name="file1" dev="loop0" ino=20 res=0 errno=0
[  294.733376][ T5773] udevd[5773]: symlink '../../loop0' '/dev/disk/by-diskseq/681.tmp-b7:0' failed: Read-only file system
[  294.753010][T10514] syz.0.1583: attempt to access beyond end of device
[  294.753010][T10514] loop0: rw=34817, sector=5778, nr_sectors = 2 limit=1024
[  294.821269][T10514] syz.0.1583: attempt to access beyond end of device
[  294.821269][T10514] loop0: rw=34817, sector=393216, nr_sectors = 2045 limit=1024
[  294.861176][T10488] loop5: detected capacity change from 0 to 40427
[  294.885593][T10488] F2FS-fs (loop5): Small segment_count (9 < 1 * 24)
[  294.898701][T10514] syz.0.1583: attempt to access beyond end of device
[  294.898701][T10514] loop0: rw=34817, sector=395261, nr_sectors = 1 limit=1024
[  294.933089][T10488] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  294.944726][T10520] loop1: detected capacity change from 0 to 256
[  295.009063][T10488] F2FS-fs (loop5): Found nat_bits in checkpoint
[  295.073939][T10520] FAT-fs (loop1): Directory bread(block 64) failed
[  295.107297][T10520] FAT-fs (loop1): Directory bread(block 65) failed
[  295.165258][T10520] FAT-fs (loop1): Directory bread(block 66) failed
[  295.210473][T10520] FAT-fs (loop1): Directory bread(block 67) failed
[  295.248556][T10520] FAT-fs (loop1): Directory bread(block 68) failed
[  295.255180][T10520] FAT-fs (loop1): Directory bread(block 69) failed
[  295.289905][T10520] FAT-fs (loop1): Directory bread(block 70) failed
[  295.301374][T10488] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  295.321550][T10488] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  295.337528][T10520] FAT-fs (loop1): Directory bread(block 71) failed
[  295.387338][T10520] FAT-fs (loop1): Directory bread(block 72) failed
[  295.394048][T10520] FAT-fs (loop1): Directory bread(block 73) failed
[  295.522296][   T28] audit: type=1800 audit(1769604561.233:97): pid=10488 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1576" name="bus" dev="loop5" ino=10 res=0 errno=0
[  295.691430][ T7278] syz-executor: attempt to access beyond end of device
[  295.691430][ T7278] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  295.734347][ T7278] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  295.990423][T10544] loop6: detected capacity change from 0 to 2048
[  296.049818][T10544] UDF-fs: warning (device loop6): udf_fill_super: No fileset found
[  296.434262][T10559] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  296.466124][T10557] loop6: detected capacity change from 0 to 1024
[  296.514594][T10557] EXT4-fs: Ignoring removed nomblk_io_submit option
[  296.546035][T10557] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  296.636159][T10557] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  296.710864][T10557] EXT4-fs error (device loop6): ext4_iget_extra_inode:4732: inode #15: comm syz.6.1599: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled
[  296.769281][T10557] EXT4-fs (loop6): Remounting filesystem read-only
[  296.959144][ T9794] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  297.396869][T10587] loop5: detected capacity change from 0 to 512
[  297.492719][T10587] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  297.569171][T10587] EXT4-fs (loop5): 1 truncate cleaned up
[  297.626814][T10587] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  297.724879][T10570] loop1: detected capacity change from 0 to 32768
[  297.762138][T10570] (syz.1.1601,10570,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  297.788213][T10587] EXT4-fs warning (device loop5): ext4_group_extend:1868: can't shrink FS - resize aborted
[  297.833540][T10570] (syz.1.1601,10570,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  297.876677][T10570] JBD2: Ignoring recovery information on journal
[  297.990127][T10570] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  298.008232][ T7278] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  298.128276][T10606] tmpfs: Cannot change global quota limit on remount
[  298.236477][T10570] (syz.1.1601,10570,0):ocfs2_read_blocks_sync:112 ERROR: status = -12
[  298.287358][T10570] (syz.1.1601,10570,0):update_backups:188 ERROR: status = -12
[  298.337238][T10570] ocfs2: Failed to update super blocks on 7,1 during fs resize. This condition is not fatal, but fsck.ocfs2 should be run to fix it
[  298.350497][T10610] loop0: detected capacity change from 0 to 4096
[  298.375328][T10610] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  298.395826][    C1] vkms_vblank_simulate: vblank timer overrun
[  298.473578][T10610] ntfs: (device loop0): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy.
[  298.550875][T10610] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  298.586874][T10610] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5).
[  298.679034][ T5767] ocfs2: Unmounting device (7,1) on (node local)
[  298.683145][T10610] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  298.737443][T10610] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5).
[  298.765425][ T5781] udevd[5781]: symlink '../../loop1' '/dev/disk/by-diskseq/692.tmp-b7:1' failed: Read-only file system
[  298.830410][T10610] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  298.880349][ T5908] udevd[5908]: symlink '../../loop5' '/dev/disk/by-diskseq/693.tmp-b7:5' failed: Read-only file system
[  298.905297][ T5781] udevd[5781]: symlink '../../loop1' '/dev/disk/by-diskseq/692.tmp-b7:1' failed: Read-only file system
[  298.923383][T10610] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5).
[  298.953173][ T6042] udevd[6042]: symlink '../../loop6' '/dev/disk/by-diskseq/690.tmp-b7:6' failed: Read-only file system
[  298.996501][ T5773] udevd[5773]: symlink '../../loop0' '/dev/disk/by-diskseq/694.tmp-b7:0' failed: Read-only file system
[  299.035367][T10610] ntfs: volume version 3.1.
[  299.040262][ T5773] udevd[5773]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system
[  299.109159][ T5773] udevd[5773]: symlink '../../loop0' '/dev/disk/by-uuid/43CF732B47819AF7.tmp-b7:0' failed: Read-only file system
[  299.125807][ T5781] udevd[5781]: symlink '../../loop6' '/dev/disk/by-diskseq/690.tmp-b7:6' failed: Read-only file system
[  299.192843][ T5908] udevd[5908]: symlink '../../loop5' '/dev/disk/by-diskseq/693.tmp-b7:5' failed: Read-only file system
[  299.278048][ T5773] udevd[5773]: symlink '../../loop0' '/dev/disk/by-diskseq/694.tmp-b7:0' failed: Read-only file system
[  299.592746][T10639] loop1: detected capacity change from 0 to 2048
[  299.712375][T10639] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  299.797997][T10651] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  299.805257][T10651] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  299.827387][T10651] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  299.833856][T10651] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  299.857375][T10651] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  299.863819][T10651] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  299.882816][T10651] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  299.889367][T10651] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  299.934139][T10651] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  299.940669][T10651] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  300.035009][ T5767] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  300.570794][T10632] loop5: detected capacity change from 0 to 32768
[  300.661633][T10632] ea_get: invalid extended attribute
[  301.144488][T10685] loop0: detected capacity change from 0 to 8192
[  301.869350][T10710] mkiss: ax0: crc mode is auto.
[  302.198272][T10722] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1653'.
[  302.697817][T10740] loop1: detected capacity change from 0 to 512
[  302.728197][T10740] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  302.768220][T10740] fs-verity: sha256 using implementation "sha256-avx2"
[  302.781750][T10740] EXT4-fs warning (device loop1): ext4_begin_enable_verity:135: inode #15: comm syz.1.1659: verity is only allowed on extent-based files
[  302.807279][  T788] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  302.823546][T10747] loop0: detected capacity change from 0 to 64
[  302.910182][ T5767] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  302.989946][  T788] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  303.010521][  T788] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  303.021502][  T788] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  303.037460][  T788] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  303.059601][  T788] usb 6-1: SerialNumber: syz
[  303.195783][T10752] loop0: detected capacity change from 0 to 1024
[  303.236907][T10754] loop1: detected capacity change from 0 to 2048
[  303.269859][T10754] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[  303.282939][T10752] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  303.306066][  T788] usb 6-1: 0:2 : does not exist
[  303.340396][  T788] usb 6-1: 0:0: failed to get current value for ch 0 (-22)
[  303.382604][T10758] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  303.409308][  T788] usb 6-1: USB disconnect, device number 14
[  303.602203][ T5765] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  303.793457][ T5773] udevd[5773]: symlink '../../loop0' '/dev/disk/by-diskseq/710.tmp-b7:0' failed: Read-only file system
[  303.831381][ T6042] udevd[6042]: symlink '../../loop6' '/dev/disk/by-diskseq/690.tmp-b7:6' failed: Read-only file system
[  303.879665][T10765] loop1: detected capacity change from 0 to 8192
[  303.896051][T10765] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  303.915585][T10765] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal
[  303.932874][T10770] loop6: detected capacity change from 0 to 128
[  303.939998][T10765] REISERFS (device loop1): using ordered data mode
[  303.946563][T10765] reiserfs: using flush barriers
[  303.955405][T10770] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  303.975122][T10770] hpfs: filesystem error: improperly stopped
[  303.981458][T10770] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  303.994063][T10770] hpfs: You really don't want any checks? You are crazy...
[  304.003831][T10770] hpfs: hpfs_map_sector(): read error
[  304.009513][T10770] hpfs: code page support is disabled
[  304.016305][T10770] hpfs: hpfs_map_4sectors(): unaligned read
[  304.022528][T10770] hpfs: hpfs_map_4sectors(): unaligned read
[  304.031204][T10765] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  304.037837][T10770] hpfs: filesystem error: unable to find root dir
[  304.108492][ T5908] udevd[5908]: symlink '../../loop0' '/dev/disk/by-diskseq/710.tmp-b7:0' failed: Read-only file system
[  304.124585][T10765] REISERFS (device loop1): checking transaction log (loop1)
[  304.146961][ T6042] udevd[6042]: symlink '../../loop5' '/dev/disk/by-diskseq/700.tmp-b7:5' failed: Read-only file system
[  304.166320][T10772] loop0: detected capacity change from 0 to 1024
[  304.179040][ T5781] udevd[5781]: symlink '../../loop6' '/dev/disk/by-diskseq/712.tmp-b7:6' failed: Read-only file system
[  304.306461][ T5781] udevd[5781]: symlink '../../loop6' '/dev/disk/by-diskseq/712.tmp-b7:6' failed: Read-only file system
[  304.336687][ T5908] udevd[5908]: symlink '../../loop0' '/dev/disk/by-diskseq/713.tmp-b7:0' failed: Read-only file system
[  304.356116][ T5773] udevd[5773]: symlink '../../loop1' '/dev/disk/by-diskseq/711.tmp-b7:1' failed: Read-only file system
[  304.401555][ T5908] udevd[5908]: symlink '../../loop0' '/dev/disk/by-label/untitled.tmp-b7:0' failed: Read-only file system
[  304.420711][ T5773] udevd[5773]: symlink '../../loop1' '/dev/disk/by-label/syzk\x03.tmp-b7:1' failed: Read-only file system
[  304.460388][   T76] hfsplus: b-tree write err: -5, ino 8
[  304.522519][T10765] REISERFS (device loop1): Using tea hash to sort names
[  304.557676][T10765] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  304.672705][T10784] loop5: detected capacity change from 0 to 64
[  305.440779][T10782] loop0: detected capacity change from 0 to 32768
[  305.492176][T10782] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  305.528661][T10782] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  305.548911][T10782] BTRFS info (device loop0): metadata ratio 2
[  305.555068][T10782] BTRFS info (device loop0): allowing degraded mounts
[  305.617975][T10782] BTRFS info (device loop0): force zlib compression, level 3
[  305.625458][T10782] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  305.647670][T10782] BTRFS info (device loop0): use zstd compression, level 3
[  305.654959][T10782] BTRFS info (device loop0): force clearing of disk cache
[  305.662663][T10782] BTRFS info (device loop0): turning on flush-on-commit
[  305.671024][T10805] loop1: detected capacity change from 0 to 4096
[  305.708198][T10782] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  305.757450][T10782] BTRFS info (device loop0): trying to use backup root at mount time
[  305.765640][T10782] BTRFS info (device loop0): using free space tree
[  305.826765][T10813] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  306.019308][T10782] BTRFS info (device loop0): enabling ssd optimizations
[  306.040566][T10782] BTRFS info (device loop0): rebuilding free space tree
[  306.208559][ T5765] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  306.389974][ T5781] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop0 scanned by udevd (5781)
[  306.988317][T10848] loop5: detected capacity change from 0 to 512
[  307.043536][T10848] EXT4-fs (loop5): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  307.224355][T10834] loop1: detected capacity change from 0 to 32768
[  307.225182][ T7278] EXT4-fs (loop5): unmounting filesystem 00800000-0000-0000-0000-000000000000.
[  307.368536][T10834] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  307.398302][T10856] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1687'.
[  307.487337][T10834] XFS (loop1): Ending clean mount
[  307.629687][T10845] loop0: detected capacity change from 0 to 32768
[  307.662154][ T5767] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  307.703939][T10845] read_mapping_page failed!
[  307.751214][T10845] ERROR: (device loop0): txCommit: 
[  307.751214][T10845] 
[  308.306016][T10873] netlink: 384 bytes leftover after parsing attributes in process `syz.0.1695'.
[  308.646335][T10882] vlan2: entered promiscuous mode
[  308.668387][T10882] bridge0: entered promiscuous mode
[  308.698129][T10887] 9p: Unknown Cache mode or invalid value m
[  308.862959][ T5773] udevd[5773]: symlink '../../loop5' '/dev/disk/by-diskseq/725.tmp-b7:5' failed: Read-only file system
[  308.904091][T10891] loop1: detected capacity change from 0 to 1024
[  308.923948][ T5781] udevd[5781]: symlink '../../loop6' '/dev/disk/by-diskseq/714.tmp-b7:6' failed: Read-only file system
[  309.030065][ T5773] udevd[5773]: symlink '../../loop1' '/dev/disk/by-diskseq/729.tmp-b7:1' failed: Read-only file system
[  309.069564][ T5773] udevd[5773]: symlink '../../loop1' '/dev/disk/by-label/untitled.tmp-b7:1' failed: Read-only file system
[  309.108195][ T5781] udevd[5781]: symlink '../../loop6' '/dev/disk/by-diskseq/714.tmp-b7:6' failed: Read-only file system
[  309.118778][T10895] loop5: detected capacity change from 0 to 4096
[  309.142217][ T5773] udevd[5773]: symlink '../../loop1' '/dev/disk/by-uuid/06db47fa-2d76-30cf-a5fe-21149ac7af4a.tmp-b7:1' failed: Read-only file system
[  309.172745][  T996] hfsplus: b-tree write err: -5, ino 8
[  309.198691][T10895] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  309.225746][ T5773] udevd[5773]: symlink '../../loop1' '/dev/disk/by-diskseq/729.tmp-b7:1' failed: Read-only file system
[  309.308910][T10895] fs-verity (loop5, inode 15): Unsupported log_blocksize: 14
[  309.353899][ T5773] udevd[5773]: symlink '../../loop1' '/dev/disk/by-diskseq/729.tmp-b7:1' failed: Read-only file system
[  309.366613][ T5781] udevd[5781]: symlink '../../loop6' '/dev/disk/by-diskseq/714.tmp-b7:6' failed: Read-only file system
[  309.437041][ T5908] udevd[5908]: symlink '../../loop5' '/dev/disk/by-diskseq/730.tmp-b7:5' failed: Read-only file system
[  309.479122][ T7278] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  309.505430][T10884] loop0: detected capacity change from 0 to 32768
[  309.570169][T10884] ocfs2: Slot 0 on device (7,0) was already allocated to this node!
[  309.692317][T10884] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  309.769024][T10884] (syz.0.1699,10884,1):ocfs2_read_blocks_sync:112 ERROR: status = -12
[  309.805385][T10884] (syz.0.1699,10884,1):ocfs2_get_suballoc_slot_bit:2719 ERROR: read block 137438953477 failed -12
[  309.843703][T10884] (syz.0.1699,10884,1):ocfs2_get_suballoc_slot_bit:2751 ERROR: status = -12
[  309.881178][T10884] (syz.0.1699,10884,1):ocfs2_test_inode_bit:2833 ERROR: get alloc slot and bit failed -12
[  309.907278][T10884] (syz.0.1699,10884,1):ocfs2_test_inode_bit:2874 ERROR: status = -12
[  309.925702][T10884] (syz.0.1699,10884,1):ocfs2_get_dentry:78 ERROR: test inode bit failed -12
[  310.099684][ T5765] ocfs2: Unmounting device (7,0) on (node local)
[  310.121540][T10923] comedi comedi3: 8255: I/O port conflict (0x2,4)
[  310.128191][T10923] comedi comedi3: 8255: I/O port conflict (0x10000421,4)
[  310.149080][T10923] comedi comedi3: 8255: I/O port conflict (0x2000001,4)
[  310.156151][T10923] comedi comedi3: 8255: I/O port conflict (0x7ffffffe,4)
[  310.182331][T10923] comedi comedi3: 8255: I/O port conflict (0x5c952398,4)
[  310.200249][T10923] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  310.246457][T10923] comedi comedi3: 8255: I/O port conflict (0x3ff,4)
[  310.269209][T10923] comedi comedi3: 8255: I/O port conflict (0x2,4)
[  310.275769][T10923] comedi comedi3: 8255: I/O port conflict (0x2,4)
[  310.297510][T10923] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4)
[  310.321126][T10923] comedi comedi3: 8255: I/O port conflict (0x9,4)
[  310.350339][T10923] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffc,4)
[  310.372336][T10923] comedi comedi3: 8255: I/O port conflict (0xffffffff80000000,4)
[  310.382218][T10923] comedi comedi3: 8255: I/O port conflict (0x8000008,4)
[  310.394033][T10923] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4)
[  310.404422][T10923] comedi comedi3: 8255: I/O port conflict (0xa,4)
[  310.447286][T10923] comedi comedi3: 8255: I/O port conflict (0x400000,4)
[  310.454994][T10923] comedi comedi3: 8255: I/O port conflict (0x20001c54,4)
[  310.948007][T10943] loop1: detected capacity change from 0 to 4096
[  311.188897][T10943] ntfs3: loop1: ino=9, attr_set_size
[  311.206840][T10949] loop0: detected capacity change from 0 to 16
[  311.215597][T10943] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  311.253381][T10949] erofs: (device loop0): mounted with root inode @ nid 36.
[  311.278721][T10949] syz.0.1727: attempt to access beyond end of device
[  311.278721][T10949] loop0: rw=524288, sector=8, nr_sectors = 24 limit=16
[  311.322194][T10949] syz.0.1727: attempt to access beyond end of device
[  311.322194][T10949] loop0: rw=524288, sector=16, nr_sectors = 40 limit=16
[  311.372922][T10949] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192]
[  311.398938][   T28] kauditd_printk_skb: 13 callbacks suppressed
[  311.398954][   T28] audit: type=1800 audit(1769604577.123:98): pid=10949 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1727" name="file3" dev="loop0" ino=89 res=0 errno=0
[  311.507176][T10952] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1728'.
[  311.586493][T10937] loop5: detected capacity change from 0 to 32768
[  311.608858][T10937] XFS: ikeep mount option is deprecated.
[  311.633606][T10954] comedi: valid board names for 8255 driver are:
[  311.641302][T10954]  8255
[  311.644120][T10954] comedi: valid board names for vmk80xx driver are:
[  311.654163][T10937] XFS: attr2 mount option is deprecated.
[  311.682698][T10954]  vmk80xx
[  311.691064][T10937] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  311.700777][T10954] comedi: valid board names for usbduxsigma driver are:
[  311.715312][T10954]  usbduxsigma
[  311.731720][T10954] comedi: valid board names for usbduxfast driver are:
[  311.747268][T10954]  usbduxfast
[  311.758678][T10954] comedi: valid board names for usbdux driver are:
[  311.775562][T10954]  usbdux
[  311.778795][T10954] comedi: valid board names for ni6501 driver are:
[  311.795846][T10954]  ni6501
[  311.806213][T10954] comedi: valid board names for dt9812 driver are:
[  311.818126][T10954]  dt9812
[  311.821177][T10954] comedi: valid board names for ni_labpc_cs driver are:
[  311.828531][T10954]  ni_labpc_cs
[  311.832022][T10954] comedi: valid board names for ni_daq_700 driver are:
[  311.839324][T10954]  ni_daq_700
[  311.842716][T10954] comedi: valid board names for labpc_pci driver are:
[  311.853082][T10954]  labpc_pci
[  311.856387][T10954] comedi: valid board names for adl_pci9118 driver are:
[  311.864396][T10954]  pci9118dg
[  311.871566][T10954]  pci9118hg
[  311.875101][T10954]  pci9118hr
[  311.882227][T10954] comedi: valid board names for 8255_pci driver are:
[  311.890466][T10954]  8255_pci
[  311.893777][T10954] comedi: valid board names for s526 driver are:
[  311.903685][T10954]  s526
[  311.906668][T10954] comedi: valid board names for multiq3 driver are:
[  311.915237][T10954]  multiq3
[  311.921610][T10954] comedi: valid board names for pcmuio driver are:
[  311.928538][T10954]  pcmuio48
[  311.931754][T10954]  pcmuio96
[  311.934976][T10954] comedi: valid board names for pcmmio driver are:
[  311.945378][T10954]  pcmmio
[  311.948971][T10954] comedi: valid board names for pcmda12 driver are:
[  311.965889][T10954]  pcmda12
[  311.969703][T10954] comedi: valid board names for pcmad driver are:
[  311.976459][T10954]  pcmad12
[  311.982349][T10954]  pcmad16
[  311.985470][T10954] comedi: valid board names for ni_labpc driver are:
[  311.988051][T10937] XFS (loop5): Ending clean mount
[  311.993630][T10954]  lab-pc-1200
[  312.001232][T10954]  lab-pc-1200ai
[  312.005025][T10954]  lab-pc+
[  312.010362][T10954] comedi: valid board names for atmio16 driver are:
[  312.018559][T10937] XFS (loop5): Quotacheck needed: Please wait.
[  312.026238][T10954]  atmio16
[  312.029853][T10954]  atmio16d
[  312.033077][T10954] comedi: valid board names for ni_at_ao driver are:
[  312.044835][T10954]  at-ao-6
[  312.049783][T10954]  at-ao-10
[  312.053221][T10954] comedi: valid board names for ni_at_a2150 driver are:
[  312.066629][T10954]  ni_at_a2150
[  312.075331][T10954] comedi: valid board names for adq12b driver are:
[  312.117883][T10954]  adq12b
[  312.120459][T10937] XFS (loop5): Quotacheck: Done.
[  312.121167][T10954] comedi: valid board names for mpc624 driver are:
[  312.133587][T10954]  mpc624
[  312.136636][T10954] comedi: valid board names for c6xdigio driver are:
[  312.143790][T10954]  c6xdigio
[  312.147007][T10954] comedi: valid board names for aio_iiro_16 driver are:
[  312.154766][T10954]  aio_iiro_16
[  312.159272][T10954] comedi: valid board names for aio_aio12_8 driver are:
[  312.166493][T10954]  aio_aio12_8
[  312.170295][T10954]  aio_ai12_8
[  312.173681][T10954]  aio_ao12_4
[  312.178245][T10954] comedi: valid board names for fl512 driver are:
[  312.184770][T10954]  fl512
[  312.188109][T10954] comedi: valid board names for dmm32at driver are:
[  312.194862][T10954]  dmm32at
[  312.200710][T10954] comedi: valid board names for dt282x driver are:
[  312.223814][T10954]  dt2821
[  312.226881][T10954]  dt2821-f
[  312.232478][T10954]  dt2821-g
[  312.240363][T10954]  dt2823
[  312.255875][T10954]  dt2824-pgh
[  312.263259][T10954]  dt2824-pgl
[  312.277014][T10954]  dt2825
[  312.287271][T10954]  dt2827
[  312.297733][T10954]  dt2828
[  312.309060][T10954]  dt2829
[  312.316258][T10954]  dt21-ez
[  312.337231][T10954]  dt23-ez
[  312.347499][T10954]  dt24-ez
[  312.351062][T10954]  dt24-ez-pgl
[  312.354528][T10954] comedi: valid board names for dt2817 driver are:
[  312.362090][T10954]  dt2817
[  312.367023][T10954] comedi: valid board names for dt2815 driver are:
[  312.383574][T10954]  dt2815
[  312.393687][T10954] comedi: valid board names for dt2814 driver are:
[  312.412725][ T7278] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  312.425350][T10954]  dt2814
[  312.430991][T10954] comedi: valid board names for dt2811 driver are:
[  312.437832][T10954]  dt2811-pgh
[  312.457489][T10954]  dt2811-pgl
[  312.460984][T10954] comedi: valid board names for dt2801 driver are:
[  312.475734][T10954]  dt2801
[  312.479128][T10954] comedi: valid board names for das6402 driver are:
[  312.486154][T10954]  das6402-12
[  312.494523][T10954]  das6402-16
[  312.498097][T10954] comedi: valid board names for das1800 driver are:
[  312.505020][T10954]  das-1701st
[  312.509063][T10954]  das-1701st-da
[  312.512783][T10954]  das-1702st
[  312.516109][T10954]  das-1702st-da
[  312.523376][T10954]  das-1702hr
[  312.526710][T10954]  das-1702hr-da
[  312.537672][T10954]  das-1701ao
[  312.547180][T10954]  das-1702ao
[  312.551390][T10954]  das-1801st
[  312.554728][T10954]  das-1801st-da
[  312.558510][T10954]  das-1802st
[  312.587406][T10954]  das-1802st-da
[  312.591035][T10954]  das-1802hr
[  312.606942][T10954]  das-1802hr-da
[  312.624253][T10954]  das-1801hc
[  312.634392][T10954]  das-1802hc
[  312.644500][T10954]  das-1801ao
[  312.647989][T10954]  das-1802ao
[  312.654632][T10954] comedi: valid board names for das800 driver are:
[  312.664784][T10954]  das-800
[  312.682337][T10954]  cio-das800
[  312.685680][T10954]  das-801
[  312.706036][T10954]  cio-das801
[  312.709787][T10954]  das-802
[  312.712855][T10954]  cio-das802
[  312.726444][T10954]  cio-das802/16
[  312.730441][T10954] comedi: valid board names for isa-das08 driver are:
[  312.747540][T10954]  isa-das08
[  312.750831][T10954]  das08-pgm
[  312.754064][T10954]  das08-pgh
[  312.767149][T10954]  das08-pgl
[  312.777582][T10954]  das08-aoh
[  312.781228][T10954]  das08-aol
[  312.784466][T10954]  das08-aom
[  312.798964][T10954]  das08/jr-ao
[  312.809830][T10954]  das08jr-16-ao
[  312.818534][T10954]  pc104-das08
[  312.823666][T10954]  das08jr/16
[  312.826999][T10954] comedi: valid board names for das16m1 driver are:
[  312.847220][T10954]  das16m1
[  312.850375][T10954] comedi: valid board names for dac02 driver are:
[  312.865983][T10954]  dac02
[  312.869563][T10954] comedi: valid board names for rti802 driver are:
[  312.889754][T10954]  rti802
[  312.892747][T10954] comedi: valid board names for rti800 driver are:
[  312.917217][T10954]  rti800
[  312.920302][T10954]  rti815
[  312.923285][T10954] comedi: valid board names for pcm3724 driver are:
[  312.937627][T10954]  pcm3724
[  312.947372][T10954] comedi: valid board names for pcl818 driver are:
[  312.964223][T10954]  pcl818l
[  312.967759][T10954]  pcl818h
[  312.970835][T10954]  pcl818hd
[  312.973997][T10954]  pcl818hg
[  312.988521][T10954]  pcl818
[  312.991523][T10954]  pcl718
[  312.994489][T10954]  pcm3718
[  313.014772][T10954] comedi: valid board names for pcl816 driver are:
[  313.027368][T10954]  pcl816
[  313.030359][T10954]  pcl814b
[  313.043724][T10954] comedi: valid board names for pcl812 driver are:
[  313.057161][T10954]  pcl812
[  313.060150][T10954]  pcl812pg
[  313.073472][T10954]  acl8112pg
[  313.076809][T10954]  acl8112dg
[  313.083600][T10954]  acl8112hg
[  313.091441][T10954]  a821pgl
[  313.098997][T10954]  a821pglnda
[  313.102342][T10954]  a821pgh
[  313.113229][T10970] loop1: detected capacity change from 0 to 32768
[  313.119866][T10954]  a822pgl
[  313.122921][T10954]  a822pgh
[  313.125972][T10954]  a823pgl
[  313.131488][T10954]  a823pgh
[  313.134571][T10954]  pcl813
[  313.138549][T10970] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop1 scanned by syz.1.1733 (10970)
[  313.156527][T10954]  pcl813b
[  313.163444][T10954]  acl8113
[  313.166542][T10954]  iso813
[  313.185986][T10954]  acl8216
[  313.201357][T10954]  a826pg
[  313.204934][T10970] BTRFS info (device loop1): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885
[  313.218438][T10954] comedi: valid board names for pcl730 driver are:
[  313.225021][T10954]  pcl730
[  313.230713][T10970] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  313.240738][T10954]  iso730
[  313.243723][T10954]  acl7130
[  313.246785][T10954]  pcm3730
[  313.252584][T10970] BTRFS info (device loop1): using free space tree
[  313.253218][T10973] loop5: detected capacity change from 0 to 8192
[  313.261352][T10954]  pcl725
[  313.269640][T10954]  p8r8dio
[  313.277246][T10954]  acl7225b
[  313.285732][T10954]  p16r16dio
[  313.290713][T10954]  pcl733
[  313.293842][T10954]  pcl734
[  313.297676][T10954]  opmm-1616-xt
[  313.301261][T10954]  pearl-mm-p
[  313.304706][T10954]  ir104-pbf
[  313.308375][T10954] comedi: valid board names for pcl726 driver are:
[  313.315469][T10954]  pcl726
[  313.319495][T10954]  pcl727
[  313.322479][T10954]  pcl728
[  313.326012][T10954]  acl6126
[  313.329161][T10954]  acl6128
[  313.332215][T10954] comedi: valid board names for pcl724 driver are:
[  313.339174][T10954]  pcl724
[  313.342154][T10954]  pcl722
[  313.345122][T10954]  pcl731
[  313.348650][T10954]  acl7122
[  313.352012][T10973] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  313.352645][T10954]  acl7124
[  313.376634][T10954]  pet48dio
[  313.380864][T10954]  pcmio48
[  313.383939][T10954]  onyx-mm-dio
[  313.388186][T10954] comedi: valid board names for pcl711 driver are:
[  313.395007][T10954]  pcl711
[  313.398052][T10954]  pcl711b
[  313.401290][T10954]  acl8112hg
[  313.404545][T10954]  acl8112dg
[  313.408254][T10954] comedi: valid board names for amplc_pc263 driver are:
[  313.415300][T10954]  pc263
[  313.418229][T10954] comedi: valid board names for amplc_pc236 driver are:
[  313.425953][T10954]  pc36at
[  313.427630][T10973] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal
[  313.429214][T10954] comedi: valid board names for amplc_dio200 driver are:
[  313.445761][T10954]  pc212e
[  313.448869][T10954]  pc214e
[  313.451841][T10954]  pc215e
[  313.454810][T10954]  pc218e
[  313.458175][T10954]  pc272e
[  313.463600][T10954] comedi: valid board names for comedi_parport driver are:
[  313.471799][T10954]  comedi_parport
[  313.475656][T10954] comedi: valid board names for comedi_test driver are:
[  313.483616][T10954]  comedi_test
[  313.487031][T10954] comedi: valid board names for comedi_bond driver are:
[  313.495357][T10954]  comedi_bond
[  313.502169][T10973] REISERFS (device loop5): using ordered data mode
[  313.541955][T10973] reiserfs: using flush barriers
[  313.555308][T10973] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  313.582591][T10989] ALSA: mixer_oss: invalid OSS volume ''
[  313.602754][T10970] BTRFS info (device loop1): enabling ssd optimizations
[  313.609989][T10970] BTRFS info (device loop1): auto enabling async discard
[  313.662092][T10973] REISERFS (device loop5): checking transaction log (loop5)
[  313.689711][T10973] REISERFS (device loop5): Using r5 hash to sort names
[  313.712747][T10973] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage.
[  313.911890][ T5767] BTRFS info (device loop1): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885
[  313.974554][ T5781] udevd[5781]: symlink '../../loop5' '/dev/disk/by-diskseq/742.tmp-b7:5' failed: Read-only file system
[  314.055733][ T5781] udevd[5781]: symlink '../../loop5' '/dev/disk/by-diskseq/742.tmp-b7:5' failed: Read-only file system
[  314.115453][ T5908] udevd[5908]: symlink '../../loop6' '/dev/disk/by-diskseq/714.tmp-b7:6' failed: Read-only file system
[  314.255001][ T5773] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 10 /dev/loop1 scanned by udevd (5773)
[  314.286019][ T5773] udevd[5773]: symlink '../../loop1' '/dev/disk/by-diskseq/741.tmp-b7:1' failed: Read-only file system
[  314.323030][ T5781] udevd[5781]: symlink '../../loop6' '/dev/disk/by-diskseq/714.tmp-b7:6' failed: Read-only file system
[  314.330895][ T5773] udevd[5773]: symlink '../../loop1' '/dev/disk/by-uuid/3d39d0ba-bdae-447e-827b-b091e1a68885.tmp-b7:1' failed: Read-only file system
[  314.376349][ T5908] udevd[5908]: symlink '../../loop5' '/dev/disk/by-diskseq/743.tmp-b7:5' failed: Read-only file system
[  314.544510][ T5781] udevd[5781]: symlink '../../loop5' '/dev/disk/by-diskseq/743.tmp-b7:5' failed: Read-only file system
[  314.741486][ T5781] udevd[5781]: symlink '../../loop6' '/dev/disk/by-diskseq/714.tmp-b7:6' failed: Read-only file system
[  314.844309][T11015] loop6: detected capacity change from 0 to 16
[  314.874073][T11015] erofs: (device loop6): mounted with root inode @ nid 36.
[  314.883651][ T5781] udevd[5781]: symlink '../../loop5' '/dev/disk/by-diskseq/743.tmp-b7:5' failed: Read-only file system
[  315.193913][T11021] loop5: detected capacity change from 0 to 512
[  315.240054][T11021] EXT4-fs error (device loop5): ext4_orphan_get:1398: inode #15: comm syz.5.1748: iget: bad i_size value: 38620345925642
[  315.279705][T11020] loop1: detected capacity change from 0 to 4096
[  315.297905][T11021] EXT4-fs error (device loop5): ext4_orphan_get:1403: comm syz.5.1748: couldn't read orphan inode 15 (err -117)
[  315.323767][T11021] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  315.386805][T11027] netlink: 'syz.6.1750': attribute type 10 has an invalid length.
[  315.397305][T11027] netlink: 2 bytes leftover after parsing attributes in process `syz.6.1750'.
[  315.406238][T11027] bond0: entered promiscuous mode
[  315.411583][T11027] bond_slave_0: entered promiscuous mode
[  315.432084][T11027] bond_slave_1: entered promiscuous mode
[  315.453853][T11027] bridge0: port 3(bond0) entered blocking state
[  315.470707][T11027] bridge0: port 3(bond0) entered disabled state
[  315.486294][T11027] bond0: entered allmulticast mode
[  315.496284][T11027] bond_slave_0: entered allmulticast mode
[  315.502605][T11027] bond_slave_1: entered allmulticast mode
[  315.514497][T11021] EXT4-fs error (device loop5): ext4_check_all_de:666: inode #12: block 7: comm syz.5.1748: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4278190093, rec_len=255, size=124 fake=0
[  315.545255][T11027] bridge0: port 3(bond0) entered blocking state
[  315.551731][T11027] bridge0: port 3(bond0) entered forwarding state
[  315.635485][ T7278] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  315.785118][T11032] loop5: detected capacity change from 0 to 512
[  315.859980][T11032] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2
[  315.888140][T11032] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2
[  315.922296][T11032] EXT4-fs (loop5): 1 truncate cleaned up
[  315.939413][T11032] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  316.043570][ T7278] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  316.072799][T11040] loop6: detected capacity change from 0 to 1024
[  316.114067][T11040] EXT4-fs: Ignoring removed bh option
[  316.212073][T11040] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  316.395933][ T9794] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  316.517862][T11049] netlink: 264 bytes leftover after parsing attributes in process `syz.5.1760'.
[  316.534036][T11049] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1760'.
[  316.918207][T11039] loop1: detected capacity change from 0 to 40427
[  316.950858][T11039] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x35f7
[  316.982139][T11039] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x7ffff
[  316.994160][T11057] program syz.0.1763 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  317.005809][T11039] F2FS-fs (loop1): Image doesn't support compression
[  317.032903][T11039] F2FS-fs (loop1): invalid crc value
[  317.043025][T11039] F2FS-fs (loop1): Found nat_bits in checkpoint
[  317.227394][T11039] F2FS-fs (loop1): Start checkpoint disabled!
[  317.281624][T11039] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  317.375798][ T1288] ieee802154 phy0 wpan0: encryption failed: -22
[  317.405394][T11061] loop0: detected capacity change from 0 to 512
[  317.440255][T11061] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  317.473209][T11039] F2FS-fs (loop1): Stopped filesystem due to reason: 0
[  317.492242][T11061] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1231: group 0, block bitmap and bg descriptor inconsistent: 18 vs 41 free clusters
[  317.508666][T11061] Quota error (device loop0): write_blk: dquota write failed
[  317.516201][T11061] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota
[  317.526506][T11061] EXT4-fs error (device loop0): ext4_acquire_dquot:6949: comm syz.0.1765: Failed to acquire dquot type 0
[  317.543161][T11061] EXT4-fs (loop0): 1 truncate cleaned up
[  317.550436][T11061] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  317.676941][ T5765] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  317.695967][T11051] loop6: detected capacity change from 0 to 32768
[  317.756925][T11053] loop5: detected capacity change from 0 to 32768
[  317.796487][T11053] ocfs2: Slot 0 on device (7,5) was already allocated to this node!
[  317.811635][T11051] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  317.892349][T11053] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  318.089168][T11051] XFS (loop6): Ending clean mount
[  318.248186][ T7278] ocfs2: Unmounting device (7,5) on (node local)
[  318.371998][ T9794] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  318.774989][T11093] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1775'.
[  318.982815][ T5773] udevd[5773]: symlink '../../loop1' '/dev/disk/by-diskseq/760.tmp-b7:1' failed: Read-only file system
[  319.076969][ T5773] udevd[5773]: symlink '../../loop6' '/dev/disk/by-diskseq/762.tmp-b7:6' failed: Read-only file system
[  319.159384][ T5773] udevd[5773]: symlink '../../loop1' '/dev/disk/by-diskseq/760.tmp-b7:1' failed: Read-only file system
[  319.230384][ T5773] udevd[5773]: symlink '../../loop6' '/dev/disk/by-diskseq/762.tmp-b7:6' failed: Read-only file system
[  319.397586][ T5773] udevd[5773]: symlink '../../loop6' '/dev/disk/by-diskseq/762.tmp-b7:6' failed: Read-only file system
[  319.426972][ T5781] udevd[5781]: symlink '../../loop1' '/dev/disk/by-diskseq/760.tmp-b7:1' failed: Read-only file system
[  319.581924][ T5773] udevd[5773]: symlink '../../loop1' '/dev/disk/by-diskseq/760.tmp-b7:1' failed: Read-only file system
[  319.682783][ T5773] udevd[5773]: symlink '../../loop6' '/dev/disk/by-diskseq/762.tmp-b7:6' failed: Read-only file system
[  319.705381][ T5781] udevd[5781]: symlink '../../loop5' '/dev/disk/by-diskseq/761.tmp-b7:5' failed: Read-only file system
[  319.733604][T11099] loop0: detected capacity change from 0 to 32768
[  319.796338][ T5781] udevd[5781]: symlink '../../loop1' '/dev/disk/by-diskseq/760.tmp-b7:1' failed: Read-only file system
[  319.814946][T11099] ERROR: (device loop0): dtReadFirst: DT_GETPAGE: dtree page corrupt
[  319.814946][T11099] 
[  319.859862][T11099] ERROR: (device loop0): remounting filesystem as read-only
[  319.893602][T11099] jfs_readdir: unexpected rc = -5 from dtReadNext
[  320.019243][T11124] loop5: detected capacity change from 0 to 16
[  320.034624][T11124] erofs: (device loop5): mounted with root inode @ nid 36.
[  320.113544][   T28] audit: type=1800 audit(1769604585.833:99): pid=11124 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1787" name="file1" dev="loop5" ino=86 res=0 errno=0
[  320.114469][T11126] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1788'.
[  320.134027][    C0] vkms_vblank_simulate: vblank timer overrun
[  320.511525][T11135] loop6: detected capacity change from 0 to 1024
[  320.542530][T11138] netlink: 'syz.5.1794': attribute type 11 has an invalid length.
[  320.581366][T11135] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  320.691089][T11135] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  320.787412][T11151] Bluetooth: MGMT ver 1.22
[  320.895802][T11135] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2852: Unable to expand inode 12. Delete some EAs or run e2fsck.
[  320.933379][T11135] EXT4-fs error (device loop6): ext4_xattr_inode_iget:441: inode #11: comm syz.6.1791: missing EA_INODE flag
[  320.989660][T11135] EXT4-fs (loop6): Remounting filesystem read-only
[  321.050343][T11157] delete_channel: no stack
[  321.136035][ T9794] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  321.147271][T11161] loop5: detected capacity change from 0 to 256
[  321.224836][T11161] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d)
[  321.382070][T11167] loop6: detected capacity change from 0 to 512
[  321.505473][T11167] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  321.640315][T11173] mmap: syz.1.1808 (11173): VmData 41652224 exceed data ulimit 33554432. Update limits or use boot option ignore_rlimit_data.
[  321.672217][T11167] EXT4-fs error (device loop6): ext4_get_first_dir_block:3584: inode #12: comm syz.6.1803: Directory block failed checksum
[  321.803945][T11178] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1809'.
[  321.823538][ T9794] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  322.214891][T11171] loop0: detected capacity change from 0 to 40427
[  322.236799][T11171] F2FS-fs (loop0): Found nat_bits in checkpoint
[  322.306148][T11171] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  322.382549][T11194] binder: 11193:11194 ioctl c0306201 200000000680 returned -14
[  322.425318][   T28] audit: type=1800 audit(1769604588.143:100): pid=11171 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1806" name="file1" dev="loop0" ino=10 res=0 errno=0
[  322.490085][ T5765] syz-executor: attempt to access beyond end of device
[  322.490085][ T5765] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  322.505063][ T5765] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  322.671134][T11198] loop5: detected capacity change from 0 to 22
[  322.677824][T11196] batadv0: entered promiscuous mode
[  322.697667][T11196] macvtap1: entered promiscuous mode
[  322.704267][T11198] MTD: Attempt to mount non-MTD device "/dev/loop5"
[  322.718714][T11196] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  322.737301][T11198] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  322.762853][T11196] batadv0: left promiscuous mode
[  323.198019][T11188] loop1: detected capacity change from 0 to 32768
[  323.323744][T11188] read_mapping_page failed!
[  323.351925][T11188] ERROR: (device loop1): txCommit: 
[  323.351925][T11188] 
[  323.403549][T11188] ERROR: (device loop1): remounting filesystem as read-only
[  323.491573][T11210] loop6: detected capacity change from 0 to 16
[  323.550402][T11210] erofs: (device loop6): mounted with root inode @ nid 36.
[  323.581201][  T113] BUG at fs/jfs/jfs_txnmgr.c:932 assert(mp->nohomeok > 0)
[  323.589968][  T113] ------------[ cut here ]------------
[  323.595472][  T113] kernel BUG at fs/jfs/jfs_txnmgr.c:932!
[  323.621812][  T113] invalid opcode: 0000 [#1] PREEMPT SMP KASAN
[  323.627956][  T113] CPU: 0 PID: 113 Comm: jfsCommit Not tainted syzkaller #0
[  323.635184][  T113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  323.645270][  T113] RIP: 0010:txUnlock+0xc87/0xcb0
[  323.650341][  T113] Code: 3f 52 71 07 0f 0b e8 88 d9 7f fe 48 c7 c7 80 1b 04 8b 48 c7 c6 79 17 04 8b ba a4 03 00 00 48 c7 c1 60 28 04 8b e8 19 52 71 07 <0f> 0b e8 62 d9 7f fe 48 c7 c7 80 1b 04 8b 48 c7 c6 79 17 04 8b ba
[  323.669981][  T113] RSP: 0018:ffffc9000254fd08 EFLAGS: 00010246
[  323.676109][  T113] RAX: 0000000000000037 RBX: 0000000000001000 RCX: ece0b6ddcbfc7000
[  323.684127][  T113] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
[  323.692115][  T113] RBP: ffffc9000288a240 R08: ffffc9000254fa07 R09: 1ffff920004a9f40
[  323.700101][  T113] R10: dffffc0000000000 R11: fffff520004a9f41 R12: ffff88806ae328b8
[  323.708092][  T113] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88802dec6094
[  323.716077][  T113] FS:  0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  323.725020][  T113] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  323.731631][  T113] CR2: 00007fc01676c000 CR3: 0000000063e95000 CR4: 00000000003506f0
[  323.739623][  T113] Call Trace:
[  323.742927][  T113]  <TASK>
[  323.745876][  T113]  ? lockdep_hardirqs_on+0x98/0x150
[  323.751093][  T113]  jfs_lazycommit+0x56e/0xa70
[  323.755798][  T113]  ? txFreelock+0x5a0/0x5a0
[  323.760316][  T113]  ? do_task_dead+0xd0/0xd0
[  323.764835][  T113]  ? __kthread_parkme+0x7a/0x1c0
[  323.769788][  T113]  kthread+0x2fa/0x390
[  323.773875][  T113]  ? txFreelock+0x5a0/0x5a0
[  323.778409][  T113]  ? kthread_blkcg+0xd0/0xd0
[  323.783015][  T113]  ret_from_fork+0x48/0x80
[  323.787452][  T113]  ? kthread_blkcg+0xd0/0xd0
[  323.792069][  T113]  ret_from_fork_asm+0x11/0x20
[  323.796862][  T113]  </TASK>
[  323.799921][  T113] Modules linked in:
[  323.803873][    C0] vkms_vblank_simulate: vblank timer overrun
[  323.823389][T11210] erofs: (device loop6): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36
[  323.862179][T11210] erofs: (device loop6): z_erofs_lz4_decompress_mem: failed to decompress -23 in[64, 4032] out[172]
[  323.875246][T11210] erofs: (device loop6): z_erofs_read_folio: read error -117 @ 0 of nid 36
[  323.884785][T11210] erofs: (device loop6): erofs_readdir: fail to readdir of logical block 0 of nid 36
[  323.895844][  T113] ---[ end trace 0000000000000000 ]---
[  323.902266][  T113] RIP: 0010:txUnlock+0xc87/0xcb0
[  323.908171][  T113] Code: 3f 52 71 07 0f 0b e8 88 d9 7f fe 48 c7 c7 80 1b 04 8b 48 c7 c6 79 17 04 8b ba a4 03 00 00 48 c7 c1 60 28 04 8b e8 19 52 71 07 <0f> 0b e8 62 d9 7f fe 48 c7 c7 80 1b 04 8b 48 c7 c6 79 17 04 8b ba
[  323.938531][  T113] RSP: 0018:ffffc9000254fd08 EFLAGS: 00010246
[  323.944825][  T113] RAX: 0000000000000037 RBX: 0000000000001000 RCX: ece0b6ddcbfc7000
[  323.953898][  T113] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
[  323.962903][  T113] RBP: ffffc9000288a240 R08: ffffc9000254fa07 R09: 1ffff920004a9f40
[  323.972058][  T113] R10: dffffc0000000000 R11: fffff520004a9f41 R12: ffff88806ae328b8
[  323.981201][  T113] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88802dec6094
[  323.990251][  T113] FS:  0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  323.999556][  T113] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  324.006174][  T113] CR2: 00007fd1227e1198 CR3: 000000002f1db000 CR4: 00000000003506f0
[  324.014291][  T113] Kernel panic - not syncing: Fatal exception
[  324.020982][  T113] Kernel Offset: disabled
[  324.025314][  T113] Rebooting in 86400 seconds..