last executing test programs:

2m52.039909929s ago: executing program 4 (id=241):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7)
syz_mount_image$xfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x8000, &(0x7f0000000140), 0x1, 0xba0c, &(0x7f0000000180)="$eJzs3Xts3WX9wPGnXbutkMH4hY7LT2RMBgxkW7dBKQTXdqyjXCqXgR0wobICk47LKLhxLSEkoGIA44WYRYl4jRLFQSQKTiPKxWGMAeIfRALGgMmi/gNqDDXfnnNKe+ia9emepxl7vZL19Ps9/Txrz/s835Mty053x/ntIdSFkoFQ7eW3tzz1+bUdT//0Cw9ue/SeFx8rnW2dWb67tXzbVr5tD0OLDZ2uLZ2q++rWx2uLg9qR6+7T0FCzXwiXV63TXLq5panydYNVyqfnVu6vHT6s+Wzp17B9iw+/a13bE0KYPWK+JoSw+H0/6F6qu21VR/kxCSO6TSvfXfPefUO3daVfy58PYfm2sNPnx5Qqvs/ZHbM+euhUfyN7gu62VZ1V/VvLnWvK+7G1eg/ujaqf5288svDu8kM49HybwoST0t3WcVYYZx+f8N9L5g+Wrpv1IYTpIYQZIYSZU92D3aOtfWnxml1bOS5nr+z/2WM9L45e8sa/Qwhzipfx0vWi9FoA7Fna2peuGGP/Tx9v/7fctfUt+x/2fJ1t7UuLvV61/2eOt//Xt6x5qbTvW5tLU+9O7Q8BAAAAAIzphs03X93T19e70Sc+8YlPhj+Z6isTkNp7m36qvxMAAAAAAAAAAABgV+X458RT/TMCAAAAAAAAAAAAwAdFZ1fbjmk1o05NG3lw2Pbeodtl73Rf9Z37BtdVbst3nznGkqPe539wcHCwZcfyynuxz6h6v+yZ1cPF+gN17zxbPmytfv/B+qGz9eGyK9b39S4ufqsV9WFTcdBUrNtRH+4vDpYUB6vqw3eLg6VDBw1hW3Gw8PJr+9YVJ06PfMQ+WDq7BsK0UcXCqGfDyP4D9fO2VW7HWbKyWl0o9z/wwAs2Vt1XMXb/99Zv29n7kod/7vrPyM5NrP/CTZXbcZZ83/4/5M3VPx/rvp33H16/faf92S3GuP6PalR93a+6/s8dY8nh+TkvP3tV0f+Jp+9ZXT5VtyvX/xHrr6juP7T48PW/WOq0yvW/eG1ZOakHYy/U2XXnjvH2//j96yqv67UjZodXO+uUF1uK/vst2PrH8qn6CfY/bbz9XzP3fdcTJqiz6+HBqv0/gf7hqDGWHG7ylVfOeL7o/6NnVzeOuG8i/VdW91/Uv+G6RTdsvvn49Rt6ruy9svea5sXLTjqxqXlZ06KhK0Lp4+Qek73J5Pb/0Pv/j5ypCWH+8Pz8E9+9qOg/55sd3eVTMyfYv2Pc/X/Z6O+VEebVhunTw6ae/v6NTaWPlcMlpY+lLxuj/wRe/z9yTPnLGsq3NSEcPDzffFDjwUX/xmkrP1Q+NX2C/VeN239g+Pcl0iT3/7qqmVH9B154+CdF/3nfv7DydwoTff0/fbz+td+w/yers6vqL3x2s6L/X+oWnBw53unPf2nl6P+LA+efHzl+hv5p5eh/0/8f0R85fqb+aeXo37Ds1Dsjx8/SP60c/bed0vLtyPGz9U8rR/+vHXfC7yPHu/RPK0f/845sejNy/OP6p5Wj/1//b/PFkePn6J9Wjv6LDrvt1sjxc/VPK0f//lnXN0aOn6d/Wjn6P1V745LI8fP1TytH/18dv/63keOr9U8rR/995214LXL8Av3TytH/nCU990aOX6h/Wjn6P3Rq76OR45/QP60c/S899PErIse79U8rR/8vN/64LXJ8jf5p7e7+1f8gp+i/vf6pYyKXu0j/tHLs/7p9ntw/cvxi/dPK0f+W+d/6T+T4JfqnlaP/Y8c+/Grk+Fr908rR/62Tf7g1cvyT+qeVo//cE773xcjxS/VPK0f/6474wyuR45fpn1aO/k8ufOkfkeM9+qeVo//rH/vTQ5Hjn9I/rRz9j2t69enI8cv1TytH/9Uf/uVY/0/Qrlinf1o5+m854Jm+yPFe/dPK0f83Nc/VR45foX9aOfrvv9/2eZHjV+qfVo7+zy047G+R41fpn1aO/uGoQ7ZHjq/XP60c/S8+sfGRyPFP659Wjv4PthxwV+T41fqnlaP/jjmzbooc79M/rRz9jzyk4dzI8Q36p5Wj/x0N9SdFjl+jf1o5+j8xvebwyPFr9U8rR//axZ0/iBy/Tv+0cvR/YfnZn4scv17/tHL0v39R2+uR4xv1TytH/zVzVz4TOX6D/mnl6H/U/mti/0f2fv3TytH/72HtQZHjN+qfVo7+W2efe3vk+E36p5Wj/22HX7AmcvwzL7+9ZUbQP5kc/X920t0PRI5vsv/TytF/Y/OdT0SOb9Y/rRz9Fxx9358jx2/WP60c/V875t5/RY7fon9aOfp/fcaXZkWO36p/Wjn6XzjzgWMjx2/TP60c/WcdvGVF5Pjt+qeVo/+vD3poXeT4HfoDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8D924EAAAAAAAMj/tRGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsAMHAgAAAABA/q+NUFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYUdOBAAAAAAAPJ/bYSqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoq7N0JvOVz4f/xO/ugkEpUJHvJLkvKnqW0WJN9X7IvZS1EhWyhKClrtpIsJSHtdipLJaVIG2lFwvwfY2ZkxnuY+svMb97P5+Mxc8/5nu898zmf1/mce93vPV8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPP82WHWdlQYGho69dtAzbr/9oVOuPHKTVa+67Ojjrr7gsJsuGrN1hZFjb15h1AQGnryzFUbfNnjMLkNPuuSswaOvDH76/U47zTSDph8YtFUe1f6bPsew5xh3YfBTVwcdMebPU6Z78l+fcYsLBwYGZnyO+6u1wYqrrTp68sb8earbkLE3j93+1OWhY/4su9nAwLIbD0z0+TH5Pb7eqmtN7jH8X7DBiqutMUH/gbGdn+w+4fpuNeHzfMihGw+arOGeJxusuOqao1tPbB3vs/fRTz4HBgaGnjowMPS0gYGhpw8MDD1jcvfg+bHiSouvNPo1f9z1MdUPGvcNQXp9H/ToOy4Z/TVj2JivE0PPHPe1APi/ZcWVFl85rP/h425P6//ex+5Z3/qH//vWWHGlxQee9n3+mK0Hjfvv+7j+l5vtirsm34gBAACA/9QTD1x+1dhjfYMHBmYfmOB475PG/lxg0IVX33LLZBvolCEcJ3vm70z8HzO688jz5hgY2GW9yT0UJoOp4jg2/zX9u+nfTf9u+nfTv5v+3fTvpn83/bvp303/bvp307/YRI7/zzju4wFDLl1l7K7z3HrCjutO+Pmjt418wUc92Uytx/8Hdhg0puXo5jsMDAy8c8W1151/YGBg3R1PuHXOgaduW3r0bcvONGTsCQLmf/Lvt07kjse9m/zJkzVM+9R9XPjk/a8x6rQhgyYYxNNsPeqos7ff4OElJvw478Qfx1Pnl7jubXecOO69LIMn2Gliz9Vx9z/usUzYeezY5x899oX32nm3hffcd78Fd9h5i+222W6bXZZaZImll1x0qSUWXXjbHXbaZpExf09szsacumLlSZmz4RPO2QMrPn3OJnxsE5uzOZ59zp68x+2vuX3mcXM29D+cs5Wffc7m2GHcWFcYNrD5k3Mz+p9cZdjAPqOvLDpi9FNo7L6zjN73zTMNHhg49t8PdPSlEU89BwcdtMPzcN6SsR9XHPtxpXjekksndt6Sga0muJ9lxnzY68px+034Puuxmyf5vCXLrXrIfKPX4gSf/7/wX339f0avpQc9NVHjThoydp8xvf59nolx07bC084zsVQ6l8zz6RnjnWPwU8/rNN6x74sbNMH8P9v74gbmv3fz88c8rhWWGvNZT/zXUfJrx5r/nr1gvNeOgWd/7Rjy74v/3rrNjbNN+Nrx9okPcbx1MW6ORkyw08ReO655eOhBo+9/3Jgn8tqx5g5j32j879eO0f/syuNeO0aPfdVhA8eOvrLY6CurDRs4Z/SVxZ+8Ms3A1aOvLLTVrjttPXrD6s983s4/aLxfeAzP21UneN5Owvlxlr9uYGD5q9Pjmvh0Zul5O/xZxpvfzz3wrO/nnu/wx9YZGBiYecxX6dEPcszY/xtpvEOffbzh/BMDz3b+iYFllj5/5ed5vE+tsyefa2NPF7X6RD5nvHU24zPW2cFDnrYyJvX7mq3D/mMuz/LUvV182vUHjZujYRPc73N9jR73WFL/cd/zPd3gUwcGPdvcrDYpczP9s8/NpH7/Mv9cY26f5lnmZpaXv2KpcXMz/D+cm9UmMjdP/3746QYdNDDN+HMz9MnvgeceOzerTsrcvOj5ed5MG/Yfc3mepzZt+MSS84ybmzAX8ev/uPtf9T+dm82fet7M/eRtcw4eGD58YJ8t9tprj0XH/D3u6mJj/n72NbjKpMzlyOdnLl859lVn8DMn56lNy9y07Jr/7Rpc5T+dyzkGBo/7b+4dJlwszx8//+mmfzf9u+nfTf9u+nfTv5v+xSZy/H+OcT8XXODG+W8Z+8OYYdeev/7Wk3u8k9lUffx/bN/xjv9vvf751w4eeOq2Zz0+O2afKfL47FJjPuy/6Lj9Jjw+OHbzJB+fveKYyzZ+gY7P/lfGrdVJ+Lmh1/9u+nfTv5v+3fTvpn83/bvp303/bvp307+b/t3076Z/sYkc/19k3O8BPHH/XnePPRA6bMsVZ/2v32c1lZiqj/+P7Tve8f+rZ11xy8EDT932rMf/x+zTcfx/jzvvO2RKPv4/bq06/s9z0L+b/t3G7z/NZBsHk4f1303/bvp307+b/t3076Z/N/276d9N/2ITOf6/wrjfA9jpidseHPf7ADefvNKuk3u8k9nUevzf//+/l9f/bvp307+b/t307zaJ/f93J6BnsrL+u+nfTf9u+nfTv5v+3fTvpn+xscf/Byb4Ac+7PS+icPz//7aJ9F9L/6il/9r6Ry3919E/aum/rv5RS//19I9a+q+vf9TS/z36Ry39N9A/aun/Xv2jlv4b6h+19N9I/6il/8b6Ry39N9E/aum/qf5RS//N9I9a+m+uf9TSfwv9o5b+W+oftfTfSv+opf/W+kct/bfRPxq//1QwQxPpv63+Ucv6307/qKX/9vpHLf130D9q6f8+/aOW/jvqH7X030n/qKX/zvpHLf130T9q6b+r/lFL/930j1r6765/1NJ/D/2jlv576h+19N9L/6il//v1j1r6f0D/qKX/3vpHLf330T9q6b+v/lFL//30j1r6769/1NL/AP2jlv4f1D9q6f8h/aOW/gfqH7X0P0j/qKX/wfpHLf0/rH/U0v8Q/aOW/ofqH7X0/4j+UUv/j+oftfT/mP5RS//D9I9a+h+uf9TS/wj9o5b+H9c/aul/pP5RS/+j9I9a+h+tf9TS/xj9o5b+xz6j/zQv6LCmVC39P2H9Ry39j9M/aul/vP5RS/8T9I9a+n9S/6il/6f0j1r6n6h/1NL/JP2jlv6f1j9q6f8Z/aOW/ifrH7X0/6z+UUv/U/SPWvp/Tv+opf/n9Y9a+p+qf9TS/zT9o5b+p+sftfQ/Q/+opf+Z+kct/c/SP2rp/wX9o5b+Z+sftfQ/R/+opf+5+kct/c/TP2rpf77+UUv/L+oftfT/kv5RS/8L9I9a+n9Z/6il/4X6Ry39v6J/1NL/Iv2jlv4X6x+19L9E/6il/6X6Ry39v6p/1NL/a+P6j5g8w5pStfS/zPqPWvp/Xf+opf/l+kct/b+hf9TS/wr9o5b+V+oftfS/Sv+opf839Y9a+l+tf9TS/1v6Ry39v61/1NL/O/pHLf2/q3/U0v97+kct/b+vf9TS/wf6Ry39r9E/aul/rf5RS//r9I9a+l+vf9TS/wb9o5b+N+oftfS/Sf+opf/N+kct/W/RP2rp/0P9o5b+P9I/aun/Y/2jlv636h+19L9N/6il/+36Ry3979A/aun/E/2jlv4/1T9q6f8z/aOW/nfqH7X0/7n+UUv/u/SPWvr/Qv+opf8v9Y9a+t+tf9TS/1f6Ry39f61/1NL/Hv2jlv736h+19P+N/qPS42/pf5/+UUv/3+oftfT/nf5RS//f6x+19P+D/lFL/z/qH7X0v1//qKX/A/pHLf3/pH/U0v9B/aOW/n/WP2rp/xf9o5b+f9U/aun/N/2jlv5/1z9q6f8P/aOW/g/pH7X0f1j/qKX/I/pHLf3/qX/U0v/R8ftP+0IPa0rV0v9f1n/U0v8x/aOW/o/rH7X0f0L/qKX/KP2jkv6DBvSPWvoP0j9q6T9Y/6il/xD9o5b+Q/WPWvoP0z9q6T9c/6il/wj9o5b+I/WPWvpPo3/U0n9a/aOW/tPpH7X0f5H+UUv/F+sftfSfXv+opf8M+kct/WfUP2rp/xL9o5b+M+kftfR/qf5RS/+X6R+19H+5/lFL/5n1j1r6v0L/qKX/LPpHLf1n1T9q6f9K/aOW/q/SP2rp/2r9o5b+s01K/yH/w3FNoVr6z279Ry39X6N/1NJ/Dv2jlv6v1T9q6T+n/lFL/7n0j1r6z61/1NJ/Hv2jlv7z6h+19J9P/6il//z6Ry39X6d/1NL/9fpHLf0X0D9q6f8G/aOW/gvqH7X0X0j/qKX/wvpHLf0X0T9q6b+o/lFL/8X0j1r6L65/1NJ/Cf2jlv5v1D9q6b+k/lFL/6X0j1r6L61/1NJ/Gf2jlv5v0j9q6b+s/lFL/zfrH7X0f4v+UUv/5fSPWvovr3/U0n8F/aOW/ivqH7X0X0n/qKX/yvpHLf1X0T9q6f9W/aOW/qvqH7X0X03/qKX/6vpHLf3X0D9q6f82/aOW/m/XP2rpv6b+UUv/d+gftfR/p/5RS/936R+19H+3/lFL/7X0j1r6r61/1NJ/Hf2jlv7r6h+19F9P/6il//r6Ry3936N/1NJ/A/2jlv7v1T9q6b+h/lFL/430j1r6b6x/1NJ/E/2jlv6b6h+19N+sqf/0k75rS//Nm/r/B1r6b6F/1NJ/S/2jlv5b6R+19N9a/6il/zb6Ry39t9U/aum/nf5RS//t9Y9a+u+gf9TS/336Ry39d9Q/aum/k/5RS/+d9Y9a+u+if9TSf1f9o5b+u+kftfTfXf9o6u0/aLz+e+gfTb39x1//e+oftfTfS/+opf/79Y9a+n9A/6il/97j9R/xwo9rCtXSf5/nXP+D/7fjmkK19N/X63/U0n8//aOW/vvrH7X0P0D/qKX/B/WPWvp/SP+opf+B+kct/Q/SP2rpf7D+UUv/D+sftfQ/RP+opf+hNf1HjXHgpO3d0v8jNf3/My39P6p/1NL/Y/pHLf0P0z9q6X+4/lFL/yP0j1r6f1z/qKX/kfpHLf2P0j9q6X+0/lFL/2P0j1r6H6t/1NL/E/pHLf2P0z9q6X+8/lFL/xP0j1r6f1L/qKX/p/SPWvqfqH809fYf7/38g07SP5p6+4+//j+tf9TS/zP6Ry39T9Y/aun/Wf2jlv6n6B+19P+c/lFL/8/rH7X0P1X/qKX/afpHLf1P1z9q6X+G/lFL/zP1j1r6n6V/1NL/C/pHLf3P1j9q6X+O/lFL/3P1j1r6n6d/1NL/fP2jlv5f1D9q6f8l/aOW/hfoH7X0/7L+UUv/C/WPWvp/Rf+opf9F+kct/S/WP2rpf4n+UUv/S/WPWvp/Vf+opf/XJqH/2P9zyqj/5fCmNC39L7P+o5b+X9c/aul/uf5RS/9v6B+19L9C/6il/5X6Ry39r9I/aun/Tf2jlv5X6x+19P+W/lFL/2/rH7X0/47+UUv/7+oftfT/nv5RS//v6x+19P+B/lFL/2v0j1r6X6t/1NL/Ov2jlv7X6x+19L+hr/8k/SJrS/8b+/pPkpb+N+kftfS/Wf+opf8t+kct/X+of9TS/0f6Ry39f6x/1NL/Vv2jlv636R+19L9d/6il/x36Ry39f6J/1NL/p/pHLf1/pn/U0v9O/aOW/j/XP2rpf5f+UUv/X+gftfT/pf5RS/+79Y9a+v9K/6il/6/1j1r636N/1NL/Xv2jlv6/0T9q6X+f/lFL/9/qH7X0/53+UUv/3+sftfT/g/5RS/8/6h+19L9f/6il/wP6Ry39/6R/1NL/Qf2jlv5/1j9q6f8X/aOW/n/VP2rp/zf9o5b+f9c/aun/D/2jlv4P6R+19H9Y/6il/yP6Ry39/6l/1NL/Uf2jlv7/0j9q6f+Y/lFL/8f1j1r6P6F/1NJ/lP5RSf8nL+r/TC39B+kftfQfrH/U0n+I/lFL/6H6Ry39h+kftfQfrn/U0n+E/lFL/5H6Ry39p9E/auk/rf5RS//p9I9a+r9I/6il/4v1j1r6T69/1NJ/Bv2jlv4z6h+19H+J/lFL/5n0j1r6v1T/qKX/y/SPWvq/XP+opf/M+kct/V+hf9TSfxb9o0G3PzS8of+s+kct6/+V+kct/V+lf9TS/9X6Ry39Z9M/auk/u/5RS//X6B+19J9D/6il/2v1j1r6z6l/1NJ/Lv2jlv5z6x+19J9H/6il/7z6Ry3959M/auk/v/5RS//X1fcf9MioUWFrSf/X1/fPWvovoH/U0v8N+kct/RfUP2rpv5D+UUv/hfWPWvovon/U0n9R/ZMRLf0X0z9q6b+4/lFL/yX0j1r6v1H/qKX/kvpHLf2X0j9q6b+0/lFL/2Xa+w/Om1v6v6m9/0S09F9W/6il/5v1j1r6v0X/qKX/cvpHLf2X1z9q6b+C/lFL/xX1j1r6r6R/1NJ/Zf2jlv6r6B+19H+r/lFL/1X1j1r6r6Z/1NJ/df2jlv5r6B+19H+b/lFL/7frH7X0X1P/qKX/O/SPWvq/U/+opf+79I9a+r9b/6il/1r6Ry3919Y/aum/jv5RS/919Y9a+q+nf9TSf339o5b+79E/aum/gf5RS//36h819B82MDB4Q/2jhv6jL26kf9TSf2P9o5b+m+gftfTfVP+opf9m+kct/TfXP2rpv4X+UUv/LfWPWvpvpX/U0n9r/aOpvf/wsZe30T+a2vuPu7it/lFL/+30j1r6b69/1NJ/B/2jlv7v03+04yfc0NJ/R/2jlv476R+19N9Z/6il/y76R2P7Dxt7dartv6v+Ucv6303/qKX/7vpHLf330D9q6b+n/lFL/730j1r6v1//qKX/B/SPWvrvrX/U0n8f/aOW/vvqH7X030//qKX//vpHLf0P0D9q6f9B/aOW/h/SP2rpf6D+UUv/g/SPWvofrH/U0v/D+kct/Q/RP2rpf6j+UUv/j+gftfT/qP5RS/+P6R+19D9M/6il/+H6Ry39j9A/aun/cf2jlv5H6h+19D9K/6il/9H6Ry39j9E/aul/rP5RS/9P6B+19D9O/6il//H6Ry39T9A/aun/Sf2jlv6f0j9q6X+i/lFL/5P0j1r6f1r/qKX/Z/SfwKOjxujof7L+Ucv6/6z+UUv/U/SPWvp/Tv+opf/n9Y9a+p+qf9TS/zT9o5b+p+sftfQ/Q/+opf+Z+kct/c/SP2rp/wX9o5b+Z+sftfQ/R/+opf+5+kct/c/TP2rpf77+UUv/L+oftfT/kv5RS/8L9I9a+n9Z/2jq6z/NUxef3v9C/aOpr39e/1/RP2rpf5H+UUv/i/WPWvpfon/U0v9S/aOW/l/VP2rp/zX9o5b+l+kftfT/uv5RS//L9Y9a+n9D/6il/xX6Ry39r9Q/aul/lf5RS/9v6h+19L9a/6il/7f0j1r6f1v/qKX/d/SPWvp/V/+opf/39I9a+n9f/6il/w/0j1r6XzOx/lePeoEGNmVq6X+t9R+19L9O/6il//X6Ry39b9A/aul/o/5RS/+b9I9a+t+sf9TS/xb9o5b+P9Q/aun/I/2jlv4/1j9q6X+r/lFL/9v0j1r6365/1NL/Dv2jlv4/0T9q6f9T/aOW/j/TP2rpf6f+UUv/n+sftfS/S/+opf8v9I9a+v9S/6il/936Ry39f6V/1NL/1/pHLf3v0T9q6X+v/lFL/9/oH7X0v0//qKX/b/WPWvr/Tv+opf/v9Y9a+v9B/6il/x/1j1r6369/1NL/Af2jlv5/0j9q6f+g/lFL/z/rH7X0/4v+UUv/v+oftfT/m/5RS/+/6x+19P+H/lFL/4f0j1r6P6x/1NL/Ef2jlv7/1D9q6f+o/lFL/3/pH7X0f0z/qKX/4/pHLf2f0D9q6T9K/6ik/5AB/aOW/oP0j1r6D9Y/auk/RP+opf9Q/aOW/sP0j1r6D9c/auk/Qv+opf9I/aOW/tPoH7X0n1b/qKX/dPpHLf1fpH/U0v/F+kct/afXP2rpP4P+UUv/GfWPWvq/RP+opf9M+kct/V+qf9TS/2X6Ry39X65/1NJ/Zv2jlv6v0D9q6T+L/lFL/1n1j1r6v1L/qKD/8NH9X6V/VNB/tCGv1j9q6T+b/lFL/9n1j1r6v0b/qKX/HPpHLf1fq3/U0n9O/aOW/nPpH7X0n1v/qKX/PPpHLf3n1T9q6T+f/lFL//n1j1r6v07/qKX/6/WPWvovoH/U0v8N+kct/RfUP2rpv5D+UUv/hfWPWvovon/U0n/RMf1HTK5hTala+i9m/Uct/RfXP2rpv4T+UUv/N+oftfRfUv+opf9S+kct/ZfWP2rpv4z+UUv/N+kftfRfVv+opf+b9Y9a+r9F/6il/3L6Ry39l9c/aum/gv5RS/8V9Y9a+q+kf9TSf2X9o5b+q+gftfR/q/5RS/9V9Y9a+q+mf9TSf3X9o5b+a+gftfR/m/5RS/+36x+19F9T/6il/zv0j1r6v1P/qKX/u/SPWvq/W/+opf9a+kct/dfWP2rpv47+UUv/dfWPWvqvp3/U0n99/aOW/u/RP2rpv4H+UUv/9+oftfTfUP+opf9G+kct/Td+rv7T/o/HNYVq6b+J9R+19N9U/6il/2b6Ry39N9c/aum/hf5RS/8t9Y9a+m+lf9TSf2v9o5b+2+gftfTfVv+opf92+kct/bfXP2rpv4P+UUv/9+kftfTfUf+opf9O+kct/XfWP2rpv4v+UUv/XfWPWvrvpn/U0n93/aOW/nvoH7X031P/qKX/XvpHLf3fr3/U0v8D+kct/ffWP2rpv4/+UUv/ffWPWvrvp3/U0n9//aOW/gfoH7X0/6D+UUv/D+kftfQ/UP+opf9B+kct/Q/WP2rp/2H9o5b+h+gftfQ/VP+opf9H9I9a+n9U/6il/8f0j1r6H6Z/1NL/cP2jCfqvMLnH8/9tIv2P0D9qWf8f1z9q6X+k/lFL/6P0j1r6H61/1NL/GP2jlv7H6h+19P+E/lFL/+P0j1r6H69/1NL/BP2jlv6f1D9q6f8p/aOW/ifqH7X0P0n/qKX/p/WPWvp/Rv+opf/J+kct/T+rf9TS/xT9o5b+n9M/aun/ef2jlv6n6h+19D9N/6il/+n6Ry39z9A/aul/pv5RS/+z9I9a+n9B/6il/9n6Ry39z9E/aul/rv5RS//z9I9a+p+vf9TS/4v6Ry39v6R/1NL/Av2jlv5f1j9q6X+h/lFL/6/oH7X0v0j/qKX/xfpHLf0v0T9q6X+p/lFL/6/qH7X0/5r+UUv/y/SPWvp/Xf+opf/l+kct/b+hf9TS/wr9o5b+V+oftfS/Sv+opf839Y9a+l+tf9TS/1v6Ry39v61/1NL/O/pHLf2/q3/U0v97+kct/b+vf9TS/wf6Ry39r9E/aul/rf5RS//r9H+G4UX9r9c/aul/g/5RS/8b9Y9a+t+kf9TS/2b9o5b+t+gftfT/of5RS/8f6R+19P+x/lFL/1v1j1r636Z/1NL/dv2jlv536B+19P+J/lFL/5/qH7X0/5n+UUv/O/WPWvr/XP+opf9d+kct/X+hf9TS/5f6Ry3979Y/aun/K/2jlv6/1j9q6X+P/lFL/3v1j1r6/0b/qKX/ffpHLf1/q3/U0v93+kct/X+vf9TS/w/6Ry39/zi5xjOFa+l/v/UftfR/QP+opf+f9I9a+j+of9TS/8/6R8MGBgYa+v9F/6hl/f9V/6il/9/0j1r6/13/qKX/P/SPWvo/pH/U0v9h/aOW/o/oH7X0/6f+UUv/R/WPWvr/S/+opf9j+kct/R/XP2rp/4T+UUv/UfpHJf2HDugftfQfpH/U0n+w/lFL/yH6Ry39h+ofTb39Rz5969BhAwMjJteQpiSLTXB96u0//vofbv1HLf1H6B+19B+pf9TSfxr9o5b+0+oftfSfTv+opf+L9I9a+r9Y/6il//T6Ry39Z9A/auk/o/5RS/+X6B9N0P/x6Sb3gP5/TaT/TPpHLev/pfpHLf1fpn/U0v/l+kct/WfWP2rp/wr9o5b+s+gftfSfVf+opf8r9Y9a+r9K/6il/6v1j1r6z6b/hJ6cjpb+s+sftfR/jf5RS/859I9a+r9W/6il/5z6Ry3959I/auk/t/5RS/959I9a+s+rf9TSfz79o5b+8+sftfR/nf5RS//X6x+19F9A/6il/xv0j1r6L6h/1NJ/If2jlv4L6x+19F9E/6il/6L6Ry39F9M/aum/uP5RS/8l9I9a+r9R/6il/5L6Ry39l9I/aum/tP5RS/9l9I9a+r9J/6il/7L6Ry3936x/1NL/LfpHLf2X0z9q6b+8/lFL/xX0j1r6r6h/1NJ/Jf2jlv4r6x+19F9F/6il/1v1j1r6r6p/1NJ/Nf2jlv6r6x+19F9D/6il/9v0j1r6v13/qKX/mvpHLf3foX/U0v+d+kct/d+lf9TS/936Ry3919I/aum/tv5RS/919I9a+q+rf9TSfz39o5b+6+sftfR/j/5RS/8N9I9a+r9X/6il/4b6Ry39N9I/aum/sf5RS/9N9I9a+m+qf9TSfzP9o5b+m+sftfTfQv+opf+W+kct/bfSP2rpv7X+UUv/bfSPWvpvq3/U0n87/aOW/tvrH7X030H/qKX/+/SPWvrvqH/U0n8n/aOW/jvrH7X030X/qKX/rvpHLf130z9q6b+7/lFL/z30j1r676l/1NJ/L/2jlv7v1z9q6f8B/aOW/nvrH7X030f/qKX/vvpHLf330z9q6b+//lFL/wP0j1r6f1D/qKX/h/SPWvofqH/U0v8g/aOW/gfrH7X0/7D+UUv/Q/SPWvofqn/U0v8j+kct/T+qf9TS/2P6Ry39D9M/aul/+ET6Dyp/UrT0P8L6j1r6f1z/qKX/kfpHLf2P0j9q6X+0/lFL/2P0j1r6H6t/1NL/E/pHLf2P0z9q6X+8/lFL/xP0j1r6f1L/qKX/p/SPWvqfqH/U0v8k/aOW/p/WP2rp/xn9o5b+J+sftfT/rP5RS/9T9I9a+n9O/6il/+f1j1r6n6p/1NL/NP2jlv6n6x+19D9D/2hq7z+2+dAz9Y+m9v5jDT1L/6il/xf0j1r6n/0s/Ye8EOOaQrX0P8f6j1r6n6t/1NL/PP2jlv7n6x+19P+i/tF4/UdO7tE8DybS/0v6Ry3r/wL9o5b+X9Y/aul/of5RS/+v6B+19L9I/6il/8X6Ry39L9E/aul/qf5RS/+v6h+19P+a/lFL/8v0jybsP3hyD+j/10T6f13/qGX9X65/1NL/G/pHLf2v0D9q6X+l/lFL/6v0j1r6f1P/qKX/1fpHLf2/pX/U0v/b+kct/b+jf9TS/7v6Ry39v6d/1NL/+/pHLf1/oH/U0v8a/aOW/tfqH7X0v07/qKX/9fpHLf1v0D9q6X+j/lFL/5v0j1r636x/1NL/Fv2jlv4/1D9q6f8j/aOW/j/WP2rpf6v+UUv/2/SPWvrfrn/U0v8O/aOW/j/RP2rp/1P9o5b+P9M/aul/p/5RS/+f6x+19L9L/6il/y/0j1r6/1L/qKX/3fpHLf1/pX/U0v/X+kct/e/R/+levfCgYU9eaOl/r/5RS//f6B+19L9P/6il/2/1j1r6/07/qKX/7/WPWvr/Qf+opf8f9Y9a+t+vf9TS/wH9k3Nb+v9J/6il/4P6Ry39/6x/1NL/L/pHLf3/qn/U0v9v+kct/f+uf9TS/x/6Ry39H9I/aun/sP5RS/9H9I9a+v+ztf/Gz35zS/9HW/s/h5b+/9I/aun/mP5RS//H9Y9a+j+hf9TSf5T+UUn/J9/sqP8ztfQfpH/U0n+w/lFL/yH6Ry39h+oftfQfpn/U0n+4/lFL/xH6Ry39R+oftfSfRv+opf+0+kct/afTP2rp/yL9o5b+L9Y/auk/vf5RS/8Z9I9a+s+of9TS/yX6Ry39Z9I/aun/Uv2jlv4v0z9q6f9y/aOW/jPrH7X0f4X+UUv/WfSPWvrPqn/U0v+V+kct/V+lf9TS/9X6Ry39Z9M/auk/u/5RS//X6B+19J9D/6il/2v1j1r6z6l/1NJ/Lv2jlv5z6x+19J9H/6il/7z6Ry3959M/auk/v/5RS//X6R+19H+9/lFL/wX0j1r6v0H/qKX/gvpHLf0X0j9q6b+w/lFL/0X0j1r6L6p/1NJ/Mf2jlv6L6x+19F9C/6il/xv1j1r6L6l/1NJ/Kf2jlv5L6x+19F9G/6il/5v0j1r6L6t/1NL/zfpHLf3fon/U0n85/aOW/svrH7X0X0H/qKX/ivpHLf1X0j9q6b+y/lFL/1X0j1r6v1X/qKX/qvpHLf1X0z9q6b+6/lFL/zX0j1r6v03/qKX/2/WPWvqvqX/U0v8d+kct/d+pf9TS/136vyptbOn/bv2jlv5r6R9Nnf1HzTAwQf+19Y+mzv5jPL3/OvpHLf3X1T9q6b+e/lFL//X1j1r6v0f/qKX/BvpHLf3fq3/U0n9D/aOW/hvpH7X031j/qKX/JvpHLf031T9q6b+Z/lFL/831j1r6b6F/1NJ/S/2jlv5b6R+19N9a/6il/zb6Ry39t9U/aum/nf5RS//t9Y9a+u9Q2X/UiOfao6X/+yr7P7eW/jvqH7X030n/qKX/zvpHLf130T9q6b+r/lFL/930j1r6765/1NJ/D/2jlv57VvYf/Jx7tPTfq7L/c2vp/379o5b+H9A/aum/t/5RS/999I9a+u+rf9TSfz/9o5b+++sftfQ/QP+opf8H9Y9a+n9I/6il/4H6Ry39D9I/aul/sP5RS/8P6x+19D9E/6il/6H6Ry39P6J/1NL/o/pHLf0/pn/U0v8w/aOW/ofrH7X0P0L/qKX/x/WPWvofqX/U0v8o/aOW/kfrH7X0P0b/qKX/sfpHLf0/oX/U0v84/aOW/sfrH7X0P0H/qKX/J/WPWvp/Sv+opf+J+kct/U/SP2rp/2n9o5b+n9E/aul/sv5RS//P6h+19D9F/6il/+f0j1r6f17/qKX/qfpHLf1P0z9q6X+6/lFL/zP0j1r6n6l/1NL/LP2jlv5Dd9c/ael/tvUftfQ/R//xDRnzoaX/ufpHLf3P0z9q6X++/lFL/y/qH7X0/5L+UUv/C/SPWvp/Wf+opf+F+kct/b+if9TS/yL9o5b+F+sftfS/RP+opf+l+kct/b+qf9TS/2v6Ry39L9M/aun/df2jlv6X6x+19P+G/lFL/yv0j1r6X6l/1NL/Kv2jlv7f1D9q6X+1/lFL/2/pH7X0/7b+UUv/7+gftfT/rv5RS//v6R+19P++/lFL/x/oH7X0v0b/qKX/tfpHLf2v0z9q6X+9/lFL/xv0j1r636h/1NL/Jv2jlv436x+19L9F/6il/w9j/x0WO2zwCze0KVFL/x9Z/1FL/x/rH7X0v1X/qKX/bbX9p3nWW1v6317b/9lNxf1nfHr/O/SPpuL+463/n+ifjJuiqb7/T/WPWtb/z/SPWvrfqX/U0v/n+kct/e/SP2rp/wv9o5b+v9Q/aul/t/5RS/9f6R+19P+1/lFL/3v0j1r636t/1NL/N/pHLf3v0z9q6f9b/aOW/r/TP2rp/3v9o5b+f9A/aun/R/2jlv736x+19H9A/6il/5/0j1r6P6h/1NL/z/pHLf3/on/U0v+v+kct/f+mf9TS/+/6Ry39/6F/1NL/If2jlv4P6x+19H9E/6il/z/1j1r6P6p/1NL/X/pHLf0f0z9q6f+4/lFL/yf0j1r6j9I/Kuk/fED/qKX/IP2jlv6D9Y9a+g/RP2rpP1T/qKX/MP2jlv7D9Y9a+o/QP2rpP1L/qKX/NPpHLf2n1T9q6T+d/lFL/xfpH7X0f7H+UUv/6fWPWvrPoH/U0n9G/aOW/i/RP2rpP5P+UUv/l+oftfR/mf5RS/+X6x+19J9Z/6il/yv0j1r6z6J/1NJ/Vv2jlv6v1D9q6f8q/aOW/q/WP2rpP5v+UUv/2fWPWvq/Rv+opf8c+kct/V+rf9TSf079o5b+c+kftfSfW/+opf88+kct/efVP2rpP5/+UUv/+fWPWvq/Tv+opf/r9Y9a+i+gf9TS/w36Ry39F9Q/aum/kP5RS/+F9Y9a+i+if9TSf1H9o5b+i+kftfRfXP+opf8S+kct/d+of9TSf0n9o5b+S+kftfRfWv+opf8y+kct/d+kf9TSf1n9o5b+b9Y/aun/Fv2jlv7L6R+19F9e/6il/wr6Ry39V9Q/aum/kv5RS/+V9Y9a+q+if9TS/636Ry39V9U/aum/mv5RS//V9Y9a+q+hf9TS/236Ry39365/1NJ/Tf2jlv7v0D9q6f9O/aOW/u/SP2rp/279o5b+a+kftfRfW/+opf86+kct/dfVP2rpv57+UUv/9fWPWvq/R/+opf8G+kct/d+rf9TSf0P9o5b+G+kftfTfWP+opf8m+kct/TfVP2rpv5n+UUv/zfWPWvpvoX/U0n9L/aOW/lvpH7X031r/qKX/NvpHLf231T9q6b+d/lFL/+31j6bi/kOetnX4DvpHU3H/8db/+/SPWvrvqH/U0n8n/aOW/jvrH7X030X/qKX/rvpHLf130z9q6b+7/lFL/z30j1r676l/1NJ/L/2jlv7v1z9q6f8B/aOW/nvrH7X030f/qKX/vvpHLf330z9q6b+//lFL/wP0j1r6f1D/qKX/h/SPWvofqH/U0v8g/aOW/gfrH7X0/7D+UUv/Q/SPWvofqn/U0v8j+kct/T+qf9TS/2P6Ry39D9M/aul/uP5RS/8j9I9a+n9c/6il/5H6Ry39j9I/aul/tP5RS/9j9I9a+h+rf9TS/xP6Ry39j9M/aul/vP5RS/8T9I9a+n9S/6il/6f0j1r6n6h/1NL/JP2jlv6f1j9q6f8Z/aOW/ifrH7X0/6z+UUv/U/SPWvp/Tv+opf/n9Y9a+p+qf9TS/zT9o5b+p+sftfQ/Q/+opf+Z+kct/c/SP2rp/wX9o5b+Z+sftfQ/R/+opf+5+kct/c/TP2rpf77+UUv/L+oftfT/kv5RS/8L9I9a+n9Z/6il/4X6Ry39v6J/1NL/Iv2jlv4X6x+19L9E/6il/6X6Ry39v6p/1NL/a/pHLf0v0z9q6f91/aOW/pfrH7X0/4b+UUv/K/SPWvpfqX/U0v8q/aOW/t/UP2rpf7X+UUv/b+kftfT/tv5RS//v6B+19P+u/lFL/+/pH7X0/77+UUv/H+gftfS/Rv+opf+1+kct/a/TP2rpf73+UUv/G/SPWvrfqH/U0v8m/aOW/jfrH7X0v0X/qKX/D/WPWvr/SP+opf+P9Y9a+t+qf9TS/zb9o5b+t+sftfS/Q/+opf9P9I9a+v9U/6il/8/0j1r636l/1NL/5/pHLf3v0j9q6f8L/aOW/r/UP2rpf7f+UUv/X+kftfT/tf5RS/979I9a+t+rf9TS/zf6Ry3979M/aun/W/2jlv6/0z9q6f97/aOW/n/QP2rp/0f9o5b+9+sftfR/QP+opf+f9I9a+j+of9TS/8/6Ry39/6J/1NL/r/pHLf3/pn/U0v/v+kct/f+hf9TS/yH9o5b+D+sftfR/RP+opf8/9Y9a+j+qf9TS/1/6Ry39H9M/aun/uP5RS/8n9I9a+o/SPyrpP2JA/6il/yD9o5b+g/WPWvoP0T9q6T9U/6il/zD9o5b+w/WPWvqP0D9q6T9S/6il/zT6Ry39p9U/auk/nf5RS/8X6R+19H+x/lFL/+n1j1r6z6B/1NJ/Rv2jlv4v0T9q6T+T/lFL/5fqH7X0f5n+UUv/l+sftfSfWf+opf8r9I9a+s+if9TSf1b9o5b+r9Q/aun/Kv2jlv6v1j9q6T+b/lFL/9n1j1r6v0b/qKX/HPpHLf1fq3/U0n9O/aOW/nPpH7X0n1v/qKX/PPpHLf3n1T9q6T+f/lFL//n1j1r6v07/qKX/6/WPWvovoH/U0v8N+kct/RfUP2rpv5D+UUv/hfWPWvovon/U0n9R/aOW/ovpH7X0X1z/qKX/EvpHLf3fqH/U0n9J/aOW/kvpH7X0X1r/qKX/MvpHLf3fpH80Nfd/Wu8Ry+ofTc39n77+31zdf9BBE72lpP9bqvtPXEv/5fSPWvovr3/U0n8F/aOW/ivqH7X0X0n/qKX/yvpHLf1X0T9q6f9W/aOW/qvqH7X0X03/qKX/6vpHLf3X0D9q6f82/aOW/m/XP2rpv6b+UUv/d+gftfR/p/5RS/936R+19H+3/lFL/7X0j1r6r61/1NJ/Hf2jlv7r6h+19F9P/6il//r6Ry3936N/1NJ/A/2jlv7v1T9q6b+h/lFL/430j1r6b6x/1NJ/E/2jlv6b6h+19N9M/6il/+b6Ry39t9A/aum/pf5RS/+t9I9a+m+tf9TSfxv9o5b+2+oftfTfTv+opf/2+kct/XfQP2rp/z79o5b+O+oftfTfSf+opf/O+kct/XfRP2rpv6v+UUv/3fR/ppFjPxb0313/qGX976F/1NJ/T/2jlv576R+19H+//lFL/w/oH7X031v/qKX/PvpHLf331T9q6b+f/lFL//31j1r6H6B/1NL/g/pHLf0/pH/U0v9A/aOW/gfpH7X0P1j/qKX/h/WPWvofon/U0v9Q/aOW/h/RP2rp/1H9o5b+H9M/aul/mP5RS//D9Y9a+h+hf9TS/+P6Ry39j9Q/aul/lP5RS/+j9Y9a+h+jf9TS/1j9o5b+n9A/aul/nP5RS//j9Y9a+p+gf9TS/5P6Ry39P6V/1NL/RP2jlv4n6R+19P+0/lFL/8/oH7X0P1n/qKX/Z/WPWvqfon/U0v9z+kct/T+vf9TS/1T9o5b+p+kftfQ/Xf+opf8Z+kct/c/UP2rpf5b+UUv/L+gftfQ/W/+opf85+kct/c/VP2rpf57+UUv/8/WPWvp/Uf+opf+X9I9a+l+gf9TS/8v6Ry39L9Q/aun/Ff2jlv4X6R+19L9Y/6il/yX6Ry39L9U/aun/Vf2jlv5f0z9q6X+Z/lFL/6/rH7X0v1z/qKX/N/SPWvpfoX/U0v9K/aOW/lfpH7X0/6b+UUv/q/WPWvp/S/+opf+39Y9a+n9H/6il/3f1j1r6f0//qKX/9/WPWvr/QP+opf81+kct/a/VP2rpf53+UUv/6/WPWvrfoH/U0v9G/aOW/jfpH7X0v1n/qKX/LfpHLf1/qH/U0v9H+kct/X+sf9TS/1b9o5b+t+kftfS/Xf+opf8d+kct/X+if9TS/6eT2H/QY6Oe9L8a3pSmpf/PrP+opf+d+kct/X+uf9TS/y79o5b+v9A/aun/S/2jlv536x+19P+V/lFL/1/rH7X0v0f/qKX/vfpHLf1/o3/U0v8+/aOW/r/VP2rp/zv9o5b+v9c/aun/B/2jlv5/1D9q6X+//lFL/wf0j1r6/0n/qKX/g/pHLf3/rH/U0v8v+kct/f+qf9TS/2/6Ry39/65/1NL/H/pHLf0f0j9q6f+w/lFL/0f0j1r6/1P/qKX/o/pHLf3/pX/U0v8x/aOW/o/rH7X0f0L/qKX/KP2jkv4jB/SPWvoP0j9q6T9Y/6il/xD9o5b+Q/WPWvoP0z9q6T9c/6il/wj9o5b+I/WPWvpPo3/U0n9a/aOW/tPpH7X0f5H+UUv/F+sftfSfXv+opf8M+kct/WfUP2rp/xL9o5b+M+kftfR/qf5RS/+X6b9R2tjS/+X6Ry39Z9Y/aun/Cv2jlv6z6B+19J9V/6il/yv1j1r6v0r/qKX/q/WPWvrPpn/U0n92/aOW/q/RP2rpP4f+UUv/1+oftfSfU/+opf9c+kct/efWP2rpP4/+UUv/efWPWvrPp3/U0n9+/aOW/q/TP2rp/3r9o5b+C+gftfR/g/5RS/8F9Y9a+i+kf9TSf2H9o5b+i+gftfRfVP+opf9i+kct/RfXP2rpv4T+UUv/N+oftfRfUv+opf9S+kct/ZfWP2rpv4z+UUv/N+kftfRfVv+opf+b9Y9a+r9F/6il/3L6Ry39l9c/aum/gv5RS/8V9Y9a+q+kf9TSf2X9o5b+q+gftfR/q/5RS/9V9Y9a+q+mf9TSf3X9o5b+a+gftfR/m/5RS/+36x+19F9T/6il/zv0j1r6v1P/qKX/u/SPWvq/W/+opf9a+kct/dfWP2rpv47+UUv/dfWPWvqvp3/U0n99/aOW/u/RP2rpv4H+UUv/9+oftfTfUP+opf9G+kct/TfWP2rpv4n+UUv/TfWPWvpvpn/U0n9z/aOW/lvoH7X031L/qKX/VvpHLf231j9q6b+N/lFL/231j1r6b6d/1NJ/e/2jlv476B+19H+f/lFL/x31j1r676R/1NJ/Z/2jlv676B+19N9V/6il/276Ry39d9c/aum/h/5RS/899Y9a+u+lf9TS//36Ry39P6B/1NJ/b/2jlv776B+19N9X/6il/376Ry3999c/aul/gP5RS/8P6h+19P+Q/lFL/wP1j1r6H6R/1NL/YP2jlv4f1j9q6X+I/lFL/0P1j1r6f0T/qKX/R/WPWvp/TP+opf9h+kct/Q/XP2rpf4T+UUv/j+sftfQ/Uv+opf9R+kct/Y/WP2rpf4z+UUv/Y/WPWvp/Qv+opf9x+kct/Y/XP2rpf4L+UUv/T+oftfT/lP5RS/8T9Y8a+t8wMDDyJP2jhv6j1/+n9Y9a+n9G/6il/8n6Ry39P6t/1NL/FP2jlv6f0z9q6f95/aOW/qfqH7X0P03/qKX/6fpHLf3P0D9q6X+m/lFL/7P0j1r6f0H/qKX/2fpHLf3P0T9q6X+u/lFL//P0j1r6n69/1NL/i/pHLf2/pH/U0v8C/aOW/l/WP2rpf6H+UUv/r+gftfS/SP+opf/F+kct/S/RP2rpf6n+UUv/r+oftfT/mv5RS//L9I9a+n9d/6il/+X6Ry39v6F/1NL/Cv2jlv5X6h+19L9K/6il/zf1T0bNUNL/av2jlvX/Lf2jlv7f1j9q6f8d/aOW/t/VP2rp/z39o5b+39c/aun/A/2jlv7X6B+19L9W/6il/3X6Ry39r9c/aul/g/5RS/8b9Y9a+t+kf9TS/2b9o5b+t+gftfT/of5RS/8f6R+19P+x/lFL/1v1j1r636Z/1NL/dv2jlv536B+19P+J/lFL/59OrP/gF2hcU6iW/j+z/qOW/nfqH7X0/7n+UUv/u/SPWvr/Qv+opf8v9Y9a+t+tf9TS/1f6Ry39f61/1NL/Hv2jlv736h+19P+N/lFL//v0j1r6/1b/qKX/7/SPWvr/Xv+opf8f9I9a+v9R/6il//36Ry39H9A/mor7jxpr9OWRf9I/mor7j7f+H9Q/aun/Z/2jlv5/0T9q6f9X/aOW/n/TP2rp/3f9o5b+/9A/aun/kP5RS/+H9Y9a+j+if9TS/5/6Ry39H9U/aun/L/2jlv6P6R+19H9c/6il/xP6Ry39R+kflfSfZkD/qKX/IP2jlv6D9Y9a+g/RP2rpP1T/qKX/MP2jlv7D9Y9a+o/QP2rpP1L/qKX/NPpHLf2n1T9q6T+d/lFL/xfpH7X0f7H+UUv/6fWPWvrPoH/U0n9G/aOW/i/RP2rpP5P+UUv/l+oftfR/mf5RS/+X6x+19J9Z/6il/yv0j1r6z6J/1NJ/Vv2jlv6v1D9q6f8q/aOW/q/WP2rpP5v+UUv/2fWPWvq/Rv+opf8c+kct/V+rf9TSf079o5b+c/X1HzkpO7X0n7uv/yRp6T+P/lFL/3n1j1r6z6d/1NJ/fv2jlv6vm1j/oS/QuKZQLf1fb/1HLf0X0D9q6f8G/aOW/gvqH7X0X0j/qKX/wvpHU11/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg/7EDBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhBw5IAAAAAAT9f92OQAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4KQAA//9MtkLD")

2m50.646889422s ago: executing program 4 (id=252):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x14, 0x52, 0x1, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)

2m50.484535496s ago: executing program 4 (id=255):
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000040)="580002001402192340834b800400000080560a0100bc45ff81050b4a00009400050028925a01000000000000008000f0fffeffa809000000fff5dd6e0ff8a37ed3540002081000418e0fff00", 0x4c}], 0x1)
r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301)
ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0105500, &(0x7f0000000040)=ANY=[@ANYBLOB="a1"])

2m50.254675401s ago: executing program 4 (id=258):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00222200000096010006010083000000002a74a08538b3c83e25038a39942bb09ea54983"], 0x0}, 0x0)

2m48.134903603s ago: executing program 4 (id=272):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8})
linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000)

2m47.888129728s ago: executing program 4 (id=275):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
write(r0, &(0x7f0000000000)="4c00000011000f14001100020000180002000000200000", 0x17)

2m32.637393635s ago: executing program 32 (id=275):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
write(r0, &(0x7f0000000000)="4c00000011000f14001100020000180002000000200000", 0x17)

1m4.262682356s ago: executing program 5 (id=1176):
setresuid(0x0, 0xee01, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000080)={'nicvf0\x00', {0x2, 0x0, @private}})

1m4.156075258s ago: executing program 5 (id=1178):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000090000000500000004"], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)="3544eb8c0bf33c221bd23c54bcbfd5f3d018ce139394a2875e94e3b2", &(0x7f0000000040), 0x2d, r0}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000840)={r0, &(0x7f0000000580), &(0x7f0000000940)=""/208}, 0x20)

1m3.904882445s ago: executing program 5 (id=1179):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
write(r0, &(0x7f0000000000)="4c00000011000f140011000200001d0002000000200000", 0x17)

1m3.526745414s ago: executing program 5 (id=1184):
syz_mount_image$exfat(&(0x7f0000000100), &(0x7f0000000880)='./proc\x00', 0x0, &(0x7f0000000140)={[{@utf8}, {@utf8}, {@umask={'umask', 0x3d, 0x200}}, {@keep_last_dots}, {@errors_continue}, {@namecase}, {@iocharset={'iocharset', 0x3d, 'maccenteuro'}}, {@gid}, {@fmask={'fmask', 0x3d, 0x4}}, {@iocharset={'iocharset', 0x3d, 'cp857'}}]}, 0x5, 0x153c, &(0x7f00000008c0)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4)
mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)

1m3.097734024s ago: executing program 5 (id=1189):
setuid(0xee01)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x14, 0x2d, 0x107, 0x0, 0x25dfdbff, {0x2, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x4c80c}, 0xc010)

1m2.566687017s ago: executing program 5 (id=1194):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}}, 0x0)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x4c, 0x9, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x800}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x30008054}, 0x800)

1m2.02558628s ago: executing program 33 (id=1194):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}}, 0x0)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x4c, 0x9, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x800}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x30008054}, 0x800)

2.842739103s ago: executing program 6 (id=1741):
r0 = socket(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'hsr0\x00', <r1=>0x0})
sendto$packet(r0, &(0x7f0000000200)="01ff07000000000000000000892f", 0xe, 0x8c0, &(0x7f0000000080)={0x11, 0xf8, r1, 0x0, 0x0, 0x0}, 0x14)

2.678621017s ago: executing program 6 (id=1744):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000001400)='H', 0x20001401}], 0x1}, 0x0)
close(0x3)

2.485239711s ago: executing program 6 (id=1747):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r0}, 0x50)
bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000140)={r1, 0x58, &(0x7f00000000c0)}, 0x10)

2.208811487s ago: executing program 6 (id=1749):
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x810, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, "", [{{0x9, 0x4, 0x0, 0x1, 0x4, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x11, 0x20, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x3, 0x0, 0x4}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0022180000000501150025ff0904a1014de22d418c0508950129309102c0"], 0x0}, 0x0)

2.060972271s ago: executing program 0 (id=1750):
r0 = syz_create_resource$futex(&(0x7f0000000040))
r1 = syz_create_resource$futex(&(0x7f0000001680))
futex(r0, 0x5, 0x2, 0x0, r1, 0x4000000)

2.042991952s ago: executing program 3 (id=1751):
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
listen(r0, 0xfffffffb)
setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0)

1.790724507s ago: executing program 0 (id=1753):
r0 = socket$inet6(0xa, 0x3, 0x7)
sendto$inet6(r0, &(0x7f0000000080)="800009e92208a1ce", 0xfdef, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x18)
readv(r0, &(0x7f0000000000)=[{&(0x7f0000001180)=""/4096, 0x1000}], 0x1)

1.698499409s ago: executing program 3 (id=1755):
r0 = socket$igmp(0x2, 0x3, 0x2)
close_range(r0, 0xffffffffffffffff, 0x2)
fchmod(r0, 0x140)

1.586337092s ago: executing program 0 (id=1756):
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x13, &(0x7f0000000040)=0x7, 0x4)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_buf(r0, 0x6, 0x23, &(0x7f0000000040)=""/32, &(0x7f0000000080)=0x20)

1.436193686s ago: executing program 3 (id=1759):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = fsopen(&(0x7f0000000280)='tmpfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)

1.337099278s ago: executing program 0 (id=1761):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100))
r0 = fsopen(&(0x7f0000000040)='afs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='#(0.', 0x0)

1.26275754s ago: executing program 3 (id=1762):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000080)={0x4, 0xa}, 0x2)
connect$bt_l2cap(r0, &(0x7f0000000440)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)

1.25357723s ago: executing program 1 (id=1772):
syz_mount_image$minix(&(0x7f0000000180), &(0x7f0000000000)='./file1\x00', 0x8010, &(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRES16], 0x6, 0x196, &(0x7f0000001940)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0)
pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0)

1.059211144s ago: executing program 0 (id=1763):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0)
sendfile(r0, r1, 0x0, 0x200002)

1.058516154s ago: executing program 2 (id=1764):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f00000003c0)=0x8000, 0x4)
getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000040)=""/18, &(0x7f0000000240)=0x12)

838.45655ms ago: executing program 2 (id=1765):
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r0 = socket$kcm(0x29, 0x5, 0x0)
setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000000)=0x101, 0x4)

838.25599ms ago: executing program 1 (id=1766):
r0 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0xfffffffffffffdbe, 0x2, {0x400}}}]}, 0x38}}, 0x4c840)

639.479324ms ago: executing program 0 (id=1767):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000)
mremap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffc000/0x3000)=nil)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)

639.272864ms ago: executing program 2 (id=1768):
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0x7fffffffffffffff]}, 0x8, 0x80000)
io_setup(0x206, &(0x7f0000000200)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f00000005c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}])

593.720255ms ago: executing program 1 (id=1769):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xfffffff8}, 0x10)
write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000b800000000000000080003000d000000", 0x24)

468.640918ms ago: executing program 1 (id=1770):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="43082cbd7000fbdbdf250400000014000180060001"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0xc000)

382.118411ms ago: executing program 2 (id=1771):
r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2)
ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000000000)=0x1)
ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f00000000c0)={0x0, @bt={0x2d0, 0x5bb, 0x1, 0x1, 0xdd9f7f, 0xfffffffd, 0x0, 0x9, 0x7, 0x2, 0x6, 0x6, 0x7, 0x75e, 0xb, 0x39, {0x0, 0x6fd8e84b}, 0xff, 0x3}})

293.120522ms ago: executing program 1 (id=1773):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r0, 0x400455c8, 0x2)

283.033663ms ago: executing program 2 (id=1774):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x4, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x8, &(0x7f0000000300)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r0}, @generic={0xb7, 0x3, 0x0, 0x0, 0x8}, @generic={0xbf, 0x4, 0xa}, @generic={0x7, 0x4, 0x0, 0x0, 0xfffffff8}, @generic={0xb7, 0x5}, @generic={0x85, 0x0, 0x0, 0x0, 0x19}, @generic={0x95}], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r1, r0}, 0xc)

262.528323ms ago: executing program 3 (id=1775):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)={0x3c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x800)

212.982424ms ago: executing program 6 (id=1776):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000780)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000740)={<r1=>0xffffffffffffffff}, 0x2, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f00000004c0)={0x15, 0x110, 0xfa00, {r1, 0x0, 0x0, 0x10, 0x0, @in={0x3, 0x0, @empty}, @in={0x2, 0x0, @dev}}}, 0x118)

117.164447ms ago: executing program 2 (id=1777):
r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000000c0)=0x11)
ioctl$SNDCTL_DSP_GETODELAY(r0, 0x80045017, 0x0)

66.472408ms ago: executing program 3 (id=1778):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000000), 0x0, 0x75c, &(0x7f0000002bc0)="$eJzs3M1rHGUYAPBnJtmmH9GNIPhxEKGFFkonSXNpT40Xb4VCwWsNySSETLIhu6ndWLD1LNTmoiCIevboVSj1D/AmPQjeBdEaD+JlZTYfpTGbbpukK+nvB5N93vl63iczvNmBvBPAC+vt8kcSMRgRVyKiurE+jYgj7ehoxK31/dYe3pwslyRarau/J+Vhsdaqbp0r2fg8Ee1D4vWIuF+JOPvxf/PWmytzE0WRL220hxvzi8P15sq52fmJmXwmXxgduzhyYWzswsjYE2t4rctaT7138djdH99dXf3pu8adt/rPJTHerjs2auvyNE9l/XdSifFt6xcOIlkPJb3uAAAAXSm/5/dFRH/7W2o1+toRAAAAcJi0BloAAADAoZdEr3sAAAAAHKzN/wPYnNt7UPNgO/ntnYgY2il/f3sOccTRqETE8bXksZkJyfphsCe3bkfEvfHt99835R12a4/nHtnWfnyO9JE9np39cK8cf8Z3Gn/SrfEndhh/+jffnbBHnce/R/n7Oox/V7rM8f2Xb1Q65r8d8Wb/TvmTrfxJh/zvd5n/zuondztta30dcXrHvz/JY7l2eT/E+PRssevrB+7/c+bBbvUf75Q/2b3+xS7r/3Dtz7lOY0mZ/8zJ3a//TvnLe+LTjX6kEXF347Nsr27LcXI+/WG3+qciWs9y/b/qsv5fvh240eWuAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0JZGxGAkabYVp2mWRZyIiFfjeFrU6o2z07XlhalyW8RQVNLp2SIfiYjqejsp26Pt+FH7/Lb2WES88vOx9aSzRZ5N1oqpXhcPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAlhMRMRhJmkVEGhF/VdM0yyL6uzh24Dn0DwAAANgnQ73uAAAAAHDgPP8DAADA4fesz//JPvcDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAONSuXL5cLq21hzcny3bf9ebyXO36uam8PpfNL09mk7WlxWymVpsp8myyNv+k8xW12uLoxVi+MdzI643henPl2nxteaFxbXZ+Yia/lleeS1UAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8rcH2kqRZRKTtOE2zLOKliBiKSjI9W+QjEfFyRDyoVgbK9mivOw0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMC+qzdX5iaKIl8S/P+C/uhu56MHkX3QvXGAwUcRXV7cXgW9HpkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOiFenNlbqIo8qV6r3sCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAb6W/JhFRLqerpwa3bz2S/F1tf0bEB19c/ezGRKOxNFqu/2NrfePzjfXne9F/AAAAeCFcepqdN5/TN5/jAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAulVvrsxNFEW+tLfgUjRXWkmHfXpdIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Gz+DQAA//+HK8Pv")
mkdir(&(0x7f00000008c0)='./bus\x00', 0x0)
rename(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='./file0\x00')

57.418158ms ago: executing program 6 (id=1779):
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$bt_rfcomm(r0, &(0x7f0000000140)={0x1f, @none, 0x4}, 0xa)
connect$bt_rfcomm(r0, &(0x7f0000000040)={0x1f, @none, 0x8}, 0xa)

0s ago: executing program 1 (id=1780):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0)
sendfile(r0, r1, 0x0, 0x200002)

kernel console output (not intermixed with test programs):

T6791] netlink: 'syz.3.833': attribute type 4 has an invalid length.
[  183.031549][ T6791] netlink: 'syz.3.833': attribute type 8 has an invalid length.
[  183.042105][ T6795] loop1: detected capacity change from 0 to 8
[  183.072767][ T6791] netlink: 197344 bytes leftover after parsing attributes in process `syz.3.833'.
[  183.124962][ T6795] SQUASHFS error: Failed to read block 0x285: -5
[  183.126857][ T4739] DVB: Unable to find symbol stv0299_attach()
[  183.144343][ T6795] SQUASHFS error: Unable to read metadata cache entry [283]
[  183.164748][ T6795] SQUASHFS error: Unable to read directory block [283:0]
[  183.233145][ T6796] loop0: detected capacity change from 0 to 4096
[  183.359780][ T6796] ntfs3: loop0: Failed to load $Extend.
[  183.401897][ T4739] DVB: Unable to find symbol tda8083_attach()
[  183.408066][ T4739] dvb_ttusb_budget: no frontend driver found for device [0b48:1003]
[  183.440978][ T4739] usb 6-1: USB disconnect, device number 4
[  183.707216][ T6813] netlink: 'syz.2.840': attribute type 49 has an invalid length.
[  183.927335][ T6813] device veth0_to_bond entered promiscuous mode
[  184.029311][ T6818] netlink: 'syz.0.841': attribute type 7 has an invalid length.
[  184.047388][ T6817] loop1: detected capacity change from 0 to 4096
[  184.050688][ T6818] netlink: 'syz.0.841': attribute type 8 has an invalid length.
[  184.107691][ T6817] NILFS (loop1): invalid segment: Checksum error in segment payload
[  184.126473][ T6817] NILFS (loop1): trying rollback from an earlier position
[  184.172224][ T6817] NILFS (loop1): recovery complete
[  184.194878][ T6826] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  184.261337][ T6817] NILFS (loop1): Segment number 13903790157999918 to be freed is out of range
[  184.278834][ T4739] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  184.427761][ T6832] loop0: detected capacity change from 0 to 764
[  184.485343][ T6832] rock: directory entry would overflow storage
[  184.490471][ T4739] usb 6-1: Using ep0 maxpacket: 8
[  184.504111][ T4739] usb 6-1: config 179 has an invalid interface number: 65 but max is 0
[  184.528352][ T6832] rock: sig=0x5245, size=8, remaining=5
[  184.544429][ T4739] usb 6-1: config 179 has no interface number 0
[  184.580307][ T4739] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[  184.633499][ T4739] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[  184.701008][ T4739] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  184.746913][ T4739] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0
[  184.800040][ T4739] usb 6-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  184.880086][ T4739] usb 6-1: config 179 interface 65 has no altsetting 0
[  184.915653][ T4739] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  184.945305][ T4739] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  185.061274][ T4739] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input16
[  185.253978][ T6847] loop0: detected capacity change from 0 to 2048
[  185.322552][ T6824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  185.322769][ T6847] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  185.323179][ T6847] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4
[  185.328964][ T6847] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  185.350185][ T6824] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  185.357554][ T4739] usb 6-1: USB disconnect, device number 5
[  185.359007][ T4739] xpad 6-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  185.459549][ T6853] loop3: detected capacity change from 0 to 256
[  186.083866][ T6864] loop5: detected capacity change from 0 to 1024
[  186.111754][ T6866] rdma_op ffff88807f8a89f0 conn xmit_rdma 0000000000000000
[  186.142391][ T6864] EXT4-fs: Ignoring removed orlov option
[  186.191611][ T6864] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  186.260960][ T6871] device gretap0 entered promiscuous mode
[  186.284918][ T6871] device vlan2 entered promiscuous mode
[  186.312192][ T6864] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  186.502882][ T6878] netlink: 40 bytes leftover after parsing attributes in process `syz.3.861'.
[  186.522994][ T5441] EXT4-fs (loop5): unmounting filesystem.
[  186.528986][ T6878] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  186.537215][ T6878] IPv6: NLM_F_CREATE should be set when creating new route
[  186.544598][ T6878] IPv6: NLM_F_CREATE should be set when creating new route
[  186.565209][ T6880] netlink: 40 bytes leftover after parsing attributes in process `syz.3.861'.
[  186.629056][ T6880] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  186.667903][ T6883] netlink: 80 bytes leftover after parsing attributes in process `syz.2.862'.
[  186.710336][ T6883] netlink: 8 bytes leftover after parsing attributes in process `syz.2.862'.
[  187.646795][ T6876] loop1: detected capacity change from 0 to 32768
[  187.728071][ T6876] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  187.770740][ T6876] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  187.840182][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  187.906088][ T6876] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms
[  187.938411][ T5405] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  187.963674][ T5405] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  188.063999][ T6936] loop2: detected capacity change from 0 to 512
[  188.106846][ T6936] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  188.154769][ T5405] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 191ms
[  188.193212][ T6936] EXT4-fs error (device loop2): ext4_orphan_get:1409: inode #15: comm syz.2.882: inode has both inline data and extents flags
[  188.235719][ T5405] gfs2: fsid=syz:syz.0: jid=0: Done
[  188.254343][ T6876] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  188.262652][ T6936] EXT4-fs error (device loop2): ext4_orphan_get:1414: comm syz.2.882: couldn't read orphan inode 15 (err -117)
[  188.275033][ T6936] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  188.688284][ T4277] EXT4-fs (loop2): unmounting filesystem.
[  188.898623][ T6951] loop0: detected capacity change from 0 to 256
[  188.933592][ T6951] exfat: Deprecated parameter 'utf8'
[  188.939034][ T6951] exfat: Deprecated parameter 'namecase'
[  188.983903][ T6954] loop2: detected capacity change from 0 to 128
[  188.999265][ T6951] exfat: Deprecated parameter 'namecase'
[  189.027606][ T6951] exfat: Deprecated parameter 'namecase'
[  189.115166][ T6951] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0x0ab4ecf1, utbl_chksum : 0xe619d30d)
[  189.133058][ T6954] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fff0000)
[  189.171480][ T6954] FAT-fs (loop2): Filesystem has been set read-only
[  189.433063][ T6962] loop3: detected capacity change from 0 to 1024
[  189.668421][ T6968] loop2: detected capacity change from 0 to 512
[  189.683772][ T6971] loop5: detected capacity change from 0 to 256
[  189.817560][ T6971] FAT-fs (loop5): Directory bread(block 64) failed
[  189.829296][ T6968] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF
[  189.848870][ T6971] FAT-fs (loop5): Directory bread(block 65) failed
[  189.864712][ T6971] FAT-fs (loop5): Directory bread(block 66) failed
[  189.888698][ T6971] FAT-fs (loop5): Directory bread(block 67) failed
[  189.895844][ T6968] FAT-fs (loop2): Filesystem has been set read-only
[  189.908079][   T50] hfsplus: b-tree write err: -5, ino 25
[  189.916736][   T50] hfsplus: b-tree write err: -5, ino 4
[  189.930628][ T6971] FAT-fs (loop5): Directory bread(block 68) failed
[  189.937243][ T6971] FAT-fs (loop5): Directory bread(block 69) failed
[  189.958815][   T50] hfsplus: b-tree write err: -5, ino 2
[  189.975503][   T50] hfsplus: b-tree write err: -5, ino 26
[  189.981776][ T6971] FAT-fs (loop5): Directory bread(block 70) failed
[  189.988368][ T6971] FAT-fs (loop5): Directory bread(block 71) failed
[  190.077765][ T6971] FAT-fs (loop5): Directory bread(block 72) failed
[  190.108093][ T6971] FAT-fs (loop5): Directory bread(block 73) failed
[  190.247490][ T6981] block nbd1: Unsupported socket: should be TCP or UNIX.
[  191.030496][ T7014] loop1: detected capacity change from 0 to 8
[  191.137081][ T7014] SQUASHFS error: Failed to read block 0x10e000000008f: -5
[  191.178233][ T7017] netlink: 'syz.0.911': attribute type 3 has an invalid length.
[  191.201563][ T7017] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.911'.
[  191.204702][ T7014] SQUASHFS error: Failed to read block 0x10e0000c00090: -5
[  191.260627][ T7014] SQUASHFS error: Failed to read block 0x10e000000008f: -5
[  191.268081][ T7014] SQUASHFS error: Failed to read block 0x10e000000008f: -5
[  191.341206][ T7014] SQUASHFS error: Failed to read block 0x10e000000008f: -5
[  191.363514][ T7014] SQUASHFS error: Failed to read block 0x10e000000008f: -5
[  191.381860][ T7014] SQUASHFS error: Failed to read block 0x10e000000008f: -5
[  191.389401][   T27] audit: type=1800 audit(1791980658.594:44): pid=7014 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.909" name="file2" dev="loop1" ino=6 res=0 errno=0
[  191.533607][ T6996] loop5: detected capacity change from 0 to 32768
[  191.666037][ T6996] XFS (loop5): Mounting V5 Filesystem
[  191.722932][ T7041] process 'syz.2.916' launched './file2' with NULL argv: empty string added
[  191.769217][ T7046] loop1: detected capacity change from 0 to 512
[  191.796488][ T6996] XFS (loop5): Ending clean mount
[  191.886937][ T7046] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e018, mo2=0082]
[  191.948252][ T7046] System zones: 0-2, 18-18, 34-34
[  192.026822][ T5441] XFS (loop5): Unmounting Filesystem
[  192.028707][ T7046] EXT4-fs (loop1): 1 orphan inode deleted
[  192.050824][ T7051] EXT4-fs (loop3): Test dummy encryption mode enabled
[  192.057695][ T7051] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  192.085972][    T9] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  192.106508][ T7046] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  192.111829][    T9] EXT4-fs error (device loop1): ext4_release_dquot:6877: comm kworker/u4:0: Failed to release dquot type 1
[  192.160691][ T7046] ext4 filesystem being mounted at /169/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  192.267157][ T7051] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #16: comm syz.3.917: invalid indirect mapped block 32768 (level 2)
[  192.349997][ T7051] EXT4-fs (loop3): Remounting filesystem read-only
[  192.358228][ T7051] EXT4-fs (loop3): 1 orphan inode deleted
[  192.404008][ T7060] ip_tables: iptables: counters copy to user failed while replacing table
[  192.430220][ T7051] EXT4-fs (loop3): 1 truncate cleaned up
[  192.435975][ T7051] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  192.524079][ T4279] EXT4-fs (loop1): unmounting filesystem.
[  192.600824][ T7051] EXT4-fs error (device loop3): ext4_search_dir:1551: inode #12: block 7: comm syz.3.917: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=784, size=56 fake=0
[  192.716253][ T7051] EXT4-fs (loop3): Remounting filesystem read-only
[  192.882814][ T4275] EXT4-fs (loop3): unmounting filesystem.
[  193.057910][ T7078] set_capacity_and_notify: 1 callbacks suppressed
[  193.057927][ T7078] loop1: detected capacity change from 0 to 512
[  193.199087][ T7078] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  193.216843][ T7078] ext4 filesystem being mounted at /171/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  193.310326][ T7088] loop0: detected capacity change from 0 to 512
[  193.314109][ T4279] EXT4-fs (loop1): unmounting filesystem.
[  193.335611][ T7088] EXT4-fs (loop0): Test dummy encryption mode enabled
[  193.435973][ T7088] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e024e0ad, mo2=0002]
[  193.449816][ T7088] System zones: 1-12
[  193.461439][ T7088] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  193.544390][ T7088] EXT4-fs (loop0): unmounting filesystem.
[  193.721348][ T7100] netlink: 12 bytes leftover after parsing attributes in process `syz.3.932'.
[  194.033066][ T7119] loop1: detected capacity change from 0 to 164
[  194.202572][ T7123] loop2: detected capacity change from 0 to 16
[  194.231982][ T1281] ieee802154 phy0 wpan0: encryption failed: -22
[  194.238670][ T1281] ieee802154 phy1 wpan1: encryption failed: -22
[  194.283080][ T7123] erofs: (device loop2): mounted with root inode @ nid 36.
[  194.663421][ T7146] loop2: detected capacity change from 0 to 1024
[  194.716211][ T7138] loop5: detected capacity change from 0 to 4096
[  194.738140][ T7146] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  194.825659][ T7146] ext4 filesystem being mounted at /198/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  194.934352][ T7155] loop3: detected capacity change from 0 to 8
[  194.942681][ T7146] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 16: comm syz.2.945: path /198/file1: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=2, rec_len=4, size=1024 fake=1
[  195.071387][ T7155] SQUASHFS error: lzo decompression failed, data probably corrupt
[  195.109873][ T7155] SQUASHFS error: Failed to read block 0x71: -5
[  195.116931][ T7053] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set
[  195.189090][ T4277] EXT4-fs (loop2): unmounting filesystem.
[  195.193533][ T7155] SQUASHFS error: lzo decompression failed, data probably corrupt
[  195.290091][ T7155] SQUASHFS error: Failed to read block 0x71: -5
[  195.296751][   T27] audit: type=1800 audit(1791980662.504:45): pid=7155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.950" name="file0" dev="loop3" ino=3 res=0 errno=0
[  195.536786][ T7168] loop0: detected capacity change from 0 to 1024
[  195.621722][ T7168] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  195.632523][ T7172] loop5: detected capacity change from 0 to 512
[  195.734627][ T7172] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e018, mo2=0082]
[  195.770247][ T7172] System zones: 0-2, 18-18, 34-34
[  195.816929][ T7157] orangefs_mount: mount request failed with -4
[  195.824462][ T7172] EXT4-fs (loop5): 1 orphan inode deleted
[  195.845347][ T5506] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  195.849885][ T7172] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  195.895949][ T5506] EXT4-fs error (device loop5): ext4_release_dquot:6877: comm kworker/u4:8: Failed to release dquot type 1
[  195.913090][ T7172] ext4 filesystem being mounted at /122/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  195.952000][ T4280] EXT4-fs (loop0): unmounting filesystem.
[  196.099892][ T7187] loop2: detected capacity change from 0 to 1024
[  196.332131][ T5441] EXT4-fs (loop5): unmounting filesystem.
[  196.525943][ T4308] hfsplus: b-tree write err: -5, ino 25
[  196.546037][ T4308] hfsplus: b-tree write err: -5, ino 4
[  196.575333][ T4308] hfsplus: b-tree write err: -5, ino 2
[  196.618868][ T4308] hfsplus: b-tree write err: -5, ino 26
[  196.683389][ T7195] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  196.813536][ T7195] ntfs: (device loop1): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy.
[  196.868046][ T7195] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  196.900151][ T7195] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5).
[  196.980094][ T7195] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  197.000785][ T7195] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5).
[  197.052957][ T7207] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  197.082923][ T7207] ext4 filesystem being mounted at /202/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  197.134146][ T7195] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  197.143228][ T7195] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5).
[  197.165916][ T7195] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  197.175236][ T7195] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x200 because its location on disk could not be determined even after retrying (error code -5).
[  197.198509][ T7195] ntfs: volume version 3.1.
[  197.204312][ T7213] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  197.513492][ T4275] EXT4-fs (loop3): unmounting filesystem.
[  197.624653][ T7189] F2FS-fs (loop0): Invalid SB checksum offset: 0
[  197.653967][ T7189] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock
[  197.737706][ T7189] F2FS-fs (loop0): invalid crc value
[  197.801783][ T7189] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  198.079063][ T7189] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0
[  198.110238][ T7189] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  198.448542][ T4280] syz-executor: attempt to access beyond end of device
[  198.448542][ T4280] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  199.461089][ T7241] set_capacity_and_notify: 4 callbacks suppressed
[  199.461108][ T7241] loop3: detected capacity change from 0 to 40427
[  199.531044][ T7241] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  199.565817][ T7241] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  199.579060][ T7238] loop5: detected capacity change from 0 to 40427
[  199.594787][ T7241] F2FS-fs (loop3): invalid crc value
[  199.656091][ T7238] F2FS-fs (loop5): invalid crc value
[  199.668216][ T7241] F2FS-fs (loop3): Found nat_bits in checkpoint
[  199.689797][ T7238] F2FS-fs (loop5): Found nat_bits in checkpoint
[  199.919816][ T7241] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  199.938363][ T7238] F2FS-fs (loop5): Start checkpoint disabled!
[  199.959101][ T7241] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  200.060346][ T7238] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[  200.603558][   T50] kworker/u4:3: attempt to access beyond end of device
[  200.603558][   T50] loop5: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  200.680183][ T7277] loop3: detected capacity change from 0 to 1024
[  200.700915][   T50] kworker/u4:3: attempt to access beyond end of device
[  200.700915][   T50] loop5: rw=2049, sector=40984, nr_sectors = 8 limit=40427
[  200.772806][ T7277] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  200.816853][ T7277] ext4 filesystem being mounted at /206/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  200.846307][ T7277] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 16: comm syz.3.983: path /206/file1: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=2, rec_len=4, size=1024 fake=1
[  201.112049][ T4275] EXT4-fs (loop3): unmounting filesystem.
[  201.306743][ T7293] loop1: detected capacity change from 0 to 16
[  201.395305][ T7293] erofs: (device loop1): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 10000)
[  201.430251][ T4292] Bluetooth: hci2: command 0x0406 tx timeout
[  201.430270][ T4293] Bluetooth: hci0: command 0x0406 tx timeout
[  201.430345][ T4293] Bluetooth: hci3: command 0x0406 tx timeout
[  201.720169][ T4734] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  201.862415][ T7281] loop0: detected capacity change from 0 to 32768
[  201.912367][ T4734] usb 2-1: config 1 has an invalid descriptor of length 205, skipping remainder of the config
[  201.949282][ T7281] find_entry called with index >= next_index
[  201.964441][ T4734] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  201.983575][ T7281] find_entry called with index >= next_index
[  202.014516][ T7281] find_entry called with index >= next_index
[  202.024247][ T4734] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  202.045785][ T7281] find_entry called with index >= next_index
[  202.063655][ T4734] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67
[  202.085687][ T7281] find_entry called with index >= next_index
[  202.094297][ T4734] usb 2-1: SerialNumber: syz
[  202.117294][ T7281] add_index: next_index = 0.  Resetting!
[  202.148021][ T7281] find_entry called with index >= next_index
[  202.170096][ T7281] find_entry called with index >= next_index
[  202.191603][ T7281] find_entry called with index >= next_index
[  202.261612][ T7281] find_entry called with index >= next_index
[  202.267696][ T7281] find_entry called with index >= next_index
[  202.289781][ T7281] find_entry called with index >= next_index
[  202.330908][ T7281] find_entry called with index >= next_index
[  202.338213][ T4734] usb 2-1: 0:2 : does not exist
[  202.347286][ T7311] jffs2: notice: (7311) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  202.440159][ T4734] usb 2-1: USB disconnect, device number 12
[  202.492898][ T4295] udevd[4295]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  202.748084][ T7321] loop5: detected capacity change from 0 to 512
[  202.847257][ T7321] FAT-fs (loop5): Directory bread(block 199916) failed
[  202.880164][ T4401] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  202.889507][ T7321] FAT-fs (loop5): Directory bread(block 199917) failed
[  202.937796][ T7321] FAT-fs (loop5): Directory bread(block 199918) failed
[  202.968759][ T7321] FAT-fs (loop5): Directory bread(block 199919) failed
[  203.010032][ T7321] FAT-fs (loop5): Directory bread(block 199920) failed
[  203.017138][ T7321] FAT-fs (loop5): Directory bread(block 199921) failed
[  203.090155][ T7321] FAT-fs (loop5): Directory bread(block 199922) failed
[  203.097177][ T7321] FAT-fs (loop5): Directory bread(block 199923) failed
[  203.150171][ T4401] usb 4-1: Using ep0 maxpacket: 16
[  203.166679][ T4401] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  203.210032][ T4401] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  203.255828][ T4401] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  203.297894][ T4401] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  203.322928][ T4401] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  203.391704][ T4401] usb 4-1: config 0 descriptor??
[  203.400793][ T7321] FAT-fs (loop5): FAT read failed (blocknr 128)
[  203.883078][ T4401] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.000F/input/input17
[  203.888324][ T7322] loop0: detected capacity change from 0 to 32768
[  203.931882][ T4401] microsoft 0003:045E:07DA.000F: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0
[  204.101041][ T7322] XFS (loop0): Mounting V5 Filesystem
[  204.203498][ T5406] usb 4-1: USB disconnect, device number 8
[  204.220663][ T7322] XFS (loop0): Ending clean mount
[  204.240422][ T7338] loop5: detected capacity change from 0 to 4096
[  204.273895][ T7322] XFS (loop0): Quotacheck needed: Please wait.
[  204.299405][ T7338] __ntfs_warning: 9 callbacks suppressed
[  204.299423][ T7338] ntfs: (device loop5): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  204.366371][ T7345] fido_id[7345]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  204.465172][ T7322] XFS (loop0): Quotacheck: Done.
[  204.487097][ T7338] ntfs: (device loop5): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy.
[  204.545938][ T7322] XFS (loop0): EXPERIMENTAL online scrub feature in use. Use at your own risk!
[  204.609137][ T7338] ntfs: (device loop5): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  204.645627][ T7338] ntfs: (device loop5): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5).
[  204.747991][ T7338] ntfs: (device loop5): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  204.805535][ T7338] ntfs: (device loop5): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5).
[  204.825936][ T4280] XFS (loop0): Unmounting Filesystem
[  204.932548][ T7338] ntfs: (device loop5): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  204.950962][ T7338] ntfs: (device loop5): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5).
[  205.086700][ T7338] ntfs: (device loop5): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  205.114072][ T7338] ntfs: (device loop5): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x200 because its location on disk could not be determined even after retrying (error code -5).
[  205.240235][ T7338] ntfs: volume version 3.1.
[  205.264343][ T7225] Set syz0 is full, maxelem 65536 reached
[  205.610750][ T7359] loop2: detected capacity change from 0 to 8192
[  205.657665][ T7359] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  205.671180][ T7359] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal
[  205.681368][ T7359] REISERFS (device loop2): using ordered data mode
[  205.688011][ T7359] reiserfs: using flush barriers
[  205.695242][ T7359] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  205.714244][ T7359] REISERFS (device loop2): checking transaction log (loop2)
[  205.723820][ T7359] REISERFS (device loop2): Using rupasov hash to sort names
[  205.731677][ T7359] REISERFS (device loop2): using 3.5.x disk format
[  205.738640][ T7359] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  205.753494][ T7359] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  205.765549][ T7359] REISERFS warning (device loop2): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are!
[  205.779015][ T7359] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  205.790711][ T7359] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2)
[  205.806297][ T7359] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  205.886061][ T7359] reiserfs: enabling write barrier flush mode
[  205.929471][ T7353] loop1: detected capacity change from 0 to 32768
[  206.239523][ T7370] loop2: detected capacity change from 0 to 256
[  206.780094][ T4401] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  206.788634][ T7363] loop5: detected capacity change from 0 to 32768
[  206.880515][ T7363] XFS (loop5): Mounting V5 Filesystem
[  206.919103][ T7363] XFS (loop5): Ending clean mount
[  206.987017][ T4401] usb 4-1: New USB device found, idVendor=0552, idProduct=5510, bcdDevice= 0.00
[  206.999730][ T4401] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  207.008272][ T4401] usb 4-1: Product: syz
[  207.019272][ T7363] XFS (loop5): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair.
[  207.034709][ T4401] usb 4-1: Manufacturer: syz
[  207.110067][ T5407] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  207.147468][ T5441] XFS (loop5): Unmounting Filesystem
[  207.307984][ T5407] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  207.359502][ T5407] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  207.381317][ T5407] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  207.429410][ T5407] usb 2-1: New USB device found, idVendor=046d, idProduct=c262, bcdDevice= 0.00
[  207.468780][ T5407] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  207.498257][ T5407] usb 2-1: config 0 descriptor??
[  207.663463][ T4401] scsi host1: uas
[  207.827286][    C0] usb 4-1: stat urb: status -71
[  207.838561][ T4401] usb 4-1: USB disconnect, device number 9
[  207.847175][ T4401] scsi 1:0:0:0: tag#8 uas_zap_pending 0 uas-tag 1 inflight: CMD 
[  207.855788][ T4401] scsi 1:0:0:0: tag#8 CDB: Inquiry 12 00 00 00 24 00
[  207.920565][ T7405] loop5: detected capacity change from 0 to 2048
[  207.939651][ T5407] logitech-hidpp-device 0003:046D:C262.0010: unbalanced collection at end of report description
[  207.964212][ T5407] logitech-hidpp-device 0003:046D:C262.0010: hidpp_probe:parse failed
[  207.981422][ T5407] logitech-hidpp-device: probe of 0003:046D:C262.0010 failed with error -22
[  208.080189][ T7405] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  208.088848][ T7405] ext4 filesystem being mounted at /136/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  208.139587][ T5407] usb 2-1: USB disconnect, device number 13
[  208.266018][ T5441] EXT4-fs (loop5): unmounting filesystem.
[  208.368004][ T7398] loop2: detected capacity change from 0 to 32768
[  208.414411][ T7398] 
[  208.414411][ T7398]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  208.414411][ T7398] 
[  208.446379][ T7410] loop5: detected capacity change from 0 to 128
[  208.474058][ T7398] ERROR: (device loop2): diWrite: ixpxd invalid
[  208.474058][ T7398] 
[  208.531651][ T7398] ERROR: (device loop2): txCommit: 
[  208.531651][ T7398] 
[  208.723993][ T4277] 
[  208.723993][ T4277]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  208.723993][ T4277] 
[  208.758236][ T4277] 
[  208.758236][ T4277]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  208.758236][ T4277] 
[  209.789047][ T7444] loop2: detected capacity change from 0 to 2048
[  209.887770][ T7444] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  210.009992][ T5407] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  210.230995][ T5407] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  210.272608][ T5407] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[  210.302617][ T5407] usb 4-1: config 1 has no interface number 0
[  210.333027][ T5407] usb 4-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  210.399734][ T5407] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  210.446538][ T5407] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  210.476874][ T5407] usb 4-1: Product: syz
[  210.489965][ T5407] usb 4-1: Manufacturer: syz
[  210.516718][ T5407] usb 4-1: SerialNumber: syz
[  210.563592][ T5407] usb 4-1: selecting invalid altsetting 1
[  210.971949][ T5407] cdc_ncm 4-1:1.1: failed GET_NTB_PARAMETERS
[  210.978065][ T5407] cdc_ncm 4-1:1.1: bind() failure
[  211.019207][ T5407] usb 4-1: USB disconnect, device number 10
[  211.218019][ T7451] loop5: detected capacity change from 0 to 32768
[  211.380796][ T7451] XFS (loop5): Mounting V5 Filesystem
[  211.473972][ T7483] loop1: detected capacity change from 0 to 1024
[  211.524340][ T7451] XFS (loop5): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50.
[  211.531901][ T7483] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  211.570655][ T7451] XFS (loop5): Tail block (0x29) overwrite detected. Updated to 0x30
[  211.647237][ T7451] XFS (loop5): Ending clean mount
[  211.941946][ T5441] XFS (loop5): Unmounting Filesystem
[  212.040658][ T7492] netlink: 'syz.1.1057': attribute type 5 has an invalid length.
[  212.153614][ T7496] loop2: detected capacity change from 0 to 4096
[  212.191842][ T7496] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512)
[  212.326038][ T7496] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  212.336555][ T7498] loop1: detected capacity change from 0 to 1024
[  212.343029][ T5406] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  212.370238][ T7496] ntfs3: loop2: ino=1e, "file1" attr_set_size
[  212.431390][ T7498] hfsplus: unknown catalog record type 0
[  212.551982][ T5406] usb 4-1: config index 0 descriptor too short (expected 220, got 92)
[  212.580423][   T33] hfsplus: b-tree write err: -5, ino 25
[  212.586449][   T33] hfsplus: b-tree write err: -5, ino 4
[  212.596748][ T5406] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 54, changing to 9
[  212.607260][   T33] hfsplus: b-tree write err: -5, ino 2
[  212.640271][ T5406] usb 4-1: config 1 interface 1 altsetting 1 has an invalid endpoint with address 0x93, skipping
[  212.673593][ T5406] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[  212.733442][ T5406] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  212.765046][ T5406] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  212.798499][ T5406] usb 4-1: Product: syz
[  212.819463][ T5406] usb 4-1: Manufacturer: syz
[  212.824189][ T7502] kernel profiling enabled (shift: 0)
[  212.831902][ T5406] usb 4-1: SerialNumber: syz
[  213.005686][ T7396] Set syz0 is full, maxelem 65536 reached
[  213.165346][ T7511] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1066'.
[  213.485191][ T5406] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS
[  213.501683][ T5406] cdc_ncm 4-1:1.0: bind() failure
[  213.536194][ T5406] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found
[  213.547587][ T7522] loop0: detected capacity change from 0 to 64
[  213.554467][ T5406] cdc_ncm 4-1:1.1: bind() failure
[  213.578591][ T7522] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended.  mounting read-only.
[  213.608957][ T5406] usb 4-1: USB disconnect, device number 11
[  213.787538][ T7521] loop1: detected capacity change from 0 to 8192
[  213.807618][ T7521] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  213.826629][ T7521] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal
[  213.836818][ T7521] REISERFS (device loop1): using ordered data mode
[  213.843829][ T7521] reiserfs: using flush barriers
[  213.859075][ T7521] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  213.891226][ T7521] REISERFS (device loop1): checking transaction log (loop1)
[  213.938822][ T7524] loop0: detected capacity change from 0 to 4096
[  213.994356][ T7521] REISERFS (device loop1): Using rupasov hash to sort names
[  214.012090][ T7524] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  214.020003][ T7521] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  214.570480][ T7534] loop5: detected capacity change from 0 to 2048
[  214.599256][ T7536] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  214.718263][ T7539] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  214.766407][ T7534] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0
[  215.015622][ T7538] loop3: detected capacity change from 0 to 4096
[  215.022959][ T7534] Remounting filesystem read-only
[  215.393295][ T7538] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  215.417063][ T7538] ntfs3: loop3: Failed to load $Extend.
[  215.649439][ T7555] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1086'.
[  215.685847][ T7555] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1086'.
[  215.714041][ T7555] netlink: 'syz.1.1086': attribute type 14 has an invalid length.
[  215.733062][ T7555] netlink: 'syz.1.1086': attribute type 11 has an invalid length.
[  215.950226][ T4734] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  216.155224][ T4734] usb 1-1: Using ep0 maxpacket: 16
[  216.166239][ T4734] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  216.206075][ T4734] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  216.239998][ T4734] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  216.287643][ T4734] usb 1-1: config 0 interface 0 has no altsetting 0
[  216.320023][ T4734] usb 1-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00
[  216.369813][ T4734] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  216.412596][ T4734] usb 1-1: config 0 descriptor??
[  216.436188][ T7591] ip_tables: iptables: counters copy to user failed while replacing table
[  216.837670][ T4734] magicmouse 0003:05AC:0269.0011: item fetching failed at offset 5/7
[  216.877888][ T4734] magicmouse 0003:05AC:0269.0011: magicmouse hid parse failed
[  216.910553][ T4734] magicmouse: probe of 0003:05AC:0269.0011 failed with error -22
[  217.044329][ T4739] usb 1-1: USB disconnect, device number 10
[  217.129330][ T7618] loop3: detected capacity change from 0 to 1024
[  217.147393][ T7612] loop1: detected capacity change from 0 to 4096
[  217.176403][ T7612] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512)
[  217.211152][ T7618] EXT4-fs: Ignoring removed bh option
[  217.240108][ T4734] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  217.264265][ T7618] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  217.430232][ T4734] usb 3-1: Using ep0 maxpacket: 32
[  217.441178][ T4734] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  217.504233][ T4734] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x2 has invalid wMaxPacketSize 0
[  217.545003][ T4734] usb 3-1: config 0 interface 0 has no altsetting 0
[  217.573018][ T4734] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00
[  217.623671][ T4734] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  217.676812][ T4734] usb 3-1: config 0 descriptor??
[  217.677231][ T4275] EXT4-fs (loop3): unmounting filesystem.
[  217.876184][ T7636] loop3: detected capacity change from 0 to 764
[  218.107797][ T4734] corsair-cpro 0003:1B1C:0C10.0012: unknown main item tag 0x0
[  218.130362][ T4734] corsair-cpro 0003:1B1C:0C10.0012: unknown main item tag 0x0
[  218.137999][ T4734] corsair-cpro 0003:1B1C:0C10.0012: unknown main item tag 0x0
[  218.166299][ T4734] corsair-cpro 0003:1B1C:0C10.0012: unknown main item tag 0x0
[  218.194150][ T4734] corsair-cpro 0003:1B1C:0C10.0012: unknown main item tag 0x0
[  218.213314][ T4401] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  218.224355][ T4734] corsair-cpro 0003:1B1C:0C10.0012: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.2-1/input0
[  218.356674][ T4734] corsair-cpro: probe of 0003:1B1C:0C10.0012 failed with error -90
[  218.384602][ T4734] usb 3-1: USB disconnect, device number 8
[  218.409517][ T4401] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  218.451819][ T4401] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  218.493057][ T4401] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  218.547326][ T4401] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  218.575949][ T4401] usb 6-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[  218.592208][ T4401] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  218.729543][ T7655] fido_id[7655]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  218.832378][ T7668] Bluetooth: hci0: unsupported parameter 44303
[  218.856180][ T7668] Bluetooth: hci0: unsupported parameter 128
[  218.893385][ T7668] Bluetooth: hci0: unsupported parameter 44303
[  218.933097][ T7668] Bluetooth: hci0: unsupported parameter 128
[  219.033207][ T4401] gud 6-1:1.0: No supported pixel formats found
[  219.050252][ T4401] gud: probe of 6-1:1.0 failed with error -22
[  219.075338][ T7673] device syz_tun entered promiscuous mode
[  219.103736][ T7673] device syz_tun left promiscuous mode
[  219.263812][ T5316] usb 6-1: USB disconnect, device number 6
[  219.843989][    C0] ip6_tunnel: ip6gretap0: Local routing loop detected!
[  219.989655][ T7715] loop3: detected capacity change from 0 to 1024
[  220.087784][ T7715] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  220.114827][   T27] kauditd_printk_skb: 9 callbacks suppressed
[  220.114844][   T27] audit: type=1326 audit(1791980687.324:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7719 comm="syz.0.1149" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f24b079e559 code=0x0
[  220.156077][ T7715] ext4 filesystem being mounted at /238/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  220.179415][ T7715] EXT4-fs error (device loop3): ext4_map_blocks:747: inode #15: comm syz.3.1148: lblock 0 mapped to illegal pblock 0 (length 1)
[  220.234030][ T4275] EXT4-fs (loop3): unmounting filesystem.
[  220.534089][ T7729] loop5: detected capacity change from 0 to 8192
[  220.586167][ T7729] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  220.607527][ T7735] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1156'.
[  220.647318][ T7709] loop2: detected capacity change from 0 to 32768
[  220.657388][ T7729] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal
[  220.668098][ T7729] REISERFS (device loop5): using ordered data mode
[  220.675315][ T7729] reiserfs: using flush barriers
[  220.699555][ T7729] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 7, max trans age 7
[  220.732732][ T7729] REISERFS (device loop5): checking transaction log (loop5)
[  220.776622][ T7729] REISERFS (device loop5): Using r5 hash to sort names
[  220.792086][ T7709] ialloc: diAlloc returned -5!
[  220.803036][ T7729] REISERFS warning (device loop5): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  220.832678][ T7729] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage.
[  221.110211][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  221.360442][ T7750] ip_tables: iptables: counters copy to user failed while replacing table
[  221.488010][ T7756] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1166'.
[  221.558714][ T7756] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1166'.
[  221.610135][ T7756] netlink: 'syz.1.1166': attribute type 19 has an invalid length.
[  221.644120][ T7756] netlink: 'syz.1.1166': attribute type 20 has an invalid length.
[  221.879523][ T7772] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1173'.
[  222.003448][ T7778] loop2: detected capacity change from 0 to 512
[  222.068479][ T7778] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  222.145305][ T7778] ext4 filesystem being mounted at /238/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  222.306412][ T7764] loop3: detected capacity change from 0 to 32768
[  222.401804][ T7789] netlink: 'syz.1.1180': attribute type 1 has an invalid length.
[  222.420219][ T7788] Bluetooth: hci0: unsupported parameter 5135
[  222.426409][ T7788] Bluetooth: hci0: unsupported parameter 8192
[  222.435436][ T4277] EXT4-fs (loop2): unmounting filesystem.
[  222.441783][ T7788] Bluetooth: hci0: unsupported parameter 5135
[  222.510172][ T7788] Bluetooth: hci0: unsupported parameter 8192
[  222.754039][ T7798] loop5: detected capacity change from 0 to 256
[  222.789818][ T7798] exfat: Deprecated parameter 'utf8'
[  222.810022][ T7798] exfat: Deprecated parameter 'utf8'
[  222.816045][ T7798] exfat: Deprecated parameter 'namecase'
[  222.866507][ T7798] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0x0ab4ecf1, utbl_chksum : 0xe619d30d)
[  222.984737][ T7804] loop0: detected capacity change from 0 to 64
[  223.490102][ T4737] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  223.583950][   T50] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  223.640306][ T4734] usb 1-1: new full-speed USB device number 11 using dummy_hcd
[  223.681909][ T4737] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  223.700124][ T4737] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  223.733353][ T4737] usb 4-1: config 0 interface 0 has no altsetting 0
[  223.750119][ T4737] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0a55, bcdDevice= 0.00
[  223.778058][ T4737] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  223.828273][ T4737] usb 4-1: config 0 descriptor??
[  223.836369][ T4734] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  223.851807][ T4734] usb 1-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  223.865279][ T4734] usb 1-1: config 0 interface 0 has no altsetting 0
[  223.872453][ T4734] usb 1-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.00
[  223.882989][ T4734] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  223.907125][ T4734] usb 1-1: config 0 descriptor??
[  223.913498][ T7810] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  223.930310][   T50] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  224.055906][   T50] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  224.165407][   T50] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  224.253481][ T4737] hid-generic 0003:1B1C:0A55.0013: unbalanced collection at end of report description
[  224.282518][ T4737] hid-generic: probe of 0003:1B1C:0A55.0013 failed with error -22
[  224.307662][ T7823] loop1: detected capacity change from 0 to 256
[  224.343340][ T4734] pantherlord 0003:0810:0001.0014: No inputs registered, leaving
[  224.370775][ T4734] pantherlord 0003:0810:0001.0014: hidraw0: USB HID v0.11 Joystick [HID 0810:0001] on usb-dummy_hcd.0-1/input0
[  224.394559][ T4734] pantherlord 0003:0810:0001.0014: Force feedback for PantherLord/GreenAsia devices by Anssi Hannula <anssi.hannula@gmail.com>
[  224.458674][ T4734] usb 4-1: USB disconnect, device number 12
[  224.591899][ T4401] usb 1-1: USB disconnect, device number 11
[  224.826478][ T7825] fido_id[7825]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  225.218464][ T4294] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  225.232650][ T4294] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  225.260424][ T4294] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  225.273715][ T4294] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  225.281645][ T4294] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  225.288960][ T4294] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  225.336635][ T7844] loop1: detected capacity change from 0 to 1764
[  225.379072][ T7841] rxe_eth0 speed is unknown, defaulting to 1000
[  225.597903][ T7854] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  225.677073][ T7852] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  226.125117][ T7871] loop1: detected capacity change from 0 to 2048
[  226.304112][ T7871] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  226.316343][ T7871] ext4 filesystem being mounted at /245/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  226.494582][ T7889] loop3: detected capacity change from 0 to 128
[  226.508682][ T7889] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  226.571539][ T4279] EXT4-fs (loop1): unmounting filesystem.
[  226.662764][ T7893] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1224'.
[  226.710155][ T7889] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  226.988745][ T7903] ip_tables: iptables: counters copy to user failed while replacing table
[  227.058441][ T7841] chnl_net:caif_netlink_parms(): no params data found
[  227.140073][ T4737] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  227.331702][ T4737] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  227.350123][ T4294] Bluetooth: hci1: command 0x0409 tx timeout
[  227.363561][ T4737] usb 1-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  227.377057][ T4737] usb 1-1: config 0 interface 0 has no altsetting 0
[  227.384161][ T4737] usb 1-1: New USB device found, idVendor=046d, idProduct=c71e, bcdDevice= 0.00
[  227.393645][ T4737] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  227.440861][ T4737] usb 1-1: config 0 descriptor??
[  227.473964][ T7841] bridge0: port 1(bridge_slave_0) entered blocking state
[  227.481394][ T7841] bridge0: port 1(bridge_slave_0) entered disabled state
[  227.514380][ T7841] device bridge_slave_0 entered promiscuous mode
[  227.537082][ T7841] bridge0: port 2(bridge_slave_1) entered blocking state
[  227.560092][ T7841] bridge0: port 2(bridge_slave_1) entered disabled state
[  227.580731][ T7920] loop2: detected capacity change from 0 to 512
[  227.598999][ T7841] device bridge_slave_1 entered promiscuous mode
[  227.640529][ T7920] EXT4-fs: Ignoring removed oldalloc option
[  227.778855][ T7920] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  227.828513][ T7841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  227.884671][   T50] device hsr_slave_0 left promiscuous mode
[  227.895981][ T7920] EXT4-fs: Ignoring removed nobh option
[  227.930109][ T7920] EXT4-fs: Ignoring sb option on remount
[  227.946362][   T50] device hsr_slave_1 left promiscuous mode
[  227.950757][ T7920] EXT4-fs: Cannot change journaled quota options when quota turned on
[  227.965728][   T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  228.010206][   T50] batman_adv: batadv0: Removing interface: batadv_slave_0
[  228.040075][   T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  228.047598][   T50] batman_adv: batadv0: Removing interface: batadv_slave_1
[  228.079289][ T4739] usb 1-1: USB disconnect, device number 12
[  228.094386][   T50] bridge0: port 2(bridge_slave_1) entered disabled state
[  228.106899][   T50] device bridge_slave_0 left promiscuous mode
[  228.130408][ T4277] EXT4-fs (loop2): unmounting filesystem.
[  228.159262][   T50] bridge0: port 1(bridge_slave_0) entered disabled state
[  228.271990][   T50] device veth1_macvtap left promiscuous mode
[  228.278125][   T50] device veth0_macvtap left promiscuous mode
[  228.295444][   T27] audit: type=1326 audit(1791980695.504:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7935 comm="syz.3.1239" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fad7099e559 code=0x0
[  228.330195][   T50] device veth1_vlan left promiscuous mode
[  228.336181][   T50] device veth0_vlan left promiscuous mode
[  228.529128][ T7946] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1241'.
[  228.962135][ T7957] ip_tables: iptables: counters copy to user failed while replacing table
[  229.233270][ T7960] loop0: detected capacity change from 0 to 2048
[  229.317906][ T7960] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  229.340473][ T7960] ext4 filesystem being mounted at /246/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  229.377483][ T7943] loop1: detected capacity change from 0 to 40427
[  229.407087][ T7943] F2FS-fs (loop1): invalid crc value
[  229.430127][ T4294] Bluetooth: hci1: command 0x041b tx timeout
[  229.458263][ T7943] F2FS-fs (loop1): Found nat_bits in checkpoint
[  229.515386][ T4280] EXT4-fs (loop0): unmounting filesystem.
[  229.536178][ T7943] F2FS-fs (loop1): Start checkpoint disabled!
[  229.567049][ T7943] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  229.828107][   T11] kworker/u4:1: attempt to access beyond end of device
[  229.828107][   T11] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  230.738417][ T7970] loop0: detected capacity change from 0 to 32768
[  230.759532][ T7970] XFS (loop0): Mounting V5 Filesystem
[  230.835048][ T7970] XFS (loop0): Ending clean mount
[  230.862753][   T50] team0 (unregistering): Port device team_slave_1 removed
[  230.944758][ T4280] XFS (loop0): Unmounting Filesystem
[  231.028784][   T50] team0 (unregistering): Port device team_slave_0 removed
[  231.213397][   T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  231.379511][   T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  231.447456][ T8003] xt_hashlimit: size too large, truncated to 1048576
[  231.510228][ T4294] Bluetooth: hci1: command 0x040f tx timeout
[  231.569606][ T7988] loop3: detected capacity change from 0 to 32768
[  231.704831][ T7988] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  231.777049][   T27] audit: type=1800 audit(1791980698.994:48): pid=7988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1257" name="file1" dev="loop3" ino=17058 res=0 errno=0
[  232.046156][ T7988] syz.3.1257 (7988) used greatest stack depth: 19232 bytes left
[  232.102268][ T4275] ocfs2: Unmounting device (7,3) on (node local)
[  232.601958][ T5318] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  232.640388][   T50] bond0 (unregistering): Released all slaves
[  232.720533][ T7841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  232.730058][ T7950] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  232.802304][ T5318] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  232.825979][ T5318] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  232.848765][ T5318] usb 4-1: config 0 interface 0 has no altsetting 0
[  232.856957][ T5318] usb 4-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00
[  232.874429][ T5318] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  232.896334][ T7841] team0: Port device team_slave_0 added
[  232.934036][ T5318] usb 4-1: config 0 descriptor??
[  232.957970][ T7841] team0: Port device team_slave_1 added
[  233.046619][ T7841] batman_adv: batadv0: Adding interface: batadv_slave_0
[  233.079999][ T7841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  233.199988][ T7841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  233.247009][ T7841] batman_adv: batadv0: Adding interface: batadv_slave_1
[  233.263173][ T7841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  233.340329][ T8021] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1266'.
[  233.355025][ T5318] hid-multitouch 0003:0EEF:72C4.0016: unbalanced collection at end of report description
[  233.380054][ T7841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  233.384056][ T5318] hid-multitouch: probe of 0003:0EEF:72C4.0016 failed with error -22
[  233.522064][ T7841] device hsr_slave_0 entered promiscuous mode
[  233.556865][ T7841] device hsr_slave_1 entered promiscuous mode
[  233.571774][ T5318] usb 4-1: USB disconnect, device number 13
[  233.588101][ T7841] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  233.590548][ T4294] Bluetooth: hci1: command 0x0419 tx timeout
[  233.635454][ T7841] Cannot create hsr debugfs directory
[  233.761208][ T8030] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1268'.
[  234.077482][ T7841] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  234.090041][ T5318] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  234.109159][ T7841] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  234.146222][ T7841] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  234.182683][ T7841] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  234.290246][ T5318] usb 2-1: Using ep0 maxpacket: 16
[  234.297516][ T5318] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  234.335896][ T5318] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  234.370012][ T5318] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  234.430024][ T5318] usb 2-1: config 0 interface 0 has no altsetting 0
[  234.460749][ T5318] usb 2-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00
[  234.474859][ T7841] 8021q: adding VLAN 0 to HW filter on device bond0
[  234.519970][   T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  234.527559][ T5318] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  234.540920][   T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  234.568215][ T5318] usb 2-1: config 0 descriptor??
[  234.573652][ T7841] 8021q: adding VLAN 0 to HW filter on device team0
[  234.611629][ T8049] netlink: 'syz.3.1275': attribute type 298 has an invalid length.
[  234.640895][   T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  234.661333][   T50] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  234.690151][   T50] bridge0: port 1(bridge_slave_0) entered blocking state
[  234.697375][   T50] bridge0: port 1(bridge_slave_0) entered forwarding state
[  234.763918][   T50] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  234.791474][   T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  234.822027][   T50] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  234.850605][   T50] bridge0: port 2(bridge_slave_1) entered blocking state
[  234.858014][   T50] bridge0: port 2(bridge_slave_1) entered forwarding state
[  234.900417][   T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  234.962724][   T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  234.991285][   T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  235.014880][ T5318] prodikeys 0003:041E:2801.0017: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.1-1/input0
[  235.030772][   T50] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  235.070622][   T50] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  235.079760][   T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  235.138245][   T50] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  235.179056][   T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  235.210823][ T5318] usb 2-1: USB disconnect, device number 14
[  235.219073][   T50] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  235.269066][ T7841] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  235.330349][ T7841] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  235.344542][   T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  235.371837][   T50] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  235.484143][ T8058] fido_id[8058]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  236.313074][   T50] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  236.330420][   T50] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  236.338720][ T8090] loop1: detected capacity change from 0 to 4096
[  236.370431][ T7841] 8021q: adding VLAN 0 to HW filter on device batadv0
[  236.640988][ T8101] loop2: detected capacity change from 0 to 128
[  236.688583][ T8101] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  236.730828][ T8101] hpfs: filesystem error: improperly stopped
[  236.750046][ T8101] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  236.790595][ T8101] hpfs: You really don't want any checks? You are crazy...
[  236.819641][ T8101] hpfs: hpfs_map_sector(): read error
[  236.850076][ T8101] hpfs: code page support is disabled
[  236.855755][ T8101] hpfs: hpfs_map_4sectors(): unaligned read
[  236.912870][ T8101] hpfs: hpfs_map_4sectors(): unaligned read
[  236.918857][ T8101] hpfs: filesystem error: unable to find root dir
[  237.360090][ T4737] usb 2-1: new full-speed USB device number 15 using dummy_hcd
[  237.531316][ T8093] loop0: detected capacity change from 0 to 32768
[  237.551960][ T4737] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  237.590142][ T4737] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  237.609510][ T4737] usb 2-1: config 0 descriptor??
[  237.632448][ T4737] cp210x 2-1:0.0: cp210x converter detected
[  237.679515][ T8093] XFS (loop0): Mounting V5 Filesystem
[  237.824728][ T8093] XFS (loop0): Ending clean mount
[  237.985030][   T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  238.010835][   T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  238.035184][ T4280] XFS (loop0): Unmounting Filesystem
[  238.045835][ T4737] usb 2-1: cp210x converter now attached to ttyUSB0
[  238.116885][ T7841] device veth0_vlan entered promiscuous mode
[  238.167721][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  238.211276][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  238.241736][ T4737] usb 2-1: USB disconnect, device number 15
[  238.280913][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  238.324188][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  238.332735][ T4737] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  238.393753][ T7841] device veth1_vlan entered promiscuous mode
[  238.406559][ T4737] cp210x 2-1:0.0: device disconnected
[  238.551829][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  238.587573][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  238.607113][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  238.638276][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  238.679423][ T7841] device veth0_macvtap entered promiscuous mode
[  238.718077][ T7841] device veth1_macvtap entered promiscuous mode
[  238.777112][ T7841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  238.829954][ T7841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  238.879442][ T7841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  238.939441][ T7841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  238.969993][ T7841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  239.023814][ T7841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  239.067561][ T7841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  239.123638][ T7841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  239.156922][ T7841] batman_adv: batadv0: Interface activated: batadv_slave_0
[  239.202949][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  239.214636][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  239.238298][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  239.281414][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  239.319139][ T7841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  239.346307][ T7841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  239.385643][ T7841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  239.406354][ T7841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  239.416610][ T7841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  239.437098][ T7841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  239.454607][ T7841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  239.480017][ T7841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  239.519026][ T7841] batman_adv: batadv0: Interface activated: batadv_slave_1
[  239.522460][ T8178] netlink: 'syz.0.1316': attribute type 1 has an invalid length.
[  239.563490][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  239.588962][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  239.615211][ T7841] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  239.671611][ T7841] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  239.698140][ T7841] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  239.729982][ T7841] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  239.934733][ T8189] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1320'.
[  239.983694][ T4308] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  240.012127][ T4308] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  240.034958][ T5506] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  240.080347][ T4308] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  240.088287][ T4308] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  240.132181][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  240.167702][ T5406] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  240.240174][ T4737] usb 2-1: new full-speed USB device number 16 using dummy_hcd
[  240.385120][ T5406] usb 1-1: Using ep0 maxpacket: 32
[  240.398528][ T5406] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  240.431868][ T4737] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[  240.436554][ T5406] usb 1-1: New USB device found, idVendor=0eef, idProduct=0001, bcdDevice= 0.00
[  240.464837][ T4737] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  240.484987][ T8207] loop6: detected capacity change from 0 to 1764
[  240.493850][ T5406] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  240.517851][ T4737] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e
[  240.548692][ T4737] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  240.562242][ T5406] usb 1-1: config 0 descriptor??
[  240.587788][ T4737] usb 2-1: Product: syz
[  240.595628][ T4737] usb 2-1: Manufacturer: syz
[  240.624945][ T4737] usb 2-1: SerialNumber: syz
[  240.642823][ T4737] usb 2-1: config 0 descriptor??
[  240.664482][ T4737] hub 2-1:0.0: bad descriptor, ignoring hub
[  240.677643][ T8207] iso9660: Corrupted directory entry in block 2 of inode 1920
[  240.692413][ T4737] hub: probe of 2-1:0.0 failed with error -5
[  240.722411][ T4737] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input20
[  240.788913][ T5406] input: USB Touchscreen 0eef:0001 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input19
[  241.007123][ T5406] usb 1-1: USB disconnect, device number 13
[  241.959046][ T8260] binder: 8258:8260 ioctl 541b 0 returned -22
[  242.392686][ T4294] Bluetooth: hci4: command 0x0406 tx timeout
[  242.410938][ T8280] netlink: 'syz.3.1355': attribute type 30 has an invalid length.
[  242.626182][   T27] audit: type=1326 audit(1791980709.834:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8287 comm="syz.2.1359" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc1239e559 code=0x7ffc0000
[  242.712564][   T27] audit: type=1326 audit(1791980709.854:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8287 comm="syz.2.1359" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc1239e559 code=0x7ffc0000
[  242.785231][   T27] audit: type=1326 audit(1791980709.864:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8287 comm="syz.2.1359" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc1239e559 code=0x7ffc0000
[  242.833785][ T8295] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1360'.
[  242.924420][   T27] audit: type=1326 audit(1791980709.864:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8287 comm="syz.2.1359" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7fdc1239e559 code=0x7ffc0000
[  242.990954][ T8298] netlink: 79 bytes leftover after parsing attributes in process `syz.3.1362'.
[  243.031985][   T27] audit: type=1326 audit(1791980709.864:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8287 comm="syz.2.1359" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc1239e559 code=0x7ffc0000
[  243.151177][   T27] audit: type=1326 audit(1791980709.864:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8287 comm="syz.2.1359" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc1239e559 code=0x7ffc0000
[  243.241564][   T27] audit: type=1326 audit(1791980709.864:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8287 comm="syz.2.1359" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc1239e559 code=0x7ffc0000
[  243.309107][ T8311] loop2: detected capacity change from 0 to 1024
[  243.346309][   T27] audit: type=1326 audit(1791980709.864:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8287 comm="syz.2.1359" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc1239e559 code=0x7ffc0000
[  243.423701][ T8314] tmpfs: Unknown parameter 'usrquota_block_hardlimit'
[  243.461135][   T27] audit: type=1326 audit(1791980709.864:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8287 comm="syz.2.1359" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7fdc1239e559 code=0x7ffc0000
[  243.485899][ T5406] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  243.501218][ T8311] hfsplus: cannot replace xattr
[  243.560017][   T27] audit: type=1326 audit(1791980709.864:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8287 comm="syz.2.1359" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc1239e559 code=0x7ffc0000
[  243.653654][ T5506] hfsplus: bad catalog file entry
[  243.682045][ T5406] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  243.720212][ T5406] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  243.772501][ T5406] usb 1-1: config 0 interface 0 has no altsetting 0
[  243.792081][ T5406] usb 1-1: New USB device found, idVendor=14e1, idProduct=6000, bcdDevice= 0.00
[  243.822725][ T5406] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  243.849284][ T5406] usb 1-1: config 0 descriptor??
[  244.292641][ T5406] hid-penmount 0003:14E1:6000.0018: hidraw0: USB HID v0.00 Device [HID 14e1:6000] on usb-dummy_hcd.0-1/input0
[  244.427501][ T8341] program syz.3.1378 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  244.492309][ T5406] usb 1-1: USB disconnect, device number 14
[  244.518504][ T8303] loop6: detected capacity change from 0 to 40427
[  244.571282][ T8303] F2FS-fs (loop6): Corrupted extension count (33554469 + 1 > 64)
[  244.579148][ T8303] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock
[  244.642274][ T8339] fido_id[8339]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  244.663402][ T8303] F2FS-fs (loop6): invalid crc value
[  244.695042][ T8303] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  244.916125][ T8303] F2FS-fs (loop6): recover fsync data on readonly fs
[  244.973070][ T8303] F2FS-fs (loop6): Try to recover 2th superblock, ret: -30
[  244.998733][ T8303] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  245.564289][ T5401] usb 2-1: USB disconnect, device number 16
[  245.599212][ T8374] xt_hashlimit: size too large, truncated to 1048576
[  245.637037][ T8374] xt_hashlimit: max too large, truncated to 1048576
[  246.122443][ T8391] Bluetooth: hci0: unsupported parameter 5135
[  246.128623][ T8391] Bluetooth: hci0: unsupported parameter 8192
[  246.165678][ T8391] Bluetooth: hci0: unsupported parameter 5135
[  246.180221][ T8391] Bluetooth: hci0: unsupported parameter 8192
[  246.532343][ T8370] loop0: detected capacity change from 0 to 32768
[  246.996917][ T8383] loop2: detected capacity change from 0 to 32768
[  247.166738][ T8383] XFS (loop2): Mounting V5 Filesystem
[  247.238047][ T8400] loop1: detected capacity change from 0 to 32768
[  247.259284][ T8400] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.1402 (8400)
[  247.282409][ T8400] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  247.292892][ T8400] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  247.302096][ T8400] BTRFS info (device loop1): setting nodatasum
[  247.308449][ T8400] BTRFS info (device loop1): force zlib compression, level 3
[  247.316439][ T8400] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8)
[  247.326118][ T8400] BTRFS info (device loop1): use lzo compression, level 0
[  247.333647][ T8400] BTRFS info (device loop1): turning on flush-on-commit
[  247.341130][ T8400] BTRFS info (device loop1): enabling auto defrag
[  247.347668][ T8400] BTRFS info (device loop1): max_inline at 4096
[  247.356390][ T8400] BTRFS info (device loop1): using free space tree
[  247.417824][ T8383] XFS (loop2): Ending clean mount
[  247.539010][ T4277] XFS (loop2): Unmounting Filesystem
[  247.703387][ T8395] loop6: detected capacity change from 0 to 32768
[  247.863558][ T8400] BTRFS info (device loop1): enabling ssd optimizations
[  247.883800][ T8395] XFS (loop6): Mounting V5 Filesystem
[  248.051084][ T8395] XFS (loop6): Ending clean mount
[  248.094122][ T8454] loop2: detected capacity change from 0 to 64
[  248.113827][ T4279] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  248.205166][ T8404] loop3: detected capacity change from 0 to 32768
[  248.313640][ T8454] syz.2.1406: attempt to access beyond end of device
[  248.313640][ T8454] loop2: rw=0, sector=1024, nr_sectors = 2 limit=64
[  248.348500][ T8454] Buffer I/O error on dev loop2, logical block 512, async page read
[  248.375981][ T8454] syz.2.1406: attempt to access beyond end of device
[  248.375981][ T8454] loop2: rw=0, sector=113152, nr_sectors = 2 limit=64
[  248.390498][ T8459] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1410'.
[  248.447919][ T7841] XFS (loop6): Unmounting Filesystem
[  248.518456][ T8454] Buffer I/O error on dev loop2, logical block 56576, async page read
[  248.686427][ T8404] XFS (loop3): Mounting V5 Filesystem
[  248.866007][ T8404] XFS (loop3): Ending clean mount
[  249.048084][ T4275] XFS (loop3): Unmounting Filesystem
[  249.840697][ T8489] device veth1_to_batadv entered promiscuous mode
[  249.875740][ T8489] device veth1_to_batadv left promiscuous mode
[  249.884433][ T8492] loop0: detected capacity change from 0 to 64
[  250.197974][ T8468] loop1: detected capacity change from 0 to 40427
[  250.226513][ T8500] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1422'.
[  250.248613][   T27] kauditd_printk_skb: 4 callbacks suppressed
[  250.248630][   T27] audit: type=1326 audit(1791980717.454:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8502 comm="syz.2.1423" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc1239e559 code=0x7ffc0000
[  250.306259][ T8468] F2FS-fs (loop1): build fault injection attr: rate: 14, type: 0x3ffff
[  250.330433][ T8468] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0xe4
[  250.364924][ T8468] F2FS-fs (loop1): invalid crc value
[  250.366292][   T27] audit: type=1326 audit(1791980717.474:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8502 comm="syz.2.1423" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc1239e559 code=0x7ffc0000
[  250.397906][ T8468] F2FS-fs (loop1): Found nat_bits in checkpoint
[  250.518901][   T27] audit: type=1326 audit(1791980717.474:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8502 comm="syz.2.1423" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fdc1239e559 code=0x7ffc0000
[  250.595374][ T8468] F2FS-fs (loop1) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x42b/0xa00
[  250.606897][   T27] audit: type=1326 audit(1791980717.474:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8502 comm="syz.2.1423" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc1239e559 code=0x7ffc0000
[  250.710680][   T27] audit: type=1326 audit(1791980717.474:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8502 comm="syz.2.1423" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc1239e559 code=0x7ffc0000
[  250.738803][ T8468] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  250.825021][ T8468] F2FS-fs (loop1) : inject alloc nid in f2fs_alloc_nid of f2fs_get_dnode_of_data+0x84f/0x1c20
[  250.860201][   T27] audit: type=1326 audit(1791980717.484:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8502 comm="syz.2.1423" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7fdc1239e559 code=0x7ffc0000
[  250.933798][ T8521] F2FS-fs (loop1) : inject no more block in inc_valid_block_count of f2fs_reserve_new_blocks+0x136/0xc60
[  250.978219][   T27] audit: type=1326 audit(1791980717.484:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8502 comm="syz.2.1423" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc1239e559 code=0x7ffc0000
[  251.059999][   T27] audit: type=1326 audit(1791980717.484:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8502 comm="syz.2.1423" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc1239e559 code=0x7ffc0000
[  251.131870][ T8525] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  251.206063][ T8525] batman_adv: batadv0: Adding interface: gretap1
[  251.231043][ T8525] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  251.350109][ T8525] batman_adv: batadv0: Interface activated: gretap1
[  251.735813][ T8501] loop0: detected capacity change from 0 to 40427
[  251.795181][ T8501] F2FS-fs (loop0): Invalid log blocks per segment (1)
[  251.815814][ T8501] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  251.866818][ T8501] F2FS-fs (loop0): invalid crc value
[  251.906551][ T8543] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1437'.
[  251.921096][ T8501] F2FS-fs (loop0): Found nat_bits in checkpoint
[  252.128901][ T8551] loop1: detected capacity change from 0 to 512
[  252.136027][ T8501] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  252.167421][ T8501] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  252.232884][ T8542] f2fs_ckpt-7:0: attempt to access beyond end of device
[  252.232884][ T8542] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  252.255464][ T8551] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  252.294079][ T8551] EXT4-fs (loop1): orphan cleanup on readonly fs
[  252.347315][ T8551] Quota error (device loop1): dq_insert_tree: Quota tree root isn't allocated!
[  252.376807][ T8562] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4277] was attempted by ""[8562]
[  252.424677][ T8551] Quota error (device loop1): qtree_write_dquot: Error -5 occurred while creating quota
[  252.489198][ T8551] EXT4-fs error (device loop1): ext4_acquire_dquot:6841: comm syz.1.1432: Failed to acquire dquot type 1
[  252.555508][ T8551] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.1432: bg 0: block 40: padding at end of block bitmap is not set
[  252.595059][ T8551] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6180: Corrupt filesystem
[  252.622528][ T8551] EXT4-fs (loop1): 1 truncate cleaned up
[  252.628427][ T8551] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  252.718841][ T4279] EXT4-fs (loop1): unmounting filesystem.
[  253.056546][ T8580] VFS: Can't find a romfs filesystem on dev mtdblock0.
[  253.056546][ T8580] 
[  253.159328][ T8586] IPv6: NLM_F_CREATE should be specified when creating new route
[  253.257708][ T8588] loop2: detected capacity change from 0 to 256
[  253.374099][ T8594] device bond_slave_0 entered promiscuous mode
[  253.381190][ T8594] device bond_slave_1 entered promiscuous mode
[  253.408053][ T8594] device vlan2 entered promiscuous mode
[  253.426901][ T8594] device bond0 entered promiscuous mode
[  253.522288][ T8598] loop2: detected capacity change from 0 to 128
[  253.550471][ T5406] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  253.563402][ T8598] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  253.580133][   T14] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  253.595258][ T8598] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  253.762132][ T5406] usb 2-1: too many endpoints for config 0 interface 0 altsetting 5: 70, using maximum allowed: 30
[  253.775725][   T14] usb 1-1: too many endpoints for config 0 interface 0 altsetting 76: 206, using maximum allowed: 30
[  253.802013][ T5406] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  253.816116][   T14] usb 1-1: config 0 interface 0 altsetting 76 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  253.838425][ T5406] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 70
[  253.854511][   T14] usb 1-1: config 0 interface 0 altsetting 76 endpoint 0x81 has invalid wMaxPacketSize 0
[  253.865406][   T14] usb 1-1: config 0 interface 0 altsetting 76 has 1 endpoint descriptor, different from the interface descriptor's value: 206
[  253.879398][ T5406] usb 2-1: config 0 interface 0 has no altsetting 0
[  253.894926][ T5406] usb 2-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00
[  253.904039][ T8603] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  253.923317][   T14] usb 1-1: config 0 interface 0 has no altsetting 0
[  253.932065][   T14] usb 1-1: New USB device found, idVendor=12ba, idProduct=074b, bcdDevice= 0.00
[  253.951141][   T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  253.959618][ T5406] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  253.971460][   T14] usb 1-1: config 0 descriptor??
[  253.989016][ T5406] usb 2-1: config 0 descriptor??
[  254.317348][ T8596] loop6: detected capacity change from 0 to 32768
[  254.397977][   T14] input: HID 12ba:074b as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:12BA:074B.0019/input/input21
[  254.415694][ T5406] input: HID 060b:500a as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:060B:500A.001A/input/input22
[  254.499124][ T8596] XFS (loop6): Mounting V5 Filesystem
[  254.569419][   T14] sony 0003:12BA:074B.0019: input,hidraw0: USB HID v80.00 Joystick [HID 12ba:074b] on usb-dummy_hcd.0-1/input0
[  254.582883][ T5406] cougar 0003:060B:500A.001A: input,hiddev0,hidraw1: USB HID v0.00 Device [HID 060b:500a] on usb-dummy_hcd.1-1/input0
[  254.615984][   T14] usb 1-1: USB disconnect, device number 15
[  254.623684][ T5406] usb 2-1: USB disconnect, device number 17
[  254.681113][ T8596] XFS (loop6): Ending clean mount
[  254.937232][ T7841] XFS (loop6): Unmounting Filesystem
[  254.974363][ T8629] fido_id[8629]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  255.063663][ T8630] fido_id[8630]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  255.108635][ T4294] Bluetooth: hci0: unexpected event for opcode 0x2042
[  255.247605][ T8613] loop2: detected capacity change from 0 to 40427
[  255.291547][ T8613] F2FS-fs (loop2): Invalid SB checksum offset: 0
[  255.297977][ T8613] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock
[  255.344975][ T8613] F2FS-fs (loop2): invalid crc value
[  255.430447][ T8613] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  255.666127][ T8613] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0
[  255.676888][ T1281] ieee802154 phy0 wpan0: encryption failed: -22
[  255.677004][ T1281] ieee802154 phy1 wpan1: encryption failed: -22
[  255.736951][ T8613] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  255.822203][ T5506] kworker/u4:8: attempt to access beyond end of device
[  255.822203][ T5506] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  255.943224][ T8657] netlink: 'syz.1.1479': attribute type 5 has an invalid length.
[  256.583297][ T8684] loop0: detected capacity change from 0 to 128
[  256.629150][ T8686] loop3: detected capacity change from 0 to 128
[  256.670962][   T27] kauditd_printk_skb: 11 callbacks suppressed
[  256.670977][   T27] audit: type=1800 audit(1791980723.884:82): pid=8684 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1489" name="file1" dev="loop0" ino=1048706 res=0 errno=0
[  256.704972][ T8686] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  256.751640][ T8688] loop6: detected capacity change from 0 to 4096
[  256.766384][ T8686] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  256.778559][ T8688] EXT4-fs: Ignoring removed bh option
[  256.806574][ T8688] EXT4-fs: Ignoring removed orlov option
[  256.869082][ T8688] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  256.962050][ T4308] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  257.061812][ T7841] EXT4-fs (loop6): unmounting filesystem.
[  257.075088][ T8699] loop1: detected capacity change from 0 to 256
[  257.106684][ T8701] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1494'.
[  257.131973][ T8699] exfat: Deprecated parameter 'utf8'
[  257.151592][ T8699] exfat: Deprecated parameter 'namecase'
[  257.199536][ T8699] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0x0ab4ecf1, utbl_chksum : 0xe619d30d)
[  257.387971][ T8703] loop3: detected capacity change from 0 to 4096
[  257.440185][ T8708] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1496'.
[  257.490847][ T8703] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  257.530590][ T8708] device batadv0 entered promiscuous mode
[  257.547681][ T8708] device macvtap1 entered promiscuous mode
[  257.580825][ T8708] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  257.619491][ T8708] device batadv0 left promiscuous mode
[  257.690332][ T8715] loop0: detected capacity change from 0 to 128
[  257.810145][ T4737] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  258.012978][ T4737] usb 2-1: too many configurations: 9, using maximum allowed: 8
[  258.041274][ T4737] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  258.061431][ T4737] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  258.088332][ T8705] loop2: detected capacity change from 0 to 32768
[  258.106426][ T4737] usb 2-1: config 0 interface 0 has no altsetting 0
[  258.117789][ T4737] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  258.143074][ T4737] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  258.159551][ T4737] usb 2-1: config 0 interface 0 has no altsetting 0
[  258.186824][ T4737] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  258.198888][ T8705] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  258.218265][ T4737] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  258.239071][ T4737] usb 2-1: config 0 interface 0 has no altsetting 0
[  258.251941][ T4737] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  258.269424][ T4737] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  258.280577][ T4737] usb 2-1: config 0 interface 0 has no altsetting 0
[  258.288512][ T4737] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  258.297683][ T4737] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  258.312570][ T4737] usb 2-1: config 0 interface 0 has no altsetting 0
[  258.326179][ T4737] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  258.344882][ T4277] ocfs2: Unmounting device (7,2) on (node local)
[  258.365655][ T4737] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  258.398714][ T4737] usb 2-1: config 0 interface 0 has no altsetting 0
[  258.429403][ T4737] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  258.454431][ T4737] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  258.494677][ T4737] usb 2-1: config 0 interface 0 has no altsetting 0
[  258.514026][ T4737] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  258.551472][ T4737] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  258.593108][ T4737] usb 2-1: config 0 interface 0 has no altsetting 0
[  258.625229][ T4737] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  258.675348][ T4737] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  258.717577][ T4737] usb 2-1: Product: syz
[  258.735109][ T4737] usb 2-1: Manufacturer: syz
[  258.760121][ T4737] usb 2-1: SerialNumber: syz
[  258.776148][ T4737] usb 2-1: config 0 descriptor??
[  258.821727][ T4737] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0
[  259.030337][ T4737] usb 2-1: USB disconnect, device number 18
[  259.051282][ T4737] yurex 2-1:0.0: USB YUREX #0 now disconnected
[  259.256051][ T8757] loop2: detected capacity change from 0 to 256
[  259.281099][ T8757] exfat: Deprecated parameter 'namecase'
[  259.295725][ T8757] exfat: Deprecated parameter 'namecase'
[  259.326602][ T8757] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d)
[  259.440109][ T5404] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  259.660026][ T5404] usb 7-1: Using ep0 maxpacket: 8
[  259.676956][ T5404] usb 7-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a
[  259.693306][ T5404] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  259.720019][ T5404] usb 7-1: Product: syz
[  259.730030][ T5404] usb 7-1: Manufacturer: syz
[  259.744988][ T5404] usb 7-1: SerialNumber: syz
[  259.762541][ T5404] usb 7-1: config 0 descriptor??
[  259.786704][ T5404] gspca_main: sq930x-2.14.0 probing 2770:930c
[  259.890994][ T8776] loop3: detected capacity change from 0 to 4096
[  259.921005][ T8776] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  260.020241][ T8776] ntfs: volume version 3.1.
[  260.100202][   T14] usb 2-1: new full-speed USB device number 19 using dummy_hcd
[  260.187403][ T5404] gspca_sq930x: ucbus_write failed -71
[  260.210116][ T8788] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  260.302781][   T14] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[  260.343981][   T14] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  260.374418][   T14] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[  260.415009][   T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  260.430125][ T5404] gspca_sq930x: Sensor ov9630 not yet treated
[  260.447000][ T5404] sq930x: probe of 7-1:0.0 failed with error -22
[  260.496142][ T5404] usb 7-1: USB disconnect, device number 2
[  260.508709][ T8790] set_capacity_and_notify: 1 callbacks suppressed
[  260.508733][ T8790] loop0: detected capacity change from 0 to 4096
[  260.701850][   T14] aiptek 2-1:17.0: Aiptek using 400 ms programming speed
[  260.712529][ T8790] ntfs3: loop0: Failed to load $Extend.
[  260.744206][   T14] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input23
[  260.798753][   T14] input: failed to attach handler kbd to device input23, error: -5
[  260.856970][   T14] usb 2-1: USB disconnect, device number 19
[  261.140185][ T4737] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  261.340076][ T4737] usb 3-1: Using ep0 maxpacket: 32
[  261.348672][ T4737] usb 3-1: config 0 has an invalid interface number: 51 but max is 0
[  261.393695][ T4737] usb 3-1: config 0 has no interface number 0
[  261.409762][ T4737] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  261.439648][ T4737] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  261.464785][ T4737] usb 3-1: Product: syz
[  261.479269][ T4737] usb 3-1: Manufacturer: syz
[  261.489387][ T4737] usb 3-1: SerialNumber: syz
[  261.504011][ T8793] loop3: detected capacity change from 0 to 32768
[  261.525278][ T4737] usb 3-1: config 0 descriptor??
[  261.563619][ T4737] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  261.578219][ T8793] BTRFS: device fsid 3a375e4e-b156-4d76-a2ad-16e198ce1409 devid 1 transid 8 /dev/loop3 scanned by syz.3.1531 (8793)
[  261.603675][ T8793] BTRFS info (device loop3): first mount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409
[  261.615597][ T8793] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm
[  261.631724][ T8793] BTRFS info (device loop3): using free space tree
[  261.747418][ T4737] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  261.784785][ T4737] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  261.986055][ T8793] BTRFS info (device loop3): enabling ssd optimizations
[  261.996157][ T8832] loop6: detected capacity change from 0 to 4096
[  262.014799][ T8832] ntfs: (device loop6): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  262.077037][ T8832] ntfs: (device loop6): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy.
[  262.145788][ T8832] ntfs: (device loop6): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  262.174367][    C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71
[  262.187492][ T5316] usb 3-1: USB disconnect, device number 9
[  262.203853][ T8832] ntfs: (device loop6): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5).
[  262.226672][ T5316] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  262.279056][ T5316] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  262.299495][ T8832] ntfs: (device loop6): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  262.327111][ T5316] quatech2 3-1:0.51: device disconnected
[  262.340003][ T8832] ntfs: (device loop6): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5).
[  262.415026][ T4275] BTRFS info (device loop3): last unmount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409
[  262.435828][ T8832] ntfs: (device loop6): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  262.466640][ T8832] ntfs: (device loop6): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5).
[  262.572740][ T8832] ntfs: (device loop6): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  262.630075][ T8832] ntfs: (device loop6): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x200 because its location on disk could not be determined even after retrying (error code -5).
[  262.790458][ T8832] ntfs: volume version 3.1.
[  263.294321][ T8860] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1546'.
[  263.311424][ T8862] loop2: detected capacity change from 0 to 256
[  263.607924][ T8865] loop3: detected capacity change from 0 to 4096
[  263.667192][ T8865] EXT4-fs (loop3): Test dummy encryption mode enabled
[  263.721551][ T8865] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=8842c018, mo2=0003]
[  263.800064][ T8865] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  263.879729][ T8882] loop2: detected capacity change from 0 to 256
[  264.181983][ T4275] EXT4-fs (loop3): unmounting filesystem.
[  264.785099][ T8900] loop0: detected capacity change from 0 to 4096
[  265.044673][ T8875] loop1: detected capacity change from 0 to 32768
[  265.172604][ T8875] XFS (loop1): Mounting V5 Filesystem
[  265.241393][ T8889] loop2: detected capacity change from 0 to 32768
[  265.267648][ T8889] (syz.2.1559,8889,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  265.292034][ T8889] (syz.2.1559,8889,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  265.359644][ T8889] JBD2: Ignoring recovery information on journal
[  265.390207][ T8875] XFS (loop1): Ending clean mount
[  265.601317][ T8889] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  265.614250][ T4279] XFS (loop1): Unmounting Filesystem
[  265.999249][ T4277] ocfs2: Unmounting device (7,2) on (node local)
[  266.410750][ T8936] loop1: detected capacity change from 0 to 8192
[  266.471877][ T8936] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  266.504412][ T8922] loop0: detected capacity change from 0 to 32768
[  266.520835][ T8936] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal
[  266.533982][ T8936] REISERFS (device loop1): using ordered data mode
[  266.542036][ T8936] reiserfs: using flush barriers
[  266.552692][ T8922] 
[  266.552692][ T8922]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  266.552692][ T8922] 
[  266.612435][ T8936] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  266.659579][ T8936] REISERFS (device loop1): checking transaction log (loop1)
[  266.686992][ T8936] REISERFS (device loop1): Using r5 hash to sort names
[  266.705014][ T8922] 
[  266.705014][ T8922]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  266.705014][ T8922] 
[  266.729327][ T8936] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  266.760386][ T8922] 
[  266.760386][ T8922]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  266.760386][ T8922] 
[  266.777690][ T8912] loop6: detected capacity change from 0 to 40427
[  266.805982][  T108] 
[  266.805982][  T108]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  266.805982][  T108] 
[  266.852992][ T8912] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12
[  266.912504][ T8912] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  266.985479][ T8912] F2FS-fs (loop6): invalid crc_offset: 33558524
[  267.055996][ T8912] F2FS-fs (loop6): Found nat_bits in checkpoint
[  267.072696][ T4280] 
[  267.072696][ T4280]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  267.072696][ T4280] 
[  267.100030][ T4280] 
[  267.100030][ T4280]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  267.100030][ T4280] 
[  267.316128][ T8912] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[  267.344810][ T8912] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  267.458343][ T8912] F2FS-fs (loop6): invalid namelen(0), ino:0, run fsck to fix.
[  268.300133][ T4378] usb 4-1: new full-speed USB device number 14 using dummy_hcd
[  268.521899][ T4378] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  268.521934][ T4378] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  268.521994][ T4378] usb 4-1: config 0 interface 0 has no altsetting 0
[  268.522027][ T4378] usb 4-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00
[  268.522062][ T4378] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  268.524012][ T4378] usb 4-1: config 0 descriptor??
[  268.665793][ T8993] loop0: detected capacity change from 0 to 4096
[  268.716077][ T8993] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  268.740353][ T8993] ntfs3: loop0: Failed to load $Extend.
[  268.929822][ T8999] loop2: detected capacity change from 0 to 8
[  268.942636][ T4378] belkin 0003:1020:0006.001B: unknown main item tag 0x2
[  268.949735][ T4378] belkin 0003:1020:0006.001B: unknown main item tag 0x0
[  268.985729][ T8999] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  269.000095][ T4378] belkin 0003:1020:0006.001B: unbalanced collection at end of report description
[  269.010027][ T4378] belkin 0003:1020:0006.001B: parse failed
[  269.015949][ T4378] belkin: probe of 0003:1020:0006.001B failed with error -22
[  269.051054][ T8999] cramfs: Error -3 while decompressing!
[  269.057424][ T8999] cramfs: ffffffff97bcbdb8(16)->ffff88804c217000(4096)
[  269.090846][ T4281] udevd[4281]: incorrect cramfs checksum on /dev/loop2
[  269.124897][ T8999] cramfs: Error -3 while decompressing!
[  269.145299][ T4378] usb 4-1: USB disconnect, device number 14
[  269.169106][ T8999] cramfs: ffffffff97bcbdb8(16)->ffff88804c217000(4096)
[  269.197802][   T27] kauditd_printk_skb: 9 callbacks suppressed
[  269.197816][   T27] audit: type=1800 audit(1791980736.404:83): pid=8999 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1591" name="file0" dev="loop2" ino=244 res=0 errno=0
[  269.291525][ T4281] udevd[4281]: incorrect cramfs checksum on /dev/loop2
[  269.710011][   T14] usb 1-1: new full-speed USB device number 16 using dummy_hcd
[  269.714006][ T9014] sp0: Synchronizing with TNC
[  269.795005][ T8994] loop6: detected capacity change from 0 to 40427
[  269.806773][ T8994] F2FS-fs (loop6): Small segment_count (9 < 1 * 24)
[  269.806893][ T8994] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  269.828556][ T8994] F2FS-fs (loop6): Found nat_bits in checkpoint
[  269.892416][   T14] usb 1-1: unable to get BOS descriptor or descriptor too short
[  269.893131][   T14] usb 1-1: not running at top speed; connect to a high speed hub
[  269.894471][   T14] usb 1-1: config index 0 descriptor too short (expected 61365, got 181)
[  269.894500][   T14] usb 1-1: config 1 has an invalid interface number: 1 but max is 0
[  269.894522][   T14] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  269.894543][   T14] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 1
[  269.896194][   T14] usb 1-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00
[  269.896224][   T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  269.896246][   T14] usb 1-1: Product: syz
[  269.896263][   T14] usb 1-1: Manufacturer: syz
[  269.938546][   T14] usb 1-1: Found UVC 1.00 device syz (8086:0ad2)
[  269.938633][   T14] usb 1-1: No streaming interface found for terminal 2.
[  269.987257][   T14] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input24
[  270.091780][ T8994] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[  270.091810][ T8994] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  270.289950][ T4379] usb 1-1: USB disconnect, device number 16
[  270.306428][ T7841] syz-executor: attempt to access beyond end of device
[  270.306428][ T7841] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  271.150071][ T4734] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  271.307772][ T9052] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  271.341805][ T4734] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  271.359931][ T4734] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  271.399992][ T4734] usb 3-1: config 0 interface 0 has no altsetting 0
[  271.415777][ T4734] usb 3-1: New USB device found, idVendor=0c70, idProduct=f010, bcdDevice= 0.00
[  271.441015][ T9052] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  271.459987][ T4734] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  271.501549][ T4734] usb 3-1: config 0 descriptor??
[  271.889377][ T9069] loop6: detected capacity change from 0 to 512
[  271.933036][ T4734] aquacomputer_d5next 0003:0C70:F010.001C: hidraw0: USB HID v80.00 Joystick [HID 0c70:f010] on usb-dummy_hcd.2-1/input0
[  272.012778][ T9069] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  272.043378][ T9069] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  272.151556][ T4737] usb 3-1: USB disconnect, device number 10
[  272.332739][ T7841] EXT4-fs (loop6): unmounting filesystem.
[  272.351065][   T27] audit: type=1326 audit(1791980739.564:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9082 comm="syz.3.1618" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7099e559 code=0x7ffc0000
[  272.494714][   T27] audit: type=1326 audit(1791980739.564:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9082 comm="syz.3.1618" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7099e559 code=0x7ffc0000
[  272.526029][ T9055] loop0: detected capacity change from 0 to 32768
[  272.551069][ T9076] fido_id[9076]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  272.652114][ T9055] JBD2: Ignoring recovery information on journal
[  272.660002][   T27] audit: type=1326 audit(1791980739.564:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9082 comm="syz.3.1618" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7099e559 code=0x7ffc0000
[  272.826216][   T27] audit: type=1326 audit(1791980739.564:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9082 comm="syz.3.1618" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7099e559 code=0x7ffc0000
[  272.880135][   T27] audit: type=1326 audit(1791980739.564:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9082 comm="syz.3.1618" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=221 compat=0 ip=0x7fad7099e559 code=0x7ffc0000
[  272.914450][ T9055] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  272.998274][ T9055] (syz.0.1610,9055,0):ocfs2_reflink_ioctl:4457 ERROR: status = -14
[  273.027811][   T27] audit: type=1326 audit(1791980739.564:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9082 comm="syz.3.1618" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7099e559 code=0x7ffc0000
[  273.157863][   T27] audit: type=1326 audit(1791980739.564:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9082 comm="syz.3.1618" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7099e559 code=0x7ffc0000
[  273.223290][ T4280] ocfs2: Unmounting device (7,0) on (node local)
[  273.281866][   T27] audit: type=1326 audit(1791980739.564:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9082 comm="syz.3.1618" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fad7099e559 code=0x7ffc0000
[  273.421306][   T27] audit: type=1326 audit(1791980739.564:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9082 comm="syz.3.1618" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fad7099e559 code=0x7ffc0000
[  273.871852][ T9085] loop1: detected capacity change from 0 to 32768
[  273.975077][ T9085] XFS (loop1): Mounting V5 Filesystem
[  273.983082][ T9122] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1632'.
[  274.046318][ T9122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  274.060173][ T9122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  274.110182][ T9122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  274.181258][ T9122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  274.192475][ T9085] XFS (loop1): Ending clean mount
[  274.229309][ T9122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  274.277137][ T9122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  274.301347][ T9122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  274.318968][ T9122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  274.345853][ T9122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  274.384446][ T9097] loop6: detected capacity change from 0 to 32768
[  274.395020][ T9122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  274.449232][ T4279] XFS (loop1): Unmounting Filesystem
[  274.520216][ T5316] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  274.605090][ T9097] XFS (loop6): Mounting V5 Filesystem
[  274.752371][ T5316] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  274.787143][ T5316] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 3
[  274.839651][ T5316] usb 3-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00
[  274.879775][ T5316] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  274.913312][ T5316] usb 3-1: config 0 descriptor??
[  274.934917][ T9097] XFS (loop6): Ending clean mount
[  274.965348][ T9097] XFS (loop6): Quotacheck needed: Please wait.
[  275.137166][ T9097] XFS (loop6): Quotacheck: Done.
[  275.289260][ T7841] XFS (loop6): Unmounting Filesystem
[  275.534443][ T5316] Bluetooth: Can't get version to change to load ram patch err
[  275.560607][ T5316] Bluetooth: Loading sysconfig file failed
[  275.573534][ T5316] ath3k: probe of 3-1:0.0 failed with error -71
[  275.610806][ T5316] usb 3-1: USB disconnect, device number 11
[  275.880388][ T9158] loop3: detected capacity change from 0 to 32768
[  276.412429][ T9195] loop6: detected capacity change from 0 to 1024
[  276.470959][ T9195] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869)
[  276.530689][ T9195] EXT4-fs error (device loop6): ext4_get_journal_inode:5762: inode #32: comm syz.6.1651: iget: special inode unallocated
[  276.567214][ T9195] EXT4-fs (loop6): no journal found
[  276.593242][ T9195] EXT4-fs (loop6): can't get journal size
[  276.663900][ T9195] EXT4-fs (loop6): filesystem is read-only
[  276.680069][ T9195] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  276.700134][ T5316] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  276.882137][ T5316] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  276.902080][ T5316] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[  276.914736][ T7841] EXT4-fs (loop6): unmounting filesystem.
[  276.944717][ T5316] usb 4-1: New USB device found, idVendor=0a12, idProduct=0001, bcdDevice= 0.00
[  277.005705][ T5316] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  277.040401][ T5316] usb 4-1: Product: syz
[  277.044680][ T5316] usb 4-1: Manufacturer: syz
[  277.084801][ T5316] usb 4-1: SerialNumber: syz
[  277.263293][ T9186] loop1: detected capacity change from 0 to 32768
[  277.313682][ T9215] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1657'.
[  277.336744][ T9186] XFS (loop1): Mounting V5 Filesystem
[  277.347193][ T9193] loop0: detected capacity change from 0 to 32768
[  277.355650][ T9215] netlink: 'syz.6.1657': attribute type 21 has an invalid length.
[  277.385406][ T9215] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1657'.
[  277.504618][ T9186] XFS (loop1): Ending clean mount
[  277.510350][ T5316] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  277.552543][ T4294] Bluetooth: hci5: CSR: Local version failed (-71)
[  277.564953][ T4378] usb 4-1: USB disconnect, device number 15
[  277.693103][ T9186] XFS (loop1): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair.
[  277.704784][ T5316] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  277.725814][ T5316] usb 3-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18
[  277.781157][ T5316] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  277.842028][ T5316] gspca_main: stv0680-2.14.0 probing 041e:4007
[  277.932475][ T4279] XFS (loop1): Unmounting Filesystem
[  277.957677][ T9236] netlink: 'syz.0.1662': attribute type 3 has an invalid length.
[  278.030006][ T9236] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1662'.
[  278.240618][ T9240] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1664'.
[  278.871596][ T5316] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32
[  278.888951][ T5316] stv0680 3-1:4.0: STV(e): camera ping failed!!
[  278.918888][ T5316] stv0680 3-1:4.0: last error: 0,  command = 0x0
[  279.130841][ T4734] usb 3-1: USB disconnect, device number 12
[  279.380755][ T9283] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1681'.
[  279.381832][ T9287] Bluetooth: hci0: unsupported parameter 5135
[  279.413553][ T9287] Bluetooth: hci0: unsupported parameter 8192
[  279.430296][ T9287] Bluetooth: hci0: unsupported parameter 5135
[  279.441219][ T9287] Bluetooth: hci0: unsupported parameter 8192
[  279.451484][ T9286] loop0: detected capacity change from 0 to 4096
[  279.510815][ T9290] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  280.019837][ T9309] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1693'.
[  280.066745][ T9311] ip_tables: iptables: counters copy to user failed while replacing table
[  280.068139][ T9309] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1693'.
[  280.127485][ T9314] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  280.185302][ T4379] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  280.200354][ T4379] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  280.223851][ T9317] loop2: detected capacity change from 0 to 4096
[  280.244486][ T5406] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  280.304805][ T9321] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  280.352545][ T9317] NILFS (loop2): error -2 preparing GC: cannot delete virtual blocks from DAT file
[  280.870392][ T4379] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  281.030170][ T4379] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  281.134074][ T9354] netlink: 'syz.0.1713': attribute type 1 has an invalid length.
[  281.238696][ T9357] loop3: detected capacity change from 0 to 1764
[  281.253238][ T9361] Bluetooth: hci0: unsupported parameter 5135
[  281.272286][ T9361] Bluetooth: hci0: unsupported parameter 8192
[  281.290221][ T9361] Bluetooth: hci0: unsupported parameter 5135
[  281.336329][ T9361] Bluetooth: hci0: unsupported parameter 8192
[  281.495272][ T9370] device ipvlan2 entered promiscuous mode
[  281.508264][ T9370] bridge0: port 3(ipvlan2) entered blocking state
[  281.516318][ T9370] bridge0: port 3(ipvlan2) entered disabled state
[  281.730510][ T9374] loop6: detected capacity change from 0 to 8192
[  281.750839][ T9376] loop1: detected capacity change from 0 to 512
[  281.775309][ T9378] loop3: detected capacity change from 0 to 256
[  281.790752][ T9376] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  281.802181][ T9374] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  281.864759][ T9374] REISERFS (device loop6): found reiserfs format "3.6" with non-standard journal
[  281.878256][ T9374] REISERFS (device loop6): using ordered data mode
[  281.889571][ T9374] reiserfs: using flush barriers
[  281.915760][ T9376] EXT4-fs (loop1): 1 truncate cleaned up
[  281.950014][ T9376] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  281.974893][ T9374] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 7, max trans age 7
[  282.057911][ T9374] REISERFS (device loop6): checking transaction log (loop6)
[  282.107971][ T9374] REISERFS (device loop6): Using r5 hash to sort names
[  282.126692][ T9374] REISERFS warning (device loop6): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  282.198117][ T9374] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage.
[  282.305770][ T9394] loop2: detected capacity change from 0 to 64
[  282.426230][ T9396] loop0: detected capacity change from 0 to 128
[  282.453086][ T4279] EXT4-fs (loop1): unmounting filesystem.
[  282.521554][ T9396] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  282.587573][ T9396] hpfs: filesystem error: improperly stopped
[  282.629757][ T9396] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  282.663723][ T9396] hpfs: You really don't want any checks? You are crazy...
[  282.706524][ T9401] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  282.740055][ T9396] hpfs: Code page directory magic doesn't match (magic = 7b3184b5)
[  282.748126][ T9396] hpfs: code page support is disabled
[  282.780468][ T9401] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  282.790859][ T9396] hpfs: hpfs_map_4sectors(): unaligned read
[  282.796929][ T9396] hpfs: hpfs_map_4sectors(): unaligned read
[  282.810435][ T9401] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  282.830143][ T9396] hpfs: filesystem error: unable to find root dir
[  282.840704][ T9401] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  283.284480][ T9392] loop3: detected capacity change from 0 to 32768
[  283.659399][ T9428] loop3: detected capacity change from 0 to 8192
[  283.691645][ T9428] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  283.747698][ T9428] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal
[  283.799727][ T9428] REISERFS (device loop3): using ordered data mode
[  283.837401][ T9428] reiserfs: using flush barriers
[  283.897620][ T9428] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 7, max trans age 7
[  283.956938][ T9428] REISERFS (device loop3): checking transaction log (loop3)
[  283.971415][ T9428] REISERFS (device loop3): Using r5 hash to sort names
[  283.979418][ T9428] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  284.020030][ T9428] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  284.230101][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  284.344098][ T4378] usb 7-1: new full-speed USB device number 3 using dummy_hcd
[  284.544535][ T4378] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  284.590087][ T4378] usb 7-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  284.628076][ T4378] usb 7-1: config 0 interface 0 has no altsetting 0
[  284.650373][ T4378] usb 7-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.00
[  284.684661][ T4378] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  284.706149][ T4378] usb 7-1: config 0 descriptor??
[  284.722535][ T9440] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  284.933018][ T9463] loop2: detected capacity change from 0 to 2048
[  284.997283][ T9463] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  285.007651][ T9463] ext4 filesystem being mounted at /386/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  285.078277][ T4277] EXT4-fs (loop2): unmounting filesystem.
[  285.113000][ T9472] loop1: detected capacity change from 0 to 64
[  285.174336][ T4378] pantherlord 0003:0810:0001.001D: No inputs registered, leaving
[  285.222152][ T4378] pantherlord 0003:0810:0001.001D: hidraw0: USB HID v0.11 Joystick [HID 0810:0001] on usb-dummy_hcd.6-1/input0
[  285.253387][ T4378] pantherlord 0003:0810:0001.001D: Force feedback for PantherLord/GreenAsia devices by Anssi Hannula <anssi.hannula@gmail.com>
[  285.402174][ T4378] usb 7-1: USB disconnect, device number 3
[  285.430133][ T4294] Bluetooth: hci1: command 0x0411 tx timeout
[  285.479824][ T9482] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1766'.
[  285.603577][ T9478] fido_id[9478]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory
[  285.825099][ T9490] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1770'.
[  286.248017][ T9507] 
[  286.250437][ T9507] ======================================================
[  286.257490][ T9507] WARNING: possible circular locking dependency detected
[  286.264558][ T9507] syzkaller #0 Not tainted
[  286.269010][ T9507] ------------------------------------------------------
[  286.276066][ T9507] syz.6.1779/9507 is trying to acquire lock:
[  286.282080][ T9507] ffff88802889c428 (&hdev->lock){+.+.}-{3:3}, at: l2cap_chan_connect+0xfb/0xe20
[  286.291330][ T9507] 
[  286.291330][ T9507] but task is already holding lock:
[  286.298732][ T9507] ffffffff8ecd7e28 (rfcomm_mutex){+.+.}-{3:3}, at: rfcomm_dlc_open+0x99/0x10c0
[  286.307757][ T9507] 
[  286.307757][ T9507] which lock already depends on the new lock.
[  286.307757][ T9507] 
[  286.307939][ T9506] loop3: detected capacity change from 0 to 2048
[  286.318175][ T9507] 
[  286.318175][ T9507] the existing dependency chain (in reverse order) is:
[  286.318185][ T9507] 
[  286.318185][ T9507] -> #2 (rfcomm_mutex){+.+.}-{3:3}:
[  286.318216][ T9507]        __mutex_lock+0x12d/0xae0
[  286.318247][ T9507]        rfcomm_security_cfm+0x95/0x780
[  286.318272][ T9507]        hci_encrypt_cfm+0x363/0x4d0
[  286.318298][ T9507]        hci_encrypt_change_evt+0x961/0xd30
[  286.318324][ T9507]        hci_event_packet+0x806/0x1290
[  286.318347][ T9507]        hci_rx_work+0x3eb/0xd40
[  286.373436][ T9507]        process_one_work+0x8ab/0x1160
[  286.378951][ T9507]        worker_thread+0xaf5/0x12a0
[  286.384194][ T9507]        kthread+0x29d/0x330
[  286.388814][ T9507]        ret_from_fork+0x1f/0x30
[  286.393783][ T9507] 
[  286.393783][ T9507] -> #1 (hci_cb_list_lock){+.+.}-{3:3}:
[  286.401548][ T9507]        __mutex_lock+0x12d/0xae0
[  286.406641][ T9507]        hci_remote_features_evt+0x464/0xa10
[  286.412648][ T9507]        hci_event_packet+0x806/0x1290
[  286.418135][ T9507]        hci_rx_work+0x3eb/0xd40
[  286.423089][ T9507]        process_one_work+0x8ab/0x1160
[  286.428584][ T9507]        worker_thread+0xaf5/0x12a0
[  286.433943][ T9507]        kthread+0x29d/0x330
[  286.438566][ T9507]        ret_from_fork+0x1f/0x30
[  286.443536][ T9507] 
[  286.443536][ T9507] -> #0 (&hdev->lock){+.+.}-{3:3}:
[  286.450894][ T9507]        __lock_acquire+0x3a03/0x7ea0
[  286.456307][ T9507]        lock_acquire+0x1bc/0x4a0
[  286.461361][ T9507]        __mutex_lock+0x12d/0xae0
[  286.466409][ T9507]        l2cap_chan_connect+0xfb/0xe20
[  286.471897][ T9507]        l2cap_sock_connect+0x576/0x750
[  286.477474][ T9507]        kernel_connect+0x13e/0x1c0
[  286.482965][ T9507]        rfcomm_dlc_open+0x600/0x10c0
[  286.488362][ T9507]        rfcomm_sock_connect+0x2e9/0x600
[  286.494019][ T9507]        __sys_connect+0x3cb/0x450
[  286.499144][ T9507]        __x64_sys_connect+0x76/0x80
[  286.504445][ T9507]        do_syscall_64+0x4c/0xa0
[  286.509413][ T9507]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  286.515845][ T9507] 
[  286.515845][ T9507] other info that might help us debug this:
[  286.515845][ T9507] 
[  286.526086][ T9507] Chain exists of:
[  286.526086][ T9507]   &hdev->lock --> hci_cb_list_lock --> rfcomm_mutex
[  286.526086][ T9507] 
[  286.538648][ T9507]  Possible unsafe locking scenario:
[  286.538648][ T9507] 
[  286.546114][ T9507]        CPU0                    CPU1
[  286.551491][ T9507]        ----                    ----
[  286.556868][ T9507]   lock(rfcomm_mutex);
[  286.561051][ T9507]                                lock(hci_cb_list_lock);
[  286.568091][ T9507]                                lock(rfcomm_mutex);
[  286.574804][ T9507]   lock(&hdev->lock);
[  286.578902][ T9507] 
[  286.578902][ T9507]  *** DEADLOCK ***
[  286.578902][ T9507] 
[  286.587062][ T9507] 1 lock held by syz.6.1779/9507:
[  286.592103][ T9507]  #0: ffffffff8ecd7e28 (rfcomm_mutex){+.+.}-{3:3}, at: rfcomm_dlc_open+0x99/0x10c0
[  286.601538][ T9507] 
[  286.601538][ T9507] stack backtrace:
[  286.607450][ T9507] CPU: 0 PID: 9507 Comm: syz.6.1779 Not tainted syzkaller #0
[  286.615036][ T9507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  286.625120][ T9507] Call Trace:
[  286.628418][ T9507]  <TASK>
[  286.631374][ T9507]  dump_stack_lvl+0x188/0x24e
[  286.636079][ T9507]  ? load_image+0x410/0x410
[  286.640606][ T9507]  ? show_regs_print_info+0x12/0x12
[  286.645836][ T9507]  ? print_circular_bug+0x12b/0x1a0
[  286.651063][ T9507]  check_noncircular+0x2f8/0x400
[  286.656031][ T9507]  ? print_deadlock_bug+0x5d0/0x5d0
[  286.661262][ T9507]  ? lockdep_lock+0xf1/0x1f0
[  286.665971][ T9507]  ? _find_first_zero_bit+0xd2/0x100
[  286.671280][ T9507]  __lock_acquire+0x3a03/0x7ea0
[  286.676173][ T9507]  ? verify_lock_unused+0x140/0x140
[  286.681401][ T9507]  ? __lock_acquire+0x142d/0x7ea0
[  286.686454][ T9507]  ? verify_lock_unused+0x140/0x140
[  286.691689][ T9507]  lock_acquire+0x1bc/0x4a0
[  286.696223][ T9507]  ? l2cap_chan_connect+0xfb/0xe20
[  286.701362][ T9507]  ? __might_sleep+0xd0/0xd0
[  286.705973][ T9507]  ? read_lock_is_recursive+0x10/0x10
[  286.711372][ T9507]  ? __lock_acquire+0x7ea0/0x7ea0
[  286.716425][ T9507]  __mutex_lock+0x12d/0xae0
[  286.721054][ T9507]  ? l2cap_chan_connect+0xfb/0xe20
[  286.726278][ T9507]  ? release_sock+0x2b/0x1b0
[  286.730902][ T9507]  ? do_raw_read_unlock+0x39/0x70
[  286.735945][ T9507]  ? _raw_read_unlock+0x24/0x40
[  286.740818][ T9507]  ? hci_get_route+0x3a1/0x4d0
[  286.745632][ T9507]  ? l2cap_chan_connect+0xfb/0xe20
[  286.750791][ T9507]  ? mutex_lock_nested+0x10/0x10
[  286.755862][ T9507]  ? print_unlock_imbalance_bug+0x160/0x160
[  286.761821][ T9507]  ? mark_lock+0x94/0x320
[  286.766177][ T9507]  l2cap_chan_connect+0xfb/0xe20
[  286.771137][ T9507]  ? lock_chain_count+0x20/0x20
[  286.776017][ T9507]  ? l2cap_sock_connect+0x13e/0x750
[  286.783731][ T9507]  ? l2cap_chan_le_send_credits+0x590/0x590
[  286.791820][ T9507]  ? __local_bh_enable_ip+0x136/0x1c0
[  286.802706][ T9507]  ? _local_bh_enable+0xa0/0xa0
[  286.808082][ T9507]  l2cap_sock_connect+0x576/0x750
[  286.814656][ T9507]  ? l2cap_sock_bind+0x870/0x870
[  286.820435][ T9507]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  286.827605][ T9507]  ? __lock_acquire+0x7ea0/0x7ea0
[  286.833395][ T9507]  ? lock_chain_count+0x20/0x20
[  286.840860][ T9507]  ? kernel_connect+0xee/0x1c0
[  286.846955][ T9507]  kernel_connect+0x13e/0x1c0
[  286.852112][ T9507]  ? kernel_accept+0x420/0x420
[  286.857481][ T9507]  ? rfcomm_dlc_open+0x5c4/0x10c0
[  286.862994][ T9507]  rfcomm_dlc_open+0x600/0x10c0
[  286.867981][ T9507]  ? lock_chain_count+0x20/0x20
[  286.872875][ T9507]  ? rfcomm_sock_connect+0x2c2/0x600
[  286.878192][ T9507]  ? rfcomm_dlc_free+0x40/0x40
[  286.883129][ T9507]  ? __local_bh_enable_ip+0x136/0x1c0
[  286.888528][ T9507]  ? lockdep_hardirqs_on+0x94/0x140
[  286.893845][ T9507]  ? __local_bh_enable_ip+0x136/0x1c0
[  286.899410][ T9507]  ? _local_bh_enable+0xa0/0xa0
[  286.904310][ T9507]  ? do_raw_spin_unlock+0x11d/0x230
[  286.909538][ T9507]  rfcomm_sock_connect+0x2e9/0x600
[  286.914870][ T9507]  ? rfcomm_sock_bind+0x550/0x550
[  286.919923][ T9507]  __sys_connect+0x3cb/0x450
[  286.924540][ T9507]  ? __sys_connect_file+0x170/0x170
[  286.929766][ T9507]  __x64_sys_connect+0x76/0x80
[  286.934563][ T9507]  do_syscall_64+0x4c/0xa0
[  286.939004][ T9507]  ? clear_bhb_loop+0x60/0xb0
[  286.943701][ T9507]  ? clear_bhb_loop+0x60/0xb0
[  286.948404][ T9507]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  286.954337][ T9507] RIP: 0033:0x7f84c259e559
[  286.958779][ T9507] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  286.978414][ T9507] RSP: 002b:00007f84c3506028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  286.986850][ T9507] RAX: ffffffffffffffda RBX: 00007f84c2825fa0 RCX: 00007f84c259e559
[  286.995018][ T9507] RDX: 000000000000000a RSI: 0000200000000140 RDI: 0000000000000004
[  287.003009][ T9507] RBP: 00007f84c26358b0 R08: 0000000000000000 R09: 0000000000000000
[  287.011002][ T9507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  287.018997][ T9507] R13: 00007f84c2826038 R14: 00007f84c2825fa0 R15: 00007ffcea54af78
[  287.027011][ T9507]  </TASK>
[  287.083971][ T9506] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  287.099404][ T9506] ext4 filesystem being mounted at /391/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  287.219323][ T4275] EXT4-fs (loop3): unmounting filesystem.
[  289.270098][ T4294] Bluetooth: hci1: command 0x0405 tx timeout
[  292.150121][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!