last executing test programs:

3m17.526975626s ago: executing program 2 (id=576):
r0 = eventfd2(0xfa2, 0x1)
io_cancel(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7, 0x19f0, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x1, r0}, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704", 0x8}], 0x1}, 0x4008000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380))
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0)
write$binfmt_aout(r1, &(0x7f00000001c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"})
r2 = syz_open_pts(r1, 0x80)
r3 = dup3(r2, r1, 0x80000)
read$watch_queue(r3, &(0x7f0000001d40)=""/4095, 0xfff)

3m16.644110837s ago: executing program 2 (id=580):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c00018006000600800a0000100002800c00148008000c"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)

3m16.643812841s ago: executing program 2 (id=581):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r1, 0xf21, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x4000)

3m16.643460243s ago: executing program 2 (id=582):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000003c0), 0x3, 0x572, &(0x7f00000006c0)="$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")
setxattr$trusted_overlay_upper(0x0, &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000e00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x31)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000000)='tlb_flush\x00', r0}, 0x10)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = open(&(0x7f00000003c0)='.\x00', 0x100, 0x97)
getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8)

3m16.506911753s ago: executing program 2 (id=583):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b04000000000000000002000000400004803c0001800b00010065787468647200002c00028008000340000000e108000140000000130500020007000000080006400000000208000440000000140900010073797a30000000000900020073797a32"], 0x94}}, 0x0)

3m16.316927474s ago: executing program 2 (id=584):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x48, &(0x7f0000000100)={0x5c, 0x19, '\x00', [@generic={0x0, 0xc6, "3fcd12ae2d9c9963ffb743e2dc2590debefb8792a8a8a7a9100c141fbc325fdc59ccddb656c92b648d84372e3af700d668a0884914b47dc9b771533934535b72f4bc03f7505fc9d443698785659827a9d7af52a2b4b91ecb98478515108dd6c6e425b6e82ef1a8b3a619e4add83e6cf3e1d84b02b2877b09db81a458473c0e842e3500b5d133d83d3724bce1fee3ea4d4f1ed85f2a2ea4cdeb6f95b864d7d2a288465fccf155b11f0264e3142b72a2d0165f7daa384e2b3542b495f4bf061530b5e0f12e391f"}]}, 0xd0)

3m16.217822926s ago: executing program 32 (id=584):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x48, &(0x7f0000000100)={0x5c, 0x19, '\x00', [@generic={0x0, 0xc6, "3fcd12ae2d9c9963ffb743e2dc2590debefb8792a8a8a7a9100c141fbc325fdc59ccddb656c92b648d84372e3af700d668a0884914b47dc9b771533934535b72f4bc03f7505fc9d443698785659827a9d7af52a2b4b91ecb98478515108dd6c6e425b6e82ef1a8b3a619e4add83e6cf3e1d84b02b2877b09db81a458473c0e842e3500b5d133d83d3724bce1fee3ea4d4f1ed85f2a2ea4cdeb6f95b864d7d2a288465fccf155b11f0264e3142b72a2d0165f7daa384e2b3542b495f4bf061530b5e0f12e391f"}]}, 0xd0)

30.628177878s ago: executing program 1 (id=2622):
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x200000, &(0x7f00000000c0)=ANY=[], 0xbe, 0x1c0, &(0x7f0000000500)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
read$FUSE(r1, &(0x7f0000000480)={0x2020, 0x0, 0x0, <r2=>0x0, <r3=>0x0}, 0x2020)
fchown(r0, r2, r3)
mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x40, 0x0)

30.542248961s ago: executing program 1 (id=2625):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r0, &(0x7f0000001a80)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x48, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c, &(0x7f00000002c0)=[{&(0x7f00000000c0)='\x00', 0x1}], 0x1}}, {{&(0x7f0000000040)={0xa, 0x4e23, 0x4, @private2, 0x4}, 0x1c, &(0x7f0000000640)=[{&(0x7f0000000140)="b220", 0x2}], 0x1}}], 0x2, 0x8001)
shutdown(r0, 0x1)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000380)=@sack_info={0x0, 0x2, 0x8d}, &(0x7f0000000080)=0xc)

30.460578566s ago: executing program 1 (id=2626):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="021800001c000000000000000000e60005000600000000000a00030000000000000000000000000000000000000000000000000000000000080012000000000000000000000000003000000000000000000000000000000002000001000000000000000000000000fe8000000000000000000000000000bb05000500000000000a00000000000000fc01000000000000000000000000000f00000000000000000800192f"], 0xe0}}, 0x0)

30.402174989s ago: executing program 1 (id=2627):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x48, &(0x7f00000003c0), 0x20, 0x51c, &(0x7f0000001e40)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000000400)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
chdir(&(0x7f0000000040)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0xa0)
ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000000)=ANY=[])

30.306992771s ago: executing program 1 (id=2629):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000100)={0x1, 0x80000001}, 0x8)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10)
syz_open_dev$midi(0x0, 0x2, 0x0)
close(r3)

30.020715593s ago: executing program 1 (id=2637):
r0 = creat(&(0x7f0000000300)='./file0\x00', 0x28)
pipe2$9p(&(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15)
r3 = dup(r2)
write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="38010000fe0000", @ANYRES64=r0, @ANYBLOB="f4b02b86df87851e7be7b383760d80", @ANYRESDEC=r2], 0x138)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)

29.877698549s ago: executing program 33 (id=2637):
r0 = creat(&(0x7f0000000300)='./file0\x00', 0x28)
pipe2$9p(&(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15)
r3 = dup(r2)
write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="38010000fe0000", @ANYRES64=r0, @ANYBLOB="f4b02b86df87851e7be7b383760d80", @ANYRESDEC=r2], 0x138)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)

2.686439424s ago: executing program 3 (id=2931):
timer_create(0x2, 0x0, &(0x7f0000000240)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
syz_read_part_table(0x407c, &(0x7f0000008140)="$eJzs079KemEYB/BHh98ParHoAt4tAqnjnySnqGhoMAenxgoLQQzSwqWlu+mSuoCuw8AM5FSDFgTx+UzPOd/3efku7+rL00FEFHbuBr1x5BQjYjKd9osRhYioz5JC/ujwutc/v+j237aK+ZiFlb74//A4G/4tfufmWsRpioiV0fPG0Xfa8Uf83zqb/5xMfXzfyzk5bKX2cStljUa1U6mmd7VUyz7fyLJsLvmhGktZL3Wuxum+ezvs3QzS7natnNqXo1TZK6dKs1n/xWYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDKDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwA8cCAAAAAML8rZPo3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG4FAAD//xQHINw=")
timer_gettime(r0, 0x0)
rt_sigaction(0xe, &(0x7f0000000180)={&(0x7f0000000100)="f30f1efc66450f2832c482adbcaf07000000c4e1e00300aa9c43713ef2400f1ed3c4c2e93be7f2262e669f8f88a4a2e100430f12957b280000653ed9fa", 0x8000000, 0x0, {[0xa47]}}, 0x0, 0x8, &(0x7f0000000200))

2.448344389s ago: executing program 3 (id=2933):
socket(0x10, 0x3, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
syz_usb_connect$uac1(0x2, 0xdc, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8, @ANYRES16=r0, @ANYRESHEX], 0x0)

1.101829345s ago: executing program 3 (id=2952):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
bind$netrom(r0, &(0x7f0000000f40)={{0x6, @rose}, [@default, @bcast, @netrom, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x48)
sendto(r0, 0x0, 0x0, 0x80, &(0x7f0000001080)=@hci={0x1f, 0x0, 0x2}, 0x80)

1.101389087s ago: executing program 3 (id=2954):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@ipv4_newroute={0x34, 0x18, 0x1, 0x3, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x2800}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x7}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWT_BPF_XMIT={0xc, 0x3, 0x0, 0x1, @LWT_BPF_PROG_NAME={0x5, 0x2, '\x00'}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

1.038693857s ago: executing program 3 (id=2955):
r0 = syz_mount_image$xfs(&(0x7f0000000640), &(0x7f0000000000)='./file0\x00', 0x2218a5d, &(0x7f0000000200), 0x0, 0x965a, &(0x7f0000012c40)="$eJzs+gm8pnPh+P/fZxi7jKGSUlMRLbJmiWpmMEMhWaIdkZSlpELbUFKoiGhT9i1bWULZWkn2FkoIlTXSYhvm/zjmTMb04lPfPv+fT71er8fjnPu+r/u6rvO+389rOYfZbNJGEweDuQbTGzeYtfOunTx1zNXr33nUlgseu9yp9+7/2BUXHz/yOGHkceJgMBg18vbQ9GVjB6edPmow+yPLH23euecZmn8wWH7k5ch+BitPf5j/ihnrTZulWQc69Oi3vad/PdICwz9i+Mnh++95xGAwGDPT9kODwdCUf/ig0jabMHnSo1Z/dxu2Gj3yfOavOaZ/zX/xYDD/mQM+PmZed+hJ+EjDP3PKi84dvf6T8LP/49pswuR1ZvEfPhdnG1m28vA5Pus5aGzW4/z2JTZfdWQKHzneBoPhS9xjzpX/iDabMGndweNf5wdHrXbh3tOmXzfnHEy/Ucw9GAzmGbm+zvdku9S/14SJKzxyz57xeoR9xrE8hY6LE9568sPDN+nBYLDQYDB27Rn3gqqqqvrPaMLEFdaA+/9cT3T/P+WURc/s/l9VVfWf2zoTJq4wfK+f5f4/3xPd/3da9KI9pv+3//ErT9/q4Sf3Q1RVVdW/1KR18P4/5onu/yuvcdm63f+rqqr+c9twvUfu//PNcv9f+Inu/286ebXFRtab8XvDQzPtcmim/5/w4EzLZ5tp+QMzLR89035mXn+OmZbfN9PyOYffg/XHDQZjZ/x7wamPLh47bvi9keX3z7R8/KP/TmfxNWdaPmGm5ZNmWj5xZKzDyyfPtHzyTOuv/QRTXVVV9X+mDVeYtMZgpn9nP7J4kRnv0/3/grOuW/rJGm9VVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVX9Z/bwnWefOxgMhgaDwajBYOpg5PnMj4Np06ZNG359yvmXX/6kDfT/RkPnXTt56pir17/zqC0XPHa5U+/d/9FZ+o/tP/8T1L/TsP9cx48bDHbY5MkeSj0Jdf67y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/uIfvPPvckWNg1GAwdTDyfMqMx7P2e+ObR1ZdddNT7z7o0S0XH7/tyLPzrp08ddsnYexPQkPDn3XM1evfedSWCx673Kn37v9fcPb853+C+nd6xH/bocFg5PweM3wurz9hw42XGgwGB9196qYrDf7+3irD7602drbBbI9sutQj39danHc8Ze3pj+OHvy38932c8sj+15l22GxDswxipl5x3o1HvXOze1ec9XHJx/8co2Y8OeL6M+6ZNm3atMcsHGmux9l4xv5nfJZZz/ORsS81PPZldt7+Pcu8b9fdlt52+y222XqbrXdYboVVVlxp+eVWWvVly7xj2+22Xnb698eZs3GPfF/jn5mz+WadszsnzDxns362x5uzcU88Z4/scepuQxvPmLPZ/8U5W+OJ52zctiM/aPHxowebPzI1Q4PB4muOHuwy/GK5OQeDxdcaWXeR4XVXHztqMNjv0Q86/GzOvx+DQ1OG19ls0kYTHx3ZP37Cf7hOP2bFxcePPE4YeZw4fYjjBo8eimMHp50+anguHjPN8849z9D8g8HyIy9H9jNYdeTdQ2esN22WZh3o0KPf9p7+9UgLDO9k+Mm7lj37muFzcZbt///R/9P1/x+8Vhn6+0QNjXyNrDPda8LkdR79WY9Mw/DczTaybOVhk1nn7H+zfxjvuNkHY55gvJPWmbjC8OJZ5n/GJnh83bXEhR+afmyNX3n6Vg//P6PQeOd7gvGuMwHHO98Tjff4D196+vRd/a+Nd5Zr3bqPfB//z1zrBk98rZuNdrD1JYvNeq17zeMP8THn8Yw5mnOWlR7vWrfLwctPGd7/+Ce+1q07PPbRj7nWjRoMFl9jxrVu+MI3afRgv+EXyw+/mDx6cOzwixUeeTH34PzhFy99+47bbTW8YO0Zc7Ls8H7Hjx16xP3ClW9bctoB06atOTKW8WMfO9aR42PczPfzCWOnT+aMbWfsd3jVGfu95enT35s0st8J/8J+Z2xL4717genvTR7Z78RZ9jv6CfY7Y9t/OB+WGvr7hetxrjeTZrnejPyNM+PHPeZrjulf8188GMx/JvnOsu7/eM2k83euJxjvhIkrrDE8vlnO378fjnT+Xjr56uF7xfyDwWChwWDs2jPG/i829Hjjnf2JxzsRxjv7E433yuO2X+9/YbyDmcb7mONssw2nHytrjxxnk/+F43fGtrNex0Y/8u70y/7a/8x1bNw/XMd2n23ULJM9U4/3O9tWsP7054s8+nvutScdM2PuR8+y3//pd7aZPssQXMfGzPL3/Ki1bxgM0ZxPOX71y4YOfOI5Hz147N8WM+Z8xrZPNOeT/5k5f9YTz/k/+3vyUs+f/v7oWcY/85xvsO8z95kx53PMst//ac4nP/G94x/nfPxgNM35sg9Mn7cnup4+3pzP2HbGnA9/xNXGzj5Ya/ieNTLnk/6ZOV/kf+c4nwfWn/58678vOueoU18/Y85nneP/ac4n/atzPu7vx/nij7z3vFGDOeYY7LLFzjvvtNz07zNeLj/9O1+L7rt2+jw/0b308YxmbPtE58Wa/4zRmH/KaOh/Mlp09sczevTUOnLHnZ72/3otWvNfNRrwtejqY6bP2xP9XvR4cz5jW7oPLjzT9rP+Hbrheo/83j3fLPfBGZvgffCcs9bda8YuRzZ7aJZhzrivPjjT8tlmWv7ATMtHz7SfmdefY6bl9820fPgjzDHT+jNYxw3/zTuyfOqjq48d/uVp3Mjy+2daPv7RbRdfc6blE2ZaPmmm5RMfPTQWnzzT8skzrb/24F9sxn+T3nbWi3z9s/Xff93l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+Yt7+M6zzx05BkYNBlMH058PjTwOpgxtcMerhh8Hg8HolU+ctsGTPd4nuaHzrp08dczV69951JYLHrvcqffu/19w9vznf4L6d3rEf9uhwWDk/B6z7WAwWH/ChhsvNRgMNph24sqjBn9/b5Hh91YfO2ow2G/oMTuY8+/rDE0ZXmezSRtNHAzmGllj3D/80H84jx6z4uLjRx4njDxOnH59Gjd49HgdOzjt9FGD2R9Z/mjzzj3P0PyDwfIjL0f2M1h5+sP8V8xYb9oszTrQoUe/7T3965EWGP4Rw0922Wbys4fnapbt/88041q97aj/cdXOf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8hf38J1nnztyDIwaDKYOpj8fmjLyOBg6+bQXjhwio3e96ujDnuzxPskNnXft5Kljrl7/zqO2XPDY5U69d///grPnP/8T1L/TI/7bDg0GI+f3mG0Hg8H6EzbceKnBYHDY0VftOmrw9/cWGX5v9bGjBoP9hh6zgzn/vs7QlOF1Npu00cTBYK6RNcb9ww/9h/PoMSsuPn7kccLI48Tp16dxg0eP17GD004fNZj9keWPNu/c8wzNPxgsP/JyZD+Dlac/zH/FjPWmzdKsAx169Nve078eaYHhHzH8ZM/5rj15eK5m2f7/TDOu1duO+h9X7fx3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/cQ/fefa5I8fAqMFg6mD681Ejj0NTbr7poxsPPw6/XnDtva59ssf7JDd03rWTp465ev07j9pywWOXO/Xe/f8Lzp7//E9Q/07D/nMdP24w2GGTJ3so9STU+e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7iHr7z7HNHno56dOmoKR0X2NB5106eOubq9e88assFj13u1Hv3f7IH9O/2OP67549Z/PfIH7P4fzx/zOL/ifwxi/+e+WMW/0/mj1n898ofs/h/Kn/M4v/p/DGL/975Yxb/ffLHLP775o9Z/D+TP2bx/2z+mMX/c/ljFv/98scs/vvnj1n8P58/ZvE/IH/M4n9g/pjF/wv5Yxb/g/LHLP4H549Z/L+YP2bx/1L+mMX/y/ljFv+v5I9Z/L+aP2bxPyR/zOL/tfwxi//X88cs/ofmj1n8D8sfs/gfnj9m8T8if8zif2T+mMX/qPwxi//R+WMW/2Pyxyz+x+aPWfyPyx+z+B+fP2bx/0b+mMX/hPwxi/+J+WMW/5Pyxyz+J+ePWfxPyR+z+H8zf8zi/638MYv/qfljFv/T8scs/qfnj1n8z8gfs/h/O3/M4n9m/pjF/6z8MYv/2fljFv/v5I9Z/L+bP2bxPyd/zOJ/bv6Yxf+8/DGL//n5Yxb/C/LHLP7fyx+z+H8/f8zi/4P8MYv/D/PHLP4/yh+z+P84f8zif2H+mMX/ovwxi/9P8scs/hfnj1n8f5o/ZvG/JH/M4n9p/pjF/7L8MYv/5fljFv8r8scs/lfmj1n8r8ofs/j/LH/M4v/z/DGL/y/yxyz+v8wfs/hfnT9m8b8mf8zi/6v8MYv/r/PHLP7X5o9Z/H+TP2bxvy5/zOJ/ff6Yxf+G/DGL/2/zxyz+N+aPWfxvyh+z+N+cP2bx/13+mMX/9/ljFv8/5I9Z/G/JH7P435o/ZvG/LX/M4n97/pjF/478MYv/nfljFv8/5o9Z/O/KH7P4350/ZvH/U/6Yxf+e/DGL/5/zxyz+f8kfs/j/NX/M4v+3/DGL/735Yxb/+/LHLP73549Z/B/IH7P4P5g/ZvGfmj9m8X8of8zi/3D+mMV/Wv6YxH+2Qf6YxX8of8ziPyp/zOI/W/6YxX/2/DGL/+j8MYv/HPljFv8588cs/nPlj1n8584fs/jPkz9m8Z83f8ziP1/+mMV//vwxi/9T8scs/gvkj1n8x9j8Xz3/P7WaxX9Bm/8/mcV/bP6YxX+h/DGL/8L5Yxb/p+aPWfyflj9m8X96/pjFf5H8MYv/M/LHLP6L5o9Z/J+ZP2bxf1b+mMV/sfwxi/+z88cs/s/JH7P4j8sfs/g/N3/M4v+8/DGL//Pzxyz+i+ePWfyXyB+z+L8gf8ziv2T+mMV/qfwxi/8L88cs/i/KH7P4vzh/zOL/kvwxi//S+WMW/5fmj1n8l8kfs/gvmz9m8V8uf8ziv3z+mMV/hfwxi/+K+WMW/5flj1n8V8ofs/ivnD9m8V8lf8ziv2r+mMX/5fljFv/V8scs/qvnj1n8X5E/ZvF/Zf6Yxf9V+WMW//H5Yxb/CfljFv+J+WMW/zXyxyz+a+aPWfzXyh+z+E/KH7P4T84fs/ivnT9m8V8nf8zi/+r8MYv/a/LHLP7r5o9Z/NfLH7P4r58/ZvF/bf6YxX+D/DGL/+vyxyz+G+aPWfw3yh+z+G+cP2bx3yR/zOL/+vwxi/+m+WMW/83yxyz+b8gfs/i/MX/M4v+m/DGL/5vzxyz+b8kfs/i/NX/M4v+2/DGL/+b5Yxb/LfLHLP5b5o9Z/N+eP2bx3yp/zOK/df6Yxf8d+WMW/23yxyz+78wfs/hvmz9m8X9X/pjF/935Yxb/7fLHLP7b549Z/HfIH7P475g/ZvF/T/6Yxf+9+WMW/53yxyz+78sfs/jvnD9m8X9//pjF/wP5Yxb/D+aPWfx3yR+z+O+aP2bx3y1/zOL/ofwxi/+H88cs/h/JH7P4fzR/zOL/sfwxi/+U/DGL/+75Yxb/PfLHLP4fzx+z+H8if8ziv2f+mMX/k/ljFv+98scs/p/KH7P4fzp/zOK/d/6YxX+f/DGL/775Yxb/z+SPWfw/mz9m8f9c/pjFf7/8MYv//vljFv/P549Z/A/IH7P4H5g/ZvH/Qv6Yxf+g/DGL/8H5Yxb/L+aPWfy/lD9m8f9y/pjF/yv5Yxb/r+aPWfwPyR+z+H8tf8zi//X8MYv/ofljFv/D8scs/ofnj1n8j8gfs/gfmT9m8T8qf8zif3T+mMX/mPwxi/+x+WMW/+Pyxyz+x+ePWfy/kT9m8T8hf8zif2L+mMX/pPwxi//J+WMW/1Pyxyz+38wfs/h/K3/M4n9q/pjF/7T8MYv/6fljFv8z8scs/t/OH7P4n5k/ZvE/K3/M4n92/pjF/zv5Yxb/7+aPWfzPyR+z+J+bP2bxPy9/zOJ/fv6Yxf+C/DGL//fyxyz+388fs/j/IH/M4v/D/DGL/4/yxyz+P84fs/hfmD9m8b8of8zi/5P8MYv/xfljFv+f5o9Z/C/JH7P4X5o/ZvG/LH/M4n95/pjF/4r8MYv/lfljFv+r8scs/j/LH7P4/zx/zOL/i/wxi/8v88cs/lfnj1n8r8kfs/j/Kn/M4v/r/DGL/7X5Yxb/3+SPWfyvyx+z+F+fP2bxvyF/zOL/2/wxi/+N+WMW/5vyxyz+N+ePWfx/lz9m8f99/pjF/w/5Yxb/W/LHLP635o9Z/G/LH7P4354/ZvG/I3/M4n9n/pjF/4/5Yxb/u/LHLP53549Z/P+UP2bxvyd/zOL/5/wxi/9f8scs/n/NH7P4/y1/zOJ/b/6Yxf++/DGL//35Yxb/B/LHLP4P5o9Z/Kfmj1n8H8ofs/g/nD9m8Z+WPybxn32QP2bxH8ofs/iPyh+z+M+WP2bxnz1/zOI/On/M4j9H/pjFf878MYv/XPljFv+588cs/vPkj1n8580fs/jPlz9m8Z8/f8zi/5T8MYv/AvljFv8x+WMW/wXzxyz+Y/PHLP4L5Y9Z/BfOH7P4PzV/zOL/tPwxi//T88cs/ovkj1n8n5E/ZvFfNH/M4v/M/DGL/7Pyxyz+i+WPWfyfnT9m8X9O/pjFf1z+mMX/ufljFv/n5Y9Z/J+fP2bxXzx/zOK/RP6Yxf8F+WMW/yXzxyz+S+WPWfxfmD9m8X9R/pjF/8X5Yxb/l+SPWfyXzh+z+L80f8ziv0z+mMV/2fwxi/9y+WMW/+Xzxyz+K+SPWfxXzB+z+L8sf8ziv1L+mMV/5fwxi/8q+WMW/1Xzxyz+L88fs/ivlj9m8V89f8zi/4r8MYv/K/PHLP6vyh+z+I/PH7P4T8gfs/hPzB+z+K+RP2bxXzN/zOK/Vv6YxX9S/pjFf3L+mMV/7fwxi/86+WMW/1fnj1n8X5M/ZvFfN3/M4r9e/pjFf/38MYv/a/PHLP4b5I9Z/F+XP2bx3zB/zOK/Uf6YxX/j/DGL/yb5Yxb/1+ePWfw3zR+z+G+WP2bxf0P+mMX/jfljFv835Y9Z/N+cP2bxf0v+mMX/rfljFv+35Y9Z/DfPH7P4b5E/ZvHfMn/M4v/2/DGL/1b5Yxb/rfPHLP7vyB+z+G+TP2bxf2f+mMV/2/wxi/+78scs/u/OH7P4b5c/ZvHfPn/M4r9D/pjFf8f8MYv/e/LHLP7vzR+z+O+UP2bxf1/+mMV/5/wxi//788cs/h/IH7P4fzB/zOK/S/6YxX/X/DGL/275Yxb/D+WPWfw/nD9m8f9I/pjF/6P5Yxb/j+WPWfyn5I9Z/HfPH7P475E/ZvH/eP6Yxf8T+WMW/z3zxyz+n8wfs/jvlT9m8f9U/pjF/9P5Yxb/vfPHLP775I9Z/PfNH7P4fyZ/zOL/2fwxi//n8scs/vvlj1n8988fs/h/Pn/M4n9A/pjF/8D8MYv/F/LHLP4H5Y9Z/A/OH7P4fzF/zOL/pfwxi/+X88cs/l/JH7P4fzV/zOJ/SP6Yxf9r+WMW/6/nj1n8D80fs/gflj9m8T88f8zif0T+mMX/yPwxi/9R+WMW/6Pzxyz+x+SPWfyPzR+z+B+XP2bxPz5/zOL/jfwxi/8J+WMW/xPzxyz+J+WPWfxPzh+z+J+SP2bx/2b+mMX/W/ljFv9T88cs/qflj1n8T88fs/ifkT9m8f92/pjF/8z8MYv/WfljFv+z88cs/t/JH7P4fzd/zOJ/Tv6Yxf/c/DGL/3n5Yxb/8/PHLP4X5I9Z/L+XP2bx/37+mMX/B/ljFv8f5o9Z/H+UP2bx/3H+mMX/wvwxi/9F+WMW/5/kj1n8L84fs/j/NH/M4n9J/pjF/9L8MYv/ZfljFv/L88cs/lfkj1n8r8wfs/hflT9m8f9Z/pjF/+f5Yxb/X+SPWfx/mT9m8b86f8zif03+mMX/V/ljFv9f549Z/K/NH7P4/yZ/zOJ/Xf6Yxf/6/DGL/w35Yxb/3+aPWfxvzB+z+N+UP2bxvzl/zOL/u/wxi//v88cs/n/IH7P435I/ZvG/NX/M4n9b/pjF//b8MYv/HfljFv8788cs/n/MH7P435U/ZvG/O3/M4v+n/DGL/z35Yxb/P+ePWfz/kj9m8f9r/pjF/2/5Yxb/e/PHLP735Y9Z/O/PH7P4P5A/ZvF/MH/M4j81f8zi/1D+mMX/4fwxi/+0/DGJ/+hB/pjFfyh/zOI/Kn/M4j9b/pjFf/b8MYv/6Pwxi/8c+WMW/znzxyz+c+WPWfznzh+z+M+TP2bxnzd/zOI/X/6YxX/+/DGL/1Pyxyz+C+SPWfzH5I9Z/BfMH7P4j80fs/gvlD9m8V84f8zi/9T8MYv/0/LHLP5Pzx+z+C+SP2bxf0b+mMV/0fwxi/8z88cs/s/KH7P4L5Y/ZvF/dv6Yxf85+WMW/3H5Yxb/5+aPWfyflz9m8X9+/pjFf/H8MYv/EvljFv8X5I9Z/JfMH7P4L5U/ZvF/Yf6Yxf9F+WMW/xfnj1n8X5I/ZvFfOn/M4v/S/DGL/zL5Yxb/ZfPHLP7L5Y9Z/JfPH7P4r5A/ZvFfMX/M4v+y/DGL/0r5Yxb/lfPHLP6r5I9Z/FfNH7P4vzx/zOK/Wv6YxX/1/DGL/yvyxyz+r8wfs/i/Kn/M4j8+f8ziPyF/zOI/MX/M4r9G/pjFf838MYv/WvljFv9J+WMW/8n5Yxb/tfPHLP7r5I9Z/F+dP2bxf03+mMV/3fwxi/96+WMW//Xzxyz+r80fs/hvkD9m8X9d/pjFf8P8MYv/RvljFv+N88cs/pvkj1n8X58/ZvHfNH/M4r9Z/pjF/w35Yxb/N+aPWfzflD9m8X9z/pjF/y35Yxb/t+aPWfzflj9m8d88f8ziv0X+mMV/y/wxi//b88cs/lvlj1n8t84fs/i/I3/M4r9N/pjF/535Yxb/bfPHLP7vyh+z+L87f8ziv13+mMV/+/wxi/8O+WMW/x3zn50WWvzfkz9m8X9v/pjFf6f8MYv/+/LHLP47549Z/N+fP2bx/0D+mMX/g/ljFv9d8scs/rvmj1n8d8sfs/h/KH/M4v/h/DGL/0fyxyz+H80fs/h/LH/M4j8lf8ziv3v+mMV/j/wxi//H88cs/p/IH7P475k/ZvH/ZP6YxX+v/DGL/6fyxyz+n84fs/jvnT9m8d8nf8ziv2/+mMX/M/ljFv/P5o9Z/D+XP2bx3y9/zOK/f/6Yxf/z+WMW/wPyxyz+B+aPWfy/kD9m8T8of8zif3D+mMX/i/ljFv8v5Y9Z/L+cP2bx/0r+mMX/q/ljFv9D8scs/l/LH7P4fz1/zOJ/aP6Yxf+w/DGL/+H5Yxb/I/LHLP5H5o9Z/I/KH7P4H50/ZvE/Jn/M4n9s/pjF/7j8MYv/8fljFv9v5I9Z/E/IH7P4n5g/ZvE/KX/M4n9y/pjF/5T8MYv/N/PHLP7fyh+z+J+aP2bxPy1/zOJ/ev6Yxf+M/DGL/7fzxyz+Z+aPWfzPyh+z+J+dP2bx/07+mMX/u/ljFv9z8scs/ufmj1n8z8sfs/ifnz9m8b8gf8zi/738MYv/9/PHLP4/yB+z+P8wf8zi/6P8MYv/j/PHLP4X5o9Z/C/KH7P4/yR/zOJ/cf6Yxf+n+WMW/0vyxyz+l+aPWfwvyx+z+F+eP2bxvyJ/zOJ/Zf6Yxf+q/DGL/8/yxyz+P88fs/j/In/M4v/L/DGL/9X5Yxb/a/LHLP6/yh+z+P86f8zif23+mMX/N/ljFv/r8scs/tfnj1n8b8gfs/j/Nn/M4n9j/pjF/6b8MYv/zfljFv/f5Y9Z/H+fP2bx/0P+mMX/lvwxi/+t+WMW/9vyxyz+t+ePWfzvyB+z+N+ZP2bx/2P+mMX/rvwxi//d+WMW/z/lj1n878kfs/j/OX/M4v+X/DGL/1/zxyz+f8sfs/jfmz9m8b8vf8zif3/+mMX/gfwxi/+D+WMW/6n5Yxb/h/LHLP4P549Z/Kflj0n85xjkj1n8h/LHLP6j8scs/rPlj1n8Z88fs/iPzh+z+M+RP2bxnzN/zOI/V/6YxX/u/DGL/zz5Yxb/efPHLP7z5Y9Z/OfPH7P4PyV/zOK/QP6YxX9M/pjFf8H8MYv/2Pwxi/9C+WMW/4Xzxyz+T80fs/g/LX/M4v/0/DGL/yL5Yxb/Z+SPWfwXzR+z+D8zf8zi/6z8MYv/YvljFv9n549Z/J+TP2bxH5c/ZvF/bv6Yxf95+WMW/+fnj1n8F88fs/gvkT9m8X9B/pjFf8n8MYv/UvljFv8X5o9Z/F+UP2bxf3H+mMX/JfljFv+l88cs/i/NH7P4L5M/ZvFfNn/M4r9c/pjFf/n8MYv/CvljFv8V88cs/i/LH7P4r5Q/ZvFfOX/M4r9K/pjFf9X8MYv/y/PHLP6r5Y9Z/FfPH7P4vyJ/zOL/yvwxi/+r8scs/uPzxyz+E/LHLP4T88cs/mvkj1n818wfs/ivlT9m8Z+UP2bxn5w/ZvFfO3/M4r9O/pjF/9X5Yxb/1+SPWfzXzR+z+K+XP2bxXz9/zOL/2vwxi/8G+WMW/9flj1n8N8wfs/hvlD9m8d84f8ziv0n+mMX/9fljFv9N88cs/pvlj1n835A/ZvF/Y/6Yxf9N+WMW/zfnj1n835I/ZvF/a/6Yxf9t+WMW/83zxyz+W+SPWfy3zB+z+L89f8ziv1X+mMV/6/wxi/878scs/tvkj1n835k/ZvHfNn/M4v+u/DGL/7vzxyz+2+WPWfy3zx+z+O+QP2bx3zF/zOL/nvwxi/9788cs/jvlj1n835c/ZvHfOX/M4v/+/DGL/wfyxyz+H8wfs/jvkj9m8d81f8ziv1v+mMX/Q/ljFv8P549Z/D+SP2bx/2j+mMX/Y/ljFv8p+WMW/93zxyz+e+SPWfw/nj9m8f9E/pjFf8/8MYv/J/PHLP575Y9Z/D+VP2bx/3T+mMV/7/wxi/8++WMW/33zxyz+n8kfs/h/Nn/M4v+5/DGL/375Yxb//fPHLP6fzx+z+B+QP2bxPzB/zOL/hfwxi/9B+WMW/4Pzxyz+X8wfs/h/KX/M4v/l/DGL/1fyxyz+X80fs/gfkj9m8f9a/pjF/+v5Yxb/Q/PHLP6H5Y9Z/A/PH7P4H5E/ZvE/Mn/M4n9U/pjF/+j8MYv/MfljFv9j88cs/sflj1n8j88fs/h/I3/M4n9C/pjF/8T8MYv/SfljFv+T88cs/qfkj1n8v5k/ZvH/Vv6Yxf/U/DGL/2n5Yxb/0/PHLP5n5I9Z/L+dP2bxPzN/zOJ/Vv6Yxf/s/DGL/3fyxyz+380fs/ifkz9m8T83f8zif17+mMX//Pwxi/8F+WMW/+/lj1n8v58/ZvH/Qf6Yxf+H+WMW/x/lj1n8f5w/ZvG/MH/M4n9R/pjF/yf5Yxb/i/PHLP4/zR+z+F+SP2bxvzR/zOJ/Wf6Yxf/y/DGL/xX5Yxb/K/PHLP5X5Y9Z/H+WP2bx/3n+mMX/F/ljFv9f5o9Z/K/OH7P4X5M/ZvH/Vf6Yxf/X+WMW/2vzxyz+v8kfs/hflz9m8b8+f8zif0P+mMX/t/ljFv8b88cs/jflj1n8b84fs/j/Ln/M4v/7/DGL/x/yxyz+t+SPWfxvzR+z+N+WP2bxvz1/zOJ/R/6Yxf/O/DGL/x/zxyz+d+WPWfzvzh+z+P8pf8zif0/+mMX/z/ljFv+/5I9Z/P+aP2bx/1v+mMX/3vwxi/99+WMW//vzxyz+D+SPWfwfzB+z+E/NH7P4P5Q/ZvF/OH/M4j8tf0ziP+cgf8ziP5Q/ZvEflT9m8Z8tf8ziP3v+mMV/dP6YxX+O/DGL/5z5Yxb/ufLHLP5z549Z/OfJH7P4z5s/ZvGfL3/M4j9//pjF/yn5Yxb/BfLHLP5j8scs/gvmj1n8x+aPWfwXyh+z+C+cP2bxf2r+mMX/afljFv+n549Z/BfJH7P4PyN/zOK/aP6Yxf+Z+WMW/2flj1n8F8sfs/g/O3/M4v+c/DGL/7j8MYv/c/PHLP7Pyx+z+D8/f8ziv3j+mMV/ifwxi/8L8scs/kvmj1n8l8ofs/i/MH/M4v+i/DGL/4vzxyz+L8kfs/gvnT9m8X9p/pjFf5n8MYv/svljFv/l8scs/svnj1n8V8gfs/ivmD9m8X9Z/pjFf6X8MYv/yvljFv9V8scs/qvmj1n8X54/ZvFfLX/M4r96/pjF/xX5Yxb/V+aPWfxflT9m8R+fP2bxn5A/ZvGfmD9m8V8jf8ziv2b+mMV/rfwxi/+k/DGL/+T8MYv/2vljFv918scs/q/OH7P4vyZ/zOK/bv6YxX+9/DGL//r5Yxb/1+aPWfw3yB+z+L8uf8ziv2H+mMV/o/wxi//G+WMW/03yxyz+r88fs/hvmj9m8d8sf8zi/4b8MYv/G/PHLP5vyh+z+L85f8zi/5b8MYv/W/PHLP5vyx+z+G+eP2bx3yJ/zOK/Zf6Yxf/t+WMW/63yxyz+W+ePWfzfkT9m8d8mf8zi/878MYv/tvljFv935Y9Z/N+dP2bx3y5/zOK/ff6YxX+H/DGL/475Yxb/9+SPWfzfmz9m8d8pf8zi/778MYv/zvljFv/3549Z/D+QP2bx/2D+mMV/l/wxi/+u+WMW/93yxyz+H8ofs/h/OH/M4v+R/DGL/0fzxyz+H8sfs/hPyR+z+O+eP2bx3yN/zOL/8fwxi/8n8scs/nvmj1n8P5k/ZvHfK3/M4v+p/DGL/6fzxyz+e+ePWfz3yR+z+O+bP2bx/0z+mMX/s/ljFv/P5Y9Z/PfLH7P4758/ZvH/fP6Yxf+A/DGL/4H5Yxb/L+SPWfwPyh+z+B+cP2bx/2L+mMX/S/ljFv8v549Z/L+SP2bx/2r+mMX/kPwxi//X8scs/l/PH7P4H5o/ZvE/LH/M4n94/pjF/4j8MYv/kfljFv+j8scs/kfnj1n8j8kfs/gfmz9m8T8uf8zif3z+mMX/G/ljFv8T8scs/ifmj1n8T8ofs/ifnD9m8T8lf8zi/838MYv/t/LHLP6n5o9Z/E/LH7P4n54/ZvE/I3/M4v/t/DGL/5n5Yxb/s/LHLP5n549Z/L+TP2bx/27+mMX/nPwxi/+5+WMW//Pyxyz+5+ePWfwvyB+z+H8vf8zi//38MYv/D/LHLP4/zB+z+P8of8zi/+P8MYv/hfljFv+L8scs/j/JH7P4X5w/ZvH/af6Yxf+S/DGL/6X5Yxb/y/LHLP6X549Z/K/IH7P4X5k/ZvG/Kn/M4v+z/DGL/8/zxyz+v8gfs/j/Mn/M4n91/pjF/5r8MYv/r/LHLP6/zh+z+F+bP2bx/03+mMX/uvwxi//1+WMW/xvyxyz+v80fs/jfmD9m8b8pf8zif3P+mMX/d/ljFv/f549Z/P+QP2bxvyV/zOJ/a/6Yxf+2/DGL/+35Yxb/O/LHLP535o9Z/P+YP2bxvyt/zOJ/d/6Yxf9P+WMW/3vyxyz+f84fs/j/JX/M4v/X/DGL/9/yxyz+9+aPWfzvyx+z+N+fP2bxfyB/zOL/YP6YxX9q/pjF/6H8MYv/w/ljFv9p+WMS/7kG+WMW/6H8MYv/qPwxi/9s+WMW/9nzxyz+o/PHLP5z5I9Z/OfMH7P4z5U/ZvGfO3/M4j9P/pjFf978MYv/fPljFv/588cs/k/JH7P4L5A/ZvEfkz9m8V8wf8ziPzZ/zOK/UP6YxX/h/DGL/1Pzxyz+T8sfs/g/PX/M4r9I/pjF/xn5Yxb/RfPHLP7PzB+z+D8rf8ziv1j+mMX/2fljFv/n5I9Z/Mflj1n8n5s/ZvF/Xv6Yxf/5+WMW/8Xzxyz+S+SPWfxfkD9m8V8yf8ziv1T+mMX/hfljFv8X5Y9Z/F+cP2bxf0n+mMV/6fwxi/9L88cs/svkj1n8l80fs/gvlz9m8V8+f8ziv0L+mMV/xfwxi//L8scs/ivlj1n8V84fs/ivkj9m8V81f8zi//L8MYv/avljFv/V88cs/q/IH7P4vzJ/zOL/qvwxi//4/DGL/4T8MYv/xPwxi/8a+WMW/zXzxyz+a+WPWfwn5Y9Z/Cfnj1n8184fs/ivkz9m8X91/pjF/zX5Yxb/dfPHLP7r5Y9Z/NfPH7P4vzZ/zOK/Qf6Yxf91+WMW/w3zxyz+G+WPWfw3zh+z+G+SP2bxf33+mMV/0/wxi/9m+WMW/zfkj1n835g/ZvF/U/6Yxf/N+WMW/7fkj1n835o/ZvF/W/6YxX/z/DGL/xb5Yxb/LfPHLP5vzx+z+G+VP2bx3zp/zOL/jvwxi/82+WMW/3fmj1n8t80fs/i/K3/M4v/u/DGL/3b5Yxb/7fPHLP475I9Z/HfMH7P4vyd/zOL/3vwxi/9O+WMW//flj1n8d84fs/i/P3/M4v+B/DGL/wfzxyz+u+SPWfx3zR+z+O+WP2bx/1D+mMX/w/ljFv+P5I9Z/D+aP2bx/1j+mMV/Sv6YxX/3/DGL/x75Yxb/j+ePWfw/kT9m8d8zf8zi/8n8MYv/XvljFv9P5Y9Z/D+dP2bx3zt/zOK/T/6YxX/f/DGL/2fyxyz+n80fs/h/Ln/M4r9f/pjFf//8MYv/5/PHLP4H5I9Z/A/MH7P4fyF/zOJ/UP6Yxf/g/DGL/xfzxyz+X8ofs/h/OX/M4v+V/DGL/1fzxyz+h+SPWfy/lj9m8f96/pjF/9D8MYv/YfljFv/D88cs/kfkj1n8j8wfs/gflT9m8T86f8zif0z+mMX/2Pwxi/9x+WMW/+Pzxyz+38gfs/ifkD9m8T8xf8zif1L+mMX/5Pwxi/8p+WMW/2/mj1n8v5U/ZvE/NX/M4n9a/pjF//T8MYv/GfljFv9v549Z/M/MH7P4n5U/ZvE/O3/M4v+d/DGL/3fzxyz+5+SPWfzPzR+z+J+XP2bxPz9/zOJ/Qf6Yxf97+WMW/+/nj1n8f5A/ZvH/Yf6Yxf9H+WMW/x/nj1n8L8wfs/hflD9m8f9J/pjF/+L8MYv/T/PHLP6X5I9Z/C/NH7P4X5Y/ZvG/PH/M4n9F/pjF/8r8MYv/VfljFv+f5Y9Z/H+eP2bx/0X+mMX/l/ljFv+r88cs/tfkj1n8f5U/ZvH/df6Yxf/a/DGL/2/yxyz+1+WPWfyvzx+z+N+QP2bx/23+mMX/xvwxi/9N+WMW/5vzxyz+v8sfs/j/Pn/M4v+H/DGL/y35Yxb/W/PHLP635Y9Z/G/PH7P435E/ZvG/M3/M4v/H/DGL/135Yxb/u/PHLP5/yh+z+N+TP2bx/3P+mMX/L/ljFv+/5o9Z/P+WP2bxvzd/zOJ/X/6Yxf/+/DGL/wP5Yxb/B/PHLP5T88cs/g/lj1n8H84fs/hPyx+T+M89yB+z+A/lj1n8R+WPWfxnyx+z+M+eP2bxH50/ZvGfI3/M4j9n/pjFf678sZn8Z/9v9p87f8xy/s+TP2bxnzd/zOI/X/6YxX/+/DGL/1Pyxyz+C+SPWfzH5I9Z/BfMH7P4j80fs/gvlD9m8V84f8zi/9T8MYv/0/LHLP5Pzx+z+C+SP2bxf0b+mMV/0fwxi/8z88cs/s/KH7P4L5Y/ZvF/dv6Yxf85+WMW/3H5Yxb/5+aPWfyflz9m8X9+/pjFf/H8MYv/EvljFv8X5I9Z/JfMH7P4L5U/ZvF/Yf6Yxf9F+WMW/xfnj1n8X5I/ZvFfOn/M4v/S/DGL/zL5Yxb/ZfPHLP7L5Y9Z/JfPH7P4r5A/ZvFfMX/M4v+y/DGL/0r5Yxb/lfPHLP6r5I9Z/FfNH7P4vzx/zOK/Wv6YxX/1/DGL/yvyxyz+r8wfs/i/Kn/M4j8+f8ziPyF/zOI/MX/M4r9G/pjFf838MYv/WvljFv9J+WMW/8n5Yxb/tfPHLP7r5I9Z/F+dP2bxf03+mMV/3fwxi/96+WMW//Xzxyz+r80fs/hvkD9m8X9d/pjFf8P8MYv/RvljFv+N88cs/pvkj1n8X58/ZvHfNH/M4r9Z/pjF/w35Yxb/N+aPWfzflD9m8X9z/pjF/y35Yxb/t+aPWfzflj9m8d88f8ziv0X+mMV/y/wxi//b88cs/lvlj1n8t84fs/i/I3/M4r9N/pjF/535Yxb/bfPHLP7vyh+z+L87f8ziv13+mMV/+/wxi/8O+WMW/x3zxyz+78kfs/i/N3/M4r9T/pjF/335Yxb/nfPHLP7vzx+z+H8gf8zi/8H8MYv/LvljFv9d88cs/rvlj1n8P5Q/ZvH/cP6Yxf8j+WMW/4/mj1n8P5Y/ZvGfkj9m8d89f8ziv0f+mMX/4/ljFv9P5I9Z/PfMH7P4fzJ/zOK/V/6Yxf9T+WMW/0/nj1n8984fs/jvkz9m8d83f8zi/5n8MYv/Z/PHLP6fyx+z+O+XP2bx3z9/zOL/+fwxi/8B+WMW/wPzxyz+X8gfs/gflD9m8T84f8zi/8X8MYv/l/LHLP5fzh+z+H8lf8zi/9X8MYv/IfljFv+v5Y9Z/L+eP2bxPzR/zOJ/WP6Yxf/w/DGL/xH5Yxb/I/PHLP5H5Y9Z/I/OH7P4H5M/ZvE/Nn/M4n9c/pjF//j8MYv/N/LHLP4n5I9Z/E/MH7P4n5Q/ZvE/OX/M4n9K/pjF/5v5Yxb/b+WPWfxPzR+z+J+WP2bxPz1/zOJ/Rv6Yxf/b+WMW/zPzxyz+Z+WPWfzPzh+z+H8nf8zi/938MYv/OfljFv9z88cs/uflj1n8z88fs/hfkD9m8f9e/pjF//v5Yxb/H+SPWfx/mD9m8f9R/pjF/8f5Yxb/C/PHLP4X5Y9Z/H+SP2bxvzh/zOL/0/wxi/8l+WMW/0vzxyz+l+WPWfwvzx+z+F+RP2bxvzJ/zOJ/Vf6Yxf9n+WMW/5/nj1n8f5E/ZvH/Zf6Yxf/q/DGL/zX5Yxb/X+WPWfx/nT9m8b82f8zi/5v8MYv/dfljFv/r88cs/jfkj1n8f5s/ZvG/MX/M4n9T/pjF/+b8MYv/7/LHLP6/zx+z+P8hf8zif0v+mMX/1vwxi/9t+WMW/9vzxyz+d+SPWfzvzB+z+P8xf8zif1f+mMX/7vwxi/+f8scs/vfkj1n8/5w/ZvH/S/6Yxf+v+WMW/7/lj1n8780fs/jflz9m8b8/f8zi/0D+mMX/wfwxi//U/DGL/0P5Yxb/h/PHLP7T8sck/vMM8scs/kP5Yxb/UfljFv/Z8scs/rPnj1n8R+ePWfznyB+z+M+ZP2bxnyt/zOI/d/6YxX+e/DGL/7z5Yxb/+fLHLP7z549Z/J+SP2bxXyB/zOI/Jn/M4r9g/pjFf2z+mMV/ofwxi//C+WMW/6fmj1n8n5Y/ZvF/ev6YxX+R/DGL/zPyxyz+i+aPWfyfmT9m8X9W/pjFf7H8MYv/s/PHLP7PyR+z+I/LH7P4Pzd/zOL/vPwxi//z88cs/ovnj1n8l8gfs/i/IH/M4r9k/pjFf6n8MYv/C/PHLP4vyh+z+L84f8zi/5L8MYv/0vljFv+X5o9Z/JfJH7P4L5s/ZvFfLn/M4r98/pjFf4X8MYv/ivljFv+X5Y9Z/FfKH7P4r5w/ZvFfJX/M4r9q/pjF/+X5Yxb/1fLHLP6r549Z/F+RP2bxf2X+mMX/VfljFv/x+WMW/wn5Yxb/ifljFv818scs/mvmj1n818ofs/hPyh+z+E/OH7P4r50/ZvFfJ3/M4v/q/DGL/2vyxyz+6+aPWfzXyx+z+K+fP2bxf23+mMV/g/wxi//r8scs/hvmj1n8N8ofs/hvnD9m8d8kf8zi//r8MYv/pvljFv/N8scs/m/IH7P4vzF/zOL/pvwxi/+b88cs/m/JH7P4vzV/zOL/tvwxi//m+WMW/y3yxyz+W+aPWfzfnj9m8d8qf8ziv3X+mMX/HfljFv9t8scs/u/MH7P4b5s/ZvF/1z/6v/L/03H9H83i/+7Of8ziv13+mMV/+/wxi/8O+WMW/x3zxyz+78kfs/i/N3/M4r9T/pjF/335Yxb/nfPHLP7vzx+z+H8gf8zi/8H8MYv/LvljFv9d88cs/rvlj1n8P5Q/ZvH/cP6Yxf8j+WMW/4/mj1n8P5Y/ZvGfkj9m8d89f+y/13/a0Mz+e+SP/ff6P/b8/3j+mMX/E/ljFv8988cs/p/MH7P475U/ZvH/VP6Yxf/T+WMW/73zxyz+++SPWfz3zR+z+H8mf8zi/9n8MYv/5/LHLP775Y9Z/PfPH7P4fz5/zOJ/QP6Yxf/A/DGL/xfyxyz+B+WPWfwPzh+z+H8xf8zi/6X8MYv/l/PHLP5fyR+z+H81f8zif0j+mMX/a/ljFv+v549Z/A/NH7P4H5Y/ZvE/PH/M4n9E/pjF/8j8MYv/UfljFv+j88cs/sfkj1n8j80fs/gflz9m8T8+f8zi/438MYv/CfljFv8T88cs/iflj1n8T84fs/ifkj9m8f9m/pjF/1v5Yxb/U/PHLP6n5Y9Z/E/PH7P4n5E/ZvH/dv6Yxf/M/DGL/1n5Yxb/s/PHLP7fyR+z+H83f8zif07+mMX/3Pwxi/95+WMW//Pzxyz+F+SPWfy/lz9m8f9+/pjF/wf5Yxb/H+aPWfx/lD9m8f9x/pjF/8L8MYv/RfljFv+f5I9Z/C/OH7P4/zR/zOJ/Sf6Yxf/S/DGL/2X5Yxb/y/PHLP5X5I9Z/K/MH7P4X5U/ZvH/Wf6Yxf/n+WMW/1/kj1n8f5k/ZvG/On/M4n9N/pjF/1f5Yxb/X+ePWfyvzR+z+P8mf8zif13+mMX/+vwxi/8N+WMW/9/mj1n8b8wfs/jflD9m8b85f8zi/7v8MYv/7/PHLP5/yB+z+N+SP2bxvzV/zOJ/W/6Yxf/2/DGL/x35Yxb/O/PHLP5/zB+z+N+VP2bxvzt/zOL/p/wxi/89+WMW/z/nj1n8/5I/ZvH/a/6Yxf9v+WMW/3vzxyz+9+WPWfzvzx+z+D+QP2bxfzB/zOI/NX/M4v9Q/pjF/+H8MYv/tPwxif+8g/wxi/9Q/pjFf1T+mMV/tvwxi//s+WMW/9H5Yxb/OfLHLP5z5o9Z/OfKH7P4z50/ZvGfJ3/M4j9v/pjFf778MYv//PljFv+n5I9Z/BfIH7P4j8kfs/gvmD9m8R+bP2bxXyh/zOK/cP6Yxf+p+WMW/6flj1n8n54/ZvFfJH/M4v+M/DGL/6L5Yxb/Z+aPWfyflT9m8V8sf8zi/+z8MYv/c/LHLP7j8scs/s/NH7P4Py9/zOL//Pwxi//i+WMW/yXyxyz+L8gfs/gvmT9m8V8qf8zi/8L8MYv/i/LHLP4vzh+z+L8kf8ziv3T+mMX/pfljFv9l8scs/svmj1n8l8sfs/gvnz9m8V8hf8ziv2L+mMX/ZfljFv+V8scs/ivnj1n8V8kfs/ivmj9m8X95/pjFf7X8MYv/6vljFv9X5I9Z/F+ZP2bxf1X+mMV/fP6YxX9C/pjFf2L+mMV/jfwxi/+a+WMW/7Xyxyz+k/LHLP6T88cs/mvnj1n818kfs/i/On/M4v+a/DGL/7r5Yxb/9fLHLP7r549Z/F+bP2bx3yB/zOL/uvwxi/+G+WMW/43yxyz+G+ePWfw3yR+z+L8+f8ziv2n+mMV/s/wxi/8b8scs/m/MH7P4vyl/zOL/5vwxi/9b8scs/m/NH7P4vy1/zOK/ef6YxX+L/DGL/5b5Yxb/t+ePWfy3yh+z+G+dP2bxf0f+mMV/m/wxi/8788cs/tvmj1n835U/ZvF/d/6YxX+7/DGL//b5Yxb/HfLHLP475o9Z/N+TP2bxf2/+mMV/p/wxi//78scs/jvnj1n8358/ZvH/QP6Yxf+D+WMW/13yxyz+u+aPWfx3yx+z+H8of8zi/+H8MYv/R/LHLP4fzR+z+H8sf8ziPyV/zOK/e/6YxX+P/DGL/8fzxyz+n8gfs/jvmT9m8f9k/pjFf6/8MYv/p/LHLP6fzh+z+O+dP2bx3yd/zOK/b/6Yxf8z+WMW/8/mj1n8P5c/ZvHfL3/M4r9//pjF//P5Yxb/A/LHLP4H5o9Z/L+QP2bxPyh/zOJ/cP6Yxf+L+WMW/y/lj1n8v5w/ZvH/Sv6Yxf+r+WMW/0Pyxyz+X8sfs/h/PX/M4n9o/pjF/7D8MYv/4fljFv8j8scs/kfmj1n8j8ofs/gfnT9m8T8mf8zif2z+mMX/uPwxi//x+WMW/2/kj1n8T8gfs/ifmD9m8T8pf8zif3L+mMX/lPwxi/8388cs/t/KH7P4n5o/ZvE/LX/M4n96/pjF/4z8MYv/t/PHLP5n5o9Z/M/KH7P4n50/ZvH/Tv6Yxf+7+WMW/3Pyxyz+5+aPWfzPyx+z+J+fP2bxvyB/zOL/vfwxi//388cs/j/IH7P4/zB/zOL/o/wxi/+P88cs/hfmj1n8L8ofs/j/JH/M4n9x/pjF/6f5Yxb/S/LHLP6X5o9Z/C/LH7P4X54/ZvG/In/M4n9l/pjF/6r8MYv/z/LHLP4/zx+z+P8if8zi/8v8MYv/1fljFv9r8scs/r/KH7P4/zp/zOJ/bf6Yxf83+WMW/+vyxyz+1+ePWfxvyB+z+P82f8zif2P+mMX/pvwxi//N+WMW/9/lj1n8f58/ZvH/Q/6Yxf+W/DGL/635Yxb/2/LHLP63549Z/O/IH7P435k/ZvH/Y/6Yxf+u/DGL/935Yxb/P+WPWfzvyR+z+P85f8zi/5f8MYv/X/PHLP5/yx+z+N+bP2bxvy9/zOJ/f/6Yxf+B/DGL/4P5Yxb/qfljFv+H8scs/g/nj1n8p+WPSfznG+SPWfyH8scs/qPyxyz+s+WPWfxnzx+z+I/OH7P4z5E/ZvGfM3/M4j9X/pjFf+78MYv/PPljFv9588cs/vPlj1n8588fs/g/JX/M4r9A/pjFf0z+mMV/wfwxi//Y/DGL/0L5Yxb/hfPHLP5PzR+z+D8tf8zi//T8MYv/IvljFv9n5I9Z/BfNH7P4PzN/zOL/rPwxi/9i+WMW/2fnj1n8n5M/ZvEflz9m8X9u/pjF/3n5Yxb/5+ePWfwXzx+z+C+RP2bxf0H+mMV/yfwxi/9S+WMW/xfmj1n8X5Q/ZvF/cf6Yxf8l+WMW/6Xzxyz+L80fs/gvkz9m8V82f8ziv1z+mMV/+fwxi/8K+WMW/xXzxyz+L8sfs/ivlD9m8V85f8ziv0r+mMV/1fwxi//L88cs/qvlj1n8V88fs/i/In/M4v/K/DGL/6vyxyz+4/PHLP4T8scs/hPzxyz+a+SPWfzXzB+z+K+VP2bxn5Q/ZvGfnD9m8V87f8ziv07+mMX/1fljFv/X5I9Z/NfNH7P4r5c/ZvFfP3/M4v/a/DGL/wb5Yxb/1+WPWfw3zB+z+G+UP2bx3zh/zOK/Sf6Yxf/1+WMW/03zxyz+m+WPWfzfkD9m8X9j/pjF/035Yxb/N+ePWfzfkj9m8X9r/pjF/235Yxb/zfPHLP5b5I9Z/LfMH7P4vz1/zOK/Vf6YxX/r/DGL/zvyxyz+2+SPWfzfmT9m8d82f8zi/678MYv/u/PHLP7b5Y9Z/LfPH7P475A/ZvHfMX/M4v+e/DGL/3vzxyz+O+WPWfzflz9m8d85f8zi//78MYv/B/LHLP4fzB+z+O+SP2bx3zV/zOK/W/6Yxf9D+WMW/w/nj1n8P5I/ZvH/aP6Yxf9j+WMW/yn5Yxb/3fPHLP575I9Z/D+eP2bx/0T+mMV/z/wxi/8n88cs/nvlj1n8P5U/ZvH/dP6YxX/v/DGL/z75Yxb/ffPHLP6fyR+z+H82f8zi/7n8MYv/fvljFv/988cs/p/PH7P4H5A/ZvE/MH/M4v+F/DGL/0H5Yxb/g/PHLP5fzB+z+H8pf8zi/+X8MYv/V/LHhv0Hg8GU/3b/r+aPWc7/Q/LHLP5fyx+z+H89f8zif2j+mMX/sPwxi//h+WMW/yPyxyz+R+aPWfyPyh+z+B+dP2bxPyZ/zOJ/bP6Yxf+4/DGL//H5Yxb/b+SPWfxPyB+z+J+YP2bxPyl/zOJ/cv6Yxf+U/DGL/zfzxyz+38ofs/ifmj9m8T8tf8zif3r+mMX/jPwxi/+388cs/mfmj1n8z8ofs/ifnT9m8f9O/pjF/7v5Yxb/c/LHLP7n5o9Z/M/LH7P4n58/ZvG/IH/M4v+9/DGL//fzxyz+P8gfs/j/MH/M4v+j/DGL/4/zxyz+F+aPWfwvyh+z+P8kf8zif3H+mMX/p/ljFv9L8scs/pfmj1n8L8sfs/hfnj9m8b8if8zif2X+mMX/qvwxi//P8scs/j/PH7P4/yJ/zOL/y/wxi//V+WMW/2vyxyz+v8ofs/j/On/M4n9t/pjF/zf5Yxb/6/LHLP7X549Z/G/IH7P4/zZ/zOJ/Y/6Yxf+m/DGL/835Yxb/3+WPWfx/nz9m8f9D/pjF/5b8MYv/rfljFv/b8scs/rfnj1n878gfs/jfmT9m8f9j/pjF/678MYv/3fljFv8/5Y9Z/O/JH7P4/zl/zOL/l/wxi/9f88cs/n/LH7P435s/ZvG/L3/M4n9//pjF/4H8MYv/g/ljFv+p+WMW/4fyxyz+D+ePWfyn5Y9J/Ocf5I9Z/Ifyxyz+o/LHLP6z5Y9Z/GfPH7P4j84fs/jPkT9m8Z8zf8ziP1f+mMV/7vwxi/88+WMW/3nzxyz+8+WPWfznzx+z+D8lf8ziv0D+mMV/TP6YxX/B/DGL/9j8MYv/QvljFv+F88cs/k/NH7P4Py1/zOL/9Pwxi/8i+WMW/2fkj1n8F80fs/g/M3/M4v+s/DGL/2L5Yxb/Z+ePWfyfkz9m8R+XP2bxf27+mMX/efljFv/n50/tPpD4L54/Zjn/l8gfs/i/IH/M4r9k/pjFf6n8MYv/C/PHLP4vyh+z+L84f8zi/5L8MYv/0vljFv+X5o9Z/JfJH7P4L5s/ZvFfLn/M4r98/pjFf4X8MYv/ivljFv+X5Y9Z/FfKH7P4r5w/ZvFfJX/M4r9q/pjF/+X5Yxb/1fLHLP6r549Z/F+RP2bxf2X+mMX/VfljFv/x+WMW/wn5Yxb/ifljFv818scs/mvmj1n818ofs/hPyh+z+E/OH7P4r50/ZvFfJ3/M4v/q/DGL/2vyxyz+6+aPWfzXyx+z+K+fP2bxf23+mMV/g/wxi//r8scs/hvmj1n8N8ofs/hvnD9m8d8kf8zi//r8MYv/pvljFv/N8scs/m/IH7P4vzF/zOL/pvwxi/+b88cs/m/JH7P4vzV/zOL/tvwxi//m+WMW/y3yxyz+W+aPWfzfnj9m8d8qf8ziv3X+mMX/HfljFv9t8scs/u/MH7P4b5s/ZvF/V/6Yxf/d+WMW/+3yxyz+2+ePWfx3yB+z+O+YP2bxf0/+mMX/vfljFv+d8scs/u/LH7P475w/ZvF/f/6Yxf8D+WMW/w/mj1n8d8kfs/jvmj9m8d8tf8zi/6H8MYv/h/PHLP4fyR+z+H80f8zi/7H8MYv/lPwxi//u+WMW/z3yxyz+H88fs/h/In/M4r9n/pjF/5P5Yxb/vfLHLP6fyh+z+H86f8ziv3f+mMV/n/wxi/+++WMW/8/kj1n8P5s/ZvH/XP6YxX+//DGL//75Yxb/z+ePWfwPyB+z+B+YP2bx/0L+mMX/oPwxi//B+WMW/y/K/ed4nOUW/y/J/R8vi/+X88cs/l/JH7P4fzV/zOJ/SP6Yxf9r+WMW/6/nj1n8D80fs/gflj9m8T88f8zif0T+mMX/yPwxi/9R+WMW/6Pzxyz+x+SPWfyPzR+z+B+XP2bxPz5/zOL/jfwxi/8J+WMW/xPzxyz+J+WPWfxPzh+z+J+SP2bx/2b+mMX/W/ljFv9T88cs/qflj1n8T88fs/ifkT9m8f92/pjF/8z8MYv/WfljFv+z88cs/t/JH7P4fzd/zOJ/Tv7TO+TWsdvN9NLif27+mMX/vPwxi//5+WMW/wvyxyz+38sfs/h/P3/M4v+D/DGL/w/zxyz+P8ofs/j/OH/M4n9h/pjF/6L8MYv/T/LHLP4X549Z/H+aP2bxvyR/zOJ/af6Yxf+y/DGL/+X5Yxb/K/LHLP5X5o9Z/K/KH7P4/yx/zOL/8/wxi/8v8scs/r/MH7P4X50/ZvG/Jn/M4v+r/DGL/6/zxyz+1+aPWfx/kz9m8b8uf8zif33+mMX/hvwxi/9v88cs/jfmj1n8b8ofs/jfnD9m8f9d/pjF//f5Yxb/P+SPWfxvyR+z+N+aP2bxvy1/zOJ/e/6Yxf+O/DGL/535Yxb/P+aPWfzvyh+z+N+dP2bx/1P+mMX/nvwxi/+f88cs/n/JH7P4/zV/zOL/t/wxi/+9+WMW//vyxyz+9+ePWfwfyB+z+D+YP2bxn5o/ZvF/KH/M4v9w/pjFf1r+mMT/KYP8MYv/UP6YxX9U/pjFf7b8MYv/7PljFv/R+WMW/znyxyz+c+aPWfznyh+z+M+dP2bxnyd/zOI/b/6YxX++/DGL//z5Yxb/p+SPWfwXyB+z+I/JH7P4L5g/ZvEfmz9m8V8of8ziv3D+mMX/qfljFv+n5Y9Z/J+eP2bxXyR/zOL/jPwxi/+i+WMW/2fmj1n8n5U/ZvFfLH/M4v/s/DGL/3Pyxyz+4/LHLP7PzR+z+D8vf8zi//z8MYv/4vljFv8l8scs/i/IH7P4L5k/ZvFfKn/M4v/C/DGL/4vyxyz+L84fs/i/JH/M4r90/pjF/6X5Yxb/ZfLHLP7L5o9Z/JfLH7P4L58/ZvFfIX/M4r9i/pjF/2X5Yxb/lfLHLP4r5/+YZsyNxX+V/DGL/6r5Yxb/l+ePWfxXyx+z+K+eP2bxf0X+mMX/lfljFv9X5Y9Z/Mfnj1n8J+SPWfwn5o9Z/NfIH7P4r5k/ZvFfK3/M4j8pf8ziPzl/zOK/dv6YxX+d/DGL/6vzxyz+r8kfs/ivmz9m8V8vf8ziv37+mMX/tfljFv8N8scs/q/LH7P4b5g/ZvHfKH/M4r9x/pjFf5P8MYv/6/PHLP6b5o9Z/DfLH7P4vyF/zOL/xvwxi/+b8scs/m/OH7P4vyV/zOL/1vwxi//b8scs/pvnj1n8t8gfs/hvmT9m8X97/pjFf6v8MYv/1vljFv935I9Z/LfJH7P4vzN/zOK/bf6Yxf9d+WMW/3fnj1n8t8sfs/hvnz9m8d8hf8ziv2P+mMX/PfljFv/35o9Z/HfKH7P4vy9/zOK/c/6Yxf/9+WMW/w/kj1n8P5g/ZvHfJX/M4r9r/pjFf7f8MYv/h/LHLP4fzh+z+H8kf8zi/9H8MYv/x/LHLP5T8scs/rvnj1n898gfs/h/PH/M4v+J/DGL/575Yxb/T+aPWfz3yh+z+H8qf8zi/+n8MYv/3vljFv998scs/vvmj1n8P5M/ZvH/bP6Yxf9z+WMW//3yxyz+++ePWfw/nz9m8T8gf8zif2D+mMX/C/ljFv+D8scs/gfnj1n8v5g/ZvH/Uv6Yxf/L+WMW/6/kj1n8v5o/ZvE/JH/M4v+1/DGL/9fzxyz+h+aPWfwPyx+z+B+eP2bxPyJ/zOJ/ZP6Yxf+o/DGL/9H5Yxb/Y/LHLP7H5o9Z/I/LH7P4H58/ZvH/Rv6Yxf+E/DGL/4n5Yxb/k/LHLP4n549Z/E/JH7P4fzN/zOL/rfwxi/+p+WMW/9Pyxyz+p+ePWfzPyB+z+H87f8zif2b+mMX/rPwxi//Z+WMW/+/kj1n8v5s/ZvE/J3/M4n9u/pjF/7z8MYv/+fljFv8L8scs/t/LH7P4fz9/zOL/g/wxi/8P88cs/j/KH7P4/zh/zOJ/Yf6Yxf+i/DGL/0/yxyz+F+ePWfx/mj9m8b8kf8zif2n+mMX/svwxi//l+WMW/yvyxyz+V+aPWfyvyh+z+P8sf8zi//P8MYv/L/LHLP6/zB+z+F+dP2bxvyZ/zOL/q/wxi/+v88cs/tfmj1n8f5M/ZvG/Ln/M4n99/pjF/4b8MYv/b/PHLP435o9Z/G/KH7P435w/ZvH/Xf6Yxf/3+WMW/z/kj1n8b8kfs/jfmj9m8b8tf8zif3v+mMX/jvwxi/+d+WMW/z/mj1n878ofs/jfnT9m8f9T/pjF/578MYv/n/PHLP5/yR+z+P81f8zi/7f8MYv/vfljFv/78scs/vfnj1n8H8gfs/g/mD9m8Z+aP2bxfyh/zOL/cP6YxX9a/pjEf4FB/pjFfyh/zOI/Kn/M4j9b/pjFf/b8MYv/6Pwxi/8c+WMW/znzxyz+c+WPWfznzh+z+M+TP2bxnzd/zOI/X/6YxX/+/DGL/1Pyxyz+C+SPWfzH5I9Z/BfMH7P4j80fs/gvlD9m8V84f8zi/9T8MYv/0/LHLP5Pzx+z+C+SP2bxf0b+mMV/0fwxi/8z88cs/s/KH7P4L5Y/ZvF/dv6Yxf85+WMW/3H5Yxb/5+aPWfyflz9m8X9+/pjFf/H8MYv/EvljFv8X5I9Z/JfMH7P4L5U/ZvF/Yf6Yxf9F+WMW/xfnj1n8X5I/ZvFfOn/M4v/S/DGL/zL5Yxb/ZfPHLP7L5Y9Z/JfPH7P4r5A/ZvFfMX/M4v+y/DGL/0r5Yxb/lfPHLP6r5I9Z/FfNH7P4vzx/zOK/Wv6YxX/1/DGL/yvyxyz+r8wfs/i/Kn/M4j8+f8ziPyF/zOI/MX/M4r9G/pjFf838MYv/WvljFv9J+WMW/8n5Yxb/tfPHLP7r5I9Z/F+dP2bxf03+mMV/3fwxi/96+WMW//Xzxyz+r80fs/hvkD9m8X9d/pjFf8P8MYv/RvljFv+N88cs/pvkj1n8X58/ZvHfNH/M4r9Z/pjF/w35Yxb/N+aPWfzflD9m8X9z/pjF/y35Yxb/t+aPWfzflj9m8d88f8ziv0X+mMV/y/wxi//b88cs/lvlj1n8t84fs/i/I3/M4r9N/pjF/535Yxb/bfPHLP7vyh+z+L87f8ziv13+mMV/+/wxi/8O+WMW/x3zxyz+78kfs/i/N3/M4r9T/pjF/335Yxb/nfPHLP7vzx+z+H8gf8zi/8H8MYv/LvljFv9d88cs/rvlj1n8P5Q/ZvH/cP6Yxf8j+WMW/4/mj1n8P5Y/ZvGfkj9m8d89//8f+/TQBIiBAGF0Zz27wcS2bdu2bdtOqmLbtm3btm3bvuTYv2D6vVPfv+qopf/e+kct/ffRP2rpv6/+UUv//fSPWvrvr3/U0v8A/aOW/gfqH7X0P0j/qKX/wfpHLf0P0T9q6X+o/lFL/8P0j1r6H65/1NL/CP2jlv5H6h+19D9K/6il/9H6Ry39j9E/aul/rP5RS//j9I9a+h+vf9TS/wT9o5b+J+oftfQ/Sf+opf/J+kct/U/RP2rpf6r+UUv/0/SPWvqfrn/U0v8M/aOW/mfqH7X0P0v/qKX/2fpHLf3P0T9q6X+u/lFL//P0j1r6n69/1NL/Av2jlv4X6h+19L9I/6il/8X6Ry39L9E/aul/qf5RS//L9I9a+l+uf9TS/wr9o5b+V+oftfS/Sv+opf/V+kct/a/RP2rpf63+UUv/6/SPWvpfr3/U0v8G/aOW/jfqH7X0v0n/qKX/zfpHLf1v0T9q6X+r/lFL/9v0j1r6365/1NL/Dv2jlv536h+19L9L/6il/936Ry3979E/aul/r/5RS//79I9a+t+vf9TS/wH9o5b+D+oftfR/SP+opf/D+kct/R/RP2rp/6j+UUv/x/SPWvo/rn/U0v8J/aOW/k/qH7X0f0r/qKX/0/pHLf2f0T9q6f+s/lFL/+f0j1r6P69/1NL/Bf2jlv4v6h+19H9J/6il/8v6Ry39X9E/aun/qv5RS//X9I9a+r+uf9TS/w39o5b+b+oftfR/S/+opf/b+kct/d/RP2rp/67+UUv/9/SPWvq/r3/U0v8D/aOW/h/qH7X0/0j/qKX/x/pHLf0/0T9q6f+p/lFL/8/0j1r6f65/1NL/C/2jlv5f6h+19P9K/6il/9f6Ry39v9E/aun/rf5RS//v9I9a+n+vf9TS/wf9o5b+P+oftfT/Sf+opf/P+kct/X/RP2rp/6v+UUv/3/SPWvr/rn/U0v8P/aOS/oP+pn/U0n+A/lFL/7/rH7X0/4f+UUv/f+oftfT/l/5RS/9/6x+19P+P/lFL///qH7X0H6h/1NL/f/pHLf3/r3/U0n8I/aOW/kPqH7X0H0r/qKX/0PpHLf0H6R+19B9G/6il/7D6Ry39h9M/auk/vP5RS/8R9I9a+o+of9TSfyT9o5b+I+sftfQfRf+opf+o+kct/UfTP2rpP7r+UUv/MfSPWvqPqX/U0n8s/aOW/mPrH7X0H0f/qKX/uPpHLf3H0z9q6T++/lFL/wn0j1r6T6h/1NJ/Iv2jlv4T6x+19J9E/6il/6T6Ry39J9M/auk/uf5RS/8p9I9a+k+pf9TSfyr9o5b+U+sftfSfRv+opf+0+kct/afTP2rpP73+UUv/GfSPWvrPqH/U0n8m/aOW/jPrH7X0n0X/qKX/rPpHLf1n0z9q6T+7/lFL/zn0j1r6z6l/1NJ/Lv2jlv5z6x+19J9H/6il/7z6Ry3959M/auk/v/5RS/8F9I9a+i+of9TSfyH9o5b+C+sftfRfRP+opf+i+kct/RfTP2rpv7j+UUv/JfSPWvovqX/U0n8p/aOW/kvrH7X0X0b/qKX/svpHLf2X0z9q6b+8/lFL/xX0j1r6r6h/1NJ/Jf2jlv4r6x+19F9F/6il/6r6Ry39V9M/aum/uv5RS/819I9a+q+pf9TSfy39o5b+a+sftfRfR/+opf+6+kct/dfTP2rpv77+UUv/DfSPWvpvqH/U0n8j/aOW/hvrH7X030T/qKX/pvpHLf030z8aMPCvMZj331z/qOX/W+gftfTfUv+opf9W+kct/bfWP2rpv43+UUv/bfWPWvpvp3/U0n97/aOW/jvoH7X031H/qKX/TvpHLf131j9q6b+L/lFL/131j1r676Z/1NJ/d/2jlv576B+19N9T/6il/176R4NdfwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPiTfbuNrbMs/Dh+d1vH2J9/MuKCy9BkkwuFRJjtHjJeEDYZ2+qgG89jgKNbu7HRbrPrsCvgHl5MIoQHSSZZokTZMpQwExqJgWAFEQ26qIkGHwBRiKJxIgTdEhdrTnta2mPXeK56XYvy+bzoOfd99ru3NfnuvhcYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP+9GhoXHhlfM+zU+KEHHzzc0vc65+jKmw/8tufCgdfyx8tGuOS4oQe9vb29c56bvaN8eEpRFKWfbWf5eFLluHT9nfVf6Ow/Cgt6XlpyfMrPG48cWHP6I3XdR++v7TtbW9y0bkNry8fGFUW4uLboLB3U1RRFWFxb3Fc6qC8dLKktHikdzO47OLX4dung/LWbW5tLJ5ZGf8/gf0VD485i/LBii2F/Ggztf2f9t+4ceB3lkgNXm1CU+7+i6/tvVXw24AT9D1w/LKzsv+rfIHBC1fX/woKB11Eu+S/3/8lPrXplpM9O3P/A9cPH9Q/pjPD8P6zRyuf+iuf/GSNccnB/VU3X8VL/l9727MzyqQn/zvP/u9cPF1f2P27Y83/pOX7RwPP/KUURLhnjtwPeUxoadx0Z7f4/ev8Tpldsaob2f0b75v2l/h9f8r0nyqdqq+x/0Sj3/3FLK36tQHUaGr/cW3H/r6L/4iMjXHKw/7ef+PXDpf4f+/0DZw75rJr+L6nsf1ZH25ZZW7d3nbehrWl9y/qWTXWz58+ZV18374K5s/oeCfq/jvG7Au8NY7v/F5MrNjVF0TK4v6b7wNOl/uc++OCc8qlJVfa/eNT7/wz3fxjRh8YVEycWnU0dHe11/V8HDuv7v/b/sBH6r+Lv/2edU/5hteXXmqKYNri/68y7V5T6f+fQs7vLpyZW2f+SUftfMPjzAhHGeP9vrtgM6//goZf6nv+X3XvwjPKpav/+v3TU/l91/4exaGis+B9+/sNK/e8qLovsNDT473+QTo7+H3vnhp64dfiE/iGdHP3/7nNHz41bh2X6h3Ry9D9h4wPPx63DpfqHdHL0v3zq/BVx63CZ/iGdHP2vffXcP8etQ6P+IZ0c/Z/zpd2dceuwXP+QTo7+H2qfsy1uHVboH9LJ0f9PT3votbh1uFz/kE6O/o8du+fGuHW4Qv+QTo7+u/ec/YO4dbhS/5BOjv4vX7cwxK3DVfqHdHL0P33aHx+PW4er9Q/p5Oh/3p/+flrcOlyjf0gnR/93fH7Fvrh1uFb/kE6O/sdf/8qLceuwUv+QTo7+l569bWHcOlynf0gnR//NP2nujVuHVfqHdHL0P+vrP9oQtw7X6x/SydH/4eWP7olbhxv0D+nk6H9PXTElbh1u1D+kk6P/r3339ENx6/BJ/UM6Ofr/zVNPzo9bh9X6h3Ry9P/cB27/Rtw63KR/SCdH//euefGsuHVo0j+kk6P/h/c+/8W4dVijf0gnR/9vvNH2f3HrsFb/kE6O/idPOvX1uHVo1j+kk6P/hbd+pT1uHVr0D+nk6L9td/cP49Zhnf4hnRz9f/j4tFVx67Be/5BOjv5Xzt37/rh1uFn/kE6O/t+37MJdceuwQf+QTo7+L+r56EVx67BR/5BOjv47nvnsV+PW4Rb9Qzo5+t8787XFcevQqn9IJ0f/L69e+uO4dWjTP6STo/+3Hr1uU9w6bNI/pJOj/yd/9vaxuHXYrH9IJ0f//3/Bor/GrcMW/UM6OfpfvOTNtXHr8Cn9Qzo5+t/Y/Y+X49ahXf+QTo7+Zx6+elncOmzVP6STo//vnFe3P24dOvQP6eTo/84r99XHrcM2/UM6Ofrff/Cuu+PW4Vb9Qzo5+n/zFzOmx63Dp/UP6eTo//4ph66NW4dO/UM6Ofr/5abaZ+LWYbv+IZ0c/f9t39QdcevQpX9IJ0f/T7/e84e4dbhN/5BOjv5XT/jVxLh1uF3/kE6O/qd2bbkvbh3u0D+kk6P/+fc0nR+3Dp/RP6STo/+tf3nhm3HrsEP/kM7W7V23NLW2trR744033gy+Odl/MgGpvRv9yf6VAAAAAAAAAAAAAAAAJ5LjnxOd7N8jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwD/ZgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwg4cCwAAAAAI87cOoncDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgKwAA//8ZLeDr")
ioctl$FS_IOC_GETFSMAP(r0, 0xc0385868, &(0x7f0000000180)=ANY=[])

1.038495135s ago: executing program 4 (id=2956):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)={0x3})

972.909036ms ago: executing program 4 (id=2957):
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x3, @multicast, 'lo\x00'}}, 0x1e)
r1 = socket$netlink(0x10, 0x3, 0x0)
writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)

971.831485ms ago: executing program 4 (id=2958):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)={0x22c, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_FWMARK={0x8}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x1fc, 0x8, 0x0, 0x1, [{0x108, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @loopback}}, @WGPEER_A_ALLOWEDIPS={0xc4, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x32}}, {0x5}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x81}}, {0x5, 0x3, 0x3}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}]}, {0x5c, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "7e0c9939d757d796a1e7bc26b9664185fddbe74f5b51f2899e475ad95bcf6368"}]}, {0x94, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x6}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x453, @loopback}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}]}]}]}, 0x22c}, 0x1, 0x0, 0x0, 0xc811}, 0x40000)

888.136846ms ago: executing program 4 (id=2959):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x6, &(0x7f0000000140)={0x10, {{0x29, 0x0, 0x5000000, @local, 0x6}}}, 0xd8)

887.894651ms ago: executing program 4 (id=2960):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000010c0)=ANY=[@ANYBLOB="b702000001000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a83116752ddb11cfafffa3837841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc40700a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e30df414b315f651c8412392191fa83ee830548f11e1036a8debd64c490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cd17b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0544c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afd80e1700000000000000000000000000000832b99df00000000000000005205000000dc1c56d19f35d367632952a93466ae595c6a8cb5ee3a7c9ef89edbdf42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf80300cd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9874620e322d9348900000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2bca0f4557869ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a35df8574eb49e972f7976eafee43a6c17009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981179186e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54aba40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be206af7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c708e444a79d7ce37f9cf2a434b9048ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d6356e4450d043ed20d313cd56a56d2e4cdf26f19af9a41695a58a9b6b45af1ca939b18d7b57791b99cfc6ec2a0848c29fea4eb8b82395a38e8aca5ab4bfc2ad8acf2e51b766f8ecd16194ad41ec097082f7fa32179ef99dafa6c2aa206a25ddc33e6f0a09169eeff428c71f54e1dfcfcd7cfc8f6e169f11c47d5040000000000000000000000000000074f21ec2b57bb2daf8fab7cd564d1e84c93af254ab029e6cd168007b9a10a6664d9d264aceede0183b2306c440b2c81c9e120ece36a61b0b015ea6716decf8783e0845fa975b6e5f7f4dd4abe2a95e764ae13288d4439ec29066d9bc9f26212615423c3d8d58901a6b51a93c8aacb19c416d5260662031a295f2b33295a60db77b5f082bdc48cd06c6cd01e7a40e456d829d277c77c2ca9159c82a391a24d5f6193228d93e2fd99cd0cdeefa9b7c5ea02c5454ef4c6631e6766ffcba3cce4ab13c69622675683ab1f05edbb09641c9dba535b319a21a00287645449a61eefc00a2a8f6955d6573023325bc00ca0facb69d67c8b95e29b36c4a5f84a959262c382de9a411be7b9b500ca329e5eefcd323490eed4bcbcba4764618bf51a08498a64b0e19c00e33480b27c2b12c326e6bf10234f883be00900009ad2fbdf6bae"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x18000000000002a0, 0x10, 0x0, &(0x7f0000000000)="b9158edfaa57fef007fd65580000ffff", 0x0, 0x1dc, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

824.594081ms ago: executing program 4 (id=2961):
r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xff, 0x2, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0x3}}}}}]}}]}}, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000380)={0x20, 0x17}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$EVIOCGMASK(r1, 0x60b, 0x0)

741.292162ms ago: executing program 3 (id=2962):
syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0xff, 0x20, 0x0, [{{0x9, 0x4, 0x0, 0x81, 0x2, 0x2, 0x6, 0x0, 0x73, {{0x5}, {0x5, 0x24, 0x0, 0xef87}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x7, 0x6, 0xc}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x6, 0x9, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x3, 0x64, 0x7f}}}}}]}}]}}, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x24, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8)

302.19471ms ago: executing program 0 (id=2972):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001a00)=ANY=[@ANYBLOB="e4000000100001002abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0008000000000400140003006e657464657673696d30000000000000080004000d040000a8001680840001800c000300030000000900000014000a000b0000000000000003000000000000000c0007000600000003000000280001"], 0xe4}}, 0x800)

226.306056ms ago: executing program 0 (id=2973):
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
keyctl$join(0x1, &(0x7f0000000240)={'syz', 0x3})

226.134758ms ago: executing program 0 (id=2974):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x70, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x6}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_HELP={0xc, 0x5, 0x0, 0x1, {0x8, 0x1, 'RAS\x00'}}]}, 0x70}}, 0x0)

120.140962ms ago: executing program 0 (id=2975):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x1c, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x17}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

65.399842ms ago: executing program 0 (id=2976):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xfffffc1e}], 0x3, &(0x7f0000000380)}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)

0s ago: executing program 0 (id=2977):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8)
bind$vsock_stream(r1, &(0x7f0000000940)={0x28, 0x0, 0x0, @local}, 0x10)
close(0x3)
listen(r1, 0x0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10)
writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1)
sendmmsg$inet6(r0, &(0x7f0000000bc0)=[{{&(0x7f00000000c0)={0xa, 0x4e20, 0x1, @local, 0x7}, 0x1c, 0x0}}], 0x1, 0x24040040)

kernel console output (not intermixed with test programs):

T9877] 9pnet: p9_errstr2errno: server reported unknown error 1844674
[  190.574992][ T9868] loop1: detected capacity change from 0 to 32768
[  190.606735][ T5884] usb 4-1: config 0 descriptor??
[  190.639916][ T9866] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  190.888973][ T9863] read_mapping_page failed!
[  190.890843][ T9863] ERROR: (device loop1): txCommit: 
[  190.890843][ T9863] 
[  191.224549][ T5884] elan 0003:04F3:0755.000B: unknown main item tag 0x0
[  191.232954][ T5884] elan 0003:04F3:0755.000B: item fetching failed at offset 3/5
[  191.240854][ T5884] elan 0003:04F3:0755.000B: Hid Parse failed
[  191.243493][ T5884] elan 0003:04F3:0755.000B: probe with driver elan failed with error -22
[  191.462837][ T5884] usb 4-1: USB disconnect, device number 10
[  192.253931][ T9900] loop3: detected capacity change from 0 to 4096
[  192.262663][ T9900] ntfs3(loop3): ino=0, mi_enum_attr
[  192.275261][ T9900] ntfs3(loop3): ino=0, mi_enum_attr
[  192.286123][ T9900] ntfs3(loop3): Failed to load $MFT (-22).
[  192.359606][ T9907] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1487'.
[  192.777606][ T5884] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  192.782622][ T9923] loop1: detected capacity change from 0 to 32768
[  192.794925][ T9923] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1495 (9923)
[  192.829128][ T9923] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  192.841913][ T9923] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm
[  192.845335][ T9923] BTRFS info (device loop1): disk space caching is enabled
[  192.848250][ T9923] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  192.929309][ T9923] BTRFS info (device loop1): rebuilding free space tree
[  192.947186][ T5884] usb 4-1: config 0 has an invalid interface number: 182 but max is 1
[  192.950909][ T5884] usb 4-1: config 0 has no interface number 1
[  192.953432][ T5884] usb 4-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=9c.af
[  192.957514][ T9923] BTRFS info (device loop1): disabling free space tree
[  192.965568][ T9923] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  192.971007][ T5884] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  192.972607][ T9923] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  192.975865][ T5884] usb 4-1: config 0 descriptor??
[  193.081399][ T5843] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  193.115979][ T9957] capability: warning: `syz.0.1505' uses 32-bit capabilities (legacy support in use)
[  193.214115][ T5900] usb 4-1: USB disconnect, device number 11
[  193.446002][ T9977] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  193.913180][ T9986] loop3: detected capacity change from 0 to 47
[  194.473131][T10013] sctp: [Deprecated]: syz.0.1530 (pid 10013) Use of int in max_burst socket option.
[  194.473131][T10013] Use struct sctp_assoc_value instead
[  194.858119][T10033] loop3: detected capacity change from 0 to 1024
[  194.893747][T10033] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  195.081762][T10035] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8)
[  195.084820][T10035] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  195.091104][T10035] vhci_hcd vhci_hcd.0: Device attached
[  195.097776][T10035] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(10)
[  195.100599][T10035] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  195.103899][T10035] vhci_hcd vhci_hcd.0: Device attached
[  195.108867][T10035] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(12)
[  195.111698][T10035] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  195.115080][T10035] vhci_hcd vhci_hcd.0: Device attached
[  195.119391][T10035] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  195.127380][T10035] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(16)
[  195.130108][T10035] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  195.133571][T10035] vhci_hcd vhci_hcd.0: Device attached
[  195.138724][T10035] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(18)
[  195.141454][T10035] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  195.146125][T10035] vhci_hcd vhci_hcd.0: Device attached
[  195.154649][T10035] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  195.167431][T10035] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  195.179657][T10035] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  195.193687][T10035] vhci_hcd vhci_hcd.0: port 0 already used
[  195.209941][T10044] vhci_hcd: connection closed
[  195.212616][T10040] vhci_hcd: connection closed
[  195.212660][T10042] vhci_hcd: connection closed
[  195.217359][ T5859] vhci_hcd: stop threads
[  195.220933][ T5859] vhci_hcd: release socket
[  195.222941][T10036] vhci_hcd: connection closed
[  195.223016][T10038] vhci_hcd: connection closed
[  195.224742][ T5859] vhci_hcd: disconnect device
[  195.228468][ T5859] vhci_hcd: stop threads
[  195.230076][ T5859] vhci_hcd: release socket
[  195.232965][ T5859] vhci_hcd: disconnect device
[  195.237284][ T5859] vhci_hcd: stop threads
[  195.239291][ T5859] vhci_hcd: release socket
[  195.241906][ T5859] vhci_hcd: disconnect device
[  195.244255][ T5859] vhci_hcd: stop threads
[  195.246193][ T5859] vhci_hcd: release socket
[  195.248806][ T5859] vhci_hcd: disconnect device
[  195.251116][ T5859] vhci_hcd: stop threads
[  195.253043][ T5859] vhci_hcd: release socket
[  195.255114][ T5859] vhci_hcd: disconnect device
[  195.278569][ T5884] vhci_hcd: vhci_device speed not set
[  195.477935][T10049] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1541'.
[  195.859493][T10071] loop1: detected capacity change from 0 to 2048
[  195.883124][T10075] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  195.906825][T10071] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  195.921161][T10071] Remounting filesystem read-only
[  195.934127][ T5843] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer
[  195.987445][T10080] loop1: detected capacity change from 0 to 2048
[  195.997014][T10080] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=26504, location=26504
[  196.009395][T10080] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  197.595735][T10113] netlink: 'syz.0.1570': attribute type 1 has an invalid length.
[  198.313785][T10132] loop3: detected capacity change from 0 to 64
[  198.324211][T10132] BFS-fs: bfs_fill_super(): Inode 0x00000002 corrupted on loop3
[  198.331268][T10130] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  198.334425][T10130] macsec1: entered promiscuous mode
[  198.341017][T10130] netdevsim netdevsim0 netdevsim0: left promiscuous mode
[  198.414639][   T33] kauditd_printk_skb: 16 callbacks suppressed
[  198.414653][   T33] audit: type=1804 audit(1755486984.955:75): pid=10134 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1578" name="file0" dev="ramfs" ino=20001 res=1 errno=0
[  198.545346][   T33] audit: type=1804 audit(1755486985.076:76): pid=10134 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1578" name="file0" dev="ramfs" ino=20001 res=1 errno=0
[  198.627336][T10139] loop1: detected capacity change from 0 to 1024
[  198.682931][T10139] No source specified
[  198.735099][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[  198.738819][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[  198.823562][T10143] netlink: 9896 bytes leftover after parsing attributes in process `syz.3.1581'.
[  198.989970][   T64] hfsplus: b-tree write err: -5, ino 4
[  199.044067][T10147] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1582'.
[  199.179489][T10149] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1583'.
[  199.388229][T10151] netlink: 116 bytes leftover after parsing attributes in process `syz.3.1584'.
[  199.391891][T10151] netlink: 116 bytes leftover after parsing attributes in process `syz.3.1584'.
[  199.625512][T10157] loop3: detected capacity change from 0 to 32768
[  199.660722][T10157] ERROR: (device loop3): jfs_readdir: JFS:Dtree error: ino = 2, bn=44, index = 4
[  199.660722][T10157] 
[  199.668483][T10157] ERROR: (device loop3): remounting filesystem as read-only
[  199.676309][T10157] ERROR: (device loop3): jfs_readdir: JFS:Dtree error: ino = 2, bn=44, index = 4
[  199.676309][T10157] 
[  200.769038][T10187] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1601'.
[  201.196439][T10207] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it.
[  201.200073][T10207] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off.
[  201.209174][T10207] overlayfs: missing 'lowerdir'
[  202.503707][T10232] loop3: detected capacity change from 0 to 32768
[  202.535650][T10232] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names,read_only
[  202.535661][T10232]   allowing incompatible features above 0.0: (unknown version)
[  202.535666][T10232]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  202.551580][T10232] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0
[  202.558016][T10232] bcachefs (loop3): invalid journal entry, version=1.7: mi_btree_bitmap type=clock in superblock: bad rw, shutting down
[  202.558051][T10232]   error not marked as autofix and not in fsck
[  202.558059][T10232]   run fsck, and forward to devs so error can be marked for self-healing
[  202.558067][T10232]   emergency read only at seq 0
[  202.572294][T10232] bcachefs (loop3): error in recovery: fsck_errors_not_fixed
[  202.575392][T10232] bcachefs (loop3): bch2_fs_start(): error starting filesystem fsck_errors_not_fixed
[  202.578704][T10232] bcachefs (loop3): shutting down
[  202.592005][T10232] bcachefs (loop3): shutdown complete
[  202.600325][T10234] loop1: detected capacity change from 0 to 8
[  202.688995][T10239] loop1: detected capacity change from 0 to 256
[  202.696544][T10239] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011ded, chksum : 0x9858084d, utbl_chksum : 0xe619d30d)
[  203.201311][T10232] bcachefs: bch2_fs_get_tree() error: fsck_errors_not_fixed
[  203.266812][ T5855] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  203.270294][ T5855] Bluetooth: hci1: Injecting HCI hardware error event
[  203.277841][ T5848] Bluetooth: hci1: hardware error 0x00
[  203.351357][T10252] loop3: detected capacity change from 0 to 128
[  203.365676][T10252] vxfs: WRONG superblock magic 7b3185b5 at 1
[  203.368605][T10252] vxfs: unsupported VxFS version (-1232326277)
[  203.413291][T10254] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1630'.
[  203.497428][T10260] netlink: 'syz.3.1633': attribute type 1 has an invalid length.
[  203.559422][T10264] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1635'.
[  204.286758][T10269] loop1: detected capacity change from 0 to 32768
[  204.420358][T10269] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names
[  204.420439][T10269]   allowing incompatible features above 0.0: (unknown version)
[  204.420447][T10269]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  204.435016][T10269] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0
[  204.437957][T10269] bcachefs (loop1): initializing new filesystem
[  204.457132][T10269] bcachefs (loop1): going read-write
[  204.474272][T10269] bcachefs (loop1): marking superblocks
[  204.523282][T10269] bcachefs (loop1): initializing freespace
[  204.544594][T10269] bcachefs (loop1): done initializing freespace
[  204.559335][T10269] bcachefs (loop1): reading snapshots table
[  204.561760][T10269] bcachefs (loop1): reading snapshots done
[  204.592450][T10269] bcachefs (loop1): done starting filesystem
[  204.848942][   T33] audit: type=1800 audit(1755486990.979:77): pid=10269 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1637" name="file1" dev="loop1" ino=4098 res=0 errno=0
[  204.881346][T10281] o2cb: This node has not been configured.
[  204.883562][T10281] o2cb: Cluster check failed. Fix errors before retrying.
[  204.885909][T10281] (syz.0.1638,10281,1):user_dlm_register:674 ERROR: status = -22
[  204.888458][T10281] (syz.0.1638,10281,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0"
[  204.933937][ T5843] bcachefs (loop1): shutting down
[  204.935658][ T5843] bcachefs (loop1): going read-only
[  204.937389][ T5843] bcachefs (loop1): finished waiting for writes to stop
[  204.951730][ T5843] bcachefs (loop1): flushing journal and stopping allocators, journal seq 3
[  204.999187][ T5843] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 4
[  205.003459][ T5843] bcachefs (loop1): clean shutdown complete, journal seq 5
[  205.010325][ T5843] bcachefs (loop1): marking filesystem clean
[  205.032350][ T5843] bcachefs (loop1): shutdown complete
[  205.102756][T10303] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  205.490773][T10321] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1658'.
[  205.500170][ T5848] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  206.352032][T10341] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1667'.
[  206.356135][T10341] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  206.358717][T10341] batman_adv: batadv0: Removing interface: batadv_slave_0
[  206.362894][T10341] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  206.368672][T10341] batman_adv: batadv0: Removing interface: batadv_slave_1
[  206.633864][T10337] loop1: detected capacity change from 0 to 32768
[  206.678833][T10337] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  206.730822][T10337] XFS (loop1): Ending clean mount
[  206.775249][ T5843] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  206.831331][T10360] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1673'.
[  206.930981][T10368] netlink: 'syz.0.1676': attribute type 10 has an invalid length.
[  207.008367][ T5900] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  207.027698][T10368] team0 (unregistering): Port device team_slave_1 removed
[  207.109674][T10370] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1677'.
[  207.168085][ T5900] usb 4-1: Using ep0 maxpacket: 8
[  207.171581][ T5900] usb 4-1: config 0 has an invalid interface number: 31 but max is 0
[  207.174245][ T5900] usb 4-1: config 0 has no interface number 0
[  207.182796][ T5900] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  207.185743][ T5900] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  207.196658][ T5900] usb 4-1: Product: syz
[  207.198271][ T5900] usb 4-1: Manufacturer: syz
[  207.201289][ T5900] usb 4-1: SerialNumber: syz
[  207.206715][ T5900] usb 4-1: config 0 descriptor??
[  207.454240][ T5900] uvcvideo 4-1:0.31: probe with driver uvcvideo failed with error -22
[  207.463277][ T5900] usb 4-1: USB disconnect, device number 12
[  207.769603][T10387] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  207.968401][T10364] comedi comedi2: reset error (fatal)
[  208.644027][T10416] loop3: detected capacity change from 0 to 32768
[  209.083812][   T33] audit: type=1326 audit(1755486994.936:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10425 comm="syz.3.1702" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f729298ebe9 code=0x7ffc0000
[  209.092021][   T33] audit: type=1326 audit(1755486994.936:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10425 comm="syz.3.1702" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f729298ebe9 code=0x7ffc0000
[  209.099658][   T33] audit: type=1326 audit(1755486994.945:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10425 comm="syz.3.1702" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f729298ebe9 code=0x7ffc0000
[  209.108361][   T33] audit: type=1326 audit(1755486994.945:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10425 comm="syz.3.1702" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f729298ebe9 code=0x7ffc0000
[  209.117303][   T33] audit: type=1326 audit(1755486994.945:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10425 comm="syz.3.1702" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f729298ebe9 code=0x7ffc0000
[  209.124857][   T33] audit: type=1326 audit(1755486994.945:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10425 comm="syz.3.1702" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f729298ebe9 code=0x7ffc0000
[  209.134011][   T33] audit: type=1326 audit(1755486994.945:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10425 comm="syz.3.1702" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f729298ebe9 code=0x7ffc0000
[  209.141521][   T33] audit: type=1326 audit(1755486994.945:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10425 comm="syz.3.1702" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f729298ebe9 code=0x7ffc0000
[  209.149088][   T33] audit: type=1326 audit(1755486994.945:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10425 comm="syz.3.1702" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f729298ebe9 code=0x7ffc0000
[  209.399571][T10428] loop3: detected capacity change from 0 to 8192
[  209.569995][T10435] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1705'.
[  209.588307][T10435] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1705'.
[  210.035352][T10448] loop1: detected capacity change from 0 to 512
[  210.041587][T10448] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  210.059630][T10448] EXT4-fs error (device loop1): xattr_find_entry:333: inode #15: comm syz.1.1711: corrupted xattr entries
[  210.077976][T10448] EXT4-fs (loop1): 1 truncate cleaned up
[  210.080956][T10448] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  210.097973][T10448] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #15: comm syz.1.1711: corrupted in-inode xattr: e_name out of bounds
[  210.118336][ T5843] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  210.280753][T10458] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[  210.491186][ T5884] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  210.660755][ T5884] usb 4-1: Using ep0 maxpacket: 32
[  210.669343][ T5884] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[  210.673096][ T5884] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  210.683320][ T5884] usb 4-1: Product: syz
[  210.685396][ T5884] usb 4-1: Manufacturer: syz
[  210.686952][ T5884] usb 4-1: SerialNumber: syz
[  210.690026][ T5884] usb 4-1: config 0 descriptor??
[  210.696629][ T5884] gspca_main: ov534_9-2.14.0 probing 05a9:1550
[  210.716286][T10478] loop1: detected capacity change from 0 to 32768
[  210.770783][T10478] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  210.799844][T10478] XFS (loop1): Ending clean mount
[  210.807128][T10478] XFS (loop1): Quotacheck needed: Please wait.
[  210.839512][T10478] XFS (loop1): Quotacheck: Done.
[  210.884605][ T5843] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  211.035366][T10502] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1730'.
[  211.075438][T10504] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1731'.
[  211.178282][T10510] syzkaller1: entered promiscuous mode
[  211.180642][T10510] syzkaller1: entered allmulticast mode
[  211.548918][T10513] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  212.001676][ T5884] gspca_ov534_9: reg_w failed -71
[  212.307579][T10522] loop1: detected capacity change from 0 to 2048
[  212.309549][ T5884] gspca_ov534_9: Unknown sensor 0000
[  212.309775][ T5884] ov534_9 4-1:0.0: probe with driver ov534_9 failed with error -22
[  212.320480][ T5850] udevd[5850]: incorrect nilfs2 checksum on /dev/loop1
[  212.324011][ T5884] usb 4-1: USB disconnect, device number 13
[  212.327316][T10522] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[  212.335734][T10522] NILFS (loop1): mounting unchecked fs
[  212.337634][T10522] NILFS (loop1): recovery required for readonly filesystem
[  212.342226][T10522] NILFS (loop1): write access will be enabled during recovery
[  212.348705][ T5850] udevd[5850]: incorrect nilfs2 checksum on /dev/loop1
[  212.354790][T10522] NILFS (loop1): norecovery option specified, skipping roll-forward recovery
[  212.363561][T10522] NILFS (loop1): couldn't remount because the filesystem is in an incomplete recovery state
[  212.414125][T10524] loop1: detected capacity change from 0 to 512
[  212.425429][T10524] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  212.442031][T10524] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  212.447324][T10524] ext4 filesystem being mounted at /506/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  212.488061][ T5843] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  212.779704][T10542] loop3: detected capacity change from 0 to 4096
[  212.785378][T10542] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512).
[  212.789765][T10542] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  212.794902][T10542] ntfs3(loop3): ino=0, mi_enum_attr
[  212.797396][T10542] ntfs3(loop3): Failed to load $MFT.
[  213.909203][T10558] netlink: 356 bytes leftover after parsing attributes in process `syz.3.1755'.
[  213.948732][T10560] netlink: 'syz.3.1756': attribute type 10 has an invalid length.
[  214.017939][T10564] input: syz0 as /devices/virtual/input/input8
[  214.651168][T10552] loop1: detected capacity change from 0 to 262144
[  214.654184][T10552] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1752 (10552)
[  214.664478][T10552] BTRFS info (device loop1): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53
[  214.667898][T10552] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm
[  214.671061][T10552] BTRFS info (device loop1): using free-space-tree
[  214.740542][ T5297] udevd[5297]: worker [7521] terminated by signal 33 (Unknown signal 33)
[  214.744073][ T5297] udevd[5297]: worker [7521] failed while handling '/devices/virtual/block/loop1'
[  214.744254][ T5843] BTRFS info (device loop1): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53
[  215.229381][T10586] loop1: detected capacity change from 0 to 32768
[  215.661488][T10586] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  215.661502][T10586]   allowing incompatible features above 0.0: (unknown version)
[  215.661507][T10586]   features: 
[  215.701583][T10586] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0
[  215.704310][T10586] bcachefs (loop1): initializing new filesystem
[  215.737955][T10586] bcachefs (loop1): going read-write
[  215.757249][T10586] bcachefs (loop1): marking superblocks
[  215.784921][T10586] bcachefs (loop1): initializing freespace
[  215.790189][T10586] bcachefs (loop1): done initializing freespace
[  215.797167][T10586] bcachefs (loop1): reading snapshots table
[  215.799334][T10586] bcachefs (loop1): reading snapshots done
[  215.820415][T10586] bcachefs (loop1): done starting filesystem
[  216.001853][ T5843] bcachefs (loop1): shutting down
[  216.007848][ T5843] bcachefs (loop1): going read-only
[  216.010072][ T5843] bcachefs (loop1): finished waiting for writes to stop
[  216.021559][ T5843] bcachefs (loop1): flushing journal and stopping allocators, journal seq 4
[  216.051264][ T5843] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 4
[  216.055712][ T5843] bcachefs (loop1): clean shutdown complete, journal seq 5
[  216.059011][ T5843] bcachefs (loop1): marking filesystem clean
[  216.106507][ T5843] bcachefs (loop1): shutdown complete
[  216.268319][T10610] bridge0: port 2(bridge_slave_1) entered disabled state
[  216.273306][T10610] bridge0: port 1(bridge_slave_0) entered disabled state
[  216.301273][ T5297] udevd[5297]: worker [5850] terminated by signal 33 (Unknown signal 33)
[  216.304615][ T5297] udevd[5297]: worker [5850] failed while handling '/devices/virtual/block/loop1'
[  216.416993][T10614] warning: `syz.3.1769' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  216.421873][ T5884] syz1: Port: 1 Link DOWN
[  216.421896][ T5914] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  216.428742][ T5914] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  216.432050][ T5914] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  216.435750][ T5914] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  216.462069][T10616] loop3: detected capacity change from 0 to 512
[  216.464991][T10616] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  216.490143][T10616] EXT4-fs (loop3): 1 truncate cleaned up
[  216.493278][T10616] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  217.465751][ T7514] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  217.661600][T10629] loop3: detected capacity change from 0 to 40427
[  217.665049][T10629] F2FS-fs (loop3): build fault injection rate: 14
[  217.667238][T10629] F2FS-fs (loop3): build fault injection type: 0x3bfe8c
[  217.709438][T10629] F2FS-fs (loop3): invalid crc value
[  217.720573][    C1] F2FS-fs (loop3): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  217.728311][    C1] F2FS-fs (loop3): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  217.760421][T10629] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  217.763783][T10629] F2FS-fs (loop3): inject page alloc in f2fs_grab_cache_folio of __get_meta_folio+0x157/0x4f0
[  217.769464][T10629] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  217.805417][T10629] F2FS-fs (loop3): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x1d9/0xa40
[  217.815224][T10629] F2FS-fs (loop3): inject page alloc in f2fs_grab_cache_folio of f2fs_convert_inline_inode+0x6bd/0x880
[  217.834892][ T7514] syz-executor: attempt to access beyond end of device
[  217.834892][ T7514] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  217.854008][ T7514] CPU: 0 UID: 0 PID: 7514 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  217.854028][ T7514] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  217.854035][ T7514] Call Trace:
[  217.854039][ T7514]  <TASK>
[  217.854045][ T7514]  dump_stack_lvl+0x189/0x250
[  217.854067][ T7514]  ? __pfx_dump_stack_lvl+0x10/0x10
[  217.854080][ T7514]  ? __pfx_queue_work_on+0x10/0x10
[  217.854115][ T7514]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  217.854131][ T7514]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  217.854153][ T7514]  f2fs_handle_critical_error+0x37c/0x540
[  217.854176][ T7514]  f2fs_write_end_io+0x886/0xb60
[  217.854205][ T7514]  __submit_merged_bio+0x27a/0x6a0
[  217.854226][ T7514]  __submit_merged_write_cond+0x255/0x530
[  217.854247][ T7514]  f2fs_write_data_pages+0x261d/0x3000
[  217.854264][ T7514]  ? __lock_acquire+0xab9/0xd20
[  217.854302][ T7514]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  217.854349][ T7514]  ? __mod_zone_page_state+0xd7/0x140
[  217.854374][ T7514]  ? folios_put_refs+0x560/0x640
[  217.854396][ T7514]  ? __pfx_folios_put_refs+0x10/0x10
[  217.854411][ T7514]  ? rcu_is_watching+0x15/0xb0
[  217.854429][ T7514]  ? __lock_acquire+0xab9/0xd20
[  217.854457][ T7514]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  217.854476][ T7514]  do_writepages+0x32e/0x550
[  217.854499][ T7514]  ? do_raw_spin_unlock+0x4d/0x240
[  217.854515][ T7514]  filemap_fdatawrite+0x199/0x240
[  217.854531][ T7514]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  217.854579][ T7514]  ? do_raw_spin_unlock+0x4d/0x240
[  217.854596][ T7514]  f2fs_sync_dirty_inodes+0x31f/0x830
[  217.854619][ T7514]  f2fs_write_checkpoint+0x95a/0x1df0
[  217.854649][ T7514]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  217.854692][ T7514]  ? kill_f2fs_super+0x298/0x6c0
[  217.854709][ T7514]  kill_f2fs_super+0x2c3/0x6c0
[  217.854726][ T7514]  ? __pfx_kill_f2fs_super+0x10/0x10
[  217.854736][ T7514]  ? radix_tree_delete_item+0x2b6/0x400
[  217.854755][ T7514]  ? shrinker_free+0x2ce/0x3e0
[  217.854787][ T7514]  deactivate_locked_super+0xbc/0x130
[  217.854803][ T7514]  cleanup_mnt+0x425/0x4c0
[  217.854816][ T7514]  ? lockdep_hardirqs_on+0x9c/0x150
[  217.854835][ T7514]  task_work_run+0x1d4/0x260
[  217.854852][ T7514]  ? __pfx_task_work_run+0x10/0x10
[  217.854867][ T7514]  ? __x64_sys_umount+0x122/0x160
[  217.854886][ T7514]  ? exit_to_user_mode_loop+0x40/0x110
[  217.854905][ T7514]  exit_to_user_mode_loop+0xec/0x110
[  217.854920][ T7514]  do_syscall_64+0x2bd/0x3b0
[  217.854935][ T7514]  ? lockdep_hardirqs_on+0x9c/0x150
[  217.854950][ T7514]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  217.854962][ T7514]  ? exc_page_fault+0x9f/0xf0
[  217.854980][ T7514]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  217.854990][ T7514] RIP: 0033:0x7f729298ff17
[  217.855002][ T7514] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  217.855013][ T7514] RSP: 002b:00007ffdc18904b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  217.855026][ T7514] RAX: 0000000000000000 RBX: 00007f7292a11c05 RCX: 00007f729298ff17
[  217.855034][ T7514] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdc1890570
[  217.855042][ T7514] RBP: 00007ffdc1890570 R08: 0000000000000000 R09: 0000000000000000
[  217.855049][ T7514] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffdc1891600
[  217.855056][ T7514] R13: 00007f7292a11c05 R14: 0000000000033a72 R15: 00007ffdc1891640
[  217.855076][ T7514]  </TASK>
[  217.855082][ T7514] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  218.232996][T10655] loop1: detected capacity change from 0 to 32768
[  218.350756][T10655] journal_load_superblock: Cannot read journal superblock
[  218.353970][T10655] (syz.1.1784,10655,0):ocfs2_journal_init:973 ERROR: Linux journal layer error
[  218.357675][T10655] (syz.1.1784,10655,0):ocfs2_check_volume:2347 ERROR: Could not initialize journal!
[  218.364229][T10655] (syz.1.1784,10655,0):ocfs2_check_volume:2432 ERROR: status = -5
[  218.370143][T10655] (syz.1.1784,10655,0):ocfs2_mount_volume:1764 ERROR: status = -5
[  218.399289][T10655] (syz.1.1784,10655,0):ocfs2_fill_super:1177 ERROR: status = -5
[  218.998004][T10667] loop1: detected capacity change from 0 to 256
[  219.005005][T10665] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  219.328371][T10678] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1793'.
[  219.516249][T10681] gtp0: entered promiscuous mode
[  219.534723][T10681] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1794'.
[  219.550975][ T5884] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  219.754478][ T5884] usb 2-1: unable to get BOS descriptor or descriptor too short
[  219.759302][ T5884] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  219.767292][ T5884] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  219.770351][ T5884] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  219.783553][ T5884] usb 2-1: Product: syz
[  219.785007][ T5884] usb 2-1: Manufacturer: syz
[  219.786648][ T5884] usb 2-1: SerialNumber: syz
[  219.899108][ T5900] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  220.063354][ T5884] usb 2-1: USB disconnect, device number 27
[  220.070737][ T5900] usb 4-1: config 0 has an invalid interface number: 113 but max is 0
[  220.088726][ T5900] usb 4-1: config 0 has no interface number 0
[  220.126125][ T5900] usb 4-1: New USB device found, idVendor=0e41, idProduct=534d, bcdDevice=98.2a
[  220.143342][ T5900] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  220.159313][ T5856] udevd[5856]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  220.160887][ T5900] usb 4-1: Product: syz
[  220.170097][ T5900] usb 4-1: Manufacturer: syz
[  220.175135][ T5900] usb 4-1: SerialNumber: syz
[  220.220205][ T5900] usb 4-1: config 0 descriptor??
[  220.863228][ T5900] snd_usb_variax 4-1:0.113: Line 6 Variax Workbench found
[  220.865592][ T5900] usb 4-1: selecting invalid altsetting 1
[  220.867620][ T5900] snd_usb_variax 4-1:0.113: set_interface failed
[  220.869841][ T5900] snd_usb_variax 4-1:0.113: Line 6 Variax Workbench now disconnected
[  220.873114][ T5900] snd_usb_variax 4-1:0.113: probe with driver snd_usb_variax failed with error -22
[  220.880859][ T5900] usb 4-1: USB disconnect, device number 14
[  220.950998][T10705] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1805'.
[  221.029750][T10710] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1807'.
[  221.239175][T10722] loop1: detected capacity change from 0 to 1024
[  221.271894][T10722] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  222.774614][ T5884] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  222.902083][ T5843] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  222.935660][ T5884] usb 4-1: Using ep0 maxpacket: 32
[  222.939674][ T5884] usb 4-1: config 0 has an invalid interface number: 51 but max is 0
[  222.942352][ T5884] usb 4-1: config 0 has no interface number 0
[  222.951324][ T5884] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  222.954458][ T5884] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  222.962907][ T5884] usb 4-1: Product: syz
[  222.964312][ T5884] usb 4-1: Manufacturer: syz
[  222.965874][ T5884] usb 4-1: SerialNumber: syz
[  222.978804][ T5884] usb 4-1: config 0 descriptor??
[  222.981852][ T5884] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  223.158010][T10768] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1833'.
[  223.180492][T10762] loop1: detected capacity change from 0 to 32768
[  223.205598][ T5884] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  223.224190][ T5884] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  223.270736][T10762] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nocow
[  223.270805][T10762]   allowing incompatible features above 0.0: (unknown version)
[  223.270813][T10762]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  223.285741][T10762] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0
[  223.289273][T10762] bcachefs (loop1): initializing new filesystem
[  223.298268][T10762] bcachefs (loop1): going read-write
[  223.302002][T10762] bcachefs (loop1): marking superblocks
[  223.308970][T10762] bcachefs (loop1): initializing freespace
[  223.313642][T10762] bcachefs (loop1): done initializing freespace
[  223.317691][T10762] bcachefs (loop1): reading snapshots table
[  223.320377][T10762] bcachefs (loop1): reading snapshots done
[  223.352941][T10762] bcachefs (loop1): done starting filesystem
[  223.640463][    C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71
[  223.644962][ T5884] usb 4-1: USB disconnect, device number 15
[  223.839849][ T5884] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  223.879568][ T5884] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  223.884396][ T5884] quatech2 4-1:0.51: device disconnected
[  223.989338][ T5843] bcachefs (loop1): shutting down
[  223.991461][ T5843] bcachefs (loop1): going read-only
[  223.995707][ T5843] bcachefs (loop1): finished waiting for writes to stop
[  223.999684][ T5843] bcachefs (loop1): flushing journal and stopping allocators, journal seq 5
[  224.041451][ T5843] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 5
[  224.046179][ T5843] bcachefs (loop1): clean shutdown complete, journal seq 6
[  224.058332][ T5843] bcachefs (loop1): marking filesystem clean
[  224.078523][ T5843] bcachefs (loop1): shutdown complete
[  224.627206][T10818] netlink: 'syz.3.1850': attribute type 2 has an invalid length.
[  224.987807][ T5884] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  225.080179][T10830] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1856'.
[  225.173251][ T5884] usb 4-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a
[  225.187665][ T5884] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  225.204978][ T5884] usb 4-1: config 0 descriptor??
[  225.223589][ T5884] gspca_main: sn9c2028-2.14.0 probing 0c45:8001
[  225.324963][T10842] loop1: detected capacity change from 0 to 1024
[  225.328150][T10842] EXT4-fs: Ignoring removed bh option
[  225.333649][T10842] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  225.354519][T10842] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  225.376917][ T5843] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  225.438602][ T5884] gspca_sn9c2028: read1 error -32
[  225.441489][ T5884] gspca_sn9c2028: read1 error -32
[  225.663766][ T5900] usb 4-1: USB disconnect, device number 16
[  225.896005][T10867] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1870'.
[  226.119355][T10877] netlink: 'syz.1.1874': attribute type 1 has an invalid length.
[  226.524600][T10887] overlayfs: failed to clone upperpath
[  226.666263][   T47] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  226.826515][   T47] usb 4-1: Using ep0 maxpacket: 32
[  226.832187][   T47] usb 4-1: config 0 has an invalid interface number: 84 but max is 1
[  226.837543][   T47] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  226.843022][   T47] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2
[  226.846696][   T47] usb 4-1: config 0 has no interface number 0
[  226.850901][   T47] usb 4-1: config 0 interface 84 altsetting 127 endpoint 0x1 has invalid wMaxPacketSize 0
[  226.858271][   T47] usb 4-1: config 0 interface 84 altsetting 127 has 1 endpoint descriptor, different from the interface descriptor's value: 15
[  226.864848][   T47] usb 4-1: config 0 interface 84 has no altsetting 0
[  226.877252][   T47] usb 4-1: New USB device found, idVendor=05ac, idProduct=030b, bcdDevice=db.55
[  226.884547][   T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  226.893066][   T47] usb 4-1: Product: syz
[  226.895115][   T47] usb 4-1: Manufacturer: syz
[  226.897326][   T47] usb 4-1: SerialNumber: syz
[  226.909941][   T47] usb 4-1: config 0 descriptor??
[  227.156565][   T47] appletouch 4-1:0.84: Could not find int-in endpoint
[  227.160316][   T47] appletouch 4-1:0.84: probe with driver appletouch failed with error -5
[  227.163933][   T47] usbhid 4-1:0.84: couldn't find an input interrupt endpoint
[  227.182752][   T47] usb 4-1: USB disconnect, device number 17
[  227.389727][T10908] loop1: detected capacity change from 0 to 128
[  227.401748][T10908] befs: (loop1): invalid magic header
[  227.496279][T10916] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1892'.
[  227.500270][T10916] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1892'.
[  227.782516][T10932] loop1: detected capacity change from 0 to 1024
[  227.845163][T10932] hfsplus: bad catalog entry type
[  227.864969][ T1090] hfsplus: b-tree write err: -5, ino 4
[  228.291175][ T5884] usb 2-1: new full-speed USB device number 28 using dummy_hcd
[  228.454154][ T5884] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  228.458092][ T5884] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  228.464659][ T5884] usb 2-1: config 0 descriptor??
[  228.894064][ T5884] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  228.906716][ T5884] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 3
[  228.909089][ T5884] [drm] Initialized udl on minor 3
[  228.989858][T10971] loop3: detected capacity change from 0 to 128
[  229.117226][ T5884] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed
[  229.123633][ T5884] udl 2-1:0.0: [drm] Cannot find any crtc or sizes
[  229.346321][   T10] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  229.348430][   T47] usb 2-1: USB disconnect, device number 28
[  229.368070][   T10] udl 2-1:0.0: [drm] Cannot find any crtc or sizes
[  229.733693][T10983] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1922'.
[  229.744996][T10983] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1922'.
[  229.951922][T11002] netlink: 292 bytes leftover after parsing attributes in process `syz.1.1931'.
[  229.952380][T11000] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096
[  230.291074][   T10] usb 4-1: new full-speed USB device number 18 using dummy_hcd
[  230.463235][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  230.467851][   T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  230.484335][   T10] usb 4-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00
[  230.488124][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  230.507339][   T10] usb 4-1: config 0 descriptor??
[  230.526748][T11010] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  230.803999][T11017] loop1: detected capacity change from 0 to 32768
[  230.823559][T11017] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1938 (11017)
[  230.843481][T11017] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  230.857268][T11017] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[  230.864545][T11017] BTRFS info (device loop1): using free-space-tree
[  230.969454][   T10] logitech 0003:046D:CA04.000C: bogus close delimiter
[  230.971780][   T10] logitech 0003:046D:CA04.000C: item 0 4 2 10 parsing failed
[  230.978253][   T10] logitech 0003:046D:CA04.000C: parse failed
[  230.980646][   T10] logitech 0003:046D:CA04.000C: probe with driver logitech failed with error -22
[  231.020567][ T5843] BTRFS info (device loop1): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  231.182839][   T47] usb 4-1: USB disconnect, device number 18
[  231.759886][T11058] mkiss: ax0: crc mode is auto.
[  231.854187][T11060] loop3: detected capacity change from 0 to 512
[  231.868712][T11060] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2
[  231.876344][T11060] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2
[  231.888878][T11060] EXT4-fs (loop3): 1 truncate cleaned up
[  231.891667][T11060] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  231.907788][T11060] EXT4-fs: user quota file already specified
[  231.928329][ T7514] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  231.965451][T11064] loop3: detected capacity change from 0 to 256
[  231.981005][T11064] exfat: Deprecated parameter 'namecase'
[  231.988521][T11064] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  232.187007][T11072] loop1: detected capacity change from 0 to 16
[  232.197185][T11072] erofs (device loop1): mounted with root inode @ nid 36.
[  233.404444][T11102] loop1: detected capacity change from 0 to 256
[  233.431435][T11106] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  233.522892][T11109] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma?
[  233.551491][   T33] kauditd_printk_skb: 207 callbacks suppressed
[  233.551500][   T33] audit: type=1800 audit(1755487017.806:294): pid=11109 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1969" name="file1" dev="loop1" ino=1048624 res=0 errno=0
[  234.005191][T11111] loop3: detected capacity change from 0 to 32768
[  234.030481][T11111] ocfs2: Slot 0 on device (7,3) was already allocated to this node!
[  234.068052][T11111] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  234.196639][ T7514] ocfs2: Unmounting device (7,3) on (node local)
[  234.824819][T11147] netlink: 'syz.1.1989': attribute type 2 has an invalid length.
[  235.090408][   T10] usb 4-1: new full-speed USB device number 19 using dummy_hcd
[  235.111634][ T5884] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[  235.259709][   T10] usb 4-1: config 5 has an invalid interface number: 123 but max is 0
[  235.262987][   T10] usb 4-1: config 5 has no interface number 0
[  235.265242][   T10] usb 4-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B
[  235.269757][   T10] usb 4-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xE6, changing to 0x86
[  235.274467][ T5884] usb 2-1: Using ep0 maxpacket: 32
[  235.276560][   T10] usb 4-1: config 5 interface 123 altsetting 7 endpoint 0x86 has invalid wMaxPacketSize 0
[  235.280673][   T10] usb 4-1: config 5 interface 123 has no altsetting 0
[  235.285413][ T5884] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  235.289599][ T5884] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  235.293706][ T5884] usb 2-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00
[  235.297252][ T5884] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  235.302610][   T10] usb 4-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7
[  235.306839][ T5884] usb 2-1: config 0 descriptor??
[  235.317553][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  235.320728][   T10] usb 4-1: Product: syz
[  235.325878][   T10] usb 4-1: Manufacturer: syz
[  235.328197][   T10] usb 4-1: SerialNumber: syz
[  235.587818][   T10] ni6501 4-1:5.123: driver 'ni6501' failed to auto-configure device.
[  235.641282][   T10] usb 4-1: USB disconnect, device number 19
[  235.772743][ T5884] saitek 0003:06A3:0621.000D: hidraw0: USB HID v0.00 Device [HID 06a3:0621] on usb-dummy_hcd.1-1/input0
[  235.984387][   T10] usb 2-1: USB disconnect, device number 29
[  236.263785][T11176] loop3: detected capacity change from 0 to 128
[  236.268090][T11176] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; going on - but anything won't be destroyed because it's read-only
[  236.277306][T11176] hpfs: filesystem error: improperly stopped
[  236.281156][T11176] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  236.284160][T11176] hpfs: Proceeding, but your filesystem could be corrupted if you delete files or directories
[  236.295385][T11176] hpfs: filesystem error: sector(s) 'dir_band' badly placed at 7b318cc2
[  237.556950][T11210] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2016'.
[  237.578308][T11210] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2016'.
[  238.099212][T11219] netlink: 'syz.1.2021': attribute type 1 has an invalid length.
[  238.102399][T11219] netlink: 'syz.1.2021': attribute type 2 has an invalid length.
[  238.111633][T11219] netlink: 'syz.1.2021': attribute type 1 has an invalid length.
[  238.114205][T11219] netlink: 'syz.1.2021': attribute type 2 has an invalid length.
[  238.341441][T11225] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2024'.
[  238.693097][   T10] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[  238.799599][T11232] openvswitch: netlink: IP tunnel dst address not specified
[  238.875312][   T10] usb 2-1: Using ep0 maxpacket: 16
[  238.882135][   T10] usb 2-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb
[  238.886465][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  238.889644][   T10] usb 2-1: Product: syz
[  238.892585][   T10] usb 2-1: Manufacturer: syz
[  238.895604][   T10] usb 2-1: SerialNumber: syz
[  239.011072][T11243] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2032'.
[  239.195228][   T10] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  239.232906][   T10] snd-usb-audio 2-1:222.0: probe with driver snd-usb-audio failed with error -71
[  239.245755][   T10] usb 2-1: USB disconnect, device number 30
[  239.263020][ T5856] udevd[5856]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:222.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  239.884251][T11287] netlink: 'syz.0.2051': attribute type 11 has an invalid length.
[  240.017500][T11286] loop1: detected capacity change from 0 to 32768
[  240.020476][T11286] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2052 (11286)
[  240.032247][T11286] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  240.035421][T11286] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm
[  240.047291][T11286] BTRFS info (device loop1): using free-space-tree
[  240.245478][T11301] loop3: detected capacity change from 0 to 512
[  240.250394][T11301] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  240.416271][T11301] EXT4-fs (loop3): 1 truncate cleaned up
[  240.422957][T11301] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  240.433215][T11286] BTRFS info (device loop1): rebuilding free space tree
[  240.471418][ T7514] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  240.499665][   T33] audit: type=1800 audit(1755487024.316:295): pid=11286 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2052" name="file1" dev="loop1" ino=260 res=0 errno=0
[  240.579000][ T5843] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  240.901191][T11332] loop3: detected capacity change from 0 to 256
[  240.909550][T11332] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  240.915257][T11332] exFAT-fs (loop3): Medium has reported failures. Some data may be lost.
[  240.937338][T11332] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d)
[  241.118335][T11346] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2071'.
[  241.162294][T11348] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2072'.
[  241.286785][ T5884] IPVS: starting estimator thread 0...
[  241.387382][T11359] IPVS: using max 41 ests per chain, 98400 per kthread
[  241.400523][T11367] xt_socket: unknown flags 0xe4
[  242.314226][T11372] loop3: detected capacity change from 0 to 32768
[  242.318327][T11372] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2082 (11372)
[  242.325254][T11372] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  242.329202][T11372] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[  242.332471][T11372] BTRFS info (device loop3): disk space caching is enabled
[  242.335340][T11372] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  242.448964][T11372] BTRFS info (device loop3): rebuilding free space tree
[  242.471280][T11372] BTRFS info (device loop3): disabling free space tree
[  242.473578][T11372] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  242.498161][T11372] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  242.580404][ T7514] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  242.590424][T11409] tmpfs: Bad value for 'mpol'
[  242.777371][T11416] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9)
[  242.780139][T11416] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  242.799897][T11416] vhci_hcd vhci_hcd.0: Device attached
[  242.867746][T11417] vhci_hcd: connection closed
[  242.868953][ T5914] vhci_hcd: stop threads
[  242.882674][ T5914] vhci_hcd: release socket
[  242.884836][ T5914] vhci_hcd: disconnect device
[  243.057160][T11422] loop3: detected capacity change from 0 to 32768
[  243.075178][   T33] audit: type=1800 audit(1755487026.730:296): pid=11422 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2097" name="file1" dev="loop3" ino=4 res=0 errno=0
[  243.257683][T11422] ERROR: (device loop3): dbAdjCtl: the maximum free buddy is not the old root
[  243.257683][T11422] 
[  243.265523][T11422] ERROR: (device loop3): remounting filesystem as read-only
[  243.953592][ T5884] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[  244.036535][T11442] loop3: detected capacity change from 0 to 4096
[  244.113508][ T5884] usb 2-1: Using ep0 maxpacket: 8
[  244.125508][ T5884] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7
[  244.131554][ T5884] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[  244.136144][ T5884] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[  244.139575][ T5884] usb 2-1: Product: syz
[  244.141296][ T5884] usb 2-1: Manufacturer: syz
[  244.143270][ T5884] usb 2-1: SerialNumber: syz
[  244.175439][ T1091] ntfs3(loop3): ino=5, mi_enum_attr
[  244.247151][T11444] binfmt_misc: register: failed to install interpreter file ./file0
[  244.314958][T11448] geneve2: entered allmulticast mode
[  244.326053][ T5859] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 20001 - 0
[  244.333150][ T5859] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 20001 - 0
[  244.338289][ T5859] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 20001 - 0
[  244.341666][ T5859] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 20001 - 0
[  244.366545][ T5884] usb 2-1: Handspring Visor / Palm OS: No valid connect info available
[  244.371754][ T5884] usb 2-1: Handspring Visor / Palm OS: port 255, is for unknown use
[  244.374389][ T5884] usb 2-1: Handspring Visor / Palm OS: port 255, is for unknown use
[  244.377036][ T5884] usb 2-1: Handspring Visor / Palm OS: Number of ports: 2
[  244.393411][T11452] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2110'.
[  244.593687][ T5884] usb 2-1: palm_os_3_probe - error -71 getting bytes available request
[  244.601420][ T5884] visor 2-1:1.0: Handspring Visor / Palm OS converter detected
[  244.605752][ T5884] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB0
[  244.617323][ T5884] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB1
[  244.627249][ T5884] usb 2-1: USB disconnect, device number 31
[  244.637994][ T5884] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0
[  244.642470][ T5884] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1
[  244.645967][ T5884] visor 2-1:1.0: device disconnected
[  245.494714][T11488] macsec0: entered allmulticast mode
[  245.497025][T11488] macvlan1: entered allmulticast mode
[  245.510594][T11488] macvlan1: left allmulticast mode
[  245.909987][T11499] loop3: detected capacity change from 0 to 512
[  245.920330][T11499] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  245.924157][T11499] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000001)
[  245.927922][T11499] FAT-fs (loop3): Filesystem has been set read-only
[  246.674273][T11514] loop3: detected capacity change from 0 to 256
[  246.688577][T11514] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  246.693258][T11514] exFAT-fs (loop3): Medium has reported failures. Some data may be lost.
[  246.717015][T11514] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  249.530676][T11555] loop1: detected capacity change from 0 to 8192
[  249.589331][ T5856] Dev loop1: unable to read partition block 838860800
[  249.594037][ T5856]  loop1: RDSK (419430400) unable to read partition table
[  249.597653][ T5856] loop1: partition table beyond EOD, truncated
[  249.611382][T11555] Dev loop1: unable to read partition block 838860800
[  249.618944][T11555]  loop1: RDSK (419430400) unable to read partition table
[  249.622591][T11555] loop1: partition table beyond EOD, truncated
[  249.624696][T11555] loop_reread_partitions: partition scan of loop1 () failed (rc=-5)
[  249.635249][ T5297] Dev loop1: unable to read partition block 838860800
[  249.647575][ T5297]  loop1: RDSK (419430400) unable to read partition table
[  249.652398][ T5297] loop1: partition table beyond EOD, truncated
[  249.860960][T11557] loop3: detected capacity change from 0 to 32768
[  249.930494][T11557] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  250.010376][T11557] XFS (loop3): Ending clean mount
[  250.124875][ T7514] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  250.553338][T11604] loop3: detected capacity change from 0 to 8192
[  250.852019][T11609] input: syz0 as /devices/virtual/input/input9
[  251.958986][T11623] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2174'.
[  251.984505][T11623] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2174'.
[  252.409062][   T47] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  252.605423][   T47] usb 4-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad
[  252.612533][   T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  252.628422][   T47] usb 4-1: config 0 descriptor??
[  252.638266][   T47] gspca_main: spca508-2.14.0 probing 8086:0110
[  253.272706][   T47] gspca_spca508: reg_read err -71
[  253.275733][   T47] gspca_spca508: reg_read err -71
[  253.278194][   T47] gspca_spca508: reg_read err -71
[  253.280839][   T47] gspca_spca508: reg_read err -71
[  253.284516][   T47] gspca_spca508: reg write: error -71
[  253.287784][   T47] spca508 4-1:0.0: probe with driver spca508 failed with error -71
[  253.296811][   T47] usb 4-1: USB disconnect, device number 20
[  253.625644][T11654] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  254.356632][T11681] loop1: detected capacity change from 0 to 32768
[  254.367961][T11681] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2203 (11681)
[  254.382453][T11681] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  254.390752][T11681] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[  254.399265][T11681] BTRFS info (device loop1): using free-space-tree
[  254.480133][ T5843] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  254.783621][T11703] netlink: zone id is out of range
[  254.785930][T11703] netlink: zone id is out of range
[  254.788023][T11703] netlink: zone id is out of range
[  254.790116][T11703] netlink: zone id is out of range
[  254.792130][T11703] netlink: zone id is out of range
[  254.796505][T11703] netlink: zone id is out of range
[  254.798293][T11703] netlink: zone id is out of range
[  254.800068][T11703] netlink: zone id is out of range
[  254.801876][T11703] netlink: zone id is out of range
[  254.805577][T11703] netlink: zone id is out of range
[  255.056881][T11717] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2213'.
[  255.062658][T11717] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2213'.
[  255.145205][T11724] loop1: detected capacity change from 0 to 4096
[  255.159293][T11724] ntfs3(loop1): $Secure::$SDH is corrupted.
[  255.161302][T11724] ntfs3(loop1): Failed to initialize $Secure (-22).
[  255.413044][T11739] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  256.685540][   T47] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[  256.846663][   T47] usb 2-1: Using ep0 maxpacket: 32
[  256.852770][   T47] usb 2-1: config 4 has an invalid interface number: 228 but max is 0
[  256.856563][   T47] usb 2-1: config 4 has no interface number 0
[  256.859220][   T47] usb 2-1: config 4 interface 228 altsetting 68 endpoint 0x7 has an invalid bInterval 0, changing to 7
[  256.863886][   T47] usb 2-1: config 4 interface 228 altsetting 68 endpoint 0x7 has invalid wMaxPacketSize 0
[  256.870052][   T47] usb 2-1: config 4 interface 228 has no altsetting 0
[  256.874945][   T47] usb 2-1: New USB device found, idVendor=0499, idProduct=a9a2, bcdDevice=c4.e8
[  256.879198][   T47] usb 2-1: New USB device strings: Mfr=1, Product=25, SerialNumber=3
[  256.882657][   T47] usb 2-1: Product: syz
[  256.884494][   T47] usb 2-1: Manufacturer: syz
[  256.886506][   T47] usb 2-1: SerialNumber: syz
[  256.911472][T11761] loop3: detected capacity change from 0 to 32768
[  257.182021][T11773] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2239'.
[  257.184041][   T47] usb 2-1: USB disconnect, device number 32
[  257.212978][ T5856] udevd[5856]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:4.228/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  257.684296][T11782] autofs4:pid:11782:validate_dev_ioctl: invalid path supplied for cmd(0xc018937a)
[  257.988179][T11787] loop1: detected capacity change from 0 to 1024
[  258.007080][   T26] hfsplus: b-tree write err: -5, ino 4
[  258.084529][   T33] audit: type=1326 audit(1755487040.770:297): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=11792 comm="syz.1.2247" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdf8258ebe9 code=0x0
[  258.316027][T11801] Bluetooth: hci3: received HCILL_GO_TO_SLEEP_ACK in state 2
[  258.325250][   T27] Bluetooth: hci3: Frame reassembly failed (-84)
[  258.950610][T11810] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2255'.
[  259.015447][T11812] loop1: detected capacity change from 0 to 256
[  259.019933][T11812] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  259.024574][T11812] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512
[  259.034030][T11812] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found
[  259.037770][T11812] UDF-fs: Scanning with blocksize 512 failed
[  259.050110][T11812] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  259.060489][T11812] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  259.390108][   T10] usb 2-1: new full-speed USB device number 33 using dummy_hcd
[  259.552119][   T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 15
[  259.556039][   T10] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  259.560799][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  259.565727][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64
[  259.573609][   T10] usb 2-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8
[  259.577414][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  259.580817][   T10] usb 2-1: Product: syz
[  259.582905][   T10] usb 2-1: Manufacturer: syz
[  259.584942][   T10] usb 2-1: SerialNumber: syz
[  259.589752][   T10] usb 2-1: config 0 descriptor??
[  259.592537][T11821] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  259.685110][T11823] netlink: 'syz.0.2260': attribute type 1 has an invalid length.
[  259.914865][   T10] powermate: Expected payload of 3--6 bytes, found 64 bytes!
[  259.924752][   T10] input: Griffin SoundKnob as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input10
[  259.934161][    C0] powermate: config urb returned -71
[  259.936708][    C0] powermate: config urb returned -71
[  259.938978][    C0] powermate: config urb returned -71
[  259.941271][    C0] powermate: config urb returned -71
[  259.946225][   T10] usb 2-1: USB disconnect, device number 33
[  260.482163][ T5855] Bluetooth: hci3: command 0x1003 tx timeout
[  260.484616][ T5848] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  260.797391][T11846] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2268'.
[  261.069734][T11838] loop1: detected capacity change from 0 to 40427
[  261.076236][T11838] F2FS-fs (loop1): Fix alignment : internally, start(4096) end(16896) block(12288)
[  261.088747][T11838] F2FS-fs (loop1): invalid crc value
[  261.091170][T11838] F2FS-fs (loop1): invalid crc value
[  261.094213][T11838] F2FS-fs (loop1): Failed to get valid F2FS checkpoint
[  261.525016][T11866] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2278'.
[  261.718041][T11870] netlink: 'syz.3.2280': attribute type 1 has an invalid length.
[  261.721771][T11870] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2280'.
[  262.050787][T11889] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  262.235145][   T47] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  262.370488][T11907] trusted_key: encrypted_key: insufficient parameters specified
[  262.399974][   T47] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  262.404279][   T47] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[  262.409236][   T47] usb 4-1: config 1 has no interface number 0
[  262.411327][   T47] usb 4-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  262.417950][   T47] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  262.421139][   T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  262.424040][   T47] usb 4-1: Product: syz
[  262.425435][   T47] usb 4-1: Manufacturer: syz
[  262.431952][   T47] usb 4-1: SerialNumber: syz
[  262.440694][   T47] usb 4-1: selecting invalid altsetting 1
[  262.871914][   T47] cdc_ncm 4-1:1.1: failed GET_NTB_PARAMETERS
[  262.873955][   T47] cdc_ncm 4-1:1.1: bind() failure
[  262.880467][   T47] usb 4-1: USB disconnect, device number 21
[  263.056900][ T5884] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[  263.217315][ T5884] usb 2-1: Using ep0 maxpacket: 16
[  263.223290][ T5884] usb 2-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4
[  263.226254][ T5884] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  263.229444][ T5884] usb 2-1: Product: syz
[  263.230969][ T5884] usb 2-1: Manufacturer: syz
[  263.232798][ T5884] usb 2-1: SerialNumber: syz
[  263.236152][ T5884] usb 2-1: config 0 descriptor??
[  263.241765][ T5884] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state.
[  263.458224][ T5884] gp8psk: usb in 128 operation failed.
[  263.460940][ T5884] gp8psk: usb in 137 operation failed.
[  263.462740][ T5884] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  263.476888][ T5884] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver)
[  263.480773][ T5884] usb 2-1: media controller created
[  263.493727][ T5884] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  263.515192][ T5884] gp8psk_fe: Frontend revision 1 attached
[  263.518806][ T5884] usb 2-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)...
[  263.522520][ T5884] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered.
[  263.787202][ T5884] gp8psk: usb in 137 operation failed.
[  263.792388][ T5884] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected.
[  263.798001][ T5884] gp8psk: found Genpix USB device pID = 201 (hex)
[  263.802968][T11948] loop3: detected capacity change from 0 to 32768
[  263.804413][ T5884] usb 2-1: USB disconnect, device number 34
[  263.806732][T11948] bcachefs (/dev/loop3): error validating superblock: Bad dev_idx (got 5, nr_devices 1)
[  263.810694][T11948] bcachefs: bch2_fs_get_tree() error: invalid_sb_dev_idx
[  263.900522][ T5884] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected.
[  263.986997][T11955] netlink: 'syz.3.2319': attribute type 11 has an invalid length.
[  264.022386][T11957] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  264.099561][T11961] loop3: detected capacity change from 0 to 256
[  264.109398][T11961] FAT-fs (loop3): Directory bread(block 64) failed
[  264.111789][T11961] FAT-fs (loop3): Directory bread(block 65) failed
[  264.114508][T11961] FAT-fs (loop3): Directory bread(block 66) failed
[  264.119296][T11961] FAT-fs (loop3): Directory bread(block 67) failed
[  264.122059][T11961] FAT-fs (loop3): Directory bread(block 68) failed
[  264.124844][T11961] FAT-fs (loop3): Directory bread(block 69) failed
[  264.128866][T11961] FAT-fs (loop3): Directory bread(block 70) failed
[  264.131696][T11961] FAT-fs (loop3): Directory bread(block 71) failed
[  264.134366][T11961] FAT-fs (loop3): Directory bread(block 72) failed
[  264.138078][T11961] FAT-fs (loop3): Directory bread(block 73) failed
[  264.423206][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[  264.676453][T11981] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2331'.
[  264.733992][T11989] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2335'.
[  265.042787][T12014] loop1: detected capacity change from 0 to 64
[  266.526153][T12035] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2355'.
[  266.765406][T12051] loop3: detected capacity change from 0 to 512
[  267.792972][   T47] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[  267.953227][   T47] usb 2-1: Using ep0 maxpacket: 32
[  267.957701][   T47] usb 2-1: config 0 has an invalid interface number: 96 but max is 0
[  267.961051][   T47] usb 2-1: config 0 has no interface number 0
[  267.964027][   T47] usb 2-1: config 0 interface 96 has no altsetting 0
[  267.972678][   T47] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=b2.44
[  267.978684][   T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  267.983792][   T47] usb 2-1: Product: syz
[  267.985841][   T47] usb 2-1: Manufacturer: syz
[  267.987858][   T47] usb 2-1: SerialNumber: syz
[  267.993101][   T47] usb 2-1: config 0 descriptor??
[  268.003712][   T47] legousbtower 2-1:0.96: interrupt endpoints not found
[  268.244312][   T10] usb 2-1: USB disconnect, device number 35
[  268.375814][T12087] loop3: detected capacity change from 0 to 32768
[  268.378756][T12087] btrfs: Deprecated parameter 'usebackuproot'
[  268.381801][T12087] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  268.390740][T12087] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2381 (12087)
[  268.420725][T12087] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  268.426889][T12087] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm
[  268.430413][T12087] BTRFS info (device loop3): disk space caching is enabled
[  268.433528][T12087] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  268.564010][T12087] BTRFS error (device loop3 state M): cannot disable free-space-tree
[  268.588045][ T7514] BTRFS info (device loop3 state M): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  268.643989][T12107] ip6tnl2: entered promiscuous mode
[  268.646402][T12107] ip6tnl2: entered allmulticast mode
[  268.707467][T12109] usb usb8: usbfs: process 12109 (syz.3.2383) did not claim interface 0 before use
[  268.922283][T12115] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2386'.
[  269.165374][T12117] loop3: detected capacity change from 0 to 40427
[  269.168608][T12117] F2FS-fs: heap/no_heap options were deprecated
[  269.171477][T12117] F2FS-fs (loop3): Mismatch start address, segment0(0) cp_blkaddr(512)
[  269.176440][T12117] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  269.191520][T12117] F2FS-fs (loop3): invalid crc value
[  269.237809][T12121] loop1: detected capacity change from 0 to 40427
[  269.274250][T12117] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  269.278422][T12117] F2FS-fs (loop3): Start checkpoint disabled!
[  269.285856][T12121] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  269.290218][T12117] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  269.292739][T12117] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  269.299218][   T33] audit: type=1800 audit(2000000009.513:298): pid=12117 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2387" name="file1" dev="loop3" ino=10 res=0 errno=0
[  269.301124][T12121] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  269.319297][   T27] kworker/u10:0: attempt to access beyond end of device
[  269.319297][   T27] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  269.326554][   T27] CPU: 1 UID: 0 PID: 27 Comm: kworker/u10:0 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  269.326567][   T27] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  269.326572][   T27] Workqueue: writeback wb_workfn (flush-7:3)
[  269.326613][   T27] Call Trace:
[  269.326617][   T27]  <TASK>
[  269.326621][   T27]  dump_stack_lvl+0x189/0x250
[  269.326634][   T27]  ? __pfx_dump_stack_lvl+0x10/0x10
[  269.326643][   T27]  ? __pfx_queue_work_on+0x10/0x10
[  269.326650][   T27]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  269.326660][   T27]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  269.326675][   T27]  f2fs_handle_critical_error+0x37c/0x540
[  269.326696][   T27]  f2fs_write_end_io+0x886/0xb60
[  269.326719][   T27]  __submit_merged_bio+0x27a/0x6a0
[  269.326739][   T27]  __submit_merged_write_cond+0x255/0x530
[  269.326761][   T27]  f2fs_write_data_pages+0x261d/0x3000
[  269.326790][   T27]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  269.326815][   T27]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  269.326856][   T27]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  269.326878][   T27]  ? trace_f2fs_writepages+0x7f/0x200
[  269.326889][   T27]  ? f2fs_write_node_pages+0x478/0x6e0
[  269.326901][   T27]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  269.326917][   T27]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  269.326928][   T27]  do_writepages+0x32e/0x550
[  269.326941][   T27]  ? reacquire_held_locks+0x127/0x1d0
[  269.326949][   T27]  ? writeback_sb_inodes+0x384/0x1010
[  269.326962][   T27]  __writeback_single_inode+0x145/0xff0
[  269.326971][   T27]  ? do_raw_spin_unlock+0x4d/0x240
[  269.326987][   T27]  writeback_sb_inodes+0x6c7/0x1010
[  269.327025][   T27]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  269.327076][   T27]  ? rcu_is_watching+0x15/0xb0
[  269.327097][   T27]  wb_writeback+0x43b/0xaf0
[  269.327119][   T27]  ? queue_io+0x331/0x590
[  269.327137][   T27]  ? __pfx_wb_writeback+0x10/0x10
[  269.327159][   T27]  ? _raw_spin_unlock_irq+0x23/0x50
[  269.327177][   T27]  wb_workfn+0x409/0xef0
[  269.327193][   T27]  ? __pfx_wb_workfn+0x10/0x10
[  269.327203][   T27]  ? __lock_acquire+0xab9/0xd20
[  269.327218][   T27]  ? process_scheduled_works+0x9ef/0x17b0
[  269.327228][   T27]  ? _raw_spin_unlock_irq+0x23/0x50
[  269.327237][   T27]  ? process_scheduled_works+0x9ef/0x17b0
[  269.327243][   T27]  ? process_scheduled_works+0x9ef/0x17b0
[  269.327251][   T27]  process_scheduled_works+0xae1/0x17b0
[  269.327272][   T27]  ? __pfx_process_scheduled_works+0x10/0x10
[  269.327287][   T27]  worker_thread+0x8a0/0xda0
[  269.327308][   T27]  kthread+0x711/0x8a0
[  269.327318][   T27]  ? __pfx_worker_thread+0x10/0x10
[  269.327326][   T27]  ? __pfx_kthread+0x10/0x10
[  269.327336][   T27]  ? _raw_spin_unlock_irq+0x23/0x50
[  269.327344][   T27]  ? lockdep_hardirqs_on+0x9c/0x150
[  269.327353][   T27]  ? __pfx_kthread+0x10/0x10
[  269.327362][   T27]  ret_from_fork+0x3fc/0x770
[  269.327372][   T27]  ? __pfx_ret_from_fork+0x10/0x10
[  269.327382][   T27]  ? __switch_to_asm+0x39/0x70
[  269.327397][   T27]  ? __switch_to_asm+0x33/0x70
[  269.327405][   T27]  ? __pfx_kthread+0x10/0x10
[  269.327415][   T27]  ret_from_fork_asm+0x1a/0x30
[  269.327431][   T27]  </TASK>
[  269.327435][   T27] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  269.557683][T12134] pim6reg: entered allmulticast mode
[  269.561266][T12134] pim6reg: left allmulticast mode
[  269.783961][T12144] (unnamed net_device) (uninitialized): down delay (2) is not a multiple of miimon (100), value rounded to 0 ms
[  269.787961][T12144] (unnamed net_device) (uninitialized): peer notification delay (8) is not a multiple of miimon (100), value rounded to 0 ms
[  269.807207][T12144] 8021q: adding VLAN 0 to HW filter on device bond1
[  270.938764][T12162] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2403'.
[  271.027135][T12170] netlink: 'syz.1.2407': attribute type 2 has an invalid length.
[  271.154981][T12182] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2412'.
[  271.213178][T12184] loop3: detected capacity change from 0 to 1764
[  271.537227][T12196] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2420'.
[  271.583721][T12212] netlink: 596 bytes leftover after parsing attributes in process `syz.3.2426'.
[  271.831213][T12212] program syz.3.2426 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  271.835929][T12216] IPVS: Unknown mcast interface: vcan0
[  271.869944][T12219] loop3: detected capacity change from 0 to 8
[  271.873735][T12219] SQUASHFS error: lzo decompression failed, data probably corrupt
[  271.876327][T12219] SQUASHFS error: Failed to read block 0x91: -5
[  271.878592][T12219] SQUASHFS error: Unable to read metadata cache entry [8f]
[  271.880892][T12219] SQUASHFS error: Unable to read inode 0x11f
[  272.018421][T12232] comedi comedi1: dmm32at: I/O port conflict (0x10002f03,16)
[  272.325809][ T5900] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  272.489862][ T5900] usb 4-1: config 0 has an invalid interface number: 102 but max is 0
[  272.494072][ T5900] usb 4-1: config 0 has no interface number 0
[  272.499951][ T5900] usb 4-1: New USB device found, idVendor=2001, idProduct=1a00, bcdDevice=38.f5
[  272.504715][ T5900] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  272.514373][ T5900] usb 4-1: config 0 descriptor??
[  273.119310][ T5900] asix 4-1:0.102 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  273.125094][ T5900] asix 4-1:0.102: probe with driver asix failed with error -71
[  273.132569][ T5900] usb 4-1: USB disconnect, device number 22
[  273.237343][T12261] loop1: detected capacity change from 0 to 32768
[  273.250214][T12261] XFS (loop1): DAX unsupported by block device. Turning off DAX.
[  273.257603][T12261] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  273.272164][T12261] XFS (loop1): Ending clean mount
[  273.276908][T12261] XFS (loop1): Quotacheck needed: Please wait.
[  273.303108][T12261] XFS (loop1): Quotacheck: Done.
[  273.336345][ T5843] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  274.071469][T12294] comedi comedi2: fl512: I/O port conflict (0x1009e1,16)
[  274.201977][T12309] binder: 12308:12309 ioctl c0306201 200000000640 returned -22
[  274.284952][T12314] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2463'.
[  274.938572][T12344] loop3: detected capacity change from 0 to 4096
[  274.943355][T12344] ntfs3: Unknown parameter 'nohide_dot_files'
[  275.289561][T12356] loop3: detected capacity change from 0 to 256
[  275.963843][T12365] 9pnet_fd: Insufficient options for proto=fd
[  275.972161][T12365] loop3: detected capacity change from 0 to 16
[  276.031990][T12365] erofs (device loop3): EXPERIMENTAL EROFS subpage compressed block support in use. Use at your own risk!
[  276.038942][T12365] erofs (device loop3): mounted with root inode @ nid 36.
[  276.218689][T12367] netlink: 'syz.1.2487': attribute type 10 has an invalid length.
[  276.236007][T12367] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  276.541544][T12389] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore
[  276.544532][T12389] overlayfs: option "index=on" is useless in a non-upper mount, ignore
[  276.547437][T12389] overlayfs: missing 'lowerdir'
[  276.641296][T12392] loop1: detected capacity change from 0 to 2048
[  276.656790][T12394] netlink: 'syz.3.2500': attribute type 5 has an invalid length.
[  276.661112][T12392] UDF-fs: warning (device loop1): udf_fill_super: No fileset found
[  276.697082][T12394] batman_adv: batadv0: Adding interface: vxlan0
[  276.710243][T12394] batman_adv: batadv0: The MTU of interface vxlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  276.735441][T12394] batman_adv: batadv0: Interface activated: vxlan0
[  276.741135][ T5914] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  276.743950][ T5914] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  276.749219][ T5914] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  276.755401][ T5914] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  277.189253][T12426] loop1: detected capacity change from 0 to 4096
[  277.197910][T12426] ntfs3(loop1): ino=0, mi_enum_attr
[  277.217265][T12426] ntfs3(loop1): ino=0, mi_enum_attr
[  277.224164][T12426] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  277.423293][T12438] loop3: detected capacity change from 0 to 32768
[  277.437655][T12438] JBD2: Ignoring recovery information on journal
[  277.463958][T12438] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  277.510593][T12448] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2524'.
[  277.514029][T12448] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  277.518822][ T7514] OCFS2: ERROR (device loop3): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #17056 has bad parent pointer (312, expected 74)
[  277.530676][ T7514] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  277.536048][ T7514] OCFS2: File system is now read-only.
[  277.537937][ T7514] (syz-executor,7514,0):_ocfs2_free_suballoc_bits:2579 ERROR: status = -30
[  277.541250][ T7514] (syz-executor,7514,0):ocfs2_remove_inode:775 ERROR: status = -30
[  277.548684][ T7514] (syz-executor,7514,0):ocfs2_wipe_inode:897 ERROR: status = -30
[  277.552404][ T7514] (syz-executor,7514,0):ocfs2_delete_inode:1158 ERROR: status = -30
[  277.570096][T12450] loop1: detected capacity change from 0 to 512
[  277.590843][ T7514] ocfs2: Unmounting device (7,3) on (node local)
[  277.606582][T12450] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2526: bg 0: block 248: padding at end of block bitmap is not set
[  277.627986][T12450] Quota error (device loop1): write_blk: dquota write failed
[  277.632240][T12450] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  277.635520][T12450] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.2526: Failed to acquire dquot type 1
[  277.643184][T12450] EXT4-fs (loop1): 1 truncate cleaned up
[  277.645831][T12450] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  277.650082][T12450] ext4 filesystem being mounted at /730/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  277.656238][T12450] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 2 index 2
[  277.659883][T12450] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 131074
[  277.665189][T12450] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.2526: Failed to acquire dquot type 1
[  277.685432][ T5843] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  278.897162][T12497] loop1: detected capacity change from 0 to 128
[  278.905469][T12497] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  278.914752][T12497] ext4 filesystem being mounted at /736/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  278.950276][ T5843] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  279.188723][T12518] loop1: detected capacity change from 0 to 512
[  279.193102][T12518] EXT4-fs: inline encryption not supported
[  279.202577][T12518] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  279.212729][T12518] EXT4-fs (loop1): 1 truncate cleaned up
[  279.218676][T12518] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  279.295416][ T5843] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  279.569266][T12552] loop3: detected capacity change from 0 to 8
[  279.586510][T12552] SQUASHFS error: xz decompression failed, data probably corrupt
[  279.592677][T12552] SQUASHFS error: Failed to read block 0x108: -5
[  279.602182][T12552] SQUASHFS error: Unable to read metadata cache entry [106]
[  279.604664][T12552] SQUASHFS error: Unable to read inode 0x11f
[  279.672057][T12552] netlink: 'syz.3.2566': attribute type 1 has an invalid length.
[  279.702286][T12552] 8021q: adding VLAN 0 to HW filter on device bond2
[  279.719793][T12552] vlan0: entered allmulticast mode
[  279.721801][T12552] batadv0: entered allmulticast mode
[  279.725338][T12552] bond2: (slave vlan0): Opening slave failed
[  279.798700][T12547] loop1: detected capacity change from 0 to 32768
[  279.801806][T12547] XFS: noikeep mount option is deprecated.
[  279.820019][T12547] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  279.878660][T12547] XFS (loop1): Ending clean mount
[  279.887689][T12547] XFS (loop1): Quotacheck needed: Please wait.
[  279.924901][T12547] XFS (loop1): Quotacheck: Done.
[  279.956229][   T33] audit: type=1804 audit(2000000019.475:299): pid=12547 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2565" name="/newroot/746/file0/bus" dev="loop1" ino=9291 res=1 errno=0
[  279.980540][   T33] audit: type=1804 audit(2000000019.503:300): pid=12547 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.2565" name="/newroot/746/file0/bus" dev="loop1" ino=9291 res=1 errno=0
[  280.018738][ T5843] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  282.104206][T12635] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2600'.
[  282.968177][   T33] audit: type=1326 audit(2000000022.299:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12662 comm="syz.0.2612" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52b018ebe9 code=0x7ffc0000
[  282.999111][   T33] audit: type=1326 audit(2000000022.309:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12662 comm="syz.0.2612" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52b018ebe9 code=0x7ffc0000
[  283.027043][   T33] audit: type=1326 audit(2000000022.309:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12662 comm="syz.0.2612" exe="/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7f52b018ebe9 code=0x7ffc0000
[  283.047713][   T33] audit: type=1326 audit(2000000022.309:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12662 comm="syz.0.2612" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52b018ebe9 code=0x7ffc0000
[  283.068869][   T33] audit: type=1326 audit(2000000022.309:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12662 comm="syz.0.2612" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52b018ebe9 code=0x7ffc0000
[  283.296369][T12684] loop1: detected capacity change from 0 to 64
[  283.350214][T12686] loop3: detected capacity change from 0 to 1764
[  283.479733][T12688] loop3: detected capacity change from 0 to 8192
[  283.497924][T12694] loop1: detected capacity change from 0 to 512
[  283.528681][T12694] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  283.547986][T12694] ext4 filesystem being mounted at /772/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  283.611360][ T5843] EXT4-fs error (device loop1): ext4_ext_check_inode:523: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0)
[  283.622022][ T5843] EXT4-fs error (device loop1): ext4_ext_check_inode:523: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0)
[  283.848837][T12712] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2635'.
[  283.877566][ T9797] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  284.000305][ T5900] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  284.192457][ T5900] usb 4-1: Using ep0 maxpacket: 32
[  284.196504][ T5900] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[  284.207808][ T5900] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c
[  284.210930][ T5900] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  284.224249][ T5900] usb 4-1: Product: syz
[  284.226187][ T5900] usb 4-1: Manufacturer: syz
[  284.228287][ T5900] usb 4-1: SerialNumber: syz
[  284.236369][ T5900] usb 4-1: config 0 descriptor??
[  284.253167][ T5900] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input11
[  284.274826][ T5900] usbtouchscreen 4-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -8
[  284.294868][ T5900] usbtouchscreen 4-1:0.0: probe with driver usbtouchscreen failed with error -8
[  284.593517][ T5913] usb 4-1: USB disconnect, device number 23
[  284.601993][ T5855] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  284.610314][ T5855] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  284.615412][ T5855] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  284.622328][ T5855] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  284.626798][ T5855] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  284.773270][T12720] chnl_net:caif_netlink_parms(): no params data found
[  284.823778][T12720] bridge0: port 1(bridge_slave_0) entered blocking state
[  284.826810][T12720] bridge0: port 1(bridge_slave_0) entered disabled state
[  284.829339][T12720] bridge_slave_0: entered allmulticast mode
[  284.832118][T12720] bridge_slave_0: entered promiscuous mode
[  284.836345][T12720] bridge0: port 2(bridge_slave_1) entered blocking state
[  284.839288][T12720] bridge0: port 2(bridge_slave_1) entered disabled state
[  284.842209][T12720] bridge_slave_1: entered allmulticast mode
[  284.847298][T12720] bridge_slave_1: entered promiscuous mode
[  284.868083][T12720] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  284.872516][T12720] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  284.892057][T12720] team0: Port device team_slave_0 added
[  284.895315][T12720] team0: Port device team_slave_1 added
[  284.911758][T12720] batman_adv: batadv0: Adding interface: batadv_slave_0
[  284.914025][T12720] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  284.923197][T12720] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  284.927734][T12720] batman_adv: batadv0: Adding interface: batadv_slave_1
[  284.930630][T12720] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  284.941852][T12720] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  285.001677][T12720] hsr_slave_0: entered promiscuous mode
[  285.005566][T12720] hsr_slave_1: entered promiscuous mode
[  285.008336][T12720] debugfs: 'hsr0' already exists in 'hsr'
[  285.010687][T12720] Cannot create hsr debugfs directory
[  285.257547][T12720] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  285.272761][T12720] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  285.279687][T12720] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  285.287244][T12720] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  285.329352][T12720] bridge0: port 2(bridge_slave_1) entered blocking state
[  285.331819][T12720] bridge0: port 2(bridge_slave_1) entered forwarding state
[  285.334621][T12720] bridge0: port 1(bridge_slave_0) entered blocking state
[  285.337001][T12720] bridge0: port 1(bridge_slave_0) entered forwarding state
[  285.380870][T12720] 8021q: adding VLAN 0 to HW filter on device bond0
[  285.390749][ T1091] bridge0: port 1(bridge_slave_0) entered disabled state
[  285.395209][ T1091] bridge0: port 2(bridge_slave_1) entered disabled state
[  285.437590][T12720] 8021q: adding VLAN 0 to HW filter on device team0
[  285.449277][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state
[  285.451696][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state
[  285.463788][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state
[  285.466720][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state
[  285.699388][T12720] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  285.703044][T12720] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  285.797302][T12720] 8021q: adding VLAN 0 to HW filter on device batadv0
[  285.938286][T12720] veth0_vlan: entered promiscuous mode
[  285.947478][T12720] veth1_vlan: entered promiscuous mode
[  285.967069][T12720] veth0_macvtap: entered promiscuous mode
[  285.974107][T12720] veth1_macvtap: entered promiscuous mode
[  285.987880][T12720] batman_adv: batadv0: Interface activated: batadv_slave_0
[  285.996341][T12720] batman_adv: batadv0: Interface activated: batadv_slave_1
[  286.007586][ T5914] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  286.011167][ T5914] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  286.015779][ T5914] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  286.018902][ T5914] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  286.589829][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  286.593056][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  286.633606][ T1091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  286.637460][ T1091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  286.822761][ T5848] Bluetooth: hci0: command tx timeout
[  287.165657][T12790] loop3: detected capacity change from 0 to 32768
[  287.527762][   T47] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  287.688173][   T47] usb 5-1: Using ep0 maxpacket: 32
[  287.692044][   T47] usb 5-1: config 0 has an invalid interface number: 12 but max is 0
[  287.695264][   T47] usb 5-1: config 0 has no interface number 0
[  287.697788][   T47] usb 5-1: config 0 interface 12 has no altsetting 0
[  287.702918][   T47] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=70.40
[  287.706571][   T47] usb 5-1: New USB device strings: Mfr=231, Product=2, SerialNumber=3
[  287.709928][   T47] usb 5-1: Product: syz
[  287.711845][   T47] usb 5-1: Manufacturer: syz
[  287.713685][   T47] usb 5-1: SerialNumber: syz
[  287.718164][   T47] usb 5-1: config 0 descriptor??
[  289.045841][ T5848] Bluetooth: hci0: command tx timeout
[  290.096898][   T47] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71
[  290.100590][   T47] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71
[  290.103028][   T47] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  290.105887][   T47] f81534 5-1:0.12: probe with driver f81534 failed with error -71
[  290.114917][   T47] usb 5-1: USB disconnect, device number 2
[  290.709391][T12808] overlayfs: failed to clone upperpath
[  290.769266][T12813] loop4: detected capacity change from 0 to 8
[  290.828107][T12813] SQUASHFS error: Unable to read directory block [631:26]
[  291.085886][T12838] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2677'.
[  291.210326][T12845] autofs: Unknown parameter 'no9 PG!8E	'
[  291.272279][ T5848] Bluetooth: hci0: command tx timeout
[  291.451711][T12863] bond0: Unable to set up delay as MII monitoring is disabled
[  292.162543][T12874] loop4: detected capacity change from 0 to 32768
[  292.174064][T12874] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  292.201748][T12874] XFS (loop4): Ending clean mount
[  292.229217][T12720] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  292.373174][T12895] loop4: detected capacity change from 0 to 512
[  292.376176][T12895] EXT4-fs: inline encryption not supported
[  292.378788][T12895] EXT4-fs: Ignoring removed mblk_io_submit option
[  292.382116][T12895] EXT4-fs (loop4): Test dummy encryption mode enabled
[  292.386195][T12895] EXT4-fs (loop4): orphan cleanup on readonly fs
[  292.388407][T12895] EXT4-fs error (device loop4): ext4_orphan_get:1392: comm syz.4.2699: inode #13: comm syz.4.2699: iget: illegal inode #
[  292.393606][T12895] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.2699: couldn't read orphan inode 13 (err -117)
[  292.402463][T12895] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  292.410060][T12895] EXT4-fs: inline encryption not supported
[  292.412528][T12895] EXT4-fs: Ignoring removed mblk_io_submit option
[  292.485462][T12895] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended
[  292.492613][T12895] EXT4-fs error (device loop4): __ext4_remount:6736: comm syz.4.2699: Abort forced by user
[  292.508842][T12895] EXT4-fs (loop4): Remounting filesystem read-only
[  292.515583][T12895] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  292.573427][T12720] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  292.664511][T12905] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2703'.
[  292.691582][T12905] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2703'.
[  292.799504][T12911] loop3: detected capacity change from 0 to 1024
[  292.811968][T12911] EXT4-fs: Ignoring removed orlov option
[  292.826660][T12911] EXT4-fs: Ignoring removed mblk_io_submit option
[  292.850979][T12911] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  292.886559][T12911] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  292.994050][ T7514] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  293.493314][ T5848] Bluetooth: hci0: command tx timeout
[  293.845977][ T5913] usb 5-1: new full-speed USB device number 3 using dummy_hcd
[  293.930794][T12932] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2712'.
[  294.018667][ T5913] usb 5-1: unable to get BOS descriptor or descriptor too short
[  294.031004][ T5913] usb 5-1: not running at top speed; connect to a high speed hub
[  294.035202][ T5913] usb 5-1: config 1 has an invalid interface number: 130 but max is 0
[  294.038170][ T5913] usb 5-1: config 1 has no interface number 0
[  294.038955][ T5913] usb 5-1: config 1 interface 130 altsetting 3 endpoint 0x1 has invalid maxpacket 512, setting to 64
[  294.038968][ T5913] usb 5-1: config 1 interface 130 has no altsetting 0
[  294.041361][ T5913] usb 5-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice=84.ac
[  294.041374][ T5913] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  294.041388][ T5913] usb 5-1: Product: syz
[  294.041394][ T5913] usb 5-1: Manufacturer: syz
[  294.041400][ T5913] usb 5-1: SerialNumber: syz
[  294.044558][T12922] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  294.275379][ T5913] dvb-usb: found a 'Gigabyte U7000' in cold state, will try to load a firmware
[  294.293712][ T5913] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw'
[  294.297665][ T5913] dib0700: firmware download failed at 7 with -71
[  294.306377][ T5913] usb 5-1: USB disconnect, device number 3
[  294.420226][T12944] loop3: detected capacity change from 0 to 8
[  294.432903][T12944] SQUASHFS error: xz decompression failed, data probably corrupt
[  294.437205][T12944] SQUASHFS error: Failed to read block 0x108: -5
[  294.440057][T12944] SQUASHFS error: Unable to read metadata cache entry [106]
[  294.443260][T12944] SQUASHFS error: Unable to read inode 0x11f
[  294.832716][ T5913] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  294.903172][T12956] loop4: detected capacity change from 0 to 512
[  294.909923][T12956] EXT4-fs (loop4): Test dummy encryption mode enabled
[  294.912738][T12956] EXT4-fs (loop4): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0
[  294.917747][T12956] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  294.921406][T12956] EXT4-fs (loop4): The Hurd can't support 64-bit file systems
[  294.935366][T12956] loop4: detected capacity change from 0 to 512
[  294.942449][T12956] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.2724: bad orphan inode 15
[  294.947625][T12956] ext4_test_bit(bit=14, block=5) = 0
[  294.950785][T12956] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  294.977992][T12720] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  295.015112][ T5913] usb 4-1: config index 0 descriptor too short (expected 39, got 27)
[  295.017833][ T5913] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  295.021037][ T5913] usb 4-1: config 0 interface 0 has no altsetting 0
[  295.034399][ T5913] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  295.038211][ T5913] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  295.043893][ T5913] usb 4-1: Product: syz
[  295.051103][ T5913] usb 4-1: Manufacturer: syz
[  295.053139][ T5913] usb 4-1: SerialNumber: syz
[  295.064870][ T5913] usb 4-1: config 0 descriptor??
[  295.068211][ T5913] hub 4-1:0.0: bad descriptor, ignoring hub
[  295.070212][ T5913] hub 4-1:0.0: probe with driver hub failed with error -5
[  295.079741][ T5913] usb 4-1: selecting invalid altsetting 0
[  295.085469][T12963] binder: 12962:12963 ioctl c018620c 0 returned -14
[  295.420657][ T5900] usb 4-1: USB disconnect, device number 24
[  296.012749][T12979] netlink: 'syz.3.2734': attribute type 1 has an invalid length.
[  296.094098][T12983] loop3: detected capacity change from 0 to 512
[  296.103729][T12983] EXT4-fs: Ignoring removed oldalloc option
[  296.146245][T12983] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.2735: Parent and EA inode have the same ino 15
[  296.173121][T12983] EXT4-fs (loop3): Remounting filesystem read-only
[  296.176600][T12983] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -30)
[  296.190109][T12983] EXT4-fs (loop3): 1 orphan inode deleted
[  296.194446][T12983] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  296.229748][ T7514] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  296.424483][T13003] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method
[  296.577662][T13012] loop3: detected capacity change from 0 to 2048
[  296.601821][T13012] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  296.775749][T13020] bond3: entered promiscuous mode
[  296.778670][T13020] 8021q: adding VLAN 0 to HW filter on device bond3
[  298.184584][T13042] atomic_op ffff8881078af198 conn xmit_atomic 0000000000000000
[  298.262203][ T5900] usb 5-1: new full-speed USB device number 4 using dummy_hcd
[  298.447760][ T5900] usb 5-1: config 5 has an invalid interface number: 234 but max is 0
[  298.451009][T13066] netlink: 136 bytes leftover after parsing attributes in process `syz.3.2773'.
[  298.454260][ T5900] usb 5-1: config 5 has no interface number 0
[  298.464356][ T5900] usb 5-1: config 5 interface 234 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[  298.465502][T13066] net_ratelimit: 61 callbacks suppressed
[  298.465511][T13066] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  298.477651][ T5900] usb 5-1: New USB device found, idVendor=0bfd, idProduct=0027, bcdDevice=6e.03
[  298.481261][ T5900] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  298.484491][ T5900] usb 5-1: Product: syz
[  298.496321][ T5900] usb 5-1: Manufacturer: syz
[  298.498262][ T5900] usb 5-1: SerialNumber: syz
[  298.510023][T13036] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  298.513499][ T5900] kvaser_usb 5-1:5.234: error -EPROTO: Cannot get software info
[  298.516057][ T5900] kvaser_usb 5-1:5.234: probe with driver kvaser_usb failed with error -71
[  298.729161][ T5900] usb 5-1: USB disconnect, device number 4
[  298.806369][ T5913] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  298.943636][T13081] netlink: 'syz.0.2780': attribute type 1 has an invalid length.
[  298.978629][ T5913] usb 4-1: Using ep0 maxpacket: 16
[  298.981689][ T5913] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  298.986919][ T5913] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  298.992068][ T5913] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  298.995055][ T5913] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  298.997805][ T5913] usb 4-1: Product: syz
[  299.000582][ T5913] usb 4-1: Manufacturer: syz
[  299.002172][ T5913] usb 4-1: SerialNumber: syz
[  299.421728][T13104] loop4: detected capacity change from 0 to 8192
[  299.441866][ T5913] usb 4-1: cannot find UAC_HEADER
[  299.462440][ T5913] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22
[  299.467383][ T5913] usb 4-1: USB disconnect, device number 25
[  299.470015][ T5856] udevd[5856]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  299.832633][   T24] usb 5-1: new full-speed USB device number 5 using dummy_hcd
[  299.999108][   T24] usb 5-1: config 0 has an invalid interface number: 20 but max is 0
[  300.002250][   T24] usb 5-1: config 0 has no interface number 0
[  300.011219][   T24] usb 5-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[  300.020233][   T24] usb 5-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00
[  300.023929][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  300.029089][   T24] usb 5-1: Product: syz
[  300.030826][   T24] usb 5-1: Manufacturer: syz
[  300.032635][   T24] usb 5-1: SerialNumber: syz
[  300.045878][   T24] usb 5-1: config 0 descriptor??
[  300.048843][T13111] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  300.053077][   T24] usb-storage 5-1:0.20: USB Mass Storage device detected
[  300.065406][   T24] usb-storage 5-1:0.20: Quirks match for vid 04e6 pid 000b: 4
[  300.157366][   T33] audit: type=1326 audit(2000000038.379:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13097 comm="syz.0.2788" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52b018ebe9 code=0x7fc00000
[  300.276673][   T24] scsi host6: usb-storage 5-1:0.20
[  300.286504][   T24] usb 5-1: USB disconnect, device number 5
[  300.752066][   T47] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  300.922608][   T47] usb 4-1: Using ep0 maxpacket: 8
[  300.940203][   T47] usb 4-1: config 0 has an invalid interface number: 38 but max is 0
[  300.943396][   T47] usb 4-1: config 0 has no interface number 0
[  300.948220][   T47] usb 4-1: config 0 interface 38 altsetting 0 endpoint 0xE has invalid maxpacket 1023, setting to 64
[  300.953124][   T47] usb 4-1: config 0 interface 38 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  300.962152][   T47] usb 4-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=f8.63
[  300.969742][   T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  300.972838][   T47] usb 4-1: Product: syz
[  300.974457][   T47] usb 4-1: Manufacturer: syz
[  300.976283][   T47] usb 4-1: SerialNumber: syz
[  300.980344][   T47] usb 4-1: config 0 descriptor??
[  300.992024][   T47] xbox_remote_probe: Unexpected endpoint_in
[  301.068573][T13133] loop4: detected capacity change from 0 to 32768
[  301.072959][T13133] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2801 (13133)
[  301.080988][T13133] BTRFS info (device loop4 state S): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  301.085945][T13133] BTRFS info (device loop4 state S): using blake2b (blake2b-256-generic) checksum algorithm
[  301.090300][T13133] BTRFS info (device loop4 state S): using free-space-tree
[  301.108561][ T1091] BTRFS warning (device loop4 state S): checksum verify failed on logical 5332992 mirror 1 wanted 0xb929531db417ae5491593d99afe1510df15bdaa63fb6603d26a93ec9245f098d found 0x8883588ed640b7a5f22f0afabea3add9399913a6417ca0e34e9d294b2a9d89c6 level 0, ignored
[  301.121016][ T1089] BTRFS warning (device loop4 state S): checksum verify failed on logical 5337088 mirror 1 wanted 0x324c5e2d0cac2dc8f61cbfdfc8cd69d9816061b1498b9e1bff7d10a59610160b found 0xb0a94d7ee065037a65389cfe9114fa45a636cde09d54bd2302c1c963c1dcf690 level 0, ignored
[  301.131960][ T1089] page: refcount:3 mapcount:0 mapping:ffff88811a0a53a8 index:0x517 pfn:0x408b9
[  301.135958][ T1089] memcg:ffff88801b6ece00
[  301.138958][ T1089] aops:btree_aops ino:1
[  301.140783][ T1089] flags: 0xfff00000004000(private|node=0|zone=1|lastcpupid=0x7ff)
[  301.144197][ T1089] raw: 00fff00000004000 0000000000000000 dead000000000122 ffff88811a0a53a8
[  301.149474][ T1089] raw: 0000000000000517 ffff8881101c63c0 00000003ffffffff ffff88801b6ece00
[  301.153019][ T1089] page dumped because: eb page dump
[  301.155313][ T1089] page_owner tracks the page as allocated
[  301.159005][ T1089] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x8c40(GFP_NOFS|__GFP_NOFAIL), pid 13133, tgid 13132 (syz.4.2801), ts 301120803812, free_ts 291236990498
[  301.166144][ T1089]  post_alloc_hook+0x240/0x2a0
[  301.168183][ T1089]  get_page_from_freelist+0x21e4/0x22c0
[  301.171008][ T1089]  __alloc_frozen_pages_noprof+0x181/0x370
[  301.173528][ T1089]  alloc_pages_bulk_noprof+0x560/0x710
[  301.175857][ T1089]  alloc_eb_folio_array+0xfc/0x4a0
[  301.178228][ T1089]  alloc_extent_buffer+0x38c/0x2a40
[  301.180968][ T1089]  read_tree_root_path+0x283/0xae0
[  301.183172][ T1089]  load_global_roots_objectid+0x42f/0xba0
[  301.185614][ T1089]  init_tree_roots+0xb4f/0x1ff0
[  301.187705][ T1089]  open_ctree+0x1b2f/0x3a10
[  301.189771][ T1089]  btrfs_get_tree+0xf55/0x1820
[  301.193754][ T1089]  vfs_get_tree+0x92/0x2b0
[  301.195696][ T1089]  do_new_mount+0x2a2/0x9e0
[  301.197531][ T1089]  __se_sys_mount+0x317/0x410
[  301.208169][ T1089]  do_syscall_64+0xfa/0x3b0
[  301.210147][ T1089]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  301.213333][ T1089] page last free pid 12822 tgid 12822 stack trace:
[  301.216001][ T1089]  __free_frozen_pages+0xbc4/0xd30
[  301.218077][ T1089]  vfree+0x25a/0x400
[  301.219685][ T1089]  vb2_vmalloc_put+0x68/0xb0
[  301.221629][ T1089]  __vb2_buf_mem_free+0x119/0x2d0
[  301.237885][ T1089]  __vb2_queue_free+0x414/0xb00
[  301.240064][ T1089]  vb2_core_queue_release+0x6b/0x150
[  301.242362][ T1089]  vb2_fop_release+0x16e/0x200
[  301.247835][ T1089]  v4l2_release+0x1ed/0x3b0
[  301.249935][ T1089]  __fput+0x44c/0xa70
[  301.251708][ T1089]  task_work_run+0x1d4/0x260
[  301.253744][ T1089]  exit_to_user_mode_loop+0xec/0x110
[  301.256412][ T1089]  do_syscall_64+0x2bd/0x3b0
[  301.258693][ T1089]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  301.264352][ T1089] BTRFS critical (device loop4 state S): corrupt leaf: root=2 block=5337088 slot=6, bad key order, prev (4300255232 169 0) current (5292032 169 0)
[  301.272447][ T1089] BTRFS error (device loop4 state S): read time tree block corruption detected on logical 5337088 mirror 1
[  301.279317][T13133] BTRFS error (device loop4 state S): failed to load root extent
[  301.293586][ T1089] BTRFS warning (device loop4 state CS): checksum verify failed on logical 5341184 mirror 1 wanted 0x000000000000a5dfc01f4c277f0b81815915cb99da5074f609a3f7f617cf284a found 0xc53d3c5bb04ba5dfc01f4c277f0b81815915cb99da5074f609a3f7f617cf284a level 0, ignored
[  301.318186][T13133] BTRFS warning (device loop4 state CS): mismatching generation and generation_v2 found in root item. This root was probably mounted with an older kernel. Resetting all new fields.
[  301.335297][ T1091] BTRFS error (device loop4 state CS): parent transid verify failed on logical 5292032 mirror 1 wanted 2 found 5
[  301.413757][T12720] BTRFS info (device loop4 state CS): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  301.418523][   T47] usb 4-1: USB disconnect, device number 26
[  301.586829][T13155] loop4: detected capacity change from 0 to 128
[  302.381977][T13173] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2812'.
[  302.440398][T13179] netlink: 'syz.3.2815': attribute type 3 has an invalid length.
[  302.757854][   T33] audit: type=1326 audit(2000000040.811:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13199 comm="syz.0.2825" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f52b018ebe9 code=0x0
[  303.446751][T13213] loop3: detected capacity change from 0 to 1024
[  303.470643][   T27] hfsplus: b-tree write err: -5, ino 4
[  303.525403][T13217] loop3: detected capacity change from 0 to 1024
[  303.529699][T13217] EXT4-fs: Ignoring removed nomblk_io_submit option
[  303.558775][T13217] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003]
[  303.562484][T13217] System zones: 0-1, 3-36
[  303.570650][T13217] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  303.609772][ T7514] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  303.657431][T13221] loop3: detected capacity change from 0 to 64
[  303.839282][T13235] input: syz1 as /devices/virtual/input/input12
[  303.878721][T13237] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2840'.
[  303.928976][T13241] netlink: 'syz.0.2842': attribute type 3 has an invalid length.
[  303.932333][T13241] netlink: 'syz.0.2842': attribute type 3 has an invalid length.
[  304.073463][T13258] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2850'.
[  304.078457][T13264] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2852'.
[  304.274487][T13272] loop4: detected capacity change from 0 to 40427
[  304.277723][T13272] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  304.280521][T13272] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  304.285481][T13272] F2FS-fs (loop4): invalid crc value
[  304.314408][T13272] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  304.318976][T13272] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  304.321307][T13272] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  304.578816][T13293] syz.4.2856: attempt to access beyond end of device
[  304.578816][T13293] loop4: rw=2049, sector=77824, nr_sectors = 520 limit=40427
[  304.979998][T13299] orangefs_devreq_write_iter: total:0: must be at least:8240:
[  305.355859][T13320] loop4: detected capacity change from 0 to 256
[  305.370619][T13320] FAT-fs (loop4): count of clusters too big (178174)
[  305.372876][T13320] FAT-fs (loop4): Can't find a valid FAT filesystem
[  306.301622][T13345] loop3: detected capacity change from 0 to 1024
[  306.319466][T13345] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  306.817357][T13353] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2888'.
[  307.500012][T13362] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2891'.
[  307.861382][ T5884] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  307.965311][ T7514] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  308.114649][ T5884] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  308.119553][ T5884] usb 5-1: config 0 interface 0 has no altsetting 0
[  308.125806][ T5884] usb 5-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce
[  308.130081][ T5884] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  308.133505][ T5884] usb 5-1: Product: syz
[  308.135356][ T5884] usb 5-1: Manufacturer: syz
[  308.137247][ T5884] usb 5-1: SerialNumber: syz
[  308.145105][ T5884] usb 5-1: config 0 descriptor??
[  308.155503][ T5884] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state.
[  308.236491][ T5884] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  308.251719][ T5884] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0)
[  308.259009][ T5884] usb 5-1: media controller created
[  308.472469][ T5884] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  308.496121][T13374] loop3: detected capacity change from 0 to 512
[  308.499548][T13374] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  308.517831][T13374] EXT4-fs (loop3): 1 truncate cleaned up
[  308.521122][T13374] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  308.528315][ T5884] DVB: Unable to find symbol tda10046_attach()
[  308.531739][ T5884] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0'
[  308.537312][ T5884] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected.
[  308.576983][ T7514] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  308.822860][T13381] loop3: detected capacity change from 0 to 32768
[  309.353728][ T5900] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  309.529222][ T5900] usb 4-1: Using ep0 maxpacket: 32
[  309.534961][ T5900] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32
[  309.541231][ T5900] usb 4-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5
[  309.544150][ T5900] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  309.546854][ T5900] usb 4-1: Product: syz
[  309.548543][ T5900] usb 4-1: Manufacturer: syz
[  309.551250][ T5900] usb 4-1: SerialNumber: syz
[  309.558146][ T5900] usb 4-1: config 0 descriptor??
[  309.560437][T13386] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  309.568167][ T5900] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  309.648928][ T5884] dvb_usb_m920x 5-1:0.0: probe with driver dvb_usb_m920x failed with error -71
[  309.662506][ T5884] usb 5-1: USB disconnect, device number 6
[  309.796381][ T5900] usb 4-1: USB disconnect, device number 27
[  310.357273][T13412] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2913'.
[  310.621730][T13418] loop4: detected capacity change from 0 to 32768
[  310.625415][T13418] BTRFS: device label  devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2915 (13418)
[  310.638936][T13418] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  310.644994][T13418] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm
[  310.652109][T13418] BTRFS error (device loop4): superblock checksum mismatch
[  310.660092][T13418] BTRFS error (device loop4): open_ctree failed: -22
[  311.101744][T13448] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2927'.
[  311.149731][T13455] ieee802154 phy0 wpan0: encryption failed: -22
[  311.279755][T13452] loop4: detected capacity change from 0 to 32768
[  311.285318][T13452] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2928 (13452)
[  311.300295][T13452] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  311.306272][T13452] BTRFS info (device loop4): using crc32c (crc32c-lib) checksum algorithm
[  311.309140][T13452] BTRFS info (device loop4): using free-space-tree
[  311.333682][T13459] loop3: detected capacity change from 0 to 32768
[  311.370778][T13459]  loop3: p9 p11 p16
[  311.400702][T12720] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  311.454862][ T5856] udevd[5856]: inotify_add_watch(7, /dev/loop3p9, 10) failed: No such file or directory
[  311.455577][ T6382] udevd[6382]: inotify_add_watch(7, /dev/loop3p16, 10) failed: No such file or directory
[  311.459931][ T5845] udevd[5845]: inotify_add_watch(7, /dev/loop3p11, 10) failed: No such file or directory
[  311.795367][ T5884] usb 4-1: new full-speed USB device number 28 using dummy_hcd
[  311.969488][ T5884] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  311.973866][ T5884] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  311.982123][ T5884] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  311.988098][ T5884] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  311.991602][ T5884] usb 4-1: Product: syz
[  311.993411][ T5884] usb 4-1: Manufacturer: syz
[  311.996073][ T5884] usb 4-1: SerialNumber: syz
[  312.221073][ T5884] usb 4-1: 0:2 : does not exist
[  312.236593][ T5884] usb 4-1: 5:0: failed to get current value for ch 0 (-22)
[  312.257787][ T5884] usb 4-1: USB disconnect, device number 28
[  312.286555][T11949] udevd[11949]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  312.435077][T13486] netlink: 11 bytes leftover after parsing attributes in process `syz.0.2936'.
[  312.504122][T13494] trusted_key: syz.4.2938 sent an empty control message without MSG_MORE.
[  312.891470][T13528] binder: 13527:13528 ioctl c018620b 200000000000 returned -14
[  312.924323][T13530] netlink: 'syz.4.2957': attribute type 4 has an invalid length.
[  313.056268][T13526] loop3: detected capacity change from 0 to 32768
[  313.093463][T13526] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  313.114782][T13526] XFS (loop3): Ending clean mount
[  313.140765][ T7514] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  313.358195][ T5884] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  313.513904][T13564] netlink: 'syz.0.2969': attribute type 21 has an invalid length.
[  313.516667][ T5884] usb 5-1: Using ep0 maxpacket: 16
[  313.516783][ T5913] usb 4-1: new full-speed USB device number 29 using dummy_hcd
[  313.518685][T13564] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2969'.
[  313.528195][ T5884] usb 5-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0
[  313.531626][ T5884] usb 5-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0
[  313.535345][ T5884] usb 5-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  313.540239][ T5884] usb 5-1: config 1 interface 0 has no altsetting 0
[  313.546063][ T5884] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  313.551070][ T5884] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  313.554094][ T5884] usb 5-1: Product: syz
[  313.555654][ T5884] usb 5-1: Manufacturer: syz
[  313.557414][ T5884] usb 5-1: SerialNumber: syz
[  313.642110][T13570] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2972'.
[  313.646516][T13570] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  313.709323][ T5913] usb 4-1: unable to get BOS descriptor or descriptor too short
[  313.714660][ T5913] usb 4-1: unable to read config index 0 descriptor/start: -71
[  313.718192][ T5913] usb 4-1: can't read configurations, error -71
[  313.789370][ T5884] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8
[  314.045777][T13584] ==================================================================
[  314.049205][T13584] BUG: KASAN: slab-use-after-free in __xfrm_state_lookup+0x6ad/0x8d0
[  314.052463][T13584] Read of size 2 at addr ffff888119178142 by task syz.0.2978/13584
[  314.056445][T13584] 
[  314.057490][T13584] CPU: 1 UID: 0 PID: 13584 Comm: syz.0.2978 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  314.057509][T13584] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  314.057516][T13584] Call Trace:
[  314.057522][T13584]  <TASK>
[  314.057528][T13584]  dump_stack_lvl+0x189/0x250
[  314.057548][T13584]  ? __kasan_check_byte+0x12/0x40
[  314.057566][T13584]  ? __pfx_dump_stack_lvl+0x10/0x10
[  314.057579][T13584]  ? lock_release+0x4b/0x3e0
[  314.057598][T13584]  ? __virt_addr_valid+0x4a5/0x5c0
[  314.057614][T13584]  print_report+0xca/0x240
[  314.057625][T13584]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  314.057643][T13584]  kasan_report+0x118/0x150
[  314.057660][T13584]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  314.057679][T13584]  __xfrm_state_lookup+0x6ad/0x8d0
[  314.057698][T13584]  ? __pfx___xfrm_state_lookup+0x10/0x10
[  314.057720][T13584]  xfrm_input_state_lookup+0x6e9/0xa60
[  314.057737][T13584]  ? rcu_is_watching+0x15/0xb0
[  314.057751][T13584]  ? xfrm_input_state_lookup+0xcf/0xa60
[  314.057768][T13584]  ? __pfx_xfrm_input_state_lookup+0x10/0x10
[  314.057787][T13584]  xfrm_input+0x425c/0x72c0
[  314.057803][T13584]  ? vti_input+0x223/0x330
[  314.057825][T13584]  xfrm4_esp_rcv+0xa9/0x220
[  314.057839][T13584]  ? __pfx_xfrm4_esp_rcv+0x10/0x10
[  314.057853][T13584]  ip_protocol_deliver_rcu+0x2e0/0x440
[  314.057872][T13584]  ? ip_local_deliver_finish+0x2ae/0x6f0
[  314.057887][T13584]  ip_local_deliver_finish+0x3bb/0x6f0
[  314.057906][T13584]  NF_HOOK+0x30c/0x3a0
[  314.057921][T13584]  ? __pfx_ip_route_input_noref+0x10/0x10
[  314.057932][T13584]  ? __pfx_ip_local_deliver_finish+0x10/0x10
[  314.057948][T13584]  ? NF_HOOK+0x9a/0x3a0
[  314.057963][T13584]  ? __pfx_NF_HOOK+0x10/0x10
[  314.057979][T13584]  ? __pfx_ip_local_deliver_finish+0x10/0x10
[  314.057996][T13584]  ? ip_local_deliver+0x12a/0x1b0
[  314.058014][T13584]  ip_sublist_rcv_finish+0x221/0x2a0
[  314.058034][T13584]  ip_sublist_rcv+0x53e/0x9b0
[  314.058053][T13584]  ? __pfx_ip_sublist_rcv+0x10/0x10
[  314.058070][T13584]  ? skb_orphan+0xaf/0xd0
[  314.058085][T13584]  ? __pfx_ip_rcv_finish+0x10/0x10
[  314.058103][T13584]  ip_list_rcv+0x3e2/0x430
[  314.058121][T13584]  ? __pfx_ip_list_rcv+0x10/0x10
[  314.058163][T13584]  ? kasan_save_track+0x3e/0x80
[  314.058186][T13584]  ? __kasan_slab_alloc+0x6c/0x80
[  314.058201][T13584]  ? bpf_test_run_xdp_live+0x15f1/0x1b10
[  314.058220][T13584]  ? __pfx_ip_list_rcv+0x10/0x10
[  314.058237][T13584]  __netif_receive_skb_list_core+0x7d2/0x800
[  314.058259][T13584]  ? __pfx___netif_receive_skb_list_core+0x10/0x10
[  314.058278][T13584]  ? netif_receive_skb_list_internal+0x4fd/0xcc0
[  314.058294][T13584]  netif_receive_skb_list_internal+0x975/0xcc0
[  314.058312][T13584]  ? netif_receive_skb_list_internal+0x4fd/0xcc0
[  314.058328][T13584]  ? __pfx_netif_receive_skb_list_internal+0x10/0x10
[  314.058344][T13584]  ? __phys_addr+0xd3/0x180
[  314.058357][T13584]  ? build_skb_around+0x133/0x280
[  314.058374][T13584]  ? __xdp_build_skb_from_frame+0x34b/0x740
[  314.058389][T13584]  netif_receive_skb_list+0x54/0x450
[  314.058404][T13584]  bpf_test_run_xdp_live+0x1786/0x1b10
[  314.058424][T13584]  ? bpf_test_run_xdp_live+0x38e/0x1b10
[  314.058443][T13584]  ? __pfx_bpf_test_run_xdp_live+0x10/0x10
[  314.058459][T13584]  ? 0xffffffffa0003b00
[  314.058470][T13584]  ? 0xffffffffa0003b00
[  314.058491][T13584]  ? __pfx_xdp_test_run_init_page+0x10/0x10
[  314.058510][T13584]  ? _copy_from_user+0x94/0xb0
[  314.058524][T13584]  ? bpf_test_init+0x133/0x170
[  314.058538][T13584]  ? xdp_convert_md_to_buff+0x5b/0x330
[  314.058554][T13584]  bpf_prog_test_run_xdp+0x713/0x1000
[  314.058573][T13584]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  314.058591][T13584]  ? __fget_files+0x2a/0x420
[  314.058605][T13584]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  314.058620][T13584]  bpf_prog_test_run+0x2c7/0x340
[  314.058638][T13584]  __sys_bpf+0x581/0x870
[  314.058653][T13584]  ? __pfx___sys_bpf+0x10/0x10
[  314.058671][T13584]  ? ksys_write+0x22a/0x250
[  314.058687][T13584]  ? __pfx___se_sys_futex+0x10/0x10
[  314.058702][T13584]  ? __pfx_ksys_write+0x10/0x10
[  314.058719][T13584]  __x64_sys_bpf+0x7c/0x90
[  314.058733][T13584]  do_syscall_64+0xfa/0x3b0
[  314.058748][T13584]  ? lockdep_hardirqs_on+0x9c/0x150
[  314.058762][T13584]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  314.058776][T13584]  ? exc_page_fault+0x9f/0xf0
[  314.058791][T13584]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  314.058804][T13584] RIP: 0033:0x7f52b018ebe9
[  314.058816][T13584] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  314.058827][T13584] RSP: 002b:00007f52b10b8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  314.058843][T13584] RAX: ffffffffffffffda RBX: 00007f52b03b5fa0 RCX: 00007f52b018ebe9
[  314.058852][T13584] RDX: 0000000000000069 RSI: 0000200000000600 RDI: 000000000000000a
[  314.058860][T13584] RBP: 00007f52b0211e19 R08: 0000000000000000 R09: 0000000000000000
[  314.058869][T13584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  314.058879][T13584] R13: 00007f52b03b6038 R14: 00007f52b03b5fa0 R15: 00007ffcedcbd4f8
[  314.058892][T13584]  </TASK>
[  314.058897][T13584] 
[  314.264859][T13584] Allocated by task 6355:
[  314.266669][T13584]  kasan_save_track+0x3e/0x80
[  314.268710][T13584]  __kasan_slab_alloc+0x6c/0x80
[  314.270804][T13584]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  314.273161][T13584]  xfrm_state_alloc+0x24/0x2f0
[  314.275239][T13584]  __find_acq_core+0x8a7/0x1c00
[  314.277338][T13584]  xfrm_find_acq+0x78/0xa0
[  314.279250][T13584]  xfrm_alloc_userspi+0x6b3/0xc90
[  314.280952][T13584]  xfrm_user_rcv_msg+0x7a3/0xab0
[  314.282601][T13584]  netlink_rcv_skb+0x208/0x470
[  314.284194][T13584]  xfrm_netlink_rcv+0x79/0x90
[  314.285971][T13584]  netlink_unicast+0x82f/0x9e0
[  314.287852][T13584]  netlink_sendmsg+0x805/0xb30
[  314.289726][T13584]  __sock_sendmsg+0x21c/0x270
[  314.291411][T13584]  ____sys_sendmsg+0x505/0x830
[  314.292986][T13584]  ___sys_sendmsg+0x21f/0x2a0
[  314.294754][T13584]  __x64_sys_sendmsg+0x19b/0x260
[  314.296391][T13584]  do_syscall_64+0xfa/0x3b0
[  314.297894][T13584]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  314.299825][T13584] 
[  314.300636][T13584] Freed by task 47:
[  314.302123][T13584]  kasan_save_track+0x3e/0x80
[  314.303769][T13584]  kasan_save_free_info+0x46/0x50
[  314.305444][T13584]  __kasan_slab_free+0x5b/0x80
[  314.307254][T13584]  kmem_cache_free+0x18f/0x400
[  314.309107][T13584]  xfrm_state_gc_task+0x52d/0x6b0
[  314.311167][T13584]  process_scheduled_works+0xae1/0x17b0
[  314.313378][T13584]  worker_thread+0x8a0/0xda0
[  314.315112][T13584]  kthread+0x711/0x8a0
[  314.316568][T13584]  ret_from_fork+0x3fc/0x770
[  314.318369][T13584]  ret_from_fork_asm+0x1a/0x30
[  314.320221][T13584] 
[  314.321155][T13584] The buggy address belongs to the object at ffff888119178000
[  314.321155][T13584]  which belongs to the cache xfrm_state of size 928
[  314.325651][T13584] The buggy address is located 322 bytes inside of
[  314.325651][T13584]  freed 928-byte region [ffff888119178000, ffff8881191783a0)
[  314.330077][T13584] 
[  314.330846][T13584] The buggy address belongs to the physical page:
[  314.332996][T13584] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888119178900 pfn:0x119178
[  314.336399][T13584] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  314.339527][T13584] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  314.342029][T13584] page_type: f5(slab)
[  314.343411][T13584] raw: 057ff00000000040 ffff888104f10780 dead000000000122 0000000000000000
[  314.346346][T13584] raw: ffff888119178900 00000000800e000b 00000000f5000000 0000000000000000
[  314.349435][T13584] head: 057ff00000000040 ffff888104f10780 dead000000000122 0000000000000000
[  314.352271][T13584] head: ffff888119178900 00000000800e000b 00000000f5000000 0000000000000000
[  314.355318][T13584] head: 057ff00000000002 ffffea0004645e01 00000000ffffffff 00000000ffffffff
[  314.358240][T13584] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  314.361546][T13584] page dumped because: kasan: bad access detected
[  314.363836][T13584] page_owner tracks the page as allocated
[  314.366031][T13584] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5922, tgid 5921 (syz.1.4), ts 59112953255, free_ts 59104349602
[  314.372157][T13584]  post_alloc_hook+0x240/0x2a0
[  314.373950][T13584]  get_page_from_freelist+0x21e4/0x22c0
[  314.375926][T13584]  __alloc_frozen_pages_noprof+0x181/0x370
[  314.377923][T13584]  alloc_pages_mpol+0x232/0x4a0
[  314.379476][T13584]  allocate_slab+0x8a/0x370
[  314.380929][T13584]  ___slab_alloc+0xbeb/0x1410
[  314.382467][T13584]  kmem_cache_alloc_noprof+0x283/0x3c0
[  314.384568][T13584]  xfrm_state_alloc+0x24/0x2f0
[  314.386093][T13584]  pfkey_add+0x6e4/0x2e00
[  314.387494][T13584]  pfkey_sendmsg+0xbfe/0x1090
[  314.389052][T13584]  __sock_sendmsg+0x21c/0x270
[  314.390823][T13584]  ____sys_sendmsg+0x505/0x830
[  314.392604][T13584]  ___sys_sendmsg+0x21f/0x2a0
[  314.394195][T13584]  __x64_sys_sendmsg+0x19b/0x260
[  314.395943][T13584]  do_syscall_64+0xfa/0x3b0
[  314.397408][T13584]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  314.399373][T13584] page last free pid 5850 tgid 5850 stack trace:
[  314.401597][T13584]  __free_frozen_pages+0xbc4/0xd30
[  314.403625][T13584]  __put_partials+0x156/0x1a0
[  314.405253][T13584]  put_cpu_partial+0x17c/0x250
[  314.406855][T13584]  __slab_free+0x2d5/0x3c0
[  314.408408][T13584]  qlist_free_all+0x97/0x140
[  314.409932][T13584]  kasan_quarantine_reduce+0x148/0x160
[  314.411961][T13584]  __kasan_slab_alloc+0x22/0x80
[  314.413632][T13584]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  314.415466][T13584]  flock_lock_inode+0x21f/0x1420
[  314.417146][T13584]  locks_lock_inode_wait+0x107/0x410
[  314.418925][T13584]  __se_sys_flock+0x467/0x5b0
[  314.420532][T13584]  do_syscall_64+0xfa/0x3b0
[  314.422251][T13584]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  314.424270][T13584] 
[  314.425078][T13584] Memory state around the buggy address:
[  314.426889][T13584]  ffff888119178000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  314.429750][T13584]  ffff888119178080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  314.432672][T13584] >ffff888119178100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  314.435244][T13584]                                            ^
[  314.437168][T13584]  ffff888119178180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  314.439818][T13584]  ffff888119178200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  314.442608][T13584] ==================================================================
[  314.446188][T13584] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  314.449300][T13584] CPU: 1 UID: 0 PID: 13584 Comm: syz.0.2978 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  314.454540][T13584] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  314.458049][T13584] Call Trace:
[  314.459509][T13584]  <TASK>
[  314.460782][T13584]  dump_stack_lvl+0x99/0x250
[  314.462659][T13584]  ? __asan_memcpy+0x40/0x70
[  314.464190][T13584]  ? __pfx_dump_stack_lvl+0x10/0x10
[  314.465920][T13584]  ? __pfx__printk+0x10/0x10
[  314.467445][T13584]  vpanic+0x281/0x750
[  314.468787][T13584]  ? __pfx_vpanic+0x10/0x10
[  314.470377][T13584]  ? irqentry_exit+0x74/0x90
[  314.472044][T13584]  panic+0xb9/0xc0
[  314.473293][T13584]  ? __pfx_panic+0x10/0x10
[  314.474809][T13584]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  314.476940][T13584]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  314.478953][T13584]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  314.480924][T13584]  check_panic_on_warn+0x89/0xb0
[  314.482591][T13584]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  314.484529][T13584]  end_report+0x78/0x160
[  314.486042][T13584]  kasan_report+0x129/0x150
[  314.487954][T13584]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  314.489961][T13584]  __xfrm_state_lookup+0x6ad/0x8d0
[  314.491732][T13584]  ? __pfx___xfrm_state_lookup+0x10/0x10
[  314.493567][T13584]  xfrm_input_state_lookup+0x6e9/0xa60
[  314.495407][T13584]  ? rcu_is_watching+0x15/0xb0
[  314.497191][T13584]  ? xfrm_input_state_lookup+0xcf/0xa60
[  314.499083][T13584]  ? __pfx_xfrm_input_state_lookup+0x10/0x10
[  314.501053][T13584]  xfrm_input+0x425c/0x72c0
[  314.502686][T13584]  ? vti_input+0x223/0x330
[  314.504311][T13584]  xfrm4_esp_rcv+0xa9/0x220
[  314.505907][T13584]  ? __pfx_xfrm4_esp_rcv+0x10/0x10
[  314.508149][T13584]  ip_protocol_deliver_rcu+0x2e0/0x440
[  314.510328][T13584]  ? ip_local_deliver_finish+0x2ae/0x6f0
[  314.512166][T13584]  ip_local_deliver_finish+0x3bb/0x6f0
[  314.513967][T13584]  NF_HOOK+0x30c/0x3a0
[  314.515361][T13584]  ? __pfx_ip_route_input_noref+0x10/0x10
[  314.517609][T13584]  ? __pfx_ip_local_deliver_finish+0x10/0x10
[  314.519568][T13584]  ? NF_HOOK+0x9a/0x3a0
[  314.520998][T13584]  ? __pfx_NF_HOOK+0x10/0x10
[  314.522538][T13584]  ? __pfx_ip_local_deliver_finish+0x10/0x10
[  314.524585][T13584]  ? ip_local_deliver+0x12a/0x1b0
[  314.526458][T13584]  ip_sublist_rcv_finish+0x221/0x2a0
[  314.528295][T13584]  ip_sublist_rcv+0x53e/0x9b0
[  314.529920][T13584]  ? __pfx_ip_sublist_rcv+0x10/0x10
[  314.531635][T13584]  ? skb_orphan+0xaf/0xd0
[  314.533055][T13584]  ? __pfx_ip_rcv_finish+0x10/0x10
[  314.534760][T13584]  ip_list_rcv+0x3e2/0x430
[  314.536524][T13584]  ? __pfx_ip_list_rcv+0x10/0x10
[  314.538492][T13584]  ? kasan_save_track+0x3e/0x80
[  314.540421][T13584]  ? __kasan_slab_alloc+0x6c/0x80
[  314.542427][T13584]  ? bpf_test_run_xdp_live+0x15f1/0x1b10
[  314.544506][T13584]  ? __pfx_ip_list_rcv+0x10/0x10
[  314.546388][T13584]  __netif_receive_skb_list_core+0x7d2/0x800
[  314.548788][T13584]  ? __pfx___netif_receive_skb_list_core+0x10/0x10
[  314.551098][T13584]  ? netif_receive_skb_list_internal+0x4fd/0xcc0
[  314.553183][T13584]  netif_receive_skb_list_internal+0x975/0xcc0
[  314.555211][T13584]  ? netif_receive_skb_list_internal+0x4fd/0xcc0
[  314.557308][T13584]  ? __pfx_netif_receive_skb_list_internal+0x10/0x10
[  314.559477][T13584]  ? __phys_addr+0xd3/0x180
[  314.560974][T13584]  ? build_skb_around+0x133/0x280
[  314.562644][T13584]  ? __xdp_build_skb_from_frame+0x34b/0x740
[  314.564574][T13584]  netif_receive_skb_list+0x54/0x450
[  314.566313][T13584]  bpf_test_run_xdp_live+0x1786/0x1b10
[  314.568148][T13584]  ? bpf_test_run_xdp_live+0x38e/0x1b10
[  314.569960][T13584]  ? __pfx_bpf_test_run_xdp_live+0x10/0x10
[  314.571864][T13584]  ? 0xffffffffa0003b00
[  314.573245][T13584]  ? 0xffffffffa0003b00
[  314.574689][T13584]  ? __pfx_xdp_test_run_init_page+0x10/0x10
[  314.576674][T13584]  ? _copy_from_user+0x94/0xb0
[  314.578260][T13584]  ? bpf_test_init+0x133/0x170
[  314.579837][T13584]  ? xdp_convert_md_to_buff+0x5b/0x330
[  314.581623][T13584]  bpf_prog_test_run_xdp+0x713/0x1000
[  314.583393][T13584]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  314.585254][T13584]  ? __fget_files+0x2a/0x420
[  314.586718][T13584]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  314.588600][T13584]  bpf_prog_test_run+0x2c7/0x340
[  314.590245][T13584]  __sys_bpf+0x581/0x870
[  314.591588][T13584]  ? __pfx___sys_bpf+0x10/0x10
[  314.593100][T13584]  ? ksys_write+0x22a/0x250
[  314.594681][T13584]  ? __pfx___se_sys_futex+0x10/0x10
[  314.596397][T13584]  ? __pfx_ksys_write+0x10/0x10
[  314.597994][T13584]  __x64_sys_bpf+0x7c/0x90
[  314.599514][T13584]  do_syscall_64+0xfa/0x3b0
[  314.601042][T13584]  ? lockdep_hardirqs_on+0x9c/0x150
[  314.602986][T13584]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  314.604954][T13584]  ? exc_page_fault+0x9f/0xf0
[  314.606522][T13584]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  314.608469][T13584] RIP: 0033:0x7f52b018ebe9
[  314.609946][T13584] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  314.616322][T13584] RSP: 002b:00007f52b10b8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  314.619018][T13584] RAX: ffffffffffffffda RBX: 00007f52b03b5fa0 RCX: 00007f52b018ebe9
[  314.621592][T13584] RDX: 0000000000000069 RSI: 0000200000000600 RDI: 000000000000000a
[  314.624162][T13584] RBP: 00007f52b0211e19 R08: 0000000000000000 R09: 0000000000000000
[  314.626754][T13584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  314.629425][T13584] R13: 00007f52b03b6038 R14: 00007f52b03b5fa0 R15: 00007ffcedcbd4f8
[  314.632025][T13584]  </TASK>
[  314.633740][T13584] Kernel Offset: disabled
[  314.635182][T13584] Rebooting in 86400 seconds..

VM DIAGNOSIS:
03:09:53  Registers:
info registers vcpu 0

CPU#0
RAX=790327bdd0d6db00 RBX=ffffffff81968338 RCX=790327bdd0d6db00 RDX=0000000000000001
RSI=ffffffff8d9b6df4 RDI=ffffffff8be33400 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa37e30 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a20
RIP=ffffffff8b7943f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b32220ff8 CR3=0000000117e5c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007fdc05212e53
XMM06=0000000000000000 00007fdc05212e4d XMM07=0000000000000000 00007fdc05212e61
XMM08=0000000000000000 00007fdc05212ee7 XMM09=0000000000000000 00007fdc05212fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000034 RBX=0000000000000034 RCX=0000000000000000 RDX=00000000000003f8
RSI=00000000000023a6 RDI=00000000000023a7 RBP=00000000000003f8 RSP=ffffc900061465f0
R8 =ffff8881078d8237 R9 =1ffff11020f1b046 R10=dffffc0000000000 R11=ffffffff854f0270
R12=dffffc0000000000 R13=ffffffff99af9917 R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854f02ec RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f52b10b86c0 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f52b10b7fc8 CR3=0000000039b76000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f52b0387498 00007f52b0387470 XMM03=00007f52b03874a8 00007f52b03874a0
XMM04=00007f52b0eed100 00007f52b0387460 XMM05=00007f52b0387478 00007f52b03874c0
XMM06=00007f52b03874b8 00007f52b03874b0 XMM07=00007f52b03874a8 00007f52b03874a0
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f52b0212fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
