last executing test programs:

1m0.672329718s ago: executing program 1 (id=548):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000100)={[{@utf8}, {@umask={'umask', 0x3d, 0x5}}, {@namecase}, {}, {@fmask={'fmask', 0x3d, 0xab}}, {@time_offset}, {@fmask={'fmask', 0x3d, 0x6}}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'iso8859-13'}}, {@allow_utime={'allow_utime', 0x3d, 0xce38}}]}, 0x1, 0x1528, &(0x7f00000037c0)="$eJzs3AuYT9X6OPD3XWvtMSS+TXIZ1lrv5ptclkmSXJLkkiRJkuSWkDTJkYTEEJI0JCG5DEkMIblMTBr3+/2SkCRNkoTklqz/M+FxOnX+p/M7/XKe37yf59mP9X73ftd+9/f9XvbeZubbrkNrNaldvRERwX8EL/yTBACxADAQAPICQAAA5ePKx2Wtzykx6T/bCftzPZh6pStgVxL3P3vj/mdv3P/sjfufvXH/szfuf/bG/c/euP+MZWebphW6hpfsu/D9/+yMv///D8ksM/bLNWWu6wYQ80dTuP/ZG/f//6zgj2zE/c/euP/ZVeyVLoD9F+D3f3aQ45+u4f5nb9x/xrKzK33/+UovEPkvew6O5LzQmL/q+BljjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMsb/AaX+ZAoBL4ytdF2OMMcYYY4wxxv48PseVroAxxhhjjDHGGGP/+xAESFAQQAzkgFjICblAAMDVkAfyQgSugTi4FvLBdZAfCkBBKATxUBiKgAYDFghCKArFIArXQ3G4AUpASSgFpcFBGUiAG6Es3ATl4GYoD7dABbgVKkIlqAxV4DaoCrdDNbgDqsOdUANqQi2oDXdBHbgb6sI9UA/uhfpwHzSA+6EhPACN4EFoDA9BE3gYmsIj0AyaQwtoCa3+R/nPQ094AXpBb0iCPtAXXoR+0B8GwEswEF6GQfAKDIZXIRmGwFB4DYbB6zAc3oARMBJGwZswGt6CMTAWxsF4SIEJMBHehknwDkyGd2EKTIVUmAbT4T2YATNhFrwPs+EDmANzYR7MhzT4EBbAQkiHj2ARfAwZsBiWwFJYBsthBayEVbAa1sBaWAfrYQNshE2wGbbAVtgG22EHfAI74VPYBbthD3wGe+HzfzP/1D/kd0NAQIECFSqMwRiMxVjMhbkwN+bGPJgHIxjBOIzDfJgP82N+LIgFMR7jsQgWQYMGCQmLYlGMYhSLY3EsgSWwFJZChw4TMAHL4k1YDstheSyPFbACVsRKWAmrYBWsilWxGlbD6lgda2ANrIW18C68C/tgXayL9bAe1sf6l25PYSNshI2xMTbBJtgUm2IzbIYtsAW2wlbYGltjG2yD7bAdtsf22AE7YCImYkfsiJ2wE3bGztgFu2BX7IrdsDt2z3w+B+AL+AL2xhqiD/bFvtgPk3MMwJfwJXwZB+Er+Aq+isk4BIfia/gavo7D8SSOwJE4CkdhVfEWjsGxSGI8pmAKTsSJOAknYVah7+JUTMVpOB2n4wyciTPxfZyNH+AHOBfn4nxMwzRcgAsxHdNxEZ7CDFyMS3ApLsPluAxX4ipciWtwLa7B9bgeN+JG3IybcStuxe24HT9BBYCf4m7cjcm4F/fiPtyH+3E/HsADmImZeBAP4iE8hIfxMB7BI3gUj+FxPIYn8ASexFN4Gk/jWTyL5/DZ+K8bf1JydTKILEooESNiRKyIFblELpFb5BZ5RB4RERERJ+JEPpFP5Bf5RUFRUMSLeFFEFBFGGEEijAEAERVRUVwUFyVECVFKlBJOOJEgEkRZUVaUE+VEeXGLqCBuFRVFJdHWVRFVRFXRzlUTd4jqorqoIWqKWqK2qC3qiDqirqgr6ol6or6oLxqI+0VD0QcH4IMiqzNNxBBsKoZiM9FcyIufYK3FcGwj2op24nExEkdgB9HaJYqnREcxBjuJv4mx+IzoIsZjV/Gc6Ca6ix7iedFTtHG9RG8xGfuIvmIq9hP9xQDxkpiBNcX7ODtnLfGqSBZDxFDxmpiPr4vh4g0xQowUo8SbYrR4S4wRY8U4MV6kiAlionhbTBLviMniXTFFTBWpYpqYLt4TM8RMMUu8L2aLD8QcMVfME/NFmvhQLBALRbr4SCwSH4sMsVgsEUvFMrFcrBArxSqxWqwRa8U6sV5sEBvFJrFZbBFbxTaxXewQn4id4lOxS+wWe8RnYq/4XOwTX4j94ktxQHwlMsXX4qD4RhwS34rD4jtxRHwvjopj4rj4QZwQP4qT4pQ4Lc6Is+IncU78LM4LL0CiFFJKJQMZI3PIWJlT5pJXydwyuPjsXiPj5LUyn7xO5pcFZEFZSMbLwrKI1NJIK0mGsqgsJqPyellc3iBLyJKylCwtnSwjE+SNsqy8SZaTN8vy8hZZQd4qK8pKsrKsIm+TVeXtEiIX9lFD1pS1ZG15l0yCu2VdeY+sJ++V9eV9soG8XzaUD8hG8kHZWD4km8iHZVP5iGwmm8sWsqVsJR+VreVjso1sK9vJx2V7+YTsIJ+UifIp2VH6iy+RZ2QX+azsKp+T3WR32UP+LM9LL3vJ3hL6gOwrX5T9ZH85IBYA5MtykHxFDpavymQ5RA6Vr8lh8nU5XL4hR8iRcpR8U46Wb8kxcqwcJ8fLFDlBTpRvy0nyHTlZviunyKkyVU6TA+TAX2aaJeW/zH/7d/IH/7L3jXKT3Cy3yK1ym9wud8hP5E65U+6Su+QeuUfulXvlPrlP7pf75QF5QGbKTHlQHpSH5CF5WB6WR+QReVQek2fkD/KE/FGelKfkKXlGnpVn5bmLzwEoVEJJpVSgYlQOFatyqlzqKpVbXa3yqLwqoq5RcepalU9dp/KrAqqgKqTiVWFVRGlllFWkQlVUFVNRdT1efMGoUqq0cqqMSlA3/jv5qri6QZVQJX+Vf6m+pH9SXyvVSrVWrVUb1Ua1U+1Ue9VedVAdVKJKVB1VR9VJdVKdVWfVRXVRXVVX1U11Uz1UD9VT9VS9VC+VpJJUX/Wi6qf6qwHqJTVQvawGqUFqsBqsklWyGqqGqmFqmBquhqsRaoQapUap0Wq0GqPGqHFqnEpRKWqimqgmqUlqspqspqgpKlWlqulqupqhZqhZapaarWarOWqOmqfmqTSVphaoBSpdpatFapHKUIvVYrVULVXL1XK1Uq1Uq9VqtVatVevVepWhNqlNaovaorapbWqH2qF2qp1ql9ql9qg9aq/aq/apfWq/2q8OqAMqU2Wqg+qgOqQOqcPqsDqijqij6qg6ro6rE+qEOqlOqtPqtDqrzqpz6pw6r85nnfYFIhCBClQQE8QEsUFskCvIFeQOcgd5gjxBJIgEcUFckC+4LsgfFAgKBoWC+KBwUCTQgQlsIC42PRpcHxQPbghKBCWDUkHpwAVlgoTgxqBscFNQLrg5KB/cElQIbg0qBpWCykGV4LaganB7UC24I6ge3BnUCGoGtYLawV1BneDuoG5wT1AvuDeoH9wXNAjuDxoGDwSNggeDxsFDQZPg4aBp8EjQLGgetAhaBq3+1Pm9P1ngMddL99ZJuo/uq1/U/XR/PUC/pAfql/Ug/YoerF/VyXqIHqpf08P063q4fkOP0CP1KP2mHq3f0mP0WD1Oj9cpeoKeqN/Wk/Q7erJ+V0/RU3Wqnqan6/f0DD1Tz9Lv69n6Az1Hz9Xz9Hydpj/UC/RCna4/0ov0xzpDL9ZL9FK9TC/XK/RKvUqv1mv0Wr1Or9cb9Ea9SW/WW/RWvU1v1zv0J3qn/lTv0rv1Hv2Z3qs/1/v0F3q//lIf0F/pTP21Pqi/0Yf0t/qw/k4f0d/ro/qYPq5/0Cf0j/qkPqVP6zP6rP5Jn9M/6/PaZ53cZ329G2WUiTExJtbEmlwml8ltcps8Jo+JmIiJM3Emn8ln8pv8pqApaOJNvCliipgsZMgUNUVN1ERNcVPclDAlTClTyjjjTIJJMGVNWVPOlDPlTXlTwVQwFU1FU9lUNreZ28zt5nZzh7nD3GnuNDVNTVPb1DZ1TB1T19Q19Uw9U9/UNw1MA9PQNDSNTCPT2DQ2TUwT09Q0Nc1MM9PCtDCtTCvT2rQ2bUwb0860M+1Ne9PBdDCJJtF0NB1NJ9PJdDadTRfTxXQ1XU030830MD1MT9PT9DK9TJJJMn1NX9PP9DMDzAAz0Aw0g8wgM9gMNskm2Qw1Q80wM8wMN8PNCDPSjMo6UTVvmTFmrBlnxpsUk2ImmolmkplkJpvJZoqZYlJNqpluppsZZoaZZWaZ2Wa2mWPmmHlmnkkzaWaBWWDSTbpZZBaZDJNhlpglZplZZlaYFWaVWWXWmDVmHawzG8wGs8lsMlvMFrPNbDM7zA6z0+w0u8wus8fsMXvNXrPP7DP7zX5zwBwwmSbTHDQHzSFzyBw2h80Rc8QcNUfNcXPcnDAnzElz0pw2p81ZU+Di96U3sTanzWWvsrnt1TaPzWv/MS5oC9l4W9gWsdrmtwV+FRtrbQlb0paypa2zZWyCvfE3cUVbyVa2Vexttqq93Vb7TVzH3m3r2ntsPXuvrW3v+lVc395nG9iHbUNEANvcNrYtbRP7sG1qH7HNbHPbwra07e0TtoN90ibap2xH+/Rv4gV2oV1lV9s1dq3dZXfb0/aMPWS/tWftT7aX7W0H2pftIPuKHWxftcl2yG/iUfZNO9q+ZcfYsXacHf+beIqdalPtNDvdvmdn2Jm/idPsh3a2Tbdz7Fw7z87/Jc6qKd1+ZBfZj22GDWCJXWqX2eV2hV15qVaf1663G+xGu9N+arfYrXab3W53XDoRtrvtHvuZ3Ws/twftN3a//dIesIdtpv36lzjr+A7b7+wR+709ao/Z4/YHe8L+qC5lZx37D/Zne956C4QEJElRQDGUg2IpJ+Wiqyg3XU15KC9F6BqKo2spH11H+akAFaRCFE+FqQhpMmSJKKSiVIyidD1dKq8UlSZHZSiBbqSydBOVo5upPN1CFehWqkiVqDJVoduoKt1O1egOqk53Ug2qSbWoNt1Fdehuqkv3UD26l+rTfdSA7qeG9AA1ogepMT1ETehhakqPUDNqTi2oJbWiR6k1PUZtqC21o8epPT1BHehJSqSnqCM9TZ3ob9SZnqEu9Cx1peeoG3WnHvQ89aQXqBf1piTqQ33pRepH/WkAvUQD6WUaRK/QYHqVkmkIDaXXaBi9TsPpDRpBI2kUvUmj6S0aQ2NpHI2nFJpAE+ltmkTv0GR6l6bQVEqlaTSd3qMZNJNm0fs0mz6gOTSX5tF8SqMPaQEtpHT6iBbRx5RBi2kJLaVltJxW0EpaRatpDa2ldbSeNtBG2kSbaQttpW20nXbQJ7STPqVdtJv20Ge0lz6nffQF7acv6QB9RZn0NR2kb+gQfUuH6Tvfm76no3SMjtMPdIJ+pJN0ik7TGTpLP9E5+pnOkycIMRShDFUYhDFhjjA2zBnmCq8Kc4dXh3nCvGEkvCaMC68N84XXhfnDAmHBsFAYHxYOi4Q6NKENKQzDomGxMBpeHxYPbwhLhCXDUmHp0IVlwoTwxrBseFNYLrw5LB/eElYIbw0rhpXCh++tEt4WVg1vD6uFd4TVwzvDGmHNsFZYO7wrrBPeHdYN7wnrhfeG5cL7wgbh/WHD8IGwUfhg2Dh8KGwSPhw2DR8Jm4XNwxZhy7BV+GjYOnwsbBO2DduFj4ftwyfCDuGTYWL4VNgxfPqX9fct/Ofrk8I+Yd/wxfDF0Pt75Lzo/Gha9MPogujCaHr0o+ii6MfRjOji6JLo0uiy6PLoiujK6Kro6uia6Nrouuj66Iboxqj3tXOAQyecdMoFLsblcLEup8vlrnK53dUuj8vrIu4aF+eudfncdS6/K+AKukIu3hV2RZx2xllHLnRFXTEXdde74u4GV8KVdKVcaedcGZfgWrpWrpVr7R5zbVxb18497h53T7gn3JPuSfeU6+iedp3c31xn94zr4p51z7rnXDfX3fVwz7uebkKeC+/JJNfX9XX9XD83wA1wA91AN8gNcoPdYJfskt1QN9QNc8PccDfcjXAj3Cg3yo12o90YN8aNc+NciktxE91EN8lNcpPdZDfFTXGpLtVNd9PdDDfDVZ15YS9z3Bw3z81zaS7NLXBZ54zpbpFb5DJchlvilrhlbplb4Va4VW6VW+PWuHVundvgNrhNbpPb4ra4bW6b2+F2uJ1up9vl816Y1O11+9w+t9/tdwfcVy7Tfe0Oum/cIfetO+y+c0fc9+6oO+aOux/cCfejO+lOudPujDvrfnLn3M/uvPMuJTIhMjHydmRS5J3I5Mi7kSmRqZHUyLTI9Mh7kRmRmZFZkfcjsyMfROZE5kbmReZH0iIfRhZEFkbSIx9FFkU+jmREFkeWRJZGlkWWR7wvvCX0RX0xH/XX++L+Bl/Cl/SlfGnvfBmf4G/0Zf1Nvpy/2Zf3t/gK/lZf0Vfylf0jvplv7lv4lr6Vf9S39o/5Nr6tb+cf9+39E76Df9In+qd8R/+07+T/5jv7Z3wX/6zv6p/z3Xx338M/73v6F3wv39sn+T6+r3/R9/P9/QD/kh/oX/aD/Ct+sH/VJ/shfqh/zQ/zr/vh/g0/wo/0o2Le9KMvXSLDeJ/iJ/iJ/m0/yb/jJ/t3/RQ/1af6aX66f8/P8DP9LP++n+0/8HP8XD/Pz/dp/kO/wC/06f4jv8h/7DP84ks3lf0Kv9Kv8qv9Gr/Wr/Pr/Qa/0W/ym/0Wv9Vv89v9Dv+J3+k/9bv8br/Hf+b3+s/9Pv+F3++/9Af8Vz7Tf+0P+m/8If+tP+y/80f89/6oP+aP+x/8Cf+jP+lP+dP+jD/rf/Ln/M/+PP/OGmOMMcbYHzLh8lD8es2F2/l9fidH/N3GfQHg6q2FMv9+fdYZ5br8F8b9RXz7CAA81bvrg5eWGjWSkpIubpshISg2F+DS/wRliYHL8WJoB09AIrSFsr9bf3/R/Sz9i/mjtwDk+rucWLgcX57/CwBM+p35H3181IIK4em4/8/8cwFKFLuckxMux4uh3S/3V9pCuX9Sf4HW/6L+nF+mALT5u5zccDm+XH8CPAZPQ+KvtmSMMcYYY4wxxi7oLyp3vnT9eeknPn/v+jxeXc7JAZfjf3V9zhhjjDHGGGOMsSvvme49nnw0MbFt539/UO1/lPWHB03hf2tmHvzuwHuAS48oAPgPJwTIGsi/8ig2/yX7Sr741vnHVcvO+AD+O1r5Zwyu8AcTY4wxxhhj7E93+aT/14+rK1UQY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDGWDf0Vf07sSh8jY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxdqX9vwAAAP//kfb+pw==")
r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000200))

1m0.593277661s ago: executing program 1 (id=549):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x6c, 0x0, 0x8, 0x101, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8, 0x3, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8}, @CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8, 0x6, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8, 0x3, 0x1, 0x0, 0x9}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xe8e3}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8035}]}, 0x6c}, 0x1, 0x0, 0x0, 0x48d1}, 0x810)

1m0.452685024s ago: executing program 1 (id=551):
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x8})
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]})

1m0.308355315s ago: executing program 1 (id=552):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@minixdf}, {@quota}]}, 0x3, 0x43b, &(0x7f0000000440)="$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")
open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x91)

1m0.049293206s ago: executing program 1 (id=553):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_DESTROY$stdev(r0, 0x3b80, &(0x7f0000000400)={0x8})

59.571727085s ago: executing program 1 (id=559):
unshare(0x22020600)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000800), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000ec0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000408001d00", @ANYRES32=0x0, @ANYBLOB="080001"], 0x24}}, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x2, &(0x7f0000000240)=0x1000, 0x4)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000080)={0x1, {{0xa, 0x4e27, 0x6, @mcast2, 0xb9}}, {{0xa, 0x4ea3, 0x5, @mcast1, 0x7}}}, 0x108)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)

59.382979811s ago: executing program 32 (id=559):
unshare(0x22020600)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000800), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000ec0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000408001d00", @ANYRES32=0x0, @ANYBLOB="080001"], 0x24}}, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x2, &(0x7f0000000240)=0x1000, 0x4)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000080)={0x1, {{0xa, 0x4e27, 0x6, @mcast2, 0xb9}}, {{0xa, 0x4ea3, 0x5, @mcast1, 0x7}}}, 0x108)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)

7.07992199s ago: executing program 2 (id=1213):
syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904010001020d00090524ff0701052400000a0d240f0100000000000000000006241a00000008241c000581030002"], 0x0)

5.698936855s ago: executing program 2 (id=1231):
syz_mount_image$xfs(&(0x7f0000000040), &(0x7f0000009740)='./file0\x00', 0x4000000, &(0x7f00000002c0)={[{@pquota}, {@discard}, {@quota}, {@grpid}, {@nogrpid}, {@noalign}, {@inode64}, {@attr2}]}, 0x1, 0x97ee, &(0x7f0000012f40)="$eJzs3QW8rGWheP994ACHDkGwACkxSQkD6VBESVFCkJYUEAGlQwkVFAEFFFCQ7u4u6e7u7o7/58AB8bjgcn9/74XLWuvj2bNn5t2zn3m+87zu2e9mZsl5F51zYGCcgTd68/SfnbPr7csuNuaC6x678+Dr9tphoYeGXTzyGyfjzj7sdI5hp3MODAwMGnY7g964bPBsxxw7wsDggaH/+2djjDraCGMMDIw27Oyw2xmY+Y2T0fd/c7vXhosHOunQb7f9G/9eb8yhNzL0k6WXe2WtgYGBIW/7+qHjmvbf7qi0JeeYb95/Wr3lNsKwqwf987rXTwe/8W/0fQcGRt974J0fH0O3HeltX/u/2dDvOc7kA4vf/j587/9zLTnHfAsM5z90LY447LKZh67x4degseEf5zssuvoDw6Zw0LCJG/y29fJ+PO7/n1pyjnkXHHjndTyw0Dyb3P/a6/vNwXMPDAyeZ2Bg8LwDA4Pne7896j/T+/rgq6qqqvelOeacYehz9hGG+3lgyJs/19LPhRe8PN3dAwODF3rjeeLg5d58LlhVVVVVVVVVH8zmmHOGueD5/zjv9vx/0pO3Hrfn/1VVVVVVVVX/d1pgjjlnGPpcf7jn/xO92/P/xx88dL83/vZ/9pnf+KpX3987UVVVVVVVVVXv2rwL4PP/Sd/t+f9Fx0x6ac//q6qqqqqqqv7vtMhrr7222dteZ2/YxVO/eT09/z/1vluXed8GXFVVVVVVVVX/7V595KTT/vma7xMPDPd676837PcCg4444/LL37eBfjAa9O+/D9n8/R7T/9+GOg85aNKBgbUWf7+HUu9D/2deq77+R8rfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/MW9w/H/t17//9SjVnjzveA/M+UM15/0z698/b3/By+0wCNbvE9Dfz/6sB7/H1ht0MDAMN9xVhsYGFhojkUWm3pgYOCk62eYcoqBt66bZeh1Xx1vxNffIP7N/0xknnH5hjef7I3ToQ+UgfHfuo0jXr/9BV7bZ8RBww3ibY173H77rbrkczMOfzrVO9+PEd76bMxjH3zzv2UZYbiNhrzDF795+2/el+Gdh4196qFjn2b9NdeZZr2NNv7iamsuv8pKq6y01qzTzzTdjLPOOtNM06y82horTfvGx3eas0lf/zjXe5mzMYafs0fmePucDX/f3mnOJn33OXv9Fne5cMg33pyzwf/NOZvr3eds0tWGfaNxZx9pYLnX52bQwMC4c480sOHQM9ONMjAw7jzDtp1o6LZfG2+EgYGd/nlHh342yluPwUGbD91myXkXnfON3dTAwD9P/9k7vJ/9yMNGPvuw0zmGnc75xrcZZ+CfD8XBsx1z7AhD5+JfpmOMUUcbYYyBgdGGnR12OwOzvnEy2slvbvcO77M+3EBff5mV7d/493pjDgwMjD70k4mXP3WboVP/v/A+7f9P////b16zDHrr8Tho2L9h27zhNcd8C/zze70+DUPnbsRhl8081OQ//Nb2/9K/jXfSIQOTvst43+V1cV6PHl9rnDTBlv+p18Wh8U70LuN9l9fxfcfxLnH37g+8cVP/sfEOt69b8PWPs7+Xfd3Au+/rRqQbWOmSTw2/r/vWOw/xX3aXb87RKMNt9E77uon2nGTzobc/+7vv6xYcOvaR/mVfN8LAwLhzvbmvG7rjm3ekgZ2Gnpl+6Jn5Rho4YOiZGV4/M+rAGUPPfGmFtddYcegF8//742DqQf/yB5qwzuYdbp0Nett9HzTc33cOfuN09H3ffA+nd9hvDhp2t/7LfQU9bsd5l/G+y/tP4TwPvWzFI4dM8J96/yka75B3H+87vV/2O453x2dPvf0/PN631tlIb5uu+d/LOpv0X9fZ0Ls44ttWxnv9OWxF2P6Nzyd669Y22PTBt36mGGm42/2vfqaY/93X2TirDfd12+09MOjd5ma+9zI3n/y3fdAWb5+b9/rz1tSTv3H9iO8yN6PMuuxUb87NyP/NuZnvvzs3sw+M+K9zM3hgnoGBgSmG7R/mfS9zM9G7z817fdyMBtu/8flKb1009w4Hnffm3Aw/F//V3Mz7352bSd963Ezx+nWTjTAw8sgDGy6//vrrTvfGxzfPTv/Gx3dfg3O/l7kc5z8zlx8f/E5z+c+H6hh3X7rvf7EG/22f/ubtz/3fncuBt+ZyYLXhF0t9UOv3f+7yd5e/u/zd5e8uf3f5i3uH4/9vvf7/buN8dedhv9wY6dJJJtz2/R7v+9yH+vj/MN9/Of6/7YSTXDrCwFvXvevx2Te2+UAen535jZPR939zu+GPD/JA3/n47N6zzrz1/9Lx2f+n3lyr7+H3cO3/3eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/uLe4fj/tG/+HcB90y385LADoSM9tNVSC7/f432f+1Af/x/m+y/H/xdeaquHRhh467p3Pf7/xjaO4/93vjTvjh/k4/9vrtWO/9d/Uf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3lL+4djv/P/ubfARx66O4bv/n3AFePu/1J7/d43+c+rMf/e/9/b+3/3eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/uKGHf8fGO7tLb/b4wKD4///t3sH/4Xzxyz+i+SPWfwXzR+z+C+WP2bxXzx/zOK/RP6Yxf97+WMW/yXzxyz+388fs/j/IH/M4r9U/pjFf+n8MYv/MvljFv9l88cs/j/MH7P4L5c/ZvFfPn/M4v+j/DGL/wr5Yxb/FfPHLP4r5Y9Z/FfOH7P4r5I/ZvFfNX/M4r9a/pjF/8f5Yxb/1fPHLP5r5I9Z/NfMH7P4r5U/ZvFfO3/M4r9O/pjF/yf5Yxb/dfPHLP7r5Y9Z/NfPH7P4/zR/zOK/Qf6Yxf9n+WMW/w3zxyz+G+WPWfw3zh+z+P88f8zi/4v8MYv/JvljFv9N88cs/pvlj1n8N88fs/hvkT9m8d8yf8ziv1X+mMV/6/wxi/82+WMW/23zxyz+v8wfs/j/Kn/M4r9d/pjFf/v8MYv/DvljFv8d88cs/r/OH7P4/yZ/zOL/2/wxi/9O+WMW/53zxyz+v8sfs/j/Pn/M4r9L/pjF/w/5Yxb/XfPHLP675Y9Z/HfPH7P4/zF/zOL/p/wxi/8e+WMW/z3zxyz+e+WPWfz/nD9m8f9L/pjFf+/8MYv/PvljFv9988cs/n/NH7P4/y1/zOK/X/6YxX///DGL/9/zxyz+B+SPWfwPzB+z+B+UP2bxPzh/zOJ/SP6Yxf/Q/DGL/2H5Yxb/w/PHLP5H5I9Z/I/MH7P4H5U/ZvE/On/M4n9M/pjF/9j8MYv/cfljFv/j88cs/ifkj1n8T8wfs/iflD9m8T85f8zif0r+mMX/1Pwxi/9p+WMW/9Pzxyz+Z+SPWfzPzB+z+J+VP2bxPzt/zOJ/Tv6Yxf/c/DGL/3n5Yxb/8/PHLP4X5I9Z/C/MH7P4X5Q/ZvH/R/6Yxf/i/DGL/yX5Yxb/S/PHLP6X5Y9Z/C/PH7P4X5E/ZvG/Mn/M4n9V/pjF/+r8MYv/NfljFv9r88cs/tflj1n8r88fs/jfkD9m8b8xf8zif1P+mMX/5vwxi/8t+WMW/1vzxyz+t+WPWfxvzx+z+N+RP2bxvzN/zOJ/V/6Yxf/u/DGL/z35Yxb/e/PHLP735Y9Z/O/PH7P4P5A/ZvF/MH/M4v9Q/pjF/+H8MYv/I/ljFv9H88cs/o/lj1n8H88fs/g/kT9m8X8yf8zi/1T+mMX/6fwxi/8z+WMW/2fzxyz+z+WPWfyfzx+z+L+QP2bxfzF/zOL/Uv6Yxf/l/DGL/yv5Yxb/V/PHLP6v5Y9J/AcN5I9Z/Aflj1n8R8gfs/iPmD9m8R+cP2bxHyl/zOI/cv6YxX+U/DGL/5D8MYv/qPljFv/R8scs/qPnj1n8x8gfs/iPmT9m8R8rf8ziP3b+mMV/nPwxi/+4+WMW//Hyxyz+H8kfs/iPnz9m8Z8gf8zi/9H8MYv/hPljFv+J8scs/h/LH7P4fzx/zOL/ifwxi/8n88cs/p/KH7P4T5w/ZvGfJH/M4j9p/pjF/9P5Yxb/yd70H/I+jesDmsV/8tY/ZvGfIn/M4j9l/pjFf6r8MYv/Z/LHLP5T549Z/D+bP2bx/1z+mMX/8/ljFv8v5I9Z/L+YP2bx/1L+mMV/mvwxi/+0+WMW/+nyxyz+0+ePWfxnyB+z+M+YP2bx/3L+mMV/pvwxi//M+WMW/1nyxyz+s+aPWfy/kj9m8f9q/pjF/2v5Yxb/r+ePWfxnyx+z+H8jf8ziP3v+mMV/jvwxi/+c+WMW/7nyxyz+c+ePWfznyR+z+M+bP2bxny9/zOI/f/6YxX+B/DGL/zfzxyz+38ofs/gvmD9m8f92/pjFf6H8MYv/d/LHLP7fzR+z+C+cP2bxXyR/zOK/aP6YxX+x/DGL/+L5Yxb/JfLHLP7fyx+z+C+ZP2bx/37+mMX/B/ljFv+l8scs/kvnj1n8l8kfs/gvmz9m8f9h/pjFf7n8MYv/8vljFv8f5Y9Z/FfIH7P4r5g/ZvFfKX/M4r9y/pjFf5X8MYv/qvljFv/V8scs/j/OH7P4r54/ZvFfI3/M4r9m/pjFf638MYv/2vljFv918scs/j/JH7P4r5s/ZvFfL3/M4r9+/pjF/6f5Yxb/DfLHLP4/yx+z+G+YP2bx3yh/zOK/cf6Yxf/n+WMW/1/kj1n8N8kfs/hvmj9m8d8sf8ziv3n+mMV/i/wxi/+W+WMW/63yxyz+W+ePWfy3yR+z+G+bP2bx/2X+mMX/V/ljFv/t8scs/tvnj1n8d8gfs/jvmD9m8f91/pjF/zf5Yxb/3+aPWfx3yh+z+O+cP2bx/13+mMX/9/ljFv9d8scs/n/IH7P475o/ZvHfLX/M4r97/pjF/4/5Yxb/P+WPWfz3yB+z+O+ZP2bx3yt/zOL/5/wxi/9f8scs/nvnj1n898kfs/jvmz9m8f9r/pjF/2/5Yxb//fLHLP77549Z/P/+r/73/q+P6wOaxf+A1j9m8T8wf8zif1D+mMX/4Pwxi/8h+WMW/0Pzxyz+h+WPWfwPzx+z+B+RP2bxPzJ/zOJ/VP6Yxf/o/DGL/zH5Yxb/Y/PHLP7H5Y9Z/I/PH7P4n5A/ZvE/MX/M4n9S/pjF/+T8MYv/KfljFv9T88cs/qflj1n8T88fs/ifkT9m8T8zf8zif1b+mMX/7Pwxi/85+WMW/3Pzxyz+5+WPWfzPzx+z+F+QP2bxvzB/zOJ/Uf6YxP/18v/3JP6DLs4fs/hfkj9m8b80f8zif1n+mMX/8vwxi/8V+WMW/yvzxyz+V+WPWfyvzh+z+F+TP2bxvzZ/zOJ/Xf6Yxf/6/DGL/w35Yxb/G/PHLP435Y9Z/G/OH7P435I/ZvG/NX/M4n9b/pjF//b8MYv/HfljFv8788cs/nflj1n8784fs/jfkz9m8b83f8zif1/+mMX//vwxi/8D+WMW/wfzxyz+D+WPWfwfzh+z+D+SP2bxfzR/zOL/WP6Yxf/x/DGL/xP5Yxb/J/PHLP5P5Y9Z/J/OH7P4P5M/ZvF/Nn/M4v9c/pjF//n8MYv/C/mPTBda/F/MH7P4v5Q/ZvF/OX/M4v9K/pjF/9X8MYv/a/ljEv/XP83/37P4D8ofs/iPkD9m8R8xf8ziPzh/zOI/Uv6YxX/k/DGL/yj5Yxb/IfljFv9R88cs/qPlj1n8R88fs/iPkT9m8R8zf8ziP1b+mMV/7Pwxi/84+WMW/3Hzxyz+4+WPWfw/kj9m8R8/f8ziP0H+mMX/o/ljFv8J88cs/hPlj1n8P5Y/ZvH/eP6Yxf8T+WMW/0/mj1n8P5U/ZvGfOH/M4j9J/pjFf9L8MYv/p/PHLP6T5Y9Z/CfPH7P4T5E/ZvGfMn/M4j9V/pjF/zP5Yxb/qfPHLP6fzR+z+H8uf8zi//n8MYv/F/LHLP5fzB+z+H8pf8ziP03+mMV/2vyxQefsOtLAwMCH3n+6/DHL+p8+f8ziP0P+mMV/xvwxi/+X88cs/jPlj1n8Z84fs/jPkj9m8Z81f8zi/5X8MYv/V/PHLP5fyx+z+H89f8ziP1v+mMX/G/ljFv/Z88cs/nPkj1n858wfs/jPlT9m8Z87f8ziP0/+mMV/3vwxi/98+WMW//nzxyz+C+SPWfy/mT9m8f9W/pjFf8H8MYv/t/PHLP4L5Y9Z/L+TP2bx/27+mMV/4fwxi/8i+WMW/0Xzxyz+i+WPWfwXzx+z+C+RP2bx/17+mMV/yfwxi//388cs/j/IH7P4L5U/ZvFfOn/M4r9M/pjFf9n8MYv/D/PHLP7L5Y9Z/JfPH7P4/yh/zOK/Qv6YxX/F/DGL/0r5Yxb/lfPHLP6r5I9Z/FfNH7P4r5Y/ZvH/cf6YxX/1/DGL/xr5Yxb/NfPHLP5r5Y9Z/NfOH7P4r5M/ZvH/Sf6YxX/d/DGL/3r5Yxb/9fPHLP4/zR+z+G+QP2bx/1n+mMV/w/wxi/9G+WMW/43zxyz+P88fs/j/In/M4r9J/pjFf9P8MYv/ZvljFv/N88cs/lvkj1n8t8wfs/hvlT9m8d86f8ziv03+mMV/2/wxi/8v88cs/r/KH7P4b5c/ZvHfPn/M4r9D/pjFf8f8MYv/r/PHLP6/yR+z+P82f8ziv1P+mMV/5/wxi//v8scs/r/PH7P475I/ZvH/Q/6YxX/X/DGL/275Yxb/3fPHLP5/zB+z+P8pf8ziv0f+mMV/z/wxi/9e+WMW/z/nj1n8/5I/ZvHfO3/M4r9P/pjFf9/8MYv/X/PHLP5/yx+z+O+XP2bx3z9/zOL/9/wxi/8B+WMW/wPzxyz+B+WPWfwPzh+z+B+SP2bxPzR/zOJ/WP6Yxf/w/DGL/xH5Yxb/I/PHLP5H5Y9Z/I/OH7P4H5M/ZvE/Nn/M4n9c/pjF//j8MYv/CfljFv8T88cs/iflj1n8T84fs/ifkj9m8T81f8zif1r+mMX/9Pwxi/8Z+WMW/zPzxyz+Z+WPWfzPzh+z+J+TP2bxPzd/zOJ/Xv6Yxf/8/DGL/wX5Yxb/C/PHLP4X5Y9Z/P+RP2bxvzh/zOJ/Sf6Yxf/S/DGL/2X5Yxb/y/PHLP5X5I9Z/K/MH7P4X5U/ZvG/On/M4n9N/pjF/9r8MYv/dfljFv/r88cs/jfkj1n8b8wfs/jflD9m8b85f8zif0v+mMX/1vwxi/9t+WMW/9vzxyz+d+SPWfzvzB+z+N+VP2bxvzt/zOJ/T/6Yxf/e/DGL/335Yxb/+/PHLP4P5I9Z/B/MH7P4P5Q/ZvF/OH/M4v9I/pjF/9H8MYv/Y/ljFv/H88cs/k/kj1n8n8wfs/g/lT9m8X86f8zi/0z+mMX/2fwxi/9z+WMW/+fzxyz+L+SPWfxfzB+z+L+UP2bxfzl/zOL/Sv6Yxf/V/DGL/2v5YxL/EQfyxyz+g/LHLP4j5I9Z/EfMH7P4D84fs/iPlD9m8R85f8ziP0r+mMV/SP6YxX/U/DGL/2j5Yxb/0fPHLP5j5I9Z/MfMH7P4j5U/ZvEfO3/M4j9O/pjFf9z8MYv/ePljFv+P5I9Z/MfPH7P4T5A/ZvH/aP6YxX/C/DGL/0T5Yxb/j+WPWfw/nj9m8f9E/pjF/5P5Yxb/T+WPWfwnzh+z+E+SP2bxnzR/zOL/6fwxi/9k+WMW/8nzxyz+U+SPWfynzB+z+E+VP2bx/0z+mMV/6vwxi/9n88cs/p/LH7P4fz5/zOL/hfwxi/8X88cs/l/KH7P4T5M/ZvGfNn/M4j9d/pjFf/r8MYv/DPljFv8Z88cs/l/OH7P4z5Q/ZvGfOX/M4j9L/pjFf9b8MYv/V/LHLP5fzR+z+H8tf8zi//X8MYv/bPljFv9v5I9Z/GfPH7P4z5E/ZvGfM3/M4j9X/pjFf+78MYv/PPljFv9588cs/vPlj1n8588fs/gvkD9m8f9m/pjF/1v5Yxb/BfPHLP7fzh+z+C+UP2bx/07+mMX/u/ljFv+F88cs/ovkj1n8F80fs/gvlj9m8V88f8ziv0T+mMX/e/ljFv8l88cs/t/PH7P4/yB/zOK/VP6YxX/p/DGL/zL5Yxb/ZfPHLP4/zB+z+C+XP2bxXz5/zOL/o/wxi/8K+WMW/xXzxyz+K+WPWfxXzh+z+K+SP2bxXzV/zOK/Wv6Yxf/H+WMW/9Xzxyz+a+SPWfzXzB+z+K+VP2bxXzt/zOK/Tv6Yxf8n+WMW/3Xzxyz+6+WPWfzXzx+z+P80f8ziv0H+mMX/Z/ljFv8N88cs/hvlj1n8N84fs/j/PH/M4v+L/DGL/yb5Yxb/TfPHLP6b5Y9Z/DfPH7P4b5E/ZvHfMn/M4r9V/pjFf+v8MYv/NvljFv9t88cs/r/MH7P4/yp/zOK/Xf6YxX/7/DGL/w75Yxb/HfPHLP6/zh+z+P8mf8zi/9v8MYv/TvljFv+d88cs/r/LH7P4/z5/zOK/S/6Yxf8P+WMW/13zxyz+u+WPWfx3zx+z+P8xf8zi/6f8MYv/HvljFv8988cs/nvlj1n8/5w/ZvH/S/6YxX/v/DGL/z75Yxb/ffPHLP5/zR+z+P8tf8ziv1/+mMV///wxi//f88cs/gfkj1n8D8wfs/gflD9m8T84f8zif0j+mMX/0Pwxi/9h+WMW/8Pzxyz+R+SPWfyPzB+z+B+VP2bxPzp/zOJ/TP6Yxf/Y/DGL/3H5Yxb/4/PHLP4n5I9Z/E/MH7P4n5Q/ZvE/OX/M4n9K/pjF/9T8MYv/afljFv/T88cs/mfkj1n8z8wfs/iflT9m8T87f8zif07+mMX/3Pwxi/95+WMW//Pzxyz+F+SPWfwvzB+z+F+UP2bx/0f+mMX/4vwxi/8l+WMW/0vzxyz+l+WPWfwvzx+z+F+RP2bxvzJ/zOJ/Vf6Yxf/q/DGL/zX5Yxb/a/PHLP7X5Y9Z/K/PH7P435A/ZvG/MX/M4n9T/pjF/+b8MYv/LfljFv9b88cs/rflj1n8b88fs/jfkT9m8b8zf8zif1f+mMX/7vwxi/89+WMW/3vzxyz+9+WPWfzvzx+z+D+QP2bxfzB/zOL/UP6Yxf/h/DGL/yP5Yxb/R/PHLP6P5Y9Z/B/PH7P4P5E/ZvF/Mn/M4v9U/pjF/+n8MYv/M/ljFv9n88cs/s/lj1n8n88fs/i/kD9m8X8xf8zi/1L+mMX/5fwxi/8r+WMW/1fzxyz+r+WPSfwHD+SPWfwHvTf/kf/HxvUBzeI/Qusfs/iPmD9m8R+cP2bxHyl/zOI/cv6YxX+U/DGL/5D8MYv/qPljFv/R8scs/qPnj1n8x8gfs/iPmT9m8R8rf8ziP3b+mMV/nPwxi/+4+WMW//Hyxyz+H8kfs/iPnz9m8Z8gf8zi/9H8MYv/hPljFv+J8scs/h/LH7P4fzx/zOL/ifwxi/8n88cs/p/KH7P4T5w/ZvGfJH/M4j9p/pjF/9P5Yxb/yfLHLP6T549Z/KfIH7P4T5k/ZvGfKn/M4v+Z/DGL/9T5Yxb/z+aPWfw/lz9m8f98/pjF/wv5Yxb/L+aPWfy/lD9m8Z8mf8ziP23+mMV/uvwxi//0+WMW/xnyxyz+M+aPWfy/nD9m8Z8pf8ziP3P+mMV/lvwxi/+s+WMW/6/kj1n8v5o/ZvH/Wv6Yxf/r+WMW/9nyxyz+38gfs/jPnj9m8Z8jf8ziP2f+mMV/rvwxi//c+WMW/3nyxyz+8+aPWfznyx+z+M+fP2bxXyB/zOL/zfwxi/+38scs/gvmj1n8v50/ZvFfKH/M4v+d/DGL/3fzxyz+C+ePWfwXyR+z+C+aP2bxXyx/zOK/eP6YxX+J/DGL//fyxyz+S+aPWfy/nz9m8f9B/pjFf6n8MYv/0vljFv9l8scs/svmj1n8f5g/ZvFfLn/M4r98/pjF/0f5Yxb/FfLHLP4r5o9Z/FfKH7P4r5w/ZvFfJX/M4r9q/pjFf7X8MYv/j/PHLP6r549Z/NfIH7P4r5k/ZvFfK3/M4r92/pjFf538MYv/T/LHLP7r5o9Z/NfLH7P4r58/ZvH/af6YxX+D/DGL/8/yxyz+G+aPWfw3yh+z+G+cP2bx/3n+mMX/F/ljFv9N8scs/pvmj1n8N8sfs/hvnj9m8d8if8ziv2X+mMV/q/wxi//W+WMW/23yxyz+2+aPWfx/mT9m8f9V/pjFf7v8MYv/9vljFv8d8scs/jvmj1n8f50/ZvH/Tf6Yxf+3+WMW/53yxyz+O+ePWfx/lz9m8f99/pjFf5f8MYv/H/LHLP675o9Z/HfLH7P4754/ZvH/Y/6Yxf9P+WMW/z3yxyz+e+aPWfz3yh+z+P85f8zi/5f8MYv/3vljFv998scs/vvmj1n8/5o/ZvH/W/6YxX+//DGL//75Yxb/v+ePWfwPyB+z+B+YP2bxPyh/zOJ/cP6Yxf+Q/DGL/6H5Yxb/w/LHLP6H549Z/I/IH7P4H5k/ZvE/Kn/M4n90/pjF/5j8MYv/sfljFv/j8scs/sfnj1n8T8gfs/ifmD9m8T8pf8zif3L+mMX/lPwxi/+p+WMW/9Pyxyz+p+ePWfzPyB+z+J+ZP2bxPyt/zOJ/dv6Yxf+c/DGL/7n5Yxb/8/LHLP7n549Z/C/IH7P4X5g/ZvG/KH/M4v+P/DGL/8X5Yxb/S/LHLP6X5o9Z/C/LH7P4X54/ZvG/In/M4n9l/pjF/6r8MYv/1fljFv9r8scs/tfmj1n8r8sfs/hfnz9m8b8hf8zif2P+mMX/pvwxi//N+WMW/1vyxyz+t+aPWfxvyx+z+N+eP2bxvyN/zOJ/Z/6Yxf+u/DGL/935Yxb/e/LHLP735o9Z/O/LH7P4358/ZvF/IH/M4v9g/pjF/6H8MYv/w/ljFv9H8scs/o/mj1n8H8sfs/g/nj9m8X8if8zi/2T+mMX/qfwxi//T+WMW/2fyxyz+z+aPWfyfyx+z+D+fP2bxfyF/zOL/Yv6Yxf+l/DGL/8v5Yxb/V/LHLP6v5o9Z/F/LH5P4jzSQP2bxH5Q/ZvEfIX/M4j9i/pjFf3D+mMV/pPwxi//I+WMW/1Hyxyz+Q/LHLP6j5o9Z/EfLH7P4j54/ZvEfI3/M4j9m/pjFf6z8MYv/2PljFv9x8scs/uPmj1n8x8sfs/h/JH/M4j9+/pjFf4L8MYv/R/PHLP4T5o9Z/CfKH7P4fyx/zOL/8fwxi/8n8scs/p/MH7P4fyp/zOI/cf6YxX+S/DGL/6T5Yxb/T+ePWfwnyx+z+E+eP2bxnyJ/zOI/Zf6YxX+q/DGL/2fyxyz+U+ePWfw/mz9m8f9c/pjF//P5Yxb/L+SPWfy/mD9m8f9S/pjFf5r8MYv/tPljFv/p8scs/tPnj1n8Z8gfs/jPmD9m8f9y/pjFf6b8MYv/zPljFv9Z8scs/rPmj1n8v5I/ZvH/av6Yxf9r+WMW/6/nj1n8Z8sfs/h/I3/M4j97/pjFf478MYv/nPljFv+58scs/nPnj1n858kfs/jPmz9m8Z8vf8ziP3/+mMV/gfwxi/8388cs/t/KH7P4L5g/ZvH/dv6YxX+h/DGL/3fyxyz+33X5D36vG1r8F3b5v+cs/ovkj1n8F80fs/gvlj9m8V88f8ziv0T+mMX/e/ljFv8l88cs/t/PH7P4/yB/zOK/VP6YxX/p/DGL/zL5Yxb/ZfPHLP4/zB+z+C+XP2bxXz5/zOL/o/wxi/8K+WMW/xXzxyz+K+WPWfxXzh+z+K+SP2bxXzV/zOK/Wv6Yxf/H+WMW/9Xzxyz+a+SPWfzXzB+z+K+VP2bxXzt/zOK/Tv6Yxf8n+WMW/3Xzxyz+6+WPWfzXzx+z+P80f8ziv0H+mMX/Z/ljFv8N88cs/hvlj1n8N84fs/j/PH/M4v+L/DGL/yb5Yxb/TfPHLP6b5Y9Z/DfPH7P4b5E/ZvHfMn/M4r9V/pjFf+v8MYv/NvljFv9t88cs/r/MH7P4/yp/zOK/Xf6YxX/7/DGL/w75Yxb/HfPHLP6/zh+z+P8mf8zi/9v8MYv/TvljFv+d88cs/r/LH7P4/z5/zOK/S/6Yxf8P+WMW/13zxyz+u+WPWfx3zx+z+P8xf8zi/6f8MYv/HvljFv8988cs/nvlj1n8/5w/ZvH/S/6YxX/v/DGL/z75Yxb/ffPHLP5/zR+z+P8tf8ziv1/+mMV///wxi//f88cs/gfkj1n8D8wfs/gflD9m8T84f8zif0j+mMX/0Pwxi/9h+WMW/8Pzxyz+R+SPWfyPzB+z+B+VP2bxPzp/zOJ/TP6Yxf/Y/DGL/3H5Yxb/4/PHLP4n5I9Z/E/MH7P4n5Q/ZvE/OX/M4n9K/pjF/9T8MYv/afljFv/T88cs/mfkj1n8z8wfs/iflT9m8T87f8zif07+mMX/3Pwxi/95+WMW//Pzxyz+F+SPWfwvzB+z+F+UP2bx/0f+mMX/4vwxi/8l+WMW/0vzxyz+l+WPWfwvzx+z+F+RP2bxvzJ/zOJ/Vf6Yxf/q/DGL/zX5Yxb/a/PHLP7X5Y9Z/K/PH7P435A/ZvG/MX/M4n9T/pjF/+b8MYv/LfljFv9b88cs/rflj1n8b88fs/jfkT9m8b8zf8zif1f+mMX/7vwxi/89+WMW/3vzxyz+9+WPWfzvzx+z+D+QP2bxfzB/zOL/UP6Yxf/h/DGL/yP5Yxb/R/PHLP6P5Y9Z/B/PH7P4P5E/ZvF/Mn/M4v9U/pjF/+n8MYv/M/ljFv9n88cs/s/lj1n8n88fs/i/kD9m8X8xf8zi/1L+mMX/5fwxi/8r+WMW/1fzxyz+r+WPSfxHHsgfs/gPyh+z+I+QP2bxHzF/zOI/OH/M4j9S/pjFf+T8MYv/KPljFv8h+WMW/1Hzxyz+o+WPWfxHzx+z+I+RP2bxHzN/zOI/Vv6YxX/s/DGL/zj5Yxb/cfPHLP7j5Y9Z/D+SP2bxHz9/zOI/Qf6Yxf+j+WMW/wnzxyz+E+WPWfw/lj9m8f94/pjF/xP5Yxb/T+aPWfw/lT9m8Z84f8ziP0n+mMV/0vwxi/+n88cs/pPlj1n8J88fs/hPkT9m8Z8yf8ziP1X+mMX/M/ljFv+p88cs/p/NH7P4fy5/zOL/+fwxi/8X8scs/l/MH7P4fyl/zOI/Tf6YxX/a/DGL/3T5Yxb/6fPHLP4z5I9Z/GfMH7P4fzl/zOI/U/6YxX/m/DGL/yz5Yxb/WfPHLP5fyR+z+H81f8zi/7X8MYv/1/PHLP6z5Y9Z/L+RP2bxn/2/9h/lf3RcH9As/nO0/jGL/5z5Yxb/ufLHLP5z549Z/OfJH7P4z5s/ZvGfL3/M4j9//pjFf4H8MYv/N/PHLP7fyh+z+C+YP2bx/3b+mMV/ofwxi/938scs/t/NH7P4L5w/ZvFfJH/M4r9o/pjFf7H8MYv/4vljFv8l8scs/t/LH7P4L5k/ZvH/fv6Yxf8H+WMW/6Xyxz6k/oOGsx556fyxD6n/6719/S+TP2bxXzZ/zOL/w/wxi/9y+WMW/+Xzxyz+P8ofs/ivkD826JxBw2bmw+2/Yv6YZf2vlD9m8V85f8ziv0r+mMV/1fwxi/9q+WMW/x/nj1n8V88fs/ivkT9m8V8zf8ziv1b+mMV/7fwxi/86+WMW/5/kj1n8180fs/ivlz9m8V8/f8zi/9P8MYv/BvljFv+f5Y9Z/DfMH7P4b5Q/ZvHfOH/M4v/z/DGL/y/yxyz+m+SPWfw3zR+z+G+WP2bx3zx/zOK/Rf6YxX/L/DGL/1b5Yxb/rfPHLP7b5I9Z/LfNH7P4/zJ/zOL/q/wxi/92+WMW/+3zxyz+O+SPWfx3zB+z+P86f8zi/5v8MYv/b/PHLP475Y9Z/HfOH7P4/y5/zOL/+/wxi/8u+WMW/z/kj1n8d80fs/jvlj9m8d89f8zi/8f8MYv/n/LHLP575I9Z/PfMH7P475U/ZvH/c/6Yxf8v+WMW/73zxyz+++SPWfz3zR+z+P81f8zi/7f8MYv/fvljFv/988cs/n/PH7P4H5A/ZvE/MH/M4n9Q/pjF/+D8MYv/IfljFv9D88cs/oflj1n8D88fs/gfkT9m8T8yf8zif1T+mMX/6Pwxi/8x+WMW/2Pzxyz+x+WPWfyPzx+z+J+QP2bxPzF/zOJ/Uv6Yxf/k/DGL/yn5Yxb/U/PHLP6n5Y9Z/E/PH7P4n5E/ZvE/M3/M4n9W/pjF/+z8MYv/OfljFv9z88cs/uflj1n8z88fs/hfkD9m8b8wf8zif1H+mMX/H/ljFv+L88cs/pfkj1n8L80fs/hflj9m8b88f8zif0X+mMX/yvwxi/9V79F/8P/UuD6gWfyvbv1jFv9r8scs/tfmj1n8r8sfs/hfnz9m8b8hf8zif2P+mMX/pvwxi//N+WMW/1vyxyz+t+aPWfxvyx+z+N+eP2bxvyN/zOJ/Z/6Yxf+u/DGL/935Yxb/e/LHLP735o9Z/O/LH7P4358/ZvF/IH/M4v9g/pjF/6H8MYv/w/ljFv9H8scs/o/mj1n8H8sfs/g/nj9m8X8if8zi/2T+mMX/qfwxi//T+Q+MCpdZ/J/JH7P4P5s/ZvF/Ln/M4v98/pjF/4X8MYv/i/ljFv+X8scs/i/nj1n8X8kfs/i/mj9m8X8tf0ziP8pA/pjFf1D+mMV/hPwxi/+I+WMW/8H5Yxb/kfLHLP4j549Z/EfJH7P4D8kfs/iPmj9m8R8tf8ziP3r+mMV/jPwxi/+Y+WMW/7Hyxyz+Y+ePWfzHyR+z+I+b/7CG/Ms5i/94+WMW/4/kj1n8x88fs/hPkD9m8f9o/pjFf8L8MYv/RPljFv+P5Y9Z/D+eP2bx/0T+mMX/k/ljFv9P5Y9Z/CfOH7P4T5I/ZvGfNH/M4v/p/DGL/2T5Yxb/yfPHLP5T5I9Z/KfMH7P4T5U/ZvH/TP6YxX/q/DGL/2fzxyz+n8sfs/h/Pn/M4v+F/DGL/xfzxyz+X8ofs/hPkz9m8Z82f8ziP13+mMV/+vwxi/8M+WMW/xnzxyz+X84fs/jPlD9m8Z85f8ziP0v+mMV/1vwxi/9X8scs/l/NH7P4fy1/zOL/9fwxi/9s+WMW/2/kj1n8Z88fs/jPkT9m8Z8zf8ziP1f+mMV/7vwxi/88+WMW/3nzxyz+8+WPWfznzx+z+C+QP2bx/2b+mMX/W/ljFv8F88cs/t/OH7P4L5Q/ZvH/Tv6Yxf+7+WMW/4Xzxyz+i+SPWfwXzR+z+C+WP2bxXzx/zOK/RP6Yxf97+WMW/yXzxyz+388fs/j/IH/M4r9U/pjFf+n8MYv/MvljFv9l88cs/j/MH7P4L5c/ZvFfPn/M4v+j/DGL/wr5Yxb/FfPHLP4r5Y9Z/FfOH7P4r5I/ZvFfNX/M4r9a/pjF/8f5Yxb/1fPHLP5r5I9Z/NfMH7P4r5U/ZvFfO3/M4r9O/pjF/yf5Yxb/dfPHLP7r5Y9Z/NfPH7P4/zR/zOK/Qf6Yxf9n+WMW/w3zxyz+G+WPWfw3zh+z+P88f8zi/4v8MYv/JvljFv9N88cs/pvlj1n8N88fs/hvkT9m8d8yf8ziv1X+mMV/6/wxi/826N8jwuK/bdqYxf+X+WMW/1/lj1n8t8sfs/hvnz9m8d/hDf9XXnu/xvUBzeK/Y+sfs/j/On/M4v+b/DGL/2/zxyz+O+WPWfx3zh+z+P8uf8zi//v8MYv/LvljFv8/5I9Z/HfNH7P475Y/ZvHfPX/M4v/H/DGL/5/yxyz+e+SPWfz3zB+z+O+VP2bx//N78h/pf25cH9As/n9p/WMW/73zxyz+++SPWfz3zR+z+P81f8zi/7f8MYv/fvljFv/988cs/n/PH7P4H5A/ZvE/MH/M4n9Q/pjF/+D8MYv/IfljFv9D88cs/oflj1n8D88fs/gfkT9m8T8yf8zif1T+mMX/6Pwxi/8x+WMW/2Pzxyz+x+WPWfyPzx+z+J+QP2bxPzF/zOJ/Uv6Yxf/k/DGL/yn5Yxb/U/PHLP6n5Y9Z/E/PH7P4n5E/ZvE/M3/M4n9W/pjF/+z8MYv/OfljFv9z88cs/uflj1n8z88fs/hfkD9m8b8wf8zif1H+mMX/H/ljFv+L88cs/pfkj1n8L80fs/hflj9m8b88f8zif0X+mMX/yvwxi/9V+WMW/6vzxyz+1+SPWfyvzR+z+F+XP2bxvz5/zOJ/Q/6Yxf/G/DGL/035Yxb/m/PHLP635I9Z/G/NH7P435Y/ZvG/PX/M4n9H/pjF/878MYv/XfljFv+788cs/vfkj1n8780fs/jflz9m8b8/f8zi/0D+mMX/wfwxi/9D+WMW/4fzxyz+j+SPWfwfzR+z+D+WP2bxfzx/zOL/RP6Yxf/J/DGL/1P5Yxb/p/PHLP7P5I9Z/J/NH7P4P5c/ZvF/Pn/M4v9C/pjF/8X8MYv/S/ljFv+X88cs/q/kj1n8X80fs/i/lj8m8R8ykD9m8R+UP2bxHyF/zOI/Yv6YxX9w/pjFf6T8MYv/yPljFv9R8scs/kPyxyz+o+aPWfxHyx+z+I+eP2bxHyN/zOI/Zv6YxX+s/DGL/9j5Yxb/cfLHLP7j5o9Z/MfLH7P4fyR/zOI/fv6YxX+C/DGL/0fzxyz+E+aPWfwnyh+z+H8sf8zi//H8MYv/J/LHLP6fzB+z+H8qf8ziP3H+mMV/kvwxi/+k+WMW/0/nj1n8J8sfs/hPnj9m8Z8if8ziP2X+mMV/qvwxi/9n8scs/lPnj1n8P5s/ZvH/XP6Yxf/z+WMW/y/kj1n8v5g/ZvH/Uv6YxX+a/DGL/7T5Yxb/6fLHLP7T549Z/GfIH7P4z5g/ZvH/cv6YxX+m/DGL/8z5Yxb/WfLHLP6z5o9Z/L+SP2bx/+q7+u/+Pz+uD2gW/6+1/jGL/9fzxyz+s+WPWfy/kT9m8Z89f8ziP0f+mMV/zvwxi/9c+WMW/7nzxyz+8+SPWfznzR+z+M+XP2bxnz9/zOK/QP6Yxf+b+WMW/2/lj1n8F8wfs/h/O3/M4r9Q/pjF/zv5Yxb/7+aPWfwXzh+z+C+SP2bxXzR/zOK/WP6YxX/x/DGL/xL5Yxb/7+WPWfyXzB+z+H8/f8zi/4P8MYv/UvljFv+l88cs/svkj1n8l80fs/j/MH/M4r9c/pjFf/n8MYv/j/LHLP4r5I9Z/FfMH7P4r5Q/ZvFfOX/M4r9K/pjFf9X8MYv/avljFv8f549Z/FfPH7P4r5E/ZvFfM3/M4r9W/pjFf+38MYv/OvljFv+f5I9Z/NfNH7P4r5c/ZvFfP3/M4v/T/DGL/wb5Yxb/n+WPWfw3zB+z+G+UP2bx3zh/zOL/8/wxi/8v8scs/pvkj1n8N80fs/hvlj9m8d88f8ziv0X+mMV/y/wxi/9W+WMW/63zxyz+2+SPWfy3zR+z+P8yf8zi/6v8MYv/dvljFv/t88cs/jvkj1n8d8wfs/j/On/M4v+b/DGL/2/zxyz+O+WPWfx3zh+z+P8uf8zi//v8MYv/LvljFv8/5I9Z/HfNH7P475Y/ZvHfPX/M4v/H/DGL/5/yxyz+e+SPWfz3zB+z+O+VP2bx/3P+mMX/L/ljFv+988cs/vvkj1n8980fs/j/NX/M4v+3/DGL/375Yxb//fPHLP5/zx+z+B+QP2bxPzB/zOJ/UP6Yxf/g/DGL/yH5Yxb/Q/PHLP6H5Y9Z/A/PH7P4H5E/ZvE/Mn/M4n9U/pjF/+j8MYv/MfljFv9j88cs/sflj1n8j88fs/ifkD9m8T8xf8zif1L+mMX/5Pwxi/8p+WMW/1Pzxyz+p+WPWfxPzx+z+J+RP2bxPzN/zOJ/Vv6Yxf/s/DGL/zn5Yxb/c/PHLP7n5Y9Z/M/PH7P4X5A/ZvG/MH/M4n9R/pjF/x/5Yxb/i/PHLP6X5I9Z/C/NH7P4X5Y/ZvG/PH/M4n9F/pjF/8r8MYv/VfljFv+r88cs/tfkj1n8r80fs/hflz9m8b8+f8zif0P+mMX/xvwxi/9N+WMW/5vzxyz+t+SPWfxvzR+z+N+WP2bxvz1/zOJ/R/6Yxf/O/DGL/135Yxb/u/PHLP735I9Z/O/NH7P435c/ZvG/P3/M4v/Au/mP9b8wrg9oFv8HW/+Yxf+h/DGL/8P5Yxb/R/LHDP6DBg8MeTR/zOA/dP0/lj9m8X88f8zi/0T+mMX/yfwxi/9T+WMW/6fzxyz+z+SPWfyfzR+z+D+XP2bxfz5/zOL/Qv6Yxf/F/DGL/0v5Yxb/l/PHLP6v5I9Z/F/NH7P4v5Y/JvEfdSB/zOI/KH/M4j9C/pjFf8T8MYv/4Pwxi/9I+WMW/5Hzxyz+o+SPWfyH5I9Z/EfNH7P4j5Y/ZvEfPX/M4j9G/pjFf8z8MYv/WPljFv+x88cs/uPkj1n8x80fs/iPlz9m8f9I/pjFf/z8MYv/BPljFv+P5o9Z/CfMH7P4T5Q/ZvH/WP6Yxf/j+WMW/0/kj1n8P5k/ZvH/VP6YxX/i/DGL/yT5Yxb/SfPHLP6fzh+z+E+WP2bxnzx/zOI/Rf6YxX/K/DGL/1T5Yxb/z+SPWfynzh+z+H82f8zi/7n8MYv/5/PHLP5fkPlP9x63s/h/Ueb/XrP4fyl/zOI/Tf6YxX/agYHN3q8hfZCz+E/X+scs/tPnj1n8Z8gfs/jPmD9m8f9y/pjFf6b8MYv/zPljFv9Z8scs/rPmj1n8v5I/ZvH/av6Yxf9r+WMW/6/nj1n8Z8sfs/h/I3/M4j97/pjFf478MYv/nPljFv+58scs/nPnj1n858kfs/jPmz9m8Z8vf8ziP3/+mMV/gfwxi/8388cs/t/KH7P4L5g/ZvH/dv6YxX+h/DGL/3fyxyz+380fs/gvnD9m8V8kf8ziv2j+mMV/sfwxi//i+WMW/yXyxyz+38sfs/gvmT9m8f9+/pjF/wf5Yxb/pfLHLP5L549Z/JfJH7P4L5s/ZvH/Yf6YxX+5/DGL//L5Yxb/H+WPWfxXyB+z+K+YP2bxXyl/zOK/cv6YxX+V/DGL/6r5Yxb/1fLHLP4/zh+z+K+eP2bxXyN/zOK/Zv6YxX+t/DGL/9r5Yxb/dfLHLP4/yR+z+K+bP2bxXy9/zOK/fv6Yxf+n+WMW/w3yxyz+P8sfs/hvmD9m8d8of8ziv3H+mMX/5/ljFv9f5I9Z/DfJH7P4b5o/ZvHfLH/M4r95/pjFf4v8MYv/lvljFv+t8scs/lvnj1n8t8kfs/hvmz9m8f9l/pjF/1f5Yxb/7fLHLP7b549Z/HfIH7P475g/ZvH/df6Yxf83+WMW/9/mj1n8d8ofs/jvnD9m8f9d/pjF//f5Yxb/XfLHLP5/yB+z+O+aP2bx3y1/zOK/e/6Yxf+P+WMW/z/lj1n898gfs/jvmT9m8d8rf8zi/+f8MYv/X/LHLP57549Z/PfJH7P475s/ZvH/a/6Yxf9v+WMW//3yxyz+++ePWfz/nj9m8T8gf8zif2D+mMX/oPwxi//B+WMW/0Pyxyz+h+aPWfwPyx+z+B+eP2bxPyJ/zOJ/ZP6Yxf+o/DGL/9H5Yxb/Y/LHLP7H5o9Z/I/LH7P4H58/ZvE/IX/M4n9i/pjF/6T8MYv/yfljH17/PS5826WjnpI/9uH1/9f1f2r+mMX/tPwxi//p+WMW/zPyxyz+Z+aPWfzPyh+z+J+dP2bxPyd/zOJ/bv6Yxf+8/DGL//n5Yxb/C/LHLP4X5o9Z/C/KH7P4/yN/zOJ/cf6Yxf+S/DGL/6X5Yxb/y/LHLP6X549Z/K/IH7P4X5k/ZvG/Kn/M4n91/pjF/5r8MYv/tfljFv/r8scs/tfnj1n8b8gfs/jfmD9m8b8pf8zif3P+mMX/lvwxi/+t+WMW/9vyxyz+t+ePWfzvyB+z+N+ZP2bxvyt/zOJ/d/6Yxf+e/DGL/735Yxb/+/LHLP73549Z/B/IH7P4P5g/ZvF/KH/M4v9w/pjF/5H8MYv/o/ljFv/H8scs/o/nj1n8n8gfs/g/mT9m8X8qf8zi/3T+mMX/mfwxi/+z+WMW/+fyxyz+z+ePWfxfyB+z+L+YP2bxfyl/zOL/cv6Yxf+V/DGL/6v5Yxb/1/LHJP6jDeSPWfwH5Y9Z/EfIH7P4j5g/ZvEfnD9m8R8pf8ziP3L+mMV/FJX/qO95S4v/EJX/e8/iP2r+mMV/tPwxi//o+WMW/zHyxyz+Y+aPWfzHyh+z+I+dP2bxHyd/zOI/bv6YxX+8/DGL/0fyxyz+4+ePWfwnyB+z+H80f8ziP2H+mMV/ovwxi//H8scs/h/PH7P4fyJ/zOL/yfwxi/+n8scs/hPnj1n8J8kfs/hPmj9m8f90/pjFf7L8MYv/5PljFv8p8scs/lPmj1n8p8ofs/h/Jn/M4j91/pjF/7P5Yxb/z+WPWfw/nz9m8f9C/pjF/4v5Yxb/L+WPWfynyR+z+E+bP2bxny5/zOI/ff6YxX+G/DGL/4z5Yxb/L+ePWfxnyh+z+M+cP2bxnyV/zOI/a/6Yxf8r+WMW/6/mj1n8v5Y/ZvH/ev6YxX+2/DGL/zfyxyz+s+ePWfznyB+z+M+ZP2bxnyt/zOI/d/6YxX+e/DGL/7z5Yxb/+fLHLP7z549Z/BfIH7P4fzN/zOL/rfwxi/+C+WMW/2/nj1n8F8ofs/h/J3/M4v/d/DGL/8L5Yxb/RfLHLP6L5o9Z/BfLH7P4L54/ZvFfIn/M4v+9/DGL/5L5Yxb/7+ePWfx/kD9m8V8qf8ziv3T+mMV/mfwxi/+y+WMW/x/mj1n8l8sfs/gvnz9m8f9R/pjFf4X8MYv/ivljFv+V8scs/ivnj1n8V8kfs/ivmj9m8V8tf8zi/+P8MYv/6vljFv818scs/mvmj1n818ofs/ivnT9m8V8nf8zi/5P8MYv/uvljFv/18scs/uvnj1n8f5o/ZvHfIH/M4v+z/DGL/4b5Yxb/jfLHLP4b549Z/H+eP2bx/0X+mMV/k/wxi/+m+WMW/83yxyz+m+ePWfy3yB+z+G+ZP2bx3yp/zOK/df6YxX+b/DGL/7b5Yxb/X+aPWfx/lT9m8d8uf8ziv33+mMV/h/wxi/+O+WMW/1/nj1n8f5M/ZvH/bf6YxX+n/DGL/875Yxb/3+WPWfx/nz9m8d8lf8zi/4f8MYv/rvljFv/d8scs/rvnj1n8/5g/ZvH/U/6YxX+P/DGL/575Yxb/vfLHLP5/zh+z+P8lf8ziv3f+mMV/n/wxi/+++WMW/7/mj1n8/5Y/ZvHfL3/M4r9//pjF/+/5Yxb/A/LHLP4H5o9Z/A/KH7P4H5w/ZvE/JH/M4n9o/pjF/7D8MYv/4fljFv8j8scs/kfmj1n8j8ofs/gfnT9m8T8mf8zif2z+mMX/uPwxi//x+WMW/xPyxyz+J+aPWfxPyh+z+J/8Nv8R3o9xfUCz+J/S+scs/qfmj1n8T8sfs/ifnj9m8T8jf8zif2b+mMX/rPwxi//Z+WMW/3Pyxyz+5+aPWfzPyx+z+J+fP2bxvyB/zOJ/Yf6Yxf+i/DGL/z/yxyz+F+ePWfwvyR+z+F+aP2bxvyx/zOJ/ef6Yxf+K/DGL/5X5Yxb/q/LHLP5X549Z/K/JH7P4X5s/ZvG/Ln/M4n99/pjF/4b8MYv/jfljFv+b8scs/jfnj1n8b8kfs/jfmj9m8b8tf8zif3v+mMX/jvwxi/+d+WMW/7vyxyz+d+ePWfzvyR+z+N+bP2bxvy9/zOJ/f/6Yxf+B/DGL/4P5Yxb/h/LHLP4P549Z/B/JH7P4P5o/ZvF/LH/M4v94/pjF/4n8MYv/k/ljFv+n8scs/k/nj1n8n8kfs/g/mz9m8X8uf8zi/3z+mMX/hfwxi/+LQv9R38M2Fv+XhP7vJYv/y/ljFv9X8scs/q/mj1n8X8sfk/iPPpA/ZvEflD9m8R8hf8ziP2L+mMV/cP6YxX+k/DGL/8j5Yxb/UfLHLP5D8scs/qPmj1n8R8sfs/iPnj9m8R8jf8ziP2b+mMV/rPwxi//Y+WMW/3Hyxyz+4+aPWfzHyx+z+H8kf8ziP37+mMV/gvwxi/9H88cs/hPmj1n8J8ofs/h/LH/M4v/x/DGL/yfyxyz+n8wfs/h/Kn/M4j9x/pjFf5L8MYv/pPljFv9P549Z/CfLH7P4T54/ZvGfIn/M4j9l/pjFf6r8MYv/Z/LHLP5T549Z/D+bP2bx/1z+mMX/8/ljFv8v5I9Z/L+YP2bx/1L+mMV/mvwxi/+0+WMW/+nyxyz+0+ePWfxnyB+z+M+YP2bx/3L+mMV/pvwxi//M+WMW/1nyxyz+s+aPWfy/kj9m8Z97SP6Uxf9rrX/M4v/1/DGL/2z5Yxb/b+SPWfxnzx+z+M+RP2bxnzN/zOI/V/6YxX/u/DGL/zz5Yxb/efPHLP7z5Y9Z/OfPH7P4L5A/ZvH/Zv6Yxf9b+WMW/wXzxyz+384fs/gvlD9m8f9O/pjF/7v5Yxb/hfPHLP6L5I9Z/BfNH7P4L5Y/ZvFfPH/M4r9E/pjF/3v5Yxb/JfPHLP7fzx+z+P8gf8ziv1T+mMV/6fwxi/8y+WMW/2Xzxyz+P8wfs/gvlz9m8V8+f8zi/6P8MYv/CvljFv8V88cs/ivlj1n8V84fs/ivkj9m8V81f8ziv1r+mMX/x/ljFv/V88cs/mvkj1n818wfs/ivlT9m8V87f8ziv07+mMX/J/ljFv9188cs/uvlj1n8188fs/j/NH/M4r9B/pjF/2f5Yxb/DfPHLP4b5Y9Z/DfOH7P4/zx/zOL/i/wxi/8m+WMW/03zxyz+m+WPWfw3zx+z+G+RP2bx3zJ/zOK/Vf6YxX/r/DGL/zb5Yxb/bfPHLP6/zB+z+P8qf8ziv13+mMV/+/wxi/8O+WMW/x3zxyz+v84fs/j/Jn/M4v/b/LEPnf/bkN/uv1P+2IfO/x3W/875Yxb/3+WPWfx/nz9m8d8lf8zi/4f8MYv/rvljFv/d8scs/rvnj1n8/5g/ZvH/U/6YxX+P/DGL/575Yxb/vfLHLP5/zh+z+P8lf8ziv3f+mMV/n/wxi/+++WMW/7/mj1n8/5Y/ZvHfL3/M4r9//pjF/+/5Yxb/A/LHLP4H5o9Z/A/KH7P4H5w/ZvE/JH/M4n9o/pjF/7D8MYv/4fljFv8j8scs/kfmj1n8j8ofs/gfnT9m8T8mf8zif2z+mMX/uPwxi//x+WMW/xPyxyz+J+aPWfxPyh+z+J+cP/am/8CQgYEPs/8p+WOW9X9q/pjF/7T8MYv/6fljFv8z8scs/mfmj1n8z8ofs/ifnT9m8T8nf8zif27+mMX/vPwxi//5+WMW/wvyxyz+F+aPWfwvyh+z+P8jf8zif3H+mMX/kvwxi/+l+WMW/8vyxyz+l+ePWfyvyB+z+F+ZP2bxvyp/zOJ/df6Yxf+a/DGL/7X5Yxb/6/LHLP7X549Z/G/IH7P435g/ZvG/KX/M4n9z/pjF/5b8MYv/rfljFv/b8scs/rfnj1n878gfs/jfmT9m8b8rf8zif3f+mMX/nvwxi/+9+WMW//vyxyz+9+ePWfwfyB9z+Cf/Tjn8B0Z/qEcBZvF/OH/M4v9I/pjF/9H8MYv/Y/ljFv/H88cs/k/kj1n8n8wfs/g/lT9m8X86f8zi/0z+mMX/2fwxi/9z+WMW/+fzxyz+L+SPWfxfzB+z+L+UP2bxfzl/zOL/Sv6Yxf/V/DGL/2v5YxL/MQbyxyz+g/LHLP4j5I9Z/EfMH7P4D84fs/iPlD9m8R85f8ziP0r+mMV/SP6YxX/U/DGL/2j5Yxb/0fPHLP5j5I9Z/MfMH7P4j5U/ZvEfO3/M4j9O/pjFf9z8MYv/ePljFv+P5I9Z/MfPH7P4T5A/ZvH/aP6YxX/C/DGL/0T5Yxb/j+WPWfw/nj9m8f9E/pjF/5P5Yxb/T+WPWfwnzh+z+E+SP2bxnzR/zOL/6fwxi/9k+WMW/8nzxyz+U+SPWfynzB+z+E+VP2bx/0z+mMV/6vwxi/9n88cs/p/LH7P4fz5/zOL/hfwxi/8X88cs/l/KH7P4T5M/ZvGfNn/M4j9d/pjFf/r8MYv/DPljFv8Z88cs/l/OH7P4z5Q/ZvGfOX/M4j9L/pjFf9b8MYv/V/LHLP5fzR+z+H8tf8zi//X8MYv/bPljFv9v5I9Z/GfPH7P4z5E/ZvGfM3/M4j9X/pjFf+78MYv/PPljFv9588cs/vPlj1n8588fs/gvkD9m8f9m/pjF/1v5Yxb/BfPHLP7fzh+z+C+UP2bx/07+mMX/u/ljFv+F88cs/ovkj1n8F80fs/gvlj9m8V88f8ziv0T+mMX/e/ljFv8l88cs/t/PH7P4/yB/zOK/VP6YxX/p/DGL/zL5Yxb/ZfPHLP4/zB+z+C+XP2bxXz5/zOL/o/wxi/8K+WMW/xWN/u/hDlv8VzL6v4cs/ivnj1n8V8kfs/ivmj9m8V8tf8zi/+P8MYv/6vljFv818scs/mvmj1n818ofs/ivnT9m8V8nf8zi/5P8MYv/uvljFv/18scs/uvnj1n8f5o/ZvHfIH/M4v+z/DGL/4b5Yxb/jfLHLP4b549Z/H+eP2bx/0X+mMV/k/wxi/+m+WMW/83yxyz+m+ePWfy3yB+z+G+ZP2bx3yp/zOK/df6YxX+b/DGL/7b5Yxb/X+aPWfx/lT9m8d8uf8ziv33+mMV/h/wxi/+O+WMW/1/nj1n8f5M/ZvH/bf6YxX+n/DGL/875Yxb/3+WPWfx/nz9m8d8lf8zi/4f8MYv/rvljFv/d8scs/rvnj1n8/5g/ZvH/U/6YxX+P/DGL/575Yxb/vfLHLP5/zh+z+P8lf8ziv3f+mMV/n/wxi/+++WMW/7/mj1n8/5Y/ZvHfL3/M4r9//pjF/+/5Yxb/A/LHLP4H5o9Z/A/KH7P4H5w/ZvE/JH/M4n9o/pjF/7D8MYv/4fljFv8j8scs/kfmj1n8j8ofs/gfnT9m8T8mf8zif2z+mMX/uPwxi//x+WMW/xPyxyz+J+aPWfxPyh+z+J+cP2bxPyV/zOJ/av6Yxf+0/DGL/+n5Yxb/M/LHLP5n5o9Z/M/KH7P4n50/ZvE/J3/M4n9u/pjF/7z8MYv/+fljFv8L8scs/hfmj1n8L8ofs/j/I3/M4n9x/pjF/5L8MYv/pfljFv/L8scs/pfnj1n8r8gfs/hfmT9m8b8qf8zif3X+mMX/mvwxi/+1+WMW/+vyxyz+1+ePWfxvyB+z+N+YP2bxvyl/zOJ/c/6Yxf+W/LEPt//tb146xq35Yx9u/7ca47b8MYv/7fljFv878scs/nfmj1n878ofs/jfnT9m8b8nf8zif2/+2IfUf8rhLh3jvvyxD6n/6719/d+fP2bxfyB/zOL/YP6Yxf+h/DGL/8P5Yxb/R/LHLP6P5o9Z/B/LH7P4P54/ZvF/In/M4v9k/pjF/6n8MYv/0/ljFv9n8scs/s/mj1n8n8sfs/g/nz9m8X8hf8zi/2L+mMX/pfwxi//L+WMW/1fyxyz+r+aPWfxfyx+T+I85kD9m8R+UP2bxHyF/zOI/Yv6YxX9w/pjFf6T8MYv/yPljFv9R8scs/kPyxyz+o+aPWfxHyx+z+I+eP2bxHyN/zOI/Zv6YxX+s/DGL/9j5Yxb/cfLHLP7j5o9Z/MfLH7P4fyR/zOI/fv6YxX+C/DGL/0fzxyz+E+aPWfwnyh+z+H8sf8zi//H8MYv/J/LHLP6fzB+z+H8qf8ziP3H+mMV/kvwxi/+k+WMW/0/nj1n8J8sfs/hPnj9m8Z8if8ziP2X+mMV/qvwxi/9n8scs/lPnj1n8P5s/ZvH/XP6Yxf/z+WMW/y/kj1n8v5g/ZvH/Uv6YxX+a/DGL/7T5Yxb/6fLHLP7T549Z/GfIH7P4z5g/ZvH/cv6YxX+m/DGL/8z5Yxb/WfLH/sV/2GXjvM9j+v/VO/jPmj9mWf9fyR+z+H81f8zi/7X8MYv/1/PHLP6z5Y9Z/L+RP2bxnz1/zOI/R/6YxX/O/DGL/1z5Yxb/ufPHLP7z5I9Z/OfNH7P4z5c/ZvGfP3/M4r9A/pjF/5v5Yxb/b+WPWfwXzB+z+H87f8ziv1D+mMX/O/ljFv/v5o9Z/BfOH7P4L5I/ZvFfNH/M4r9Y/pjFf/H8MYv/EvljFv/v5Y9Z/JfMH7P4fz9/zOL/g/wxi/9S+WMW/6Xzxyz+y+SPWfyXzR+z+P8wf8ziv1z+mMV/+fwxi/+P8scs/ivkj1n8V8wfs/ivlD9m8V85f8ziv0r+mMV/1fwxi/9q+WMW/x/nj1n8V88fs/ivkT9m8V8zf8ziv1b+mMV/7fwxi/86+WMW/5/kj1n8180fs/ivlz9m8V8/f8zi/9P8MYv/BvljFv+f5Y9Z/DfMH7P4b5Q/ZvHfOH/M4v/z/DGL/y/yxyz+m+SPWfw3zR+z+G+WP2bx3zx/zOK/Rf6YxX/L/DGL/1b5Yxb/rfPHLP7b5I9Z/LfNH7P4/zJ/zOL/q/wxi/92+WMW/+3zxyz+O+SPWfx3zB+z+P86f8zi/5v8MYv/b/PHLP475Y9Z/HfOH/uw+g8Zzv93+WMfVv+B4fx/nz9m8d8lf8zi/4f8MYv/rvljFv/d8scs/rvnj1n8/5g/ZvH/U/6YxX+P/DGL/575Yxb/vfLHLP5/zh+z+P8lf8ziv3f+mMV/n/wxi/+++WMW/7/mj1n8/5Y/ZvHfL3/M4r9//pjF/+/5Yxb/A/LHLP4H5o9Z/A/KH7P4H5w/ZvE/JH/M4n9o/pjF/7D8MYv/4fljFv8j8scs/kfmj1n8j8ofs/gfnT9m8T8mf8zif2z+mMX/uPwxi//x+WMW/xPyxyz+J+aPWfxPyh+z+J+cP2bxPyV/zOJ/av6Yxf+0/DGL/+n5Yxb/M/LHLP5n5o9Z/M/KH7P4n50/ZvE/J3/M4n9u/pjF/7z8MYv/+fljFv8L8scs/hfmj1n8L8ofs/j/I3/M4n9x/pjF/5L8MYv/pfljFv/L8scs/pfnj1n8r8gfs/hfmT9m8b8qf8zif3X+mMX/mvwxi/+1+WMW/+vyxyz+1+ePWfxvyB+z+N+YP2bxvyl/zOJ/c/6Yxf+W/DGL/635Yxb/2/LHLP63549Z/O/IH7P435k/ZvG/K3/M4n93/pjF/578MYv/vfljFv/7hvff/H95XB/QLP73t/4xi/8D+WMW/wfzxyz+D+WPWfwfzh+z+D+SP2bxfzR/zOL/WP6Yxf/x/DGL/xP5Yxb/J/PHLP5P5Y9Z/J/OH7P4P5M/ZvF/Nn/M4v9c/pjF//n8MYv/C/ljFv8X88cs/i/lj1n8X84fs/i/kj9m8X81f8zi/1r+mMR/rIH8MYv/oPwxi/8I+WMW/xHzxyz+g/PHLP4j5Y9Z/EfOH7P4j5I/ZvEfkj9m8R81f8ziP1r+mMV/9Pwxi/8Y+WMW/zHzxyz+Y+WPWfzHzh+z+I+TP2bxHzd/zOI/Xv6Yxf8j+WMW//Hzxyz+E+SPWfw/mj9m8Z8wf8ziP1H+mMX/Y/ljFv+P549Z/D+RP2bx/2T+mMX/U/ljFv+J88cs/pPkj1n8J80fs/h/On/M4j9Z/pjFf/L8MYv/FPljFv8p88cs/lPlj1n8P5M/ZvGfOn/M4v/Z/DGL/+fyxyz+n88fs/h/IX/M4v/F/DGL/5fyxyz+0+SPWfynzR+z+E+XP2bxnz5/zOI/Q/6YxX/G/DGL/5fzxyz+M+WPWfxnzh+z+M+SP2bxnzV/zOL/lfwxi/9X88cs/l/LH7P4fz1/zOI/W/6Yxf8bav/lRn+nayz+s6v93zmL/xz5Yxb/OfPHLP5z5Y9Z/OfOH7P4z5M/ZvGfN3/M4j9f/pjFf/78MYv/AvljFv9v5o9Z/L+VP2bxXzB/zOL/7fwxi/9C+WMW/+/kj1n8v5s/ZvFfOH/M4r9I/pjFf9H8MYv/YvljFv/F88cs/kvkj1n8v5c/ZvFfMn/M4v/9/DGL/w/yxyz+S+WPWfyXzh+z+C+TP2bxXzZ/zOL/w/wxi/9y+WMW/+Xzxyz+P8ofs/ivkD9m8V8xf8ziv1L+mMV/5fwxi/8q+WMW/1Xzxyz+q+WPWfx/nD9m8V89f8ziv0b+mMV/zfwxi/9a+WMW/7Xzxyz+6+SPWfx/kj9m8V83f8ziv17+mMV//fwxi/9P88cs/hvkj1n8f5Y/ZvHfMH/M4r9R/pjFf+P8MYv/z/MfGBgY9d8usfj/In/M4r9J/pjFf9P8MYv/ZvljFv/N88cs/lvkj1n8t8wfs/hvlT9m8d86f8ziv03+mMV/2/wxi/8v88cs/r/KH7P4b5c/ZvHfPn/M4r9D/pjFf8f8MYv/r/PHLP6/yR+z+P82f8ziv1P+mMV/5/wxi//v8scs/r/PH7P475I/ZvH/Q/6YxX/X/DGL/275Yxb/3fPHLP5/zB+z+P8pf8ziv0f+mMV/z/wxi/9e+WMW/z/nj1n8/5I/ZvHfO3/M4r9P/pjFf9/8MYv/X/PHLP5/yx+z+O+XP2bx3z9/zOL/9/wxi/8B+WMW/wPzxyz+B+WPWfwPzh+z+B+SP2bxPzR/zOJ/WP6Yxf/w/DGL/xH5Yxb/I/PHLP5H5Y9Z/I/OH7P4H5M/ZvE/Nn/M4n9c/pjF//j8MYv/CfljFv8T88cs/iflj1n8T84fs/ifkj9m8T81f8zif1r+mMX/9Pwxi/8Z+WMW/zPzxyz+Z+WPWfzPzh+z+J+TP2bxPzd/zOJ/Xv6Yxf/8/DGL/wX5Yxb/C/PHLP4X5Y9Z/P+RP2bxvzh/zOJ/Sf6Yxf/S/DGL/2X5Yxb/y/PHLP5X5I9Z/K/MH7P4X5U/ZvG/On/M4n9N/pjF/9r8MYv/dfljFv/r88cs/jfkj1n8b8wfs/jflD9m8b85f8zif0v+mMX/1vwxi/9t+WMW/9vzxyz+d+SPWfzvzB+z+N+VP2bxvzt/zOJ/T/6Yxf/e/DGL/335Yxb/+/PHLP4P5I9Z/B/MH7P4P5Q/ZvF/OH/M4v9I/pjF/9H8MYv/Y/ljFv/H88cs/k/kj1n8n8wfs/g/lT9m8X86f8zi/0z+mMX/2fwxi/9z+WMW/+fzxyz+L+SPWfxfzB+z+L+UP2bxfzl/zOL/Sv6Yxf/V/DGL/2v5YxL/sQfyxyz+g/LHLP4j5I9Z/EfMH7P4D84fs/iPlD9m8R85f8ziP0r+mMV/SP6YxX/U/DGL/2j5Yxb/0fPHLP5j5I9Z/MfMH7P4j5U/ZvEfO3/M4j9O/pjFf9z8MYv/ePljFv+P5I9Z/MfPH7P4T5A/ZvH/aP7Y/8fO3Yd7Xdd3HP9xT5azT7sudWnDoTHXZiQyGrUQFcXjzSkTzbxHPQLJjdxIgCmw0Uodmy51s2ATC8ecrVricHPdrWhY1myN2FrlFNfCGHOwyJyx68A5BGdvz7XzZd+vm+/H4w/O+f2O71/K83r5+3lxXWXpf5j+oSz9D9c/lKX/z+gfytL/1fqHsvQ/Qv9Qlv5H6h/K0v81+oey9P9Z/UNZ+g/TP5Sl/1H6h7L0/zn9Q1n6D9c/lKX/0fqHsvQ/Rv9Qlv6v1T+Upf8I/UNZ+v+8/qEs/Y/VP5Sl/y/oH8rS/3X6h7L0/0X9Q1n6/5L+oSz9j9M/lKX/6/UPZek/Uv9Qlv5v0D+Upf/x+oey9B+lfyhL/xP0D2XpP1r/UJb+v6x/KEv/MfqHsvR/o/6hLP1/Rf9Qlv5j9Q9l6f8m/UNZ+r9Z/1CW/r+qfyhL/7foH8rSf5z+oSz9T9Q/lKX/eP1DWfqfpH8oS/+T9Q9l6X+K/qEs/SfoH8rS/1T9Q1n6n6Z/KEv/ifqHsvQ/Xf9Qlv5t+oey9D9D/1CW/mfqH8rS/yz9Q1n6n61/KEv/dv1DWfq/Vf9Qlv5v0z+Upf85+oey9H+7/qEs/c/VP5Sl/yT9Q1n6n6d/KEv/8/UPZen/Dv1DWfpfoH8oS/936h/K0v9C/UNZ+l+kfyhL/4v1D2Xpf4n+oSz9L9U/lKX/ZfqHsvS/XP9Qlv6T9Q9l6X+F/qEs/a/UP5Sl/1X6h7L079A/lKX/1fqHsvSfon8oS/+p+oey9J+mfyhL/3fpH8rS/xr9Q1n6T9c/lKX/DP1DWfrP1D+Upf8s/UNZ+l+rfyhL/9n6h7L0n6N/KEv/ufqHsvSfp38oS//r9A9l6T9f/1CW/u/WP5Sl/wL9Q1n6L9Q/lKX/Iv1DWfpfr38oS//36B/K0v8G/UNZ+t+ofyhL/8X6h7L0X6J/KEv/pfqHsvT/Nf1DWfr/uv6hLP2X6R/K0v+9+oey9P8N/UNZ+r9P/1CW/u/XP5Sl/036h7L0v1n/UJb+t+gfytL/N/UPZem/XP9Qlv6/pX8oS//f1j+Upf+t+oey9L9N/1CW/r+jfyhL/w/oH8rS/3b9Q1n636F/KEv/O/UPZen/u/qHsvT/Pf1DWfrfpX8oS/8P6h/K0v9D+oey9F+hfyhL/5X6h7L0/339Q1n6/4H+oSz979Y/lKX/Kv1DWfrfo38oS/8P6x/K0v8j+oey9F+tfyhL/3v1D2Xp/4f6h7L0X6N/KEv/P9I/lKX/ffqHsvT/Y/1DWfrfr38oS/+P6h/K0v9P9A9l6f8x/UNZ+n9c/1CW/p/QP5Sl/5/qH8rS/5P6h7L0f0D/UJb+a/UPZen/oP6hLP3/TP9Qlv7r9A9l6f+Q/qEs/f9c/1CW/n+hfyhL/4f1D2Xp/5f6h7L0/5T+oSz9P61/KEv/z+gfytL/s/qHsvT/nP6hLP3/Sv9Qlv6f1z+Upf8X9A9l6b9e/1CW/l/UP5Sl/1/rH8rSf4P+oSz9H9E/lKX/l/QPZen/Zf1DWfo/qn8oS/+v6B/K0v+r+oey9P8b/UNZ+j+mfyhL/6/pH8rS/2/1D2Xp/3X9Q1n6/53+oSz9N+ofytL/G/qHsvTfpH8oS/+/1z+Upf8/6B/K0v+b+oey9P9H/UNZ+n9L/1CW/t/WP5Sl/3f0D2Xp/7j+oSz9/0n/UJb+T+gfytL/Sf1DWfpv1j+Upf9T+oey9P9n/UNZ+n9X/1CW/v+ifyhL/+/pH8rSf4v+oSz9n9Y/lKX/9/UPZem/Vf9Qlv7/qn8oS/9t+oey9P83/UNZ+j+jfyhL/3/XP5Sl/3b9Q1n679A/lKX/f+gfytL/B/qHsvTfqX8oS/8f6h/K0v9Z/UNZ+v9I/1CW/s/pH8rS/z/1D2Xp/7z+oSz9f6x/KEv/XfqHkvR/ZUv/UJb+/fQPZenfX/9Qlv4D9A9l6T9Q/1CW/oP0D2XpP1j/UJb+Q/QPZek/VP9Qlv4v0z+Upf9B+oey9H+5/qEs/V+hfyhL/4P1D2Xp/1P6h7L0P0T/0EuuPwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwP81cxcuumby9Okdc3zjG9/4Zu83L/a/mQAAgP9tP/nQ/2L/nQAAAAAAAAAAAAAAAAAAAEBeTfzfib3Y/4wAAAAAAAAAAAAAAPD/XVv7SVsH9NvvqQH7PnjNox27v47eecHU1asfLN1fu358ZvCS/fd9sGvXrl0rnxk3oevhkFar1fm/9squx0N7Hne+/pJhKw7f86iM//ydj1866eCz5qy9beA3Vt7S/vSg3c8Oal1+9bTpHW/o32qVUwa1FnQ+OL5fq1VOG9S6tfPBqM4HEwe11nQ+OGH3g5e1PtP54PVXzpp+VecTp1f+PYOXirb2Ja0B+y22td+/Dfbd/5JhT0zt/trLS3a/2sBW1/6Hr/3SYT1+1u0F9t/9+uWknvvv8z8g8IL6tv9nN3V/7eUl/9v7/4c37FwU/eyF99/9+uVk+4f6BJ//99toz8/9PT7/HxW85N77E4duuL1z/23n3Xdk11MD/yef/3/y+uWUnvvvv9/n/87P8RO6P/8PabXKqQf42wGptLUv3drb+3/v+x/46h43/fbd/z1f2fyKzv3f+1xrWddTg/q4/wm9vf/f1OPvFeibtvZVu3q8//dh/60RwUvu3f+WtQfv/vy/+f4rD93nZ33Z/6k99z9y3oxrR85duOi4aTMmT+mY0jFz7Kgxx48eO3bMmJG7PxHs+fUAf1MgiQN7/28d1OOmX6vVsfd+/X23TOjc/7aHln2k66mhfdz/ab2+/x/l/R9Cw/u3Bg9uLZg8b96c4/f82v1w1J5f9/xlwf778N//Rx/b9Zd1/5lhv1br8L33Iy4dO6Rz/9fPLuu6nhrcx/1P7HX/4/f/s0qgbw7w/f+qHjf77f/ELTfO79z/MT941eaup/r63/+n97r/u73/w4Foa2/V+ibauf8Thiw9o9p1afPnf1CfJvY/bPutO6pdlzPsH+rTxP4nLX/zFdWuy5n2D/VpYv8PzrhsebXrcpb9Q32a2P/zP73jiGrX5Wz7h/o0sf/HvvvU6mrXpd3+oT5N7P+Dd7WfUO26vNX+oT5N7P+46344rtp1eZv9Q32a2P/VLz93TbXrco79Q32a2P8Zu04+tNp1ebv9Q32a2H+/pd9bUu26nGv/UJ8m9v/k5OWzql2XSfYP9Wli/2uGjXi22nU5z/6hPk3sf9nTb5xY7bqcb/9Qnyb2/9U7VjxW7bq8w/6hPk3s/xMXv2pFtetygf1DfZrY/4+GP3RQtevyTvuH+jSx/40b1zxQ7bpcaP9Qnyb2v3LNgOHVrstF9g/1aWL/i0+f8mi163Kx/UN9mtj/6DFfvqjadbnE/qE+Tez/8M9966lq1+VS+4f6NLH/cx+eP7fadbnM/qE+Tex//hEf/3G163K5/UN9mtj/WzqOmFrtuky2f6hPE/svtx20sdp1ucL+oT5N7P/CbavGV7suV9o/1KeJ/a875Asfq3ZdrrJ/qE8T+98+e+bYatelw/6hPk3s/zvvXfy+atflavuH+jSx/9uf+3qpdl2m2D/Up4n9bxl14cXVrstU+4f6NLH/VWc980i16zLN/qE+Tex/+brH51W7Lu+yf6hPE/tfv/7MJ6pdl2vsH+rTxP6PGTHy4GrXZbr9Q32a2P+sC5Z9qNp1mWH/UJ8m9n/K/Xe8ttp1mWn/UJ8m9j/0a+M+We26zLJ/qE8T+//0uPd/qtp1udb+oT5N7H/H+KOPrXZdZts/1KeJ/W96YNSd1a7LHPuH+jSx/w88clfF6zLX/qE+Tex/9uue31btusyzf6hPE/t/06TzF1a7LtfZP9Snif0fevfEL1a7LvPtH+rTxP4v+fb3z6l2Xd5t/1CfJvZ/9GFXHFntuiywf6hPE/ufOm3DzdWuy0L7h/o0sf8JKzeNrnZdFtk/1KeJ/R/y5Nx7ql2X6+0f6tPE/rcOOOzsatflPfYP9Wli//fe8PA3q12XG+wf6tPE/m++6aMd1a7LjfYP9Wli/5/dOXh7teuy2P4BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/2IHDgQAAAAAgPxfG6GqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoKO3AgAAAAAADk/9oIVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVdiBYwEAAAAAYf7WQfRuAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHAUAAD//3II6Vg=")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
chdir(&(0x7f0000000200)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)

5.275513878s ago: executing program 2 (id=1240):
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
setsockopt$bt_BT_DEFER_SETUP(r0, 0x12, 0x7, 0x0, 0x0)

4.939393297s ago: executing program 2 (id=1248):
syz_mount_image$ext4(&(0x7f0000000640)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x808080, &(0x7f0000000000), 0x2c, 0x525, &(0x7f0000000100)="$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")
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
ptrace(0x10, r0)
ptrace$setregs(0xd, r0, 0x1, &(0x7f0000000280)="394c11960344487a54ec1fb2791c0e33688ffdda3ebff2392039ff3057bbe8ba5bd90d814ad7db39c3d2bcb22c120c64ecd4ed29369febcd3b609a66d493aa889b1feb0f73130101b750e0b7261ef82e5fbc43b79ffe23d10f420646ef4900181c9e7282e73f5337f7bd358f5eb4e9c24fdf7501a7643232a6d83eea44cbdcf861dd19b4cfebc4dc2bbe")

4.696614943s ago: executing program 2 (id=1251):
bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x18, 0x4, 0x0, 0x0, 0x1}, 0x48)

4.103238467s ago: executing program 2 (id=1255):
r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x8042)
r1 = syz_io_uring_setup(0x3924, &(0x7f0000000080)={0x0, 0x5, 0x10000, 0x0, 0x3}, &(0x7f0000000780)=<r2=>0x0, &(0x7f00000001c0)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r1, 0x2def, 0xfffffffc, 0x0, 0x0, 0x0)
write$UHID_INPUT(r0, 0x0, 0x0)

3.951454877s ago: executing program 33 (id=1255):
r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x8042)
r1 = syz_io_uring_setup(0x3924, &(0x7f0000000080)={0x0, 0x5, 0x10000, 0x0, 0x3}, &(0x7f0000000780)=<r2=>0x0, &(0x7f00000001c0)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r1, 0x2def, 0xfffffffc, 0x0, 0x0, 0x0)
write$UHID_INPUT(r0, 0x0, 0x0)

869.484532ms ago: executing program 3 (id=1292):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1b, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0xc, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x200000}, 0x90)

869.297043ms ago: executing program 3 (id=1293):
syz_emit_vhci(&(0x7f0000000600)=ANY=[@ANYBLOB="040e0c040110"], 0xf)

803.705344ms ago: executing program 3 (id=1294):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000003e0007010000000000000000047c0000040012801400018008000200", @ANYRES32=0xee00, @ANYBLOB="08000f"], 0x2c}, 0x1, 0x0, 0x0, 0x448c4}, 0x0)

739.079729ms ago: executing program 3 (id=1295):
r0 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @empty}, 0xc)
setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000140)={0x7, {{0x2, 0x4e22, @multicast2}}}, 0x88)
syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @private, @multicast2=0xe0000001}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x7f000001}}}}}, 0x0)

298.88524ms ago: executing program 0 (id=1296):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c)
setsockopt$packet_int(r0, 0x107, 0xc, &(0x7f00000000c0)=0x7, 0x4)

298.596638ms ago: executing program 3 (id=1297):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x181001, 0x0)
ioctl$COMEDI_UNLOCK(r0, 0x6406)

231.058224ms ago: executing program 0 (id=1298):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xa004}, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)

168.086864ms ago: executing program 3 (id=1299):
r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x2)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(r0, 0xab00, r1)
ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0xbdf)
ioctl$NBD_DO_IT(r0, 0xab03)
ioctl$NBD_CLEAR_SOCK(r0, 0xab04)

167.527731ms ago: executing program 0 (id=1300):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x24, 0x4, 0x8, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8884}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x8044)

48.663122ms ago: executing program 0 (id=1301):
r0 = socket$inet6(0xa, 0x3, 0x4)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, 0x0, 0x8c)

48.501351ms ago: executing program 0 (id=1302):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a2000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90)

0s ago: executing program 0 (id=1303):
r0 = syz_open_procfs(0x0, &(0x7f0000000200)='ns\x00')
getdents(r0, &(0x7f00000000c0)=""/35, 0x86)
getdents64(r0, 0xffffffffffffffff, 0x43)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:19688' (ED25519) to the list of known hosts.
syzkaller login: [   57.311774][ T5787] cgroup: Unknown subsys name 'net'
[   57.440213][ T5787] cgroup: Unknown subsys name 'cpuset'
[   57.445853][ T5787] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   59.851600][ T5787] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   65.715047][ T5853] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   65.719162][ T5853] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   65.722549][ T5853] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   65.726332][ T5853] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   65.730162][ T5853] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   65.748837][ T5235] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   65.752418][ T5235] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   65.755776][ T5235] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   65.760265][ T5235] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   65.764045][ T5235] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   65.831731][ T5853] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   65.835584][ T5853] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   65.839338][ T5853] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   65.843336][ T5853] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   65.846660][ T5853] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   66.085527][ T5851] chnl_net:caif_netlink_parms(): no params data found
[   66.135013][ T5855] chnl_net:caif_netlink_parms(): no params data found
[   66.273503][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.276381][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.279978][ T5851] bridge_slave_0: entered allmulticast mode
[   66.282878][ T5851] bridge_slave_0: entered promiscuous mode
[   66.312196][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.314473][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.316712][ T5851] bridge_slave_1: entered allmulticast mode
[   66.319684][ T5851] bridge_slave_1: entered promiscuous mode
[   66.330484][ T5859] chnl_net:caif_netlink_parms(): no params data found
[   66.335544][ T5855] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.339075][ T5855] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.341973][ T5855] bridge_slave_0: entered allmulticast mode
[   66.345689][ T5855] bridge_slave_0: entered promiscuous mode
[   66.354801][ T5855] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.357870][ T5855] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.360641][ T5855] bridge_slave_1: entered allmulticast mode
[   66.364357][ T5855] bridge_slave_1: entered promiscuous mode
[   66.379623][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   66.384700][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   66.464641][ T5855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   66.491351][ T5851] team0: Port device team_slave_0 added
[   66.495840][ T5855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   66.499829][ T5859] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.502902][ T5859] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.505570][ T5859] bridge_slave_0: entered allmulticast mode
[   66.509575][ T5859] bridge_slave_0: entered promiscuous mode
[   66.542930][ T5851] team0: Port device team_slave_1 added
[   66.545643][ T5859] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.549066][ T5859] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.551580][ T5859] bridge_slave_1: entered allmulticast mode
[   66.554351][ T5859] bridge_slave_1: entered promiscuous mode
[   66.559369][ T5855] team0: Port device team_slave_0 added
[   66.601170][ T5855] team0: Port device team_slave_1 added
[   66.627603][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0
[   66.630359][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.640718][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   66.647881][ T5859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   66.662292][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1
[   66.665006][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.675678][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   66.682451][ T5859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   66.685626][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_0
[   66.688070][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.696759][ T5855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   66.703138][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_1
[   66.705747][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.715433][ T5855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   66.788926][ T5859] team0: Port device team_slave_0 added
[   66.817741][ T5855] hsr_slave_0: entered promiscuous mode
[   66.820526][ T5855] hsr_slave_1: entered promiscuous mode
[   66.824215][ T5859] team0: Port device team_slave_1 added
[   66.832478][ T5851] hsr_slave_0: entered promiscuous mode
[   66.835744][ T5851] hsr_slave_1: entered promiscuous mode
[   66.839088][ T5851] debugfs: 'hsr0' already exists in 'hsr'
[   66.841444][ T5851] Cannot create hsr debugfs directory
[   66.877063][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_0
[   66.879773][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.889377][ T5859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   66.920943][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_1
[   66.923203][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.934554][ T5859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   67.004103][ T5859] hsr_slave_0: entered promiscuous mode
[   67.006397][ T5859] hsr_slave_1: entered promiscuous mode
[   67.008896][ T5859] debugfs: 'hsr0' already exists in 'hsr'
[   67.010727][ T5859] Cannot create hsr debugfs directory
[   67.230445][ T5855] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   67.246175][ T5855] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   67.252118][ T5855] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   67.273007][ T5855] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   67.328052][ T5851] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   67.349565][ T5851] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   67.355689][ T5851] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   67.364865][ T5851] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   67.413817][ T5859] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   67.424951][ T5859] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   67.443388][ T5859] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   67.455788][ T5859] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   67.492870][ T5855] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.530048][ T5855] 8021q: adding VLAN 0 to HW filter on device team0
[   67.549682][   T61] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.552094][   T61] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.568879][   T61] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.571674][   T61] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.604502][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.644712][ T5851] 8021q: adding VLAN 0 to HW filter on device team0
[   67.660459][ T3901] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.662737][ T3901] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.673768][ T5859] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.677517][ T3901] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.679753][ T3901] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.694821][ T5859] 8021q: adding VLAN 0 to HW filter on device team0
[   67.712073][ T3901] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.714554][ T3901] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.748812][ T3901] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.751351][ T3901] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.769561][ T5235] Bluetooth: hci0: command tx timeout
[   67.829559][ T5855] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.849526][ T5235] Bluetooth: hci1: command tx timeout
[   67.904003][ T5855] veth0_vlan: entered promiscuous mode
[   67.910773][ T5855] veth1_vlan: entered promiscuous mode
[   67.936324][ T5859] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.939827][ T5235] Bluetooth: hci2: command tx timeout
[   67.955731][ T5855] veth0_macvtap: entered promiscuous mode
[   67.963142][ T5855] veth1_macvtap: entered promiscuous mode
[   67.985368][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.991243][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_0
[   68.002047][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.018360][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.023925][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.043056][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.045798][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.054125][ T5859] veth0_vlan: entered promiscuous mode
[   68.074882][ T5859] veth1_vlan: entered promiscuous mode
[   68.109489][ T5851] veth0_vlan: entered promiscuous mode
[   68.134047][ T5851] veth1_vlan: entered promiscuous mode
[   68.180834][ T5859] veth0_macvtap: entered promiscuous mode
[   68.181011][ T1092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.195829][ T1092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.211474][ T5859] veth1_macvtap: entered promiscuous mode
[   68.221858][ T5851] veth0_macvtap: entered promiscuous mode
[   68.253674][ T5851] veth1_macvtap: entered promiscuous mode
[   68.271097][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_0
[   68.285069][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.291415][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.298831][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.302416][ T5863] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.318583][ T5863] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.321822][ T5863] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.326577][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0
[   68.347133][ T5863] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.360191][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.385489][ T5855] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   68.400505][ T5863] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.428487][ T5863] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.455305][ T5863] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.464479][ T5863] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.504718][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.511355][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.549581][   T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.552198][   T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.578955][ T1092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.581960][ T1092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.624257][ T1092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.628719][ T1092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.993196][ T5931] loop0: detected capacity change from 0 to 1024
[   69.041505][ T5924] loop1: detected capacity change from 0 to 32768
[   69.044089][ T5931] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   69.063640][ T5924] XFS (loop1): DAX unsupported by block device. Turning off DAX.
[   69.069450][ T5924] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   69.101664][ T5924] XFS (loop1): Ending clean mount
[   69.141526][ T5855] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   69.145199][ T5851] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   69.564015][   T47] IPVS: starting estimator thread 0...
[   69.696269][ T5970] netlink: 277 bytes leftover after parsing attributes in process `syz.1.20'.
[   69.711067][ T5964] IPVS: using max 64 ests per chain, 153600 per kthread
[   69.770228][ T5313] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   69.867947][ T5235] Bluetooth: hci0: command tx timeout
[   70.072431][ T5853] Bluetooth: hci1: command tx timeout
[   70.097630][ T5853] Bluetooth: hci2: command tx timeout
[   70.179242][ T5313] usb 1-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36
[   70.185856][ T5313] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   70.194148][ T5313] usb 1-1: config 0 descriptor??
[   70.243123][ T5979] loop1: detected capacity change from 0 to 2364
[   70.248379][ T5979] =======================================================
[   70.248379][ T5979] WARNING: The mand mount option has been deprecated and
[   70.248379][ T5979]          and is ignored by this kernel. Remove the mand
[   70.248379][ T5979]          option from the mount to silence this warning.
[   70.248379][ T5979] =======================================================
[   70.419006][ T5313] kaweth 1-1:0.0: Firmware present in device.
[   70.608671][ T5313] kaweth 1-1:0.0: Statistics collection: 0
[   70.611200][ T5313] kaweth 1-1:0.0: Multicast filter limit: 0
[   70.613582][ T5313] kaweth 1-1:0.0: MTU: 0
[   70.615273][ T5313] kaweth 1-1:0.0: Read MAC address 00:00:00:00:00:00
[   70.737615][ T5887] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   70.857039][ T5975] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   70.889830][ T5887] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   70.895386][ T5887] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   70.900189][ T5887] usb 2-1: New USB device found, idVendor=046d, idProduct=c713, bcdDevice= 0.00
[   70.903588][ T5887] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   70.915462][ T5887] usb 2-1: config 0 descriptor??
[   71.009309][ T5975] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 15
[   71.015215][ T5313] kaweth 1-1:0.0: Error setting SOFS wait
[   71.018935][ T5313] kaweth 1-1:0.0: probe with driver kaweth failed with error -5
[   71.022112][ T5975] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   71.025042][ T5975] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[   71.034697][ T5313] usb 1-1: USB disconnect, device number 2
[   71.037150][ T5975] usb 3-1: SerialNumber: syz
[   71.212153][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   71.214228][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   71.253209][ T5975] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71
[   71.265023][ T5975] usb 3-1: USB disconnect, device number 2
[   71.334143][ T5983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   71.338503][ T5983] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   71.348651][ T5887] hid (null): global environment stack underflow
[   71.361161][ T5887] logitech-djreceiver 0003:046D:C713.0001: unexpected long global item
[   71.365443][ T5887] logitech-djreceiver 0003:046D:C713.0001: logi_dj_probe: parse failed
[   71.373778][ T5887] logitech-djreceiver 0003:046D:C713.0001: probe with driver logitech-djreceiver failed with error -22
[   71.554844][ T5313] usb 2-1: USB disconnect, device number 2
[   72.074233][ T5992] fanotify: failed to encode fid (type=0, len=0, err=-2)
[   72.168229][ T5856] Bluetooth: hci2: command tx timeout
[   72.170454][ T5856] Bluetooth: hci1: command tx timeout
[   72.171316][ T5235] Bluetooth: hci0: command tx timeout
[   72.259896][ T6006] loop2: detected capacity change from 0 to 1024
[   72.266499][ T6006] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   72.273643][ T6006] EXT4-fs (loop2): revision level too high, forcing read-only mode
[   72.284735][ T6006] EXT4-fs (loop2): orphan cleanup on readonly fs
[   72.299865][ T6006] Quota error (device loop2): do_check_range: Getting dqdh_entries 512 out of range 0-14
[   72.322789][ T6006] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[   72.335903][ T6006] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.34: Failed to acquire dquot type 0
[   72.342332][ T6006] Quota error (device loop2): do_check_range: Getting dqdh_entries 512 out of range 0-14
[   72.347282][ T6006] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[   72.351357][ T6006] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.34: Failed to acquire dquot type 0
[   72.356154][ T6006] EXT4-fs error (device loop2): ext4_free_blocks:6696: comm syz.2.34: Freeing blocks not in datazone - block = 0, count = 4096
[   72.375000][ T6006] Quota error (device loop2): do_check_range: Getting dqdh_entries 512 out of range 0-14
[   72.384754][ T6006] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[   72.390951][ T6006] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.34: Failed to acquire dquot type 0
[   72.399000][ T6006] EXT4-fs (loop2): 1 orphan inode deleted
[   72.403945][ T6006] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   72.818373][ T5859] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   73.866974][ T4923] usb 2-1: new full-speed USB device number 3 using dummy_hcd
[   73.989849][ T6064] loop2: detected capacity change from 0 to 1024
[   74.038434][   T40] hfsplus: b-tree write err: -5, ino 4
[   74.043879][ T4923] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   74.048573][ T4923] usb 2-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00
[   74.057245][ T4923] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   74.070182][ T4923] usb 2-1: config 0 descriptor??
[   74.248689][ T5235] Bluetooth: hci0: command tx timeout
[   74.257888][ T5235] Bluetooth: hci1: command tx timeout
[   74.259059][ T5856] Bluetooth: hci2: command tx timeout
[   74.445968][ T6084] netlink: 44 bytes leftover after parsing attributes in process `syz.0.61'.
[   74.502071][ T4923] nintendo 0003:057E:200E.0002: unbalanced delimiter at end of report description
[   74.511922][ T4923] nintendo 0003:057E:200E.0002: HID parse failed
[   74.523643][ T4923] nintendo 0003:057E:200E.0002: probe - fail = -22
[   74.526448][ T4923] nintendo 0003:057E:200E.0002: probe with driver nintendo failed with error -22
[   74.707212][   T10] usb 2-1: USB disconnect, device number 3
[   74.950119][ T6105] netlink: 12 bytes leftover after parsing attributes in process `syz.2.70'.
[   74.953484][ T6105] netlink: 'syz.2.70': attribute type 11 has an invalid length.
[   74.974908][ T5880] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   74.978603][ T6105] netlink: 12 bytes leftover after parsing attributes in process `syz.2.70'.
[   74.982048][ T5880] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   74.985414][ T6105] netlink: 'syz.2.70': attribute type 11 has an invalid length.
[   74.988907][ T5880] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   74.992881][ T5880] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   74.996183][ T6105] Zero length message leads to an empty skb
[   75.179875][ T6116] netlink: 20 bytes leftover after parsing attributes in process `syz.2.75'.
[   75.360727][ T6122] loop1: detected capacity change from 0 to 2048
[   75.383215][ T6122] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   75.771288][ T6126] loop2: detected capacity change from 0 to 32768
[   75.834993][ T6140] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4)
[   75.837648][ T6140] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   75.846611][ T6140] vhci_hcd vhci_hcd.0: Device attached
[   75.852806][ T6141] vhci_hcd: connection closed
[   75.854392][ T5880] vhci_hcd: stop threads
[   75.859290][ T5880] vhci_hcd: release socket
[   75.861200][ T5880] vhci_hcd: disconnect device
[   76.297563][   T24] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   76.477120][   T24] usb 3-1: Using ep0 maxpacket: 16
[   76.488171][   T24] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87
[   76.496981][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7
[   76.516043][   T24] usb 3-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89
[   76.520325][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   76.523480][   T24] usb 3-1: Product: syz
[   76.525093][   T24] usb 3-1: Manufacturer: syz
[   76.539117][   T24] usb 3-1: SerialNumber: syz
[   76.547569][   T24] usb 3-1: config 0 descriptor??
[   76.763398][   T24] appledisplay 3-1:0.0: Error while getting initial brightness: -71
[   76.767598][ T5313] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   76.769331][   T24] appledisplay 3-1:0.0: probe with driver appledisplay failed with error -71
[   76.781992][   T24] usb 3-1: USB disconnect, device number 3
[   76.917154][ T5313] usb 2-1: Using ep0 maxpacket: 32
[   76.931248][ T5313] usb 2-1: New USB device found, idVendor=04f1, idProduct=1001, bcdDevice=19.63
[   76.934634][ T5313] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   76.944219][ T5313] usb 2-1: Product: syz
[   76.945852][ T5313] usb 2-1: Manufacturer: syz
[   76.947772][ T5313] usb 2-1: SerialNumber: syz
[   76.954625][ T5313] usb 2-1: config 0 descriptor??
[   76.961908][ T5313] gspca_main: sunplus-2.14.0 probing 04f1:1001
[   77.702027][ T5313] gspca_sunplus: reg_w_riv err -71
[   77.706725][ T5313] sunplus 2-1:0.0: probe with driver sunplus failed with error -71
[   77.723096][ T5313] usb 2-1: USB disconnect, device number 4
[   78.627976][ T6197] netlink: 12 bytes leftover after parsing attributes in process `syz.1.111'.
[   78.932347][ T6208] syz_tun: entered allmulticast mode
[   78.937053][   T10] usb 3-1: new full-speed USB device number 4 using dummy_hcd
[   78.944643][ T6208] dvmrp1: entered allmulticast mode
[   78.952244][ T6207] syz_tun: left allmulticast mode
[   79.176037][   T10] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   79.201365][   T10] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[   79.232777][   T10] usb 3-1: config 0 interface 0 has no altsetting 0
[   79.249780][   T10] usb 3-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00
[   79.269415][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   79.344375][   T10] usb 3-1: config 0 descriptor??
[   79.348722][ T6200] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   79.933124][   T10] sony 0003:054C:024B.0003: item fetching failed at offset 0/2
[   79.977599][   T10] sony 0003:054C:024B.0003: parse failed
[   80.006433][   T10] sony 0003:054C:024B.0003: probe with driver sony failed with error -22
[   80.011903][ T6228] netlink: 8 bytes leftover after parsing attributes in process `syz.1.124'.
[   80.016687][ T6228] netlink: 'syz.1.124': attribute type 5 has an invalid length.
[   80.021956][ T6228] netlink: 20 bytes leftover after parsing attributes in process `syz.1.124'.
[   80.037839][ T6228] geneve2: entered promiscuous mode
[   80.039722][ T6228] geneve2: entered allmulticast mode
[   80.043716][ T5863] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[   80.046714][ T5863] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[   80.055569][ T5863] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[   80.060669][ T5863] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[   80.079373][   T10] usb 3-1: USB disconnect, device number 4
[   80.152640][ T6232] loop1: detected capacity change from 0 to 128
[   80.180709][ T6232] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   80.194014][ T6232] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   80.245576][ T5851] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   80.421335][ T6240] netlink: 28 bytes leftover after parsing attributes in process `syz.0.129'.
[   80.729633][ T6247] loop2: detected capacity change from 0 to 512
[   80.737544][ T6247] EXT4-fs error (device loop2): ext4_iget_extra_inode:5104: inode #15: comm syz.2.132: corrupted in-inode xattr: invalid ea_ino
[   80.742495][ T6247] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.132: couldn't read orphan inode 15 (err -117)
[   80.748445][ T6247] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   81.017717][ T6252] netlink: 8 bytes leftover after parsing attributes in process `syz.0.134'.
[   81.105793][ T6256] Driver unsupported XDP return value 0 on prog  (id 15) dev N/A, expect packet loss!
[   81.531018][ T5859] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   81.720520][ T6272] loop1: detected capacity change from 0 to 32768
[   81.731121][ T6272] bcachefs (/dev/loop1): error validating superblock: Invalid superblock section clean: entry type btree_keys overruns end of section
[   81.731121][ T6272] clean (size 40):
[   81.731121][ T6272] flags:          9
[   81.731121][ T6272] journal_seq:    7
[   81.731121][ T6272] 
[   81.754689][ T6272] bcachefs: bch2_fs_get_tree() error: invalid_sb_clean
[   82.048867][ T6295] netlink: 8 bytes leftover after parsing attributes in process `syz.1.154'.
[   82.382072][ T6301] loop1: detected capacity change from 0 to 40427
[   82.394263][ T6301] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[   82.397889][ T6301] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[   82.403740][ T6301] F2FS-fs (loop1): invalid crc value
[   82.477344][ T6301] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   82.498358][ T6301] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[   82.500746][ T6301] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   82.520481][ T6307] netlink: 'syz.2.158': attribute type 11 has an invalid length.
[   83.329300][ T5903] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   83.342774][ T5903] hid-generic 0000:0000:0000.0004: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   83.975750][ T6357] blkio.reset_stats is deprecated
[   84.035086][ T6363] warning: `syz.2.182' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   84.259628][ T5903] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   84.381069][ T6384] netlink: 'syz.2.193': attribute type 4 has an invalid length.
[   84.384125][ T6384] netlink: 14345 bytes leftover after parsing attributes in process `syz.2.193'.
[   84.389504][ T6384] netlink: 'syz.2.193': attribute type 4 has an invalid length.
[   84.392536][ T6384] netlink: 14345 bytes leftover after parsing attributes in process `syz.2.193'.
[   84.407067][ T5903] usb 2-1: Using ep0 maxpacket: 16
[   84.415562][ T5903] usb 2-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4
[   84.419488][ T5903] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   84.426087][ T5903] usb 2-1: Product: syz
[   84.447754][ T5903] usb 2-1: Manufacturer: syz
[   84.449668][ T5903] usb 2-1: SerialNumber: syz
[   84.453441][ T5903] usb 2-1: config 0 descriptor??
[   84.461272][ T5903] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state.
[   84.491033][ T6386] loop2: detected capacity change from 0 to 128
[   84.518812][ T6386] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   84.525355][ T6386] ext4 filesystem being mounted at /65/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   84.573119][ T5859] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   84.663588][ T5903] gp8psk: usb in 128 operation failed.
[   84.666152][ T5903] gp8psk: usb in 137 operation failed.
[   84.672481][ T5903] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[   84.676634][ T5903] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver)
[   84.680723][ T5903] usb 2-1: media controller created
[   84.697642][ T5903] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[   84.718459][ T5903] gp8psk_fe: Frontend revision 1 attached
[   84.720581][ T5903] usb 2-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)...
[   84.723509][ T5903] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered.
[   85.189828][ T5903] gp8psk: usb in 137 operation failed.
[   85.192008][ T5903] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected.
[   85.195837][ T5903] gp8psk: found Genpix USB device pID = 201 (hex)
[   85.212449][ T5903] usb 2-1: USB disconnect, device number 5
[   85.339347][ T5903] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected.
[   85.533616][ T6399] loop2: detected capacity change from 0 to 32768
[   85.551991][ T6399] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   85.598002][ T6399] XFS (loop2): Ending clean mount
[   85.670622][ T5859] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   85.884828][   T33] audit: type=1326 audit(1755260107.294:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6412 comm="syz.2.201" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb97a18ebe9 code=0x0
[   86.564570][ T6431] netlink: 'syz.0.209': attribute type 1 has an invalid length.
[   86.569421][  T791] cfg80211: failed to load regulatory.db
[   86.690190][ T6439] loop1: detected capacity change from 0 to 1024
[   86.740977][ T6439] hfsplus: request for non-existent node 3 in B*Tree
[   86.743854][ T6439] hfsplus: request for non-existent node 3 in B*Tree
[   86.873179][ T6448] loop1: detected capacity change from 0 to 4096
[   86.915262][ T6454] netlink: 8 bytes leftover after parsing attributes in process `syz.2.220'.
[   86.922532][ T6455] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   86.942275][ T6448] NILFS error (device loop1): nilfs_check_folio: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=2, rec_len=16, name_len=11
[   86.960873][ T6448] NILFS error (device loop1): nilfs_check_folio: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=2, rec_len=16, name_len=11
[   86.966387][   T33] audit: type=1326 audit(1755260364.375:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6458 comm="syz.2.222" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb97a18ebe9 code=0x0
[   87.065336][ T6463] netlink: 12 bytes leftover after parsing attributes in process `syz.2.224'.
[   87.200247][ T6473] netlink: 'syz.1.229': attribute type 5 has an invalid length.
[   87.208331][ T6473] ip6erspan0: entered promiscuous mode
[   87.475370][ T6489] loop2: detected capacity change from 0 to 512
[   88.385637][ T6507] netlink: 12 bytes leftover after parsing attributes in process `syz.2.244'.
[   88.453860][ T6510] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   88.514110][ T6507] netlink: 'syz.2.244': attribute type 2 has an invalid length.
[   88.708348][ T6515] netlink: 'syz.0.247': attribute type 1 has an invalid length.
[   88.903809][ T6535] capability: warning: `syz.2.257' uses deprecated v2 capabilities in a way that may be insecure
[   89.076539][ T6548] loop2: detected capacity change from 0 to 512
[   89.157337][ T6548] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   89.162403][ T6548] ext4 filesystem being mounted at /89/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   89.188614][ T5859] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   89.499154][ T6581] netlink: 76 bytes leftover after parsing attributes in process `syz.0.277'.
[   89.576154][ T6568] loop1: detected capacity change from 0 to 40427
[   89.585416][ T6568] F2FS-fs (loop1): invalid crc value
[   89.624318][ T6568] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[   89.627643][ T6568] F2FS-fs (loop1): Start checkpoint disabled!
[   89.638226][ T6568] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[   89.652846][ T6588] netlink: 140 bytes leftover after parsing attributes in process `syz.2.280'.
[   89.691852][   T36] kworker/u10:1: attempt to access beyond end of device
[   89.691852][   T36] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   89.703071][   T36] CPU: 1 UID: 0 PID: 36 Comm: kworker/u10:1 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[   89.703093][   T36] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   89.703101][   T36] Workqueue: writeback wb_workfn (flush-7:1)
[   89.703125][   T36] Call Trace:
[   89.703132][   T36]  <TASK>
[   89.703156][   T36]  dump_stack_lvl+0x189/0x250
[   89.703184][   T36]  ? __pfx_dump_stack_lvl+0x10/0x10
[   89.703201][   T36]  ? __pfx_queue_work_on+0x10/0x10
[   89.703214][   T36]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   89.703232][   T36]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   89.703258][   T36]  f2fs_handle_critical_error+0x37c/0x540
[   89.703284][   T36]  f2fs_write_end_io+0x886/0xb60
[   89.703314][   T36]  __submit_merged_bio+0x27a/0x6a0
[   89.703338][   T36]  __submit_merged_write_cond+0x255/0x530
[   89.703363][   T36]  f2fs_write_data_pages+0x261d/0x3000
[   89.703413][   T36]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   89.703446][   T36]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[   89.703492][   T36]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[   89.703522][   T36]  ? trace_f2fs_writepages+0x7f/0x200
[   89.703541][   T36]  ? f2fs_write_node_pages+0x478/0x6e0
[   89.703581][   T36]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   89.703602][   T36]  do_writepages+0x32e/0x550
[   89.703625][   T36]  ? reacquire_held_locks+0x127/0x1d0
[   89.703638][   T36]  ? writeback_sb_inodes+0x384/0x1010
[   89.703692][   T36]  __writeback_single_inode+0x145/0xff0
[   89.703710][   T36]  ? do_raw_spin_unlock+0x4d/0x240
[   89.703731][   T36]  writeback_sb_inodes+0x6c7/0x1010
[   89.703746][   T36]  ? lockdep_hardirqs_on+0x9c/0x150
[   89.703785][   T36]  ? __pfx_writeback_sb_inodes+0x10/0x10
[   89.703834][   T36]  ? rcu_is_watching+0x15/0xb0
[   89.703857][   T36]  wb_writeback+0x43b/0xaf0
[   89.703877][   T36]  ? queue_io+0x3d1/0x590
[   89.703893][   T36]  ? __pfx_wb_writeback+0x10/0x10
[   89.703913][   T36]  ? _raw_spin_unlock_irq+0x23/0x50
[   89.703932][   T36]  wb_workfn+0x409/0xef0
[   89.703959][   T36]  ? __pfx_wb_workfn+0x10/0x10
[   89.703978][   T36]  ? __lock_acquire+0xab9/0xd20
[   89.704007][   T36]  ? process_scheduled_works+0x9ef/0x17b0
[   89.704027][   T36]  ? _raw_spin_unlock_irq+0x23/0x50
[   89.704041][   T36]  ? process_scheduled_works+0x9ef/0x17b0
[   89.704053][   T36]  ? process_scheduled_works+0x9ef/0x17b0
[   89.704068][   T36]  process_scheduled_works+0xae1/0x17b0
[   89.704109][   T36]  ? __pfx_process_scheduled_works+0x10/0x10
[   89.704140][   T36]  worker_thread+0x8a0/0xda0
[   89.704185][   T36]  kthread+0x711/0x8a0
[   89.704205][   T36]  ? __pfx_worker_thread+0x10/0x10
[   89.704218][   T36]  ? __pfx_kthread+0x10/0x10
[   89.704236][   T36]  ? _raw_spin_unlock_irq+0x23/0x50
[   89.704251][   T36]  ? lockdep_hardirqs_on+0x9c/0x150
[   89.704266][   T36]  ? __pfx_kthread+0x10/0x10
[   89.704283][   T36]  ret_from_fork+0x3fc/0x770
[   89.704301][   T36]  ? __pfx_ret_from_fork+0x10/0x10
[   89.704321][   T36]  ? __switch_to_asm+0x39/0x70
[   89.704336][   T36]  ? __switch_to_asm+0x33/0x70
[   89.704351][   T36]  ? __pfx_kthread+0x10/0x10
[   89.704369][   T36]  ret_from_fork_asm+0x1a/0x30
[   89.704401][   T36]  </TASK>
[   89.704408][   T36] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[   89.737397][ T6595] netlink: 16 bytes leftover after parsing attributes in process `syz.2.284'.
[   90.347071][ T5903] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[   90.500948][ T5903] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   90.504838][ T5903] usb 2-1: config 0 has no interfaces?
[   90.520896][ T5903] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[   90.525224][ T5903] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   90.531006][ T5903] usb 2-1: Product: syz
[   90.532642][ T5903] usb 2-1: Manufacturer: syz
[   90.534394][ T5903] usb 2-1: SerialNumber: syz
[   90.544917][ T5903] usb 2-1: config 0 descriptor??
[   90.545694][ T6623] loop2: detected capacity change from 0 to 512
[   90.550967][ T6623] EXT4-fs: Ignoring removed nobh option
[   90.554009][ T6623] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   90.589535][ T6623] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #3: comm syz.2.296: corrupted inode contents
[   90.596773][ T6623] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #3: comm syz.2.296: mark_inode_dirty error
[   90.605842][ T6623] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #3: comm syz.2.296: corrupted inode contents
[   90.611507][ T6623] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #3: comm syz.2.296: mark_inode_dirty error
[   90.618774][ T6623] Quota error (device loop2): write_blk: dquota write failed
[   90.621809][ T6623] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[   90.625672][ T6623] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.296: Failed to acquire dquot type 0
[   90.635831][ T6623] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.296: corrupted inode contents
[   90.642060][ T6623] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #16: comm syz.2.296: mark_inode_dirty error
[   90.646822][ T6623] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.296: corrupted inode contents
[   90.654469][ T6623] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.296: mark_inode_dirty error
[   90.660414][ T6623] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.296: corrupted inode contents
[   90.666436][ T6623] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem
[   90.670800][ T6623] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.296: corrupted inode contents
[   90.675707][ T6623] EXT4-fs error (device loop2): ext4_truncate:4666: inode #16: comm syz.2.296: mark_inode_dirty error
[   90.680963][ T6623] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem
[   90.688412][ T6623] EXT4-fs (loop2): 1 truncate cleaned up
[   90.692211][ T6623] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   90.697760][ T6623] ext4 filesystem being mounted at /106/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   90.727515][ T5859] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   91.442467][ T6639] loop1: detected capacity change from 0 to 8192
[   91.445778][ T6639] ntfs3: Unknown parameter ''
[   92.194317][ T5856] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201'
[   92.210290][ T5856] CPU: 0 UID: 0 PID: 5856 Comm: kworker/u11:3 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[   92.210333][ T5856] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   92.210342][ T5856] Workqueue: hci2 hci_rx_work
[   92.210365][ T5856] Call Trace:
[   92.210372][ T5856]  <TASK>
[   92.210380][ T5856]  dump_stack_lvl+0x189/0x250
[   92.210403][ T5856]  ? __pfx_dump_stack_lvl+0x10/0x10
[   92.210422][ T5856]  ? __pfx__printk+0x10/0x10
[   92.210446][ T5856]  ? kernfs_path_from_node+0x250/0x290
[   92.210461][ T5856]  ? kernfs_path_from_node+0x2f/0x290
[   92.210479][ T5856]  sysfs_create_dir_ns+0x259/0x280
[   92.210497][ T5856]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[   92.210542][ T5856]  ? do_raw_spin_unlock+0x4d/0x240
[   92.210564][ T5856]  kobject_add_internal+0x59f/0xb40
[   92.210594][ T5856]  kobject_add+0x155/0x220
[   92.210618][ T5856]  ? __pfx_kobject_add+0x10/0x10
[   92.210638][ T5856]  ? _raw_spin_unlock+0x28/0x50
[   92.210658][ T5856]  ? get_device_parent+0x366/0x3a0
[   92.210675][ T5856]  device_add+0x408/0xb50
[   92.210692][ T5856]  hci_conn_add_sysfs+0xd5/0x1e0
[   92.210718][ T5856]  le_conn_complete_evt+0xc3a/0x1220
[   92.210750][ T5856]  ? __pfx_le_conn_complete_evt+0x10/0x10
[   92.210769][ T5856]  ? __mutex_unlock_slowpath+0x1a1/0x760
[   92.210786][ T5856]  ? __asan_memcpy+0x40/0x70
[   92.210805][ T5856]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[   92.210823][ T5856]  ? skb_pull_data+0xfb/0x200
[   92.210843][ T5856]  hci_le_conn_complete_evt+0x187/0x450
[   92.210868][ T5856]  hci_event_packet+0x78f/0x1200
[   92.210886][ T5856]  ? __pfx_hci_le_meta_evt+0x10/0x10
[   92.210906][ T5856]  ? __pfx_hci_event_packet+0x10/0x10
[   92.210923][ T5856]  ? kcov_remote_start+0x4d3/0x7f0
[   92.210940][ T5856]  ? lockdep_hardirqs_on+0x90/0x150
[   92.210960][ T5856]  ? hci_send_to_monitor+0xe2/0x570
[   92.210980][ T5856]  hci_rx_work+0x46a/0xe80
[   92.211000][ T5856]  ? process_scheduled_works+0x9ef/0x17b0
[   92.211016][ T5856]  process_scheduled_works+0xae1/0x17b0
[   92.211052][ T5856]  ? __pfx_process_scheduled_works+0x10/0x10
[   92.211078][ T5856]  worker_thread+0x8a0/0xda0
[   92.211094][ T5856]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   92.211119][ T5856]  ? __kthread_parkme+0x7b/0x200
[   92.211143][ T5856]  kthread+0x711/0x8a0
[   92.211162][ T5856]  ? __pfx_worker_thread+0x10/0x10
[   92.211174][ T5856]  ? __pfx_kthread+0x10/0x10
[   92.211220][ T5856]  ? _raw_spin_unlock_irq+0x23/0x50
[   92.211236][ T5856]  ? lockdep_hardirqs_on+0x9c/0x150
[   92.211253][ T5856]  ? __pfx_kthread+0x10/0x10
[   92.211271][ T5856]  ret_from_fork+0x3fc/0x770
[   92.211289][ T5856]  ? __pfx_ret_from_fork+0x10/0x10
[   92.211310][ T5856]  ? __switch_to_asm+0x39/0x70
[   92.211330][ T5856]  ? __switch_to_asm+0x33/0x70
[   92.211347][ T5856]  ? __pfx_kthread+0x10/0x10
[   92.211365][ T5856]  ret_from_fork_asm+0x1a/0x30
[   92.211396][ T5856]  </TASK>
[   92.211749][ T5856] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory.
[   92.249267][ T6663] netlink: 16 bytes leftover after parsing attributes in process `syz.2.312'.
[   92.249844][ T5856] Bluetooth: hci2: failed to register connection device
[   93.529920][   T24] usb 2-1: USB disconnect, device number 6
[   94.263341][ T6686] loop2: detected capacity change from 0 to 1024
[   94.288547][ T6686] hfsplus: inconsistency in B*Tree (128,1,255,1,0)
[   94.291438][ T6686] syz.2.323: attempt to access beyond end of device
[   94.291438][ T6686] loop2: rw=0, sector=917504, nr_sectors = 2 limit=1024
[   94.297855][ T6686] Buffer I/O error on dev loop2, logical block 458752, async page read
[   94.300934][ T6686] syz.2.323: attempt to access beyond end of device
[   94.300934][ T6686] loop2: rw=0, sector=917504, nr_sectors = 2 limit=1024
[   94.305045][ T6686] Buffer I/O error on dev loop2, logical block 458752, async page read
[   94.462583][ T6696] netlink: 100 bytes leftover after parsing attributes in process `syz.2.327'.
[   94.647290][ T5235] Bluetooth: hci2: command tx timeout
[   94.916611][ T6717] mmap: syz.0.338 (6717) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   94.919976][ T6715] loop2: detected capacity change from 0 to 4096
[   95.028234][ T3901] ntfs3(loop2): ino=5, mi_enum_attr
[   95.192282][ T6735] 9pnet_virtio: no channels available for device 127.0.0.1
[   95.417028][ T5903] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[   95.591751][ T5903] usb 2-1: config 0 has an invalid interface number: 194 but max is 0
[   95.594982][ T5903] usb 2-1: config 0 has no interface number 0
[   95.603022][ T5903] usb 2-1: New USB device found, idVendor=19d2, idProduct=5755, bcdDevice=df.b8
[   95.606783][ T5903] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   95.615001][ T5903] usb 2-1: Product: syz
[   95.617976][ T5903] usb 2-1: Manufacturer: syz
[   95.620052][ T5903] usb 2-1: SerialNumber: syz
[   95.624764][ T5903] usb 2-1: config 0 descriptor??
[   95.631480][ T5903] usb 2-1: bad CDC descriptors
[   95.839155][ T5903] usb 2-1: USB disconnect, device number 7
[   95.930644][ T6770] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   96.513567][ T6772] loop2: detected capacity change from 0 to 32768
[   96.538654][ T6772] bcachefs (/dev/loop2): error validating superblock: Invalid superblock section errors: entries out of order
[   96.538654][ T6772] errors (size 64):
[   96.538654][ T6772] (unknown error 63098)           98139432299383  16981954538416098692
[   96.538654][ T6772] backpointer_to_missing_ptr      0               34376515584
[   96.538654][ T6772] (unknown error 62899)           26163           1611530240
[   96.538654][ T6772] 
[   96.562840][ T6772] bcachefs: bch2_fs_get_tree() error: invalid_sb_errors
[   96.831916][ T6787] io-wq is not configured for unbound workers
[   96.875018][ T6776] loop1: detected capacity change from 0 to 40427
[   96.901594][ T6776] F2FS-fs (loop1): build fault injection rate: 690
[   97.030436][ T6776] F2FS-fs (loop1): invalid crc value
[   97.152439][ T6776] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   97.158281][ T6776] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   97.591882][ T6800] IPVS: Error connecting to the multicast addr
[   97.714703][ T6806] netlink: 48 bytes leftover after parsing attributes in process `syz.2.376'.
[   97.718937][ T6806] tc_dump_action: action bad kind
[   98.334876][ T6854] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   98.346465][ T6854] syz_tun: entered promiscuous mode
[   98.352453][ T6854] syz_tun: left promiscuous mode
[   98.510573][ T6867] macvtap0: entered promiscuous mode
[   98.515424][ T6867] macvtap0: left promiscuous mode
[   98.656720][ T6877] netlink: 'syz.0.404': attribute type 1 has an invalid length.
[   98.684642][ T6881] netlink: 'syz.0.405': attribute type 1 has an invalid length.
[   98.687978][ T6881] netlink: 'syz.0.405': attribute type 4 has an invalid length.
[   98.692775][ T6881] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.405'.
[   98.701156][ T6881] netlink: 'syz.0.405': attribute type 1 has an invalid length.
[   98.703516][ T6881] netlink: 'syz.0.405': attribute type 4 has an invalid length.
[   98.705843][ T6881] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.405'.
[   99.688752][ T6903] tipc: Started in network mode
[   99.693891][ T6903] tipc: Node identity e0000001, cluster identity 4711
[   99.700531][ T6903] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  100.020280][ T6912] trusted_key: syz.1.419 sent an empty control message without MSG_MORE.
[  100.324105][ T6926] netlink: 148 bytes leftover after parsing attributes in process `syz.2.426'.
[  100.351478][ T6926] netlink: 148 bytes leftover after parsing attributes in process `syz.2.426'.
[  100.483185][ T6936] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.429'.
[  100.550674][ T6938] netlink: 12 bytes leftover after parsing attributes in process `syz.2.430'.
[  100.769908][ T6944] loop2: detected capacity change from 0 to 4096
[  100.786027][ T6947] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  100.814089][ T6944] NILFS (loop2): nilfs_palloc_commit_free_entry (ino=6): entry number 15 already freed
[  100.833533][ T6946] loop1: detected capacity change from 0 to 4096
[  100.837894][ T6946] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512).
[  101.019064][ T6954] syz.0.437 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  102.005707][ T6993] tipc: New replicast peer: 255.255.255.255
[  102.009669][ T6993] tipc: Enabled bearer <udp:syz2>, priority 10
[  103.138184][ T5887] tipc: Node number set to 3758096385
[  104.060261][   T33] audit: type=1326 audit(1755260381.475:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7028 comm="syz.2.463" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb97a18ebe9 code=0x7ffc0000
[  104.083337][   T33] audit: type=1326 audit(1755260381.475:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7028 comm="syz.2.463" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb97a18ebe9 code=0x7ffc0000
[  104.101662][   T33] audit: type=1326 audit(1755260381.475:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7028 comm="syz.2.463" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb97a18ebe9 code=0x7ffc0000
[  104.112276][   T33] audit: type=1326 audit(1755260381.475:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7028 comm="syz.2.463" exe="/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7fb97a18ebe9 code=0x7ffc0000
[  104.125157][   T33] audit: type=1326 audit(1755260381.475:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7028 comm="syz.2.463" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb97a18ebe9 code=0x7ffc0000
[  104.142732][   T33] audit: type=1326 audit(1755260381.475:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7028 comm="syz.2.463" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb97a18ebe9 code=0x7ffc0000
[  104.159047][   T33] audit: type=1326 audit(1755260381.475:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7028 comm="syz.2.463" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fb97a18ebe9 code=0x7ffc0000
[  104.166794][   T33] audit: type=1326 audit(1755260381.475:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7028 comm="syz.2.463" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fb97a18ebe9 code=0x7ffc0000
[  104.560612][ T7058] netlink: 4 bytes leftover after parsing attributes in process `syz.1.474'.
[  104.762408][ T7076] netlink: 248 bytes leftover after parsing attributes in process `syz.2.482'.
[  104.957067][ T5887] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  105.110231][ T5887] usb 2-1: Using ep0 maxpacket: 32
[  105.120206][ T5887] usb 2-1: config 252 has an invalid interface number: 91 but max is 0
[  105.123576][ T5887] usb 2-1: config 252 has no interface number 0
[  105.126184][ T5887] usb 2-1: config 252 interface 91 has no altsetting 0
[  105.133658][ T5887] usb 2-1: New USB device found, idVendor=07ca, idProduct=a309, bcdDevice=7f.92
[  105.137605][ T5887] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  105.141122][ T5887] usb 2-1: Product: syz
[  105.142725][ T5887] usb 2-1: Manufacturer: syz
[  105.144562][ T5887] usb 2-1: SerialNumber: syz
[  105.372652][ T5887] usb 2-1: USB disconnect, device number 8
[  106.280115][ T7120] loop1: detected capacity change from 0 to 1024
[  106.806268][ T7159] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  106.903133][ T7165] loop1: detected capacity change from 0 to 2048
[  106.917715][ T7165] EXT4-fs: Ignoring removed nobh option
[  106.943073][ T7165] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  106.951036][ T7165] ext4 filesystem being mounted at /123/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  106.988426][ T5851] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  107.072592][ T7174] loop2: detected capacity change from 0 to 256
[  107.080907][ T7174] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  107.086164][ T7174] exFAT-fs (loop2): Medium has reported failures. Some data may be lost.
[  107.101040][ T7174] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  107.122906][   T33] audit: type=1800 audit(1755260384.535:12): pid=7174 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.517" name="file1" dev="loop2" ino=1048593 res=0 errno=0
[  107.173123][ T7177] loop2: detected capacity change from 0 to 256
[  107.195074][ T7177] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  107.476710][ T7179] loop2: detected capacity change from 0 to 32768
[  107.484109][ T7179] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.519 (7179)
[  107.511502][ T7179] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  107.515592][ T7179] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[  107.519652][ T7179] BTRFS info (device loop2): using free-space-tree
[  107.734777][ T5859] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  107.984878][ T7212] cgroup: Need name or subsystem set
[  108.500339][   T33] audit: type=1326 audit(1755260385.905:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7249 comm="syz.0.545" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa23eb8ebe9 code=0x7ffc0000
[  108.613032][ T7254] overlayfs: failed to clone upperpath
[  108.641778][ T7256] loop1: detected capacity change from 0 to 256
[  108.645184][ T7256] exfat: Deprecated parameter 'utf8'
[  108.650578][ T7256] exfat: Deprecated parameter 'namecase'
[  108.652934][ T7256] exfat: Deprecated parameter 'utf8'
[  108.663035][ T7256] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  108.945632][ T7263] overlayfs: failed to create directory ./bus/work (errno: 1); mounting read-only
[  108.954570][ T7263] overlayfs: NFS export requires an index dir, falling back to nfs_export=off.
[  109.001953][ T7238] loop2: detected capacity change from 0 to 131072
[  109.007641][ T7238] F2FS-fs (loop2): Wrong CP boundary, start(512) end(1536) blocks(0)
[  109.010873][ T7238] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  109.016246][ T7238] F2FS-fs (loop2): invalid crc value
[  109.065060][ T7268] loop1: detected capacity change from 0 to 512
[  109.075761][ T7238] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  109.081270][ T7238] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  109.084228][ T7238] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[  109.094027][ T7268] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  109.113626][ T7268] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  109.122679][ T7268] EXT4-fs (loop1): 1 truncate cleaned up
[  109.126148][ T7268] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  109.198242][ T7268] loop1: detected capacity change from 512 to 64
[  109.242603][ T5851] EXT4-fs warning (device loop1): ext4_empty_dir:3113: inode #11: lblock 5: comm syz-executor: error -12 reading directory block
[  109.249325][ T5851] EXT4-fs warning (device loop1): ext4_empty_dir:3113: inode #11: lblock 5: comm syz-executor: error -12 reading directory block
[  109.255049][ T5851] EXT4-fs warning (device loop1): ext4_empty_dir:3113: inode #11: lblock 5: comm syz-executor: error -12 reading directory block
[  109.263634][ T5851] EXT4-fs warning (device loop1): ext4_empty_dir:3113: inode #11: lblock 5: comm syz-executor: error -12 reading directory block
[  109.269782][ T5851] EXT4-fs warning (device loop1): ext4_empty_dir:3113: inode #11: lblock 5: comm syz-executor: error -12 reading directory block
[  109.275806][ T5851] EXT4-fs warning (device loop1): ext4_empty_dir:3113: inode #11: lblock 5: comm syz-executor: error -12 reading directory block
[  109.282140][ T5851] EXT4-fs warning (device loop1): ext4_empty_dir:3113: inode #11: lblock 5: comm syz-executor: error -12 reading directory block
[  109.295964][ T5851] EXT4-fs warning (device loop1): ext4_empty_dir:3113: inode #11: lblock 5: comm syz-executor: error -12 reading directory block
[  109.301919][ T5851] EXT4-fs warning (device loop1): ext4_empty_dir:3113: inode #11: lblock 5: comm syz-executor: error -12 reading directory block
[  109.309751][ T5851] EXT4-fs warning (device loop1): ext4_empty_dir:3113: inode #11: lblock 5: comm syz-executor: error -12 reading directory block
[  109.594303][ T7276] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  109.606635][ T7276] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  109.674072][ T5851] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  109.768320][ T5863] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  109.783049][ T5863] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  109.857983][ T5863] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  109.861391][ T5863] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  109.983697][ T5863] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  109.996923][ T5863] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  110.089296][ T5863] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  110.092569][ T5863] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  110.231952][ T5856] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  110.236164][ T5856] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  110.240355][ T5856] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  110.245605][ T5856] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  110.251128][ T5856] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  110.282312][ T5863] bridge_slave_1: left allmulticast mode
[  110.284654][ T5863] bridge_slave_1: left promiscuous mode
[  110.294749][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state
[  110.313314][ T5863] bridge_slave_0: left allmulticast mode
[  110.315617][ T5863] bridge_slave_0: left promiscuous mode
[  110.324072][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state
[  110.984778][ T5863] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  110.995430][ T5863] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  111.003123][ T5863] bond0 (unregistering): Released all slaves
[  111.126311][ T5863] tipc: Disabling bearer <udp:syz2>
[  111.138966][ T5863] tipc: Left network mode
[  111.220803][ T7310] loop2: detected capacity change from 0 to 4096
[  111.482242][ T7320] openvswitch: netlink: IPv6 tunnel dst address is zero
[  111.633036][ T5863] hsr_slave_0: left promiscuous mode
[  111.640185][ T5863] hsr_slave_1: left promiscuous mode
[  111.643147][ T5863] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  111.645978][ T5863] batman_adv: batadv0: Removing interface: batadv_slave_0
[  111.669736][ T5863] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  111.672698][ T5863] batman_adv: batadv0: Removing interface: batadv_slave_1
[  111.718774][ T5863] veth1_macvtap: left promiscuous mode
[  111.727653][ T5863] veth0_macvtap: left promiscuous mode
[  111.729952][ T5863] veth1_vlan: left promiscuous mode
[  111.732214][ T5863] veth0_vlan: left promiscuous mode
[  111.997302][ T1092] ntfs3(loop2): ino=5, mi_enum_attr
[  112.210913][ T5863] team0 (unregistering): Port device team_slave_1 removed
[  112.234931][ T5863] team0 (unregistering): Port device team_slave_0 removed
[  112.328469][ T5856] Bluetooth: hci0: command tx timeout
[  112.530178][ T7291] chnl_net:caif_netlink_parms(): no params data found
[  112.687248][ T7291] bridge0: port 1(bridge_slave_0) entered blocking state
[  112.691428][ T7291] bridge0: port 1(bridge_slave_0) entered disabled state
[  112.695665][ T7291] bridge_slave_0: entered allmulticast mode
[  112.702426][ T7291] bridge_slave_0: entered promiscuous mode
[  112.711773][ T7291] bridge0: port 2(bridge_slave_1) entered blocking state
[  112.723825][ T7291] bridge0: port 2(bridge_slave_1) entered disabled state
[  112.729270][ T7291] bridge_slave_1: entered allmulticast mode
[  112.750435][ T7291] bridge_slave_1: entered promiscuous mode
[  112.820075][ T7291] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  112.828641][ T7291] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  112.911921][ T7291] team0: Port device team_slave_0 added
[  112.916692][ T7291] team0: Port device team_slave_1 added
[  113.317701][ T7291] batman_adv: batadv0: Adding interface: batadv_slave_0
[  113.320532][ T7291] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  113.332709][ T7291] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  113.344830][ T7291] batman_adv: batadv0: Adding interface: batadv_slave_1
[  113.351197][ T7291] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  113.363561][ T7291] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  113.413469][ T7291] hsr_slave_0: entered promiscuous mode
[  113.416649][ T7291] hsr_slave_1: entered promiscuous mode
[  113.419893][ T7291] debugfs: 'hsr0' already exists in 'hsr'
[  113.422309][ T7291] Cannot create hsr debugfs directory
[  113.723715][ T7368] loop2: detected capacity change from 0 to 512
[  113.726212][ T7368] EXT4-fs: Ignoring removed bh option
[  113.730298][ T7368] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[  113.800070][ T7368] EXT4-fs (loop2): 1 truncate cleaned up
[  113.814880][ T7368] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  113.900574][ T7291] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  113.926552][ T7291] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  113.939386][ T7291] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  113.953120][ T7291] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  114.316622][ T7291] 8021q: adding VLAN 0 to HW filter on device bond0
[  114.330274][ T7291] 8021q: adding VLAN 0 to HW filter on device team0
[  114.336057][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[  114.338363][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[  114.356676][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[  114.359638][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[  114.417660][ T5235] Bluetooth: hci0: command tx timeout
[  114.558867][ T7291] 8021q: adding VLAN 0 to HW filter on device batadv0
[  114.648951][ T7291] veth0_vlan: entered promiscuous mode
[  114.671802][ T7291] veth1_vlan: entered promiscuous mode
[  114.674561][ T5859] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  114.729123][ T7291] veth0_macvtap: entered promiscuous mode
[  114.746494][ T7291] veth1_macvtap: entered promiscuous mode
[  114.790533][ T7291] batman_adv: batadv0: Interface activated: batadv_slave_0
[  114.814133][ T7291] batman_adv: batadv0: Interface activated: batadv_slave_1
[  114.841086][ T5863] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  114.845255][ T5863] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  114.859531][ T5863] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  114.901934][ T5914] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  115.268602][ T1092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  115.271456][ T1092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  115.303652][   T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  115.309363][   T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  115.476641][ T7434] loop3: detected capacity change from 0 to 2048
[  115.503748][ T7434] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  115.508786][ T7434] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4
[  115.514991][ T7434] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  115.607787][ T5235] Bluetooth: hci1: command 0x0406 tx timeout
[  116.076717][ T7480] loop2: detected capacity change from 0 to 256
[  116.192954][ T7487] loop3: detected capacity change from 0 to 2048
[  116.208699][ T6049] udevd[6049]: incorrect nilfs2 checksum on /dev/loop3
[  116.225290][ T7487] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[  116.250315][ T6049] udevd[6049]: incorrect nilfs2 checksum on /dev/loop3
[  116.265946][ T7492] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  116.370569][ T7499] netlink: 256 bytes leftover after parsing attributes in process `syz.3.618'.
[  116.473252][ T7503] loop3: detected capacity change from 0 to 1024
[  116.486977][ T7503] EXT4-fs: Ignoring removed nobh option
[  116.493155][ T5856] Bluetooth: hci0: command tx timeout
[  116.522890][ T7503] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  116.534120][   T33] kauditd_printk_skb: 7 callbacks suppressed
[  116.534130][   T33] audit: type=1800 audit(1755260393.945:21): pid=7503 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.620" name="file1" dev="loop3" ino=15 res=0 errno=0
[  116.564950][ T7291] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  118.083871][ T7574] loop3: detected capacity change from 0 to 512
[  118.099640][ T7574] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.650: casefold flag without casefold feature
[  118.105610][ T7574] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.650: couldn't read orphan inode 15 (err -117)
[  118.122832][ T7574] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  118.154996][ T7291] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  118.336591][ T7585] netlink: 20 bytes leftover after parsing attributes in process `syz.0.654'.
[  118.477201][   T24] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  118.577231][ T5856] Bluetooth: hci0: command tx timeout
[  118.657162][   T24] usb 4-1: Using ep0 maxpacket: 32
[  118.662731][   T24] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  118.665910][   T24] usb 4-1: config 0 has no interface number 0
[  118.668602][   T24] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  118.673695][   T24] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  118.677782][   T24] usb 4-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00
[  118.683600][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  118.689161][   T24] usb 4-1: config 0 descriptor??
[  118.889407][ T7589] netlink: 'syz.2.656': attribute type 4 has an invalid length.
[  118.892425][ T7589] netlink: 152 bytes leftover after parsing attributes in process `syz.2.656'.
[  118.914683][ T7589] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  119.106285][   T24] hid (null): global environment stack underflow
[  119.451256][   T24] uclogic 0003:28BD:0094.0005: failed retrieving string descriptor #100: -71
[  119.736696][   T24] uclogic 0003:28BD:0094.0005: failed retrieving pen parameters: -71
[  119.743903][   T24] uclogic 0003:28BD:0094.0005: pen probing failed: -71
[  119.746167][   T24] uclogic 0003:28BD:0094.0005: failed probing parameters: -71
[  119.749012][   T24] uclogic 0003:28BD:0094.0005: probe with driver uclogic failed with error -71
[  119.779202][   T24] usb 4-1: USB disconnect, device number 2
[  120.140113][ T7631] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  120.193261][ T7637] netlink: 52 bytes leftover after parsing attributes in process `syz.3.675'.
[  120.196360][ T7637] netlink: 52 bytes leftover after parsing attributes in process `syz.3.675'.
[  120.204456][ T7637] netlink: 52 bytes leftover after parsing attributes in process `syz.3.675'.
[  120.255758][ T7641] 9p: Unknown uid 00000000004294967295
[  120.339690][ T7647] loop2: detected capacity change from 0 to 1024
[  120.429711][ T7654] ptrace attach of "/syz-executor exec"[5859] was attempted by "                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                               
[  120.608668][ T7661] netlink: 8 bytes leftover after parsing attributes in process `syz.0.685'.
[  122.119441][ T7756] loop2: detected capacity change from 0 to 512
[  122.125643][ T7757] lo speed is unknown, defaulting to 1000
[  122.129342][ T7756] EXT4-fs: Ignoring removed nomblk_io_submit option
[  122.129764][ T7757] lo speed is unknown, defaulting to 1000
[  122.131616][ T7757] lo speed is unknown, defaulting to 1000
[  122.137485][ T7756] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  122.145216][ T7757] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  122.153324][ T7756] EXT4-fs (loop2): 1 truncate cleaned up
[  122.153576][ T7757] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  122.163680][ T7756] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  122.193029][   T33] audit: type=1800 audit(1755260399.605:22): pid=7756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.702" name="file1" dev="loop2" ino=15 res=0 errno=0
[  122.193524][ T7757] lo speed is unknown, defaulting to 1000
[  122.204719][ T7757] lo speed is unknown, defaulting to 1000
[  122.218681][ T7757] lo speed is unknown, defaulting to 1000
[  122.253085][ T5859] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  122.372370][ T7767] loop3: detected capacity change from 0 to 8
[  122.392593][ T7767] unable to read id index table
[  122.404779][ T7767] netlink: 40 bytes leftover after parsing attributes in process `syz.3.705'.
[  123.252326][ T7800] loop2: detected capacity change from 0 to 64
[  124.257942][ T7822] loop2: detected capacity change from 0 to 512
[  124.279036][ T7822] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  124.283880][ T7822] ext4 filesystem being mounted at /253/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  124.335991][ T5859] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  124.671858][ T7844] Dead loop on virtual device ipvlan1, fix it urgently!
[  124.679188][ T7844] sctp: [Deprecated]: syz.0.735 (pid 7844) Use of int in maxseg socket option.
[  124.679188][ T7844] Use struct sctp_assoc_value instead
[  124.702208][ T7844] syz.0.735 (7844) used greatest stack depth: 9736 bytes left
[  124.742296][ T7849] netlink: 'syz.0.737': attribute type 21 has an invalid length.
[  124.745522][ T7849] IPv6: NLM_F_CREATE should be specified when creating new route
[  124.751831][ T7849] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  124.755112][ T7849] IPv6: NLM_F_CREATE should be set when creating new route
[  124.758320][ T7849] IPv6: NLM_F_CREATE should be set when creating new route
[  124.761443][ T7849] IPv6: NLM_F_CREATE should be set when creating new route
[  124.871318][ T7857] netlink: 16 bytes leftover after parsing attributes in process `syz.0.741'.
[  125.069249][ T7869] loop3: detected capacity change from 0 to 4096
[  125.078406][ T7869] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[  125.082460][ T7869] ntfs3(loop3): ino=3, mi_enum_attr
[  125.084851][ T7869] ntfs3(loop3): Failed to load $Volume (-22).
[  125.420678][ T7885] netlink: 8 bytes leftover after parsing attributes in process `syz.2.755'.
[  125.424117][ T7885] netlink: 'syz.2.755': attribute type 30 has an invalid length.
[  125.533741][ T7892] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.758'.
[  127.750746][ T7950] netlink: 16 bytes leftover after parsing attributes in process `syz.0.771'.
[  128.184643][ T7952] loop3: detected capacity change from 0 to 32768
[  128.195174][ T7952] 
[  128.195174][ T7952]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  128.195174][ T7952] 
[  128.223629][ T5856] Bluetooth: Wrong link type (-71)
[  128.307968][ T7970] read_mapping_page failed!
[  128.314254][ T7970] ERROR: (device loop3): txCommit: 
[  128.314254][ T7970] 
[  128.341646][ T7291] 
[  128.341646][ T7291]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  128.341646][ T7291] 
[  128.345448][ T7291] 
[  128.345448][ T7291]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  128.345448][ T7291] 
[  128.933102][ T8003] IPv4: Oversized IP packet from 127.202.26.0
[  130.239217][ T8029] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  130.244417][ T8029] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  131.149455][ T8048] netlink: 60 bytes leftover after parsing attributes in process `syz.2.801'.
[  131.155117][ T8048] netlink: 60 bytes leftover after parsing attributes in process `syz.2.801'.
[  131.162296][ T8048] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  131.933007][ T8077] netlink: 68 bytes leftover after parsing attributes in process `syz.0.814'.
[  132.329585][ T8090] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  132.501332][ T8100] process 'syz.3.825' launched './file0' with NULL argv: empty string added
[  132.651200][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  132.653751][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  132.657260][ T8107] program syz.2.827 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  132.660996][ T8107] ata1.00: non-matching transfer count (0/2)
[  132.740232][ T8110] netlink: 16 bytes leftover after parsing attributes in process `syz.0.829'.
[  133.112162][ T8125] syz.2.836 uses obsolete (PF_INET,SOCK_PACKET)
[  134.117882][ T8147] loop3: detected capacity change from 0 to 256
[  134.147406][ T8147] FAT-fs (loop3): Directory bread(block 64) failed
[  134.149674][ T8147] FAT-fs (loop3): Directory bread(block 65) failed
[  134.151702][ T8147] FAT-fs (loop3): Directory bread(block 66) failed
[  134.153688][ T8147] FAT-fs (loop3): Directory bread(block 67) failed
[  134.155865][ T8147] FAT-fs (loop3): Directory bread(block 68) failed
[  134.159103][ T8147] FAT-fs (loop3): Directory bread(block 69) failed
[  134.161531][ T8147] FAT-fs (loop3): Directory bread(block 70) failed
[  134.163489][ T8147] FAT-fs (loop3): Directory bread(block 71) failed
[  134.165605][ T8147] FAT-fs (loop3): Directory bread(block 72) failed
[  134.168063][ T8147] FAT-fs (loop3): Directory bread(block 73) failed
[  135.543073][ T8175] netlink: 'syz.3.856': attribute type 64 has an invalid length.
[  135.546405][ T8175] netlink: 9 bytes leftover after parsing attributes in process `syz.3.856'.
[  137.995410][ T8213] loop2: detected capacity change from 0 to 32768
[  138.031359][ T8213] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  138.055405][ T8213] XFS (loop2): Ending clean mount
[  138.078222][ T8213] XFS (loop2): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair.
[  138.128978][ T5859] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  138.260948][ T8231] loop2: detected capacity change from 0 to 256
[  138.267289][ T8231] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  138.276682][ T8231] exFAT-fs (loop2): Medium has reported failures. Some data may be lost.
[  138.283823][ T8231] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  138.296558][   T33] audit: type=1800 audit(1755260415.705:23): pid=8231 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.874" name="file1" dev="loop2" ino=1048615 res=0 errno=0
[  138.509857][ T8243] loop3: detected capacity change from 0 to 256
[  138.529940][ T8243] FAT-fs (loop3): Directory bread(block 1285) failed
[  138.542413][ T8243] FAT-fs (loop3): Directory bread(block 1285) failed
[  139.257580][ T8273] netlink: 'syz.0.893': attribute type 2 has an invalid length.
[  139.260829][ T8273] netlink: 132 bytes leftover after parsing attributes in process `syz.0.893'.
[  140.345248][ T8295] netlink: 36 bytes leftover after parsing attributes in process `syz.3.903'.
[  140.755848][ T8301] netlink: 16 bytes leftover after parsing attributes in process `syz.3.906'.
[  140.782244][ T8301] loop3: detected capacity change from 0 to 256
[  140.808331][ T8301] FAT-fs (loop3): Directory bread(block 64) failed
[  140.811153][ T8301] FAT-fs (loop3): Directory bread(block 65) failed
[  140.814027][ T8301] FAT-fs (loop3): Directory bread(block 66) failed
[  140.821313][ T8301] FAT-fs (loop3): Directory bread(block 67) failed
[  140.823990][ T8301] FAT-fs (loop3): Directory bread(block 68) failed
[  140.826583][ T8301] FAT-fs (loop3): Directory bread(block 69) failed
[  140.831467][ T8301] FAT-fs (loop3): Directory bread(block 70) failed
[  140.835103][ T8301] FAT-fs (loop3): Directory bread(block 71) failed
[  140.838682][ T8301] FAT-fs (loop3): Directory bread(block 72) failed
[  140.841590][ T8301] FAT-fs (loop3): Directory bread(block 73) failed
[  141.483485][ T8328] program syz.3.918 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  141.591722][ T8336] loop3: detected capacity change from 0 to 2048
[  141.599120][ T8336] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found!
[  141.614403][ T8336] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  141.634900][   T33] audit: type=1800 audit(1755260419.045:24): pid=8336 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.922" name="file1" dev="loop3" ino=1367 res=0 errno=0
[  141.662400][ T8340] netlink: 'syz.0.924': attribute type 8 has an invalid length.
[  141.665085][   T33] audit: type=1804 audit(1755260419.075:25): pid=8336 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.922" name="/newroot/120/file0/file1" dev="loop3" ino=1367 res=1 errno=0
[  141.679189][ T8340] bridge1: entered allmulticast mode
[  141.924856][ T8353] loop3: detected capacity change from 0 to 256
[  143.525901][ T8395] loop3: detected capacity change from 0 to 128
[  143.866014][ T8391] Process accounting resumed
[  143.896023][   T24] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  144.088618][   T24] usb 4-1: config index 0 descriptor too short (expected 63186, got 210)
[  144.091266][   T24] usb 4-1: config 0 has an invalid interface number: 106 but max is 0
[  144.093791][   T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  144.097932][   T24] usb 4-1: config 0 has no interface number 0
[  144.101600][   T24] usb 4-1: config 0 interface 106 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[  144.104865][   T24] usb 4-1: config 0 interface 106 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  144.110431][   T24] usb 4-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6
[  144.116601][   T24] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb
[  144.119930][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=64
[  144.122676][   T24] usb 4-1: SerialNumber: syz
[  144.127919][   T24] usb 4-1: config 0 descriptor??
[  144.152510][   T24] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  144.277312][ T5917] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  144.335854][ T5914] usb 4-1: Failed to submit usb control message: -71
[  144.336100][   T24] usb 4-1: USB disconnect, device number 3
[  144.339852][ T5914] usb 4-1: unable to send the bmi data to the device: -71
[  144.344351][ T5914] usb 4-1: unable to get target info from device
[  144.347401][ T5914] usb 4-1: could not get target info (-71)
[  144.350008][ T5914] usb 4-1: could not probe fw (-71)
[  144.467006][ T5917] usb 3-1: Using ep0 maxpacket: 32
[  144.470893][ T5917] usb 3-1: config 2 has an invalid interface number: 194 but max is 0
[  144.474081][ T5917] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  144.486749][ T5917] usb 3-1: config 2 has no interface number 0
[  144.489321][ T5917] usb 3-1: config 2 interface 194 altsetting 0 bulk endpoint 0xA has invalid maxpacket 7
[  144.493039][ T5917] usb 3-1: config 2 interface 194 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4
[  144.499226][ T5917] usb 3-1: New USB device found, idVendor=0499, idProduct=1025, bcdDevice=9c.f6
[  144.502041][ T5917] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  144.509856][ T8405] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  144.639918][ T8430] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96
[  144.718566][ T5917] usb 3-1: string descriptor 0 read error: -71
[  144.736772][ T5917] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  144.831706][ T5917] usb 3-1: USB disconnect, device number 5
[  144.999840][ T8436] netlink: 20 bytes leftover after parsing attributes in process `syz.0.968'.
[  145.115093][ T8438] loop3: detected capacity change from 0 to 32768
[  145.634879][ T8446] netlink: 'syz.2.973': attribute type 322 has an invalid length.
[  145.701752][ T8450] loop2: detected capacity change from 0 to 64
[  145.858935][ T8458] loop2: detected capacity change from 0 to 512
[  145.885724][ T8458] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  145.891451][ T8458] ext4 filesystem being mounted at /300/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  146.034977][ T8465] netlink: 4 bytes leftover after parsing attributes in process `syz.3.972'.
[  146.222257][ T5859] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  146.440717][ T8485] netlink: 'syz.0.987': attribute type 2 has an invalid length.
[  146.443860][ T8485] netlink: 'syz.0.987': attribute type 2 has an invalid length.
[  146.545938][ T8489] netlink: 'syz.0.989': attribute type 10 has an invalid length.
[  146.630651][ T8489] 8021q: adding VLAN 0 to HW filter on device team0
[  146.635467][ T8489] bond0: (slave team0): Enslaving as an active interface with an up link
[  146.697339][ T8491] netlink: 'syz.3.990': attribute type 13 has an invalid length.
[  146.943878][ T8503] loop3: detected capacity change from 0 to 256
[  146.948404][ T8503] exfat: Deprecated parameter 'namecase'
[  146.969673][ T8503] exfat: Bad value for 'uid'
[  146.981702][ T8503] exfat: Bad value for 'uid'
[  147.173607][ T8507] loop3: detected capacity change from 0 to 1024
[  147.176179][ T8507] EXT4-fs: Ignoring removed orlov option
[  147.178273][ T8507] EXT4-fs: Ignoring removed mblk_io_submit option
[  147.182690][ T8507] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  147.213934][ T8507] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  147.224784][ T8511] bond0: entered promiscuous mode
[  147.226759][ T8511] bond_slave_0: entered promiscuous mode
[  147.238385][ T8511] bond_slave_1: entered promiscuous mode
[  147.242277][ T8511] batadv0: entered promiscuous mode
[  147.247361][ T8511] 8021q: adding VLAN 0 to HW filter on device hsr1
[  147.300960][ T7291] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  147.506221][ T8537] loop2: detected capacity change from 0 to 64
[  147.628427][ T8543] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1014'.
[  147.917721][   T10] usb 3-1: new full-speed USB device number 6 using dummy_hcd
[  148.095221][   T10] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83
[  148.104949][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[  148.115518][   T10] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  148.121322][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  148.128837][   T10] usb 3-1: config 0 descriptor??
[  148.359063][   T10] ath6kl: Failed to submit usb control message: -71
[  148.361583][   T10] ath6kl: unable to send the bmi data to the device: -71
[  148.363739][   T10] ath6kl: Unable to send get target info: -71
[  148.387341][   T10] ath6kl: Failed to init ath6kl core: -71
[  148.396434][   T10] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71
[  148.411658][   T10] usb 3-1: USB disconnect, device number 6
[  149.187632][ T8589] loop3: detected capacity change from 0 to 24
[  149.195676][ T8589] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  149.212274][ T8589] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  149.424514][ T8599] loop2: detected capacity change from 0 to 512
[  149.431048][ T8599] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  149.453090][ T8599] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.1036: invalid indirect mapped block 83886080 (level 1)
[  149.464551][ T8599] EXT4-fs (loop2): Remounting filesystem read-only
[  149.468786][ T8599] EXT4-fs (loop2): 1 orphan inode deleted
[  149.470641][ T8599] EXT4-fs (loop2): 1 truncate cleaned up
[  149.473725][ T8599] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  149.508893][ T5859] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  149.788750][   T33] audit: type=1326 audit(1755260427.195:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8614 comm="syz.2.1043" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb97a18ebe9 code=0x0
[  149.945403][ T8624] loop3: detected capacity change from 0 to 2048
[  149.976226][ T8624] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  149.983003][ T8624] ext4 filesystem being mounted at /143/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  150.047755][ T7291] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  150.587689][ T8643] loop3: detected capacity change from 0 to 32768
[  150.593098][ T8643] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1053 (8643)
[  150.605919][ T8643] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  150.610578][ T8643] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm
[  150.614111][ T8643] BTRFS info (device loop3): using free-space-tree
[  150.709074][ T8659] netlink: 512 bytes leftover after parsing attributes in process `syz.2.1054'.
[  150.721608][ T8643] BTRFS info (device loop3): rebuilding free space tree
[  151.020764][ T7291] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  151.971016][ T8700] loop3: detected capacity change from 0 to 128
[  151.984487][ T8700] hpfs: hpfs_map_sector(): read error
[  152.064200][ T8702] loop2: detected capacity change from 0 to 256
[  152.132358][ T8702] FAT-fs (loop2): Directory bread(block 64) failed
[  152.135195][ T8702] FAT-fs (loop2): Directory bread(block 65) failed
[  152.138455][ T8702] FAT-fs (loop2): Directory bread(block 66) failed
[  152.148666][ T8702] FAT-fs (loop2): Directory bread(block 67) failed
[  152.150804][ T8702] FAT-fs (loop2): Directory bread(block 68) failed
[  152.152890][ T8702] FAT-fs (loop2): Directory bread(block 69) failed
[  152.155390][ T8702] FAT-fs (loop2): Directory bread(block 70) failed
[  152.169017][ T8702] FAT-fs (loop2): Directory bread(block 71) failed
[  152.171298][ T8702] FAT-fs (loop2): Directory bread(block 72) failed
[  152.173578][ T8702] FAT-fs (loop2): Directory bread(block 73) failed
[  152.201577][ T8712] netlink: 'syz.3.1078': attribute type 8 has an invalid length.
[  152.274756][ T8716] loop3: detected capacity change from 0 to 512
[  152.297138][ T8716] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  152.302876][ T8716] EXT4-fs (loop3): orphan cleanup on readonly fs
[  152.308311][ T8716] Quota error (device loop3): find_block_dqentry: Quota for id 0 referenced but not present
[  152.313621][ T8716] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0
[  152.316522][ T8716] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.1080: Failed to acquire dquot type 1
[  152.328330][ T8716] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1080: bg 0: block 40: padding at end of block bitmap is not set
[  152.334133][ T8716] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem
[  152.340543][ T8716] EXT4-fs (loop3): 1 truncate cleaned up
[  152.344198][ T8716] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  152.372791][ T8716] EXT4-fs error (device loop3): ext4_get_link:106: inode #16: comm syz.3.1080: bad symlink.
[  152.389731][ T8716] EXT4-fs error (device loop3): ext4_get_link:106: inode #16: comm syz.3.1080: bad symlink.
[  152.434018][ T7291] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  152.473372][ T8725] program syz.3.1084 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  152.593755][ T8731] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1087'.
[  152.635539][ T8733] @: renamed from bond_slave_0 (while UP)
[  152.731520][ T8737] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1090'.
[  152.736051][ T8737] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1090'.
[  152.859000][ T8745] geneve2: entered promiscuous mode
[  153.237099][ T8755] loop3: detected capacity change from 0 to 32768
[  153.292847][ T8762] loop2: detected capacity change from 0 to 128
[  153.339263][ T8755] bcachefs (loop3): starting version 1.13: inode_has_child_snapshots opts=compression=lz4
[  153.339280][ T8755]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  153.347395][ T8755] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0
[  153.350257][ T8755] bcachefs (loop3): recovering from clean shutdown, journal seq 7
[  153.352825][ T8755] bcachefs (loop3): Doing compatible version upgrade from 1.13: inode_has_child_snapshots to 1.28: inode_has_case_insensitive
[  153.352825][ T8755]   running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes
[  153.381172][ T8755] bcachefs (loop3): error reading btree root btree=accounting level=0: btree_node_read_error, fixing
[  153.384923][ T8755] bcachefs (loop3): check_topology... done
[  153.388304][ T8755] bcachefs (loop3): accounting_read... done
[  153.404472][ T8755] bcachefs (loop3): alloc_read... done
[  153.407433][ T8755] bcachefs (loop3): snapshots_read... done
[  153.412348][ T8755] bcachefs (loop3): check_allocations...
[  153.418972][ T8755] bcachefs (loop3): bucket 0:78 gen 0 has wrong data_type: got btree, should be need_discard, fixing
[  153.424544][ T8755] bcachefs (loop3): bucket 0:78 gen 0 data type need_discard has wrong dirty_sectors: got 64, should be 0, fixing
[  153.438427][ T8755]  done
[  153.449604][ T8755] bcachefs (loop3): going read-write
[  153.465745][ T8755] bcachefs (loop3): journal_replay... done
[  153.574578][ T8755] bcachefs (loop3): check_lrus... done
[  153.577767][ T8755] bcachefs (loop3): check_backpointers_to_extents... done
[  153.585384][ T8755] bcachefs (loop3): check_extents_to_backpointers... done
[  153.590963][ T8755] bcachefs (loop3): check_inodes... done
[  153.595405][ T8755] bcachefs (loop3): resume_logged_ops... done
[  153.599059][ T8755] bcachefs (loop3): delete_dead_inodes... done
[  153.605656][ T8755] bcachefs (loop3): Fixed errors, running fsck a second time to verify fs is clean
[  153.609431][ T8755] bcachefs (loop3): check_extents_to_backpointers...
[  153.610079][ T8755] bcachefs (loop3): scanning for missing backpointers in 1/512 buckets
[  153.617670][ T8755]  done
[  153.619536][ T8755] bcachefs (loop3): check_inodes... done
[  153.622114][ T8755] bcachefs (loop3): resume_logged_ops... done
[  153.624514][ T8755] bcachefs (loop3): delete_dead_inodes... done
[  153.628721][ T8755] bcachefs (loop3): done starting filesystem
[  153.725194][   T33] audit: type=1326 audit(1755260431.135:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8779 comm="syz.0.1105" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa23eb8ebe9 code=0x0
[  153.725744][ T7291] bcachefs (loop3): shutting down
[  153.741370][ T7291] bcachefs (loop3): going read-only
[  153.745804][ T7291] bcachefs (loop3): finished waiting for writes to stop
[  153.754256][ T7291] bcachefs (loop3): flushing journal and stopping allocators, journal seq 16
[  153.766273][ T7291] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 17
[  153.776787][ T7291] bcachefs (loop3): clean shutdown complete, journal seq 18
[  153.781208][ T7291] bcachefs (loop3): marking filesystem clean
[  153.825454][ T7291] bcachefs (loop3): shutdown complete
[  155.097864][ T8819] loop3: detected capacity change from 0 to 512
[  155.100605][ T8819] EXT4-fs: Ignoring removed nomblk_io_submit option
[  155.107895][ T8819] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  155.110913][ T8819] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002]
[  155.113617][ T8819] EXT4-fs (loop3): orphan cleanup on readonly fs
[  155.115832][ T8819] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0
[  155.120892][ T8819] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  155.139670][ T8819] EXT4-fs (loop3): Cannot turn on quotas: error -22
[  155.145616][ T8819] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1104: bg 0: block 40: padding at end of block bitmap is not set
[  155.154568][ T8819] EXT4-fs (loop3): Remounting filesystem read-only
[  155.160000][ T8819] EXT4-fs (loop3): 1 truncate cleaned up
[  155.163287][ T8819] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  155.173592][ T8819] EXT4-fs (loop3): shut down requested (2)
[  155.198859][ T7291] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  155.336659][ T8828] macvlan2: entered promiscuous mode
[  155.338923][ T8828] macvlan2: entered allmulticast mode
[  155.594689][ T8843] futex_wake_op: syz.2.1133 tries to shift op by 32; fix this program
[  155.825002][ T8849] 9pnet: p9_errstr2errno: server reported unknown error t/event#
[  157.632321][ T8900] loop3: detected capacity change from 0 to 2048
[  157.705963][ T8906] netlink: 201916 bytes leftover after parsing attributes in process `syz.3.1161'.
[  157.872592][ T8913] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  158.114502][ T8919] loop3: detected capacity change from 0 to 4096
[  158.119677][ T8919] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512).
[  158.141007][ T8919] ntfs3(loop3): ino=1a, mi_enum_attr
[  158.143172][ T8919] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  158.271648][ T8923] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1169'.
[  158.275301][ T8923] netem: unknown loss type 12
[  158.278544][ T8923] netem: change failed
[  158.697095][ T5903] usb 4-1: new full-speed USB device number 4 using dummy_hcd
[  158.870649][ T5903] usb 4-1: unable to get BOS descriptor or descriptor too short
[  158.875738][ T5903] usb 4-1: unable to read config index 0 descriptor/start: -71
[  158.880873][ T5903] usb 4-1: can't read configurations, error -71
[  159.327083][ T5917] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  159.487243][ T5917] usb 3-1: Using ep0 maxpacket: 8
[  159.493236][ T5917] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  159.502103][ T5917] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  159.506935][ T5917] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  159.510276][ T5917] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  159.514928][ T5917] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  159.530886][ T5917] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  159.752417][ T5917] usb 3-1: GET_CAPABILITIES returned 0
[  159.754649][ T5917] usbtmc 3-1:16.0: can't read capabilities
[  159.963340][ T5917] usb 3-1: USB disconnect, device number 7
[  160.335865][ T5903] IPVS: starting estimator thread 0...
[  160.427003][ T8972] IPVS: using max 64 ests per chain, 153600 per kthread
[  160.942107][ T8982] loop6: detected capacity change from 0 to 7
[  160.960519][ T6049] Dev loop6: unable to read RDB block 7
[  160.963001][ T6049]  loop6: unable to read partition table
[  160.965635][ T6049] loop6: partition table beyond EOD, truncated
[  160.975587][ T8982] Dev loop6: unable to read RDB block 7
[  160.978665][ T8982]  loop6: unable to read partition table
[  160.991573][ T8982] loop6: partition table beyond EOD, truncated
[  160.993950][ T8982] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5)
[  161.517016][ T5887] usb 4-1: new full-speed USB device number 6 using dummy_hcd
[  161.669046][ T5887] usb 4-1: config 8 has an invalid interface number: 196 but max is 0
[  161.672360][ T5887] usb 4-1: config 8 has no interface number 0
[  161.674979][ T5887] usb 4-1: config 8 interface 196 has no altsetting 0
[  161.678013][ T5887] usb 4-1: New USB device found, idVendor=061d, idProduct=c170, bcdDevice=e5.59
[  161.681673][ T5887] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  161.912471][ T5887] usb 4-1: string descriptor 0 read error: -71
[  161.922890][ T5887] quatech2 4-1:8.196: Quatech 2nd gen USB to Serial Driver converter detected
[  161.935719][ T5887] usb 4-1: qt2_attach - failed to power on unit: -71
[  161.939602][ T5887] quatech2 4-1:8.196: probe with driver quatech2 failed with error -71
[  161.949427][ T5887] usb 4-1: USB disconnect, device number 6
[  162.475004][ T9024] lo speed is unknown, defaulting to 1000
[  162.481053][ T5887] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  162.655325][ T5887] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  162.660011][ T5887] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[  162.663283][ T5887] usb 3-1: config 1 has no interface number 0
[  162.671924][ T5887] usb 3-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  162.689763][ T5887] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  162.692925][ T5887] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  162.695310][ T5887] usb 3-1: Product: syz
[  162.700565][ T5887] usb 3-1: Manufacturer: syz
[  162.702217][ T5887] usb 3-1: SerialNumber: syz
[  162.811914][ T9039] netlink: 'syz.0.1220': attribute type 3 has an invalid length.
[  162.814998][ T9039] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  162.822037][ T5975] lo speed is unknown, defaulting to 1000
[  162.824047][ T5975] syz0: Port: 1 Link DOWN
[  162.900756][ T5856] Bluetooth: hci1: unexpected event for opcode 0x2035
[  162.923972][ T5887] cdc_ncm 3-1:1.1: invalid descriptor buffer length
[  162.926625][ T5887] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found
[  162.946649][ T5887] cdc_ncm 3-1:1.1: bind() failure
[  162.952406][ T9049] netlink: 'syz.0.1225': attribute type 21 has an invalid length.
[  162.955059][ T9049] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1225'.
[  162.963222][ T5887] usb 3-1: USB disconnect, device number 8
[  163.622528][ T9065] binder: 9064:9065 ioctl c0306201 200000000080 returned -14
[  163.664434][ T9067] netlink: 248 bytes leftover after parsing attributes in process `syz.3.1233'.
[  163.669985][ T9067] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1233'.
[  163.704494][ T9069] loop3: detected capacity change from 0 to 128
[  163.713119][ T9069] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  163.721393][ T9069] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  163.854396][ T9063] loop2: detected capacity change from 0 to 32768
[  163.859813][ T9063] XFS: attr2 mount option is deprecated.
[  163.882416][ T9063] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  163.913634][ T9063] XFS (loop2): Ending clean mount
[  163.926164][ T9063] XFS (loop2): Quotacheck needed: Please wait.
[  163.964690][ T9063] XFS (loop2): Quotacheck: Done.
[  164.102085][ T5859] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  164.102480][ T9090] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  164.165563][ T9093] netlink: 'syz.0.1243': attribute type 10 has an invalid length.
[  164.172209][ T9093] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1243'.
[  164.387793][ T9106] loop2: detected capacity change from 0 to 512
[  164.389403][ T5903] Process accounting resumed
[  164.403593][ T9106] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  164.406495][ T9106] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[  164.424696][ T9106] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended
[  164.428509][ T9106] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  164.431332][ T9106] System zones: 0-2, 18-18, 34-35
[  164.532530][ T9104] Process accounting resumed
[  164.546487][ T9106] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  164.595482][ T5859] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 3: comm syz-executor: path /381/file0: bad entry in directory: inode out of bounds - offset=24, inode=134217739, rec_len=20, size=2048 fake=0
[  164.665112][ T7799] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  165.335627][ T9125] netlink: 'syz.3.1254': attribute type 1 has an invalid length.
[  165.346685][ T5863] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  165.352378][ T5863] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  165.387291][ T9126] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1254'.
[  165.390010][ T9126] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1254'.
[  165.401523][ T9126] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  165.405839][ T9126] gretap1: entered promiscuous mode
[  165.474021][ T5863] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  165.486606][ T5863] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  165.581881][ T5863] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  165.585673][ T5863] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  165.686562][ T9135] netlink: 'syz.3.1260': attribute type 2 has an invalid length.
[  165.741062][ T5863] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  165.745625][ T5863] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  165.753236][ T9140] netlink: 'syz.0.1263': attribute type 2 has an invalid length.
[  165.830458][ T5235] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  165.839132][ T5235] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  165.843766][ T5235] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  165.849840][ T5235] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  165.865400][ T5235] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  165.938989][ T9144] lo speed is unknown, defaulting to 1000
[  165.978369][ T5863] bridge_slave_1: left allmulticast mode
[  165.980730][ T5863] bridge_slave_1: left promiscuous mode
[  165.983195][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state
[  165.995370][ T5863] bridge_slave_0: left allmulticast mode
[  166.000247][ T5863] bridge_slave_0: left promiscuous mode
[  166.002655][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state
[  166.968955][ T5856] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  166.971729][ T5856] Bluetooth: hci1: Injecting HCI hardware error event
[  166.975449][ T5235] Bluetooth: hci1: hardware error 0x00
[  167.097025][ T5863] bond0 (unregistering): left promiscuous mode
[  167.103725][ T5863] bond_slave_0: left promiscuous mode
[  167.115629][ T5863] bond_slave_1: left promiscuous mode
[  167.137746][ T5863] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  167.172830][ T5863] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  167.190358][ T5863] bond0 (unregistering): Released all slaves
[  167.406819][ T9193] overlayfs: failed to clone upperpath
[  167.519810][ T9144] chnl_net:caif_netlink_parms(): no params data found
[  167.664514][ T9144] bridge0: port 1(bridge_slave_0) entered blocking state
[  167.664665][ T9189] loop3: detected capacity change from 0 to 32768
[  167.666794][ T9144] bridge0: port 1(bridge_slave_0) entered disabled state
[  167.674027][ T9144] bridge_slave_0: entered allmulticast mode
[  167.679565][ T9144] bridge_slave_0: entered promiscuous mode
[  167.697963][ T9189] XFS: ikeep mount option is deprecated.
[  167.700211][ T9189] XFS: ikeep mount option is deprecated.
[  167.700946][ T9144] bridge0: port 2(bridge_slave_1) entered blocking state
[  167.702412][ T9189] XFS: noikeep mount option is deprecated.
[  167.704940][ T9144] bridge0: port 2(bridge_slave_1) entered disabled state
[  167.732986][ T9144] bridge_slave_1: entered allmulticast mode
[  167.747982][ T9144] bridge_slave_1: entered promiscuous mode
[  167.773829][ T9189] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  167.813339][ T5863] batadv0: left promiscuous mode
[  167.830874][ T9189] XFS (loop3): Ending clean mount
[  167.833717][ T5863] hsr_slave_0: left promiscuous mode
[  167.837883][ T5863] hsr_slave_1: left promiscuous mode
[  167.840570][ T5863] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  167.843451][ T5863] batman_adv: batadv0: Removing interface: batadv_slave_0
[  167.857089][ T5863] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  167.860074][ T5863] batman_adv: batadv0: Removing interface: batadv_slave_1
[  167.890672][ T7291] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  167.891744][ T5863] veth1_macvtap: left promiscuous mode
[  167.896369][ T5863] veth0_macvtap: left promiscuous mode
[  167.899473][ T5863] veth1_vlan: left promiscuous mode
[  167.901681][ T5863] veth0_vlan: left promiscuous mode
[  167.938715][ T5856] Bluetooth: hci2: command tx timeout
[  168.516589][ T9234] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  168.609612][ T5863] team0 (unregistering): Port device team_slave_1 removed
[  168.642846][ T5863] team0 (unregistering): Port device team_slave_0 removed
[  169.020360][ T9144] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  169.043516][ T9144] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  169.122608][ T9144] team0: Port device team_slave_0 added
[  169.127092][ T5235] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  169.132517][ T9144] team0: Port device team_slave_1 added
[  169.193931][ T9144] batman_adv: batadv0: Adding interface: batadv_slave_0
[  169.196753][ T9144] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  169.210325][ T9144] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  169.214693][ T9144] batman_adv: batadv0: Adding interface: batadv_slave_1
[  169.218438][ T9144] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  169.241058][ T9144] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  169.288282][ T9253] block nbd3: shutting down sockets
[  169.321751][ T9144] hsr_slave_0: entered promiscuous mode
[  169.324657][ T9144] hsr_slave_1: entered promiscuous mode
[  169.346287][ T9144] debugfs: 'hsr0' already exists in 'hsr'
[  169.348334][ T9144] Cannot create hsr debugfs directory
[  169.357276][ T5863] ==================================================================
[  169.360076][ T5863] BUG: KASAN: slab-use-after-free in __xfrm_state_delete+0x696/0xca0
[  169.362899][ T5863] Write of size 8 at addr ffff888110b56430 by task kworker/u8:2/5863
[  169.366677][ T5863] 
[  169.367973][ T5863] CPU: 0 UID: 0 PID: 5863 Comm: kworker/u8:2 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  169.367989][ T5863] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  169.367998][ T5863] Workqueue: netns cleanup_net
[  169.368019][ T5863] Call Trace:
[  169.368026][ T5863]  <TASK>
[  169.368032][ T5863]  dump_stack_lvl+0x189/0x250
[  169.368048][ T5863]  ? __kasan_check_byte+0x12/0x40
[  169.368065][ T5863]  ? __pfx_dump_stack_lvl+0x10/0x10
[  169.368079][ T5863]  ? lock_release+0x4b/0x3e0
[  169.368097][ T5863]  ? __virt_addr_valid+0x4a5/0x5c0
[  169.368113][ T5863]  print_report+0xca/0x240
[  169.368131][ T5863]  ? __xfrm_state_delete+0x696/0xca0
[  169.368147][ T5863]  kasan_report+0x118/0x150
[  169.368162][ T5863]  ? __xfrm_state_delete+0x696/0xca0
[  169.368181][ T5863]  __xfrm_state_delete+0x696/0xca0
[  169.368201][ T5863]  __xfrm_state_delete+0x87b/0xca0
[  169.368221][ T5863]  xfrm_state_flush+0x45f/0x770
[  169.368242][ T5863]  xfrm6_tunnel_net_exit+0x3f/0x100
[  169.368253][ T5863]  ops_undo_list+0x49a/0x990
[  169.368271][ T5863]  ? __pfx_ops_undo_list+0x10/0x10
[  169.368288][ T5863]  ? do_raw_spin_unlock+0x4d/0x240
[  169.368303][ T5863]  cleanup_net+0x4c5/0x800
[  169.368319][ T5863]  ? __pfx_cleanup_net+0x10/0x10
[  169.368336][ T5863]  ? _raw_spin_unlock_irq+0x23/0x50
[  169.368351][ T5863]  ? process_scheduled_works+0x9ef/0x17b0
[  169.368361][ T5863]  ? process_scheduled_works+0x9ef/0x17b0
[  169.368373][ T5863]  process_scheduled_works+0xae1/0x17b0
[  169.368395][ T5863]  ? __pfx_process_scheduled_works+0x10/0x10
[  169.368412][ T5863]  worker_thread+0x8a0/0xda0
[  169.368429][ T5863]  kthread+0x711/0x8a0
[  169.368439][ T5863]  ? __pfx_worker_thread+0x10/0x10
[  169.368446][ T5863]  ? __pfx_kthread+0x10/0x10
[  169.368455][ T5863]  ? _raw_spin_unlock_irq+0x23/0x50
[  169.368464][ T5863]  ? lockdep_hardirqs_on+0x9c/0x150
[  169.368473][ T5863]  ? __pfx_kthread+0x10/0x10
[  169.368482][ T5863]  ret_from_fork+0x3fc/0x770
[  169.368491][ T5863]  ? __pfx_ret_from_fork+0x10/0x10
[  169.368499][ T5863]  ? __switch_to_asm+0x39/0x70
[  169.368509][ T5863]  ? __switch_to_asm+0x33/0x70
[  169.368518][ T5863]  ? __pfx_kthread+0x10/0x10
[  169.368527][ T5863]  ret_from_fork_asm+0x1a/0x30
[  169.368539][ T5863]  </TASK>
[  169.368542][ T5863] 
[  169.449195][ T5863] Allocated by task 8239:
[  169.450768][ T5863]  kasan_save_track+0x3e/0x80
[  169.452559][ T5863]  __kasan_slab_alloc+0x6c/0x80
[  169.454468][ T5863]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  169.456602][ T5863]  xfrm_state_alloc+0x24/0x2f0
[  169.458414][ T5863]  __find_acq_core+0x8a7/0x1c00
[  169.459990][ T5863]  xfrm_find_acq+0x78/0xa0
[  169.461428][ T5863]  xfrm_alloc_userspi+0x6b3/0xc90
[  169.463041][ T5863]  xfrm_user_rcv_msg+0x7a3/0xab0
[  169.464610][ T5863]  netlink_rcv_skb+0x208/0x470
[  169.466359][ T5863]  xfrm_netlink_rcv+0x79/0x90
[  169.468231][ T5863]  netlink_unicast+0x82f/0x9e0
[  169.470161][ T5863]  netlink_sendmsg+0x805/0xb30
[  169.471982][ T5863]  __sock_sendmsg+0x21c/0x270
[  169.473444][ T5863]  ____sys_sendmsg+0x505/0x830
[  169.475023][ T5863]  ___sys_sendmsg+0x21f/0x2a0
[  169.476767][ T5863]  __x64_sys_sendmsg+0x19b/0x260
[  169.478736][ T5863]  do_syscall_64+0xfa/0x3b0
[  169.480236][ T5863]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  169.482145][ T5863] 
[  169.482924][ T5863] Freed by task 5887:
[  169.484202][ T5863]  kasan_save_track+0x3e/0x80
[  169.485682][ T5863]  kasan_save_free_info+0x46/0x50
[  169.487675][ T5863]  __kasan_slab_free+0x5b/0x80
[  169.489482][ T5863]  kmem_cache_free+0x18f/0x400
[  169.490975][ T5863]  xfrm_state_gc_task+0x52d/0x6b0
[  169.492546][ T5863]  process_scheduled_works+0xae1/0x17b0
[  169.494226][ T5863]  worker_thread+0x8a0/0xda0
[  169.495685][ T5863]  kthread+0x711/0x8a0
[  169.497334][ T5863]  ret_from_fork+0x3fc/0x770
[  169.498952][ T5863]  ret_from_fork_asm+0x1a/0x30
[  169.500479][ T5863] 
[  169.501273][ T5863] The buggy address belongs to the object at ffff888110b56400
[  169.501273][ T5863]  which belongs to the cache xfrm_state of size 928
[  169.505781][ T5863] The buggy address is located 48 bytes inside of
[  169.505781][ T5863]  freed 928-byte region [ffff888110b56400, ffff888110b567a0)
[  169.510821][ T5863] 
[  169.511894][ T5863] The buggy address belongs to the physical page:
[  169.514343][ T5863] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x110b54
[  169.517472][ T5863] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  169.520255][ T5863] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  169.522592][ T5863] page_type: f5(slab)
[  169.523885][ T5863] raw: 057ff00000000040 ffff888104e20140 dead000000000122 0000000000000000
[  169.526747][ T5863] raw: 0000000000000000 00000000800e000e 00000000f5000000 0000000000000000
[  169.529633][ T5863] head: 057ff00000000040 ffff888104e20140 dead000000000122 0000000000000000
[  169.532259][ T5863] head: 0000000000000000 00000000800e000e 00000000f5000000 0000000000000000
[  169.534854][ T5863] head: 057ff00000000002 ffffea000442d501 00000000ffffffff 00000000ffffffff
[  169.537859][ T5863] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  169.540638][ T5863] page dumped because: kasan: bad access detected
[  169.542648][ T5863] page_owner tracks the page as allocated
[  169.544469][ T5863] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 7679, tgid 7671 (syz.3.690), ts 121595564281, free_ts 67418511784
[  169.550807][ T5863]  post_alloc_hook+0x240/0x2a0
[  169.552273][ T5863]  get_page_from_freelist+0x21e4/0x22c0
[  169.553964][ T5863]  __alloc_frozen_pages_noprof+0x181/0x370
[  169.555721][ T5863]  alloc_pages_mpol+0x232/0x4a0
[  169.557541][ T5863]  allocate_slab+0x8a/0x370
[  169.559163][ T5863]  ___slab_alloc+0xbeb/0x1410
[  169.560845][ T5863]  kmem_cache_alloc_noprof+0x283/0x3c0
[  169.562830][ T5863]  xfrm_state_alloc+0x24/0x2f0
[  169.564633][ T5863]  xfrm_state_find+0x37d4/0x5400
[  169.566328][ T5863]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  169.568714][ T5863]  xfrm_lookup_with_ifid+0x2a7/0x1a70
[  169.570398][ T5863]  xfrm_lookup_route+0x3c/0x1c0
[  169.571812][ T5863]  udp_sendmsg+0x142e/0x2170
[  169.573203][ T5863]  __sock_sendmsg+0x19c/0x270
[  169.574842][ T5863]  ____sys_sendmsg+0x52d/0x830
[  169.576704][ T5863]  ___sys_sendmsg+0x21f/0x2a0
[  169.578493][ T5863] page last free pid 4923 tgid 4923 stack trace:
[  169.580837][ T5863]  __free_frozen_pages+0xbc4/0xd30
[  169.582707][ T5863]  __put_partials+0x156/0x1a0
[  169.584372][ T5863]  put_cpu_partial+0x17c/0x250
[  169.586043][ T5863]  __slab_free+0x2d5/0x3c0
[  169.587480][ T5863]  qlist_free_all+0x97/0x140
[  169.589205][ T5863]  kasan_quarantine_reduce+0x148/0x160
[  169.591181][ T5863]  __kasan_slab_alloc+0x22/0x80
[  169.593017][ T5863]  __kmalloc_cache_noprof+0x1be/0x3d0
[  169.595014][ T5863]  nsim_fib_event_work+0x1174/0x3180
[  169.597019][ T5863]  process_scheduled_works+0xae1/0x17b0
[  169.598869][ T5863]  worker_thread+0x8a0/0xda0
[  169.600385][ T5863]  kthread+0x711/0x8a0
[  169.601776][ T5863]  ret_from_fork+0x3fc/0x770
[  169.603450][ T5863]  ret_from_fork_asm+0x1a/0x30
[  169.605102][ T5863] 
[  169.605944][ T5863] Memory state around the buggy address:
[  169.608091][ T5863]  ffff888110b56300: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc
[  169.611149][ T5863]  ffff888110b56380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  169.614224][ T5863] >ffff888110b56400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  169.617191][ T5863]                                      ^
[  169.619290][ T5863]  ffff888110b56480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  169.622350][ T5863]  ffff888110b56500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  169.625386][ T5863] ==================================================================
[  169.628511][ T5863] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  169.631176][ T5863] CPU: 0 UID: 0 PID: 5863 Comm: kworker/u8:2 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  169.635438][ T5863] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  169.639547][ T5863] Workqueue: netns cleanup_net
[  169.641527][ T5863] Call Trace:
[  169.642646][ T5863]  <TASK>
[  169.643885][ T5863]  dump_stack_lvl+0x99/0x250
[  169.645826][ T5863]  ? __asan_memcpy+0x40/0x70
[  169.647839][ T5863]  ? __pfx_dump_stack_lvl+0x10/0x10
[  169.649959][ T5863]  ? __pfx__printk+0x10/0x10
[  169.651791][ T5863]  vpanic+0x281/0x750
[  169.653401][ T5863]  ? __pfx_vpanic+0x10/0x10
[  169.655107][ T5863]  ? irqentry_exit+0x74/0x90
[  169.656897][ T5863]  panic+0xb9/0xc0
[  169.658190][ T5863]  ? __pfx_panic+0x10/0x10
[  169.659728][ T5863]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  169.661824][ T5863]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  169.664278][ T5863]  ? __xfrm_state_delete+0x696/0xca0
[  169.666498][ T5863]  check_panic_on_warn+0x89/0xb0
[  169.668467][ T5863]  ? __xfrm_state_delete+0x696/0xca0
[  169.670235][ T5863]  end_report+0x78/0x160
[  169.671701][ T5863]  kasan_report+0x129/0x150
[  169.673450][ T5863]  ? __xfrm_state_delete+0x696/0xca0
[  169.675658][ T5863]  __xfrm_state_delete+0x696/0xca0
[  169.677732][ T5863]  __xfrm_state_delete+0x87b/0xca0
[  169.679489][ T5863]  xfrm_state_flush+0x45f/0x770
[  169.681432][ T5863]  xfrm6_tunnel_net_exit+0x3f/0x100
[  169.683591][ T5863]  ops_undo_list+0x49a/0x990
[  169.685178][ T5863]  ? __pfx_ops_undo_list+0x10/0x10
[  169.687238][ T5863]  ? do_raw_spin_unlock+0x4d/0x240
[  169.689452][ T5863]  cleanup_net+0x4c5/0x800
[  169.691394][ T5863]  ? __pfx_cleanup_net+0x10/0x10
[  169.693117][ T5863]  ? _raw_spin_unlock_irq+0x23/0x50
[  169.694857][ T5863]  ? process_scheduled_works+0x9ef/0x17b0
[  169.697132][ T5863]  ? process_scheduled_works+0x9ef/0x17b0
[  169.699414][ T5863]  process_scheduled_works+0xae1/0x17b0
[  169.701311][ T5863]  ? __pfx_process_scheduled_works+0x10/0x10
[  169.703315][ T5863]  worker_thread+0x8a0/0xda0
[  169.704949][ T5863]  kthread+0x711/0x8a0
[  169.706461][ T5863]  ? __pfx_worker_thread+0x10/0x10
[  169.708513][ T5863]  ? __pfx_kthread+0x10/0x10
[  169.710054][ T5863]  ? _raw_spin_unlock_irq+0x23/0x50
[  169.711906][ T5863]  ? lockdep_hardirqs_on+0x9c/0x150
[  169.714000][ T5863]  ? __pfx_kthread+0x10/0x10
[  169.715561][ T5863]  ret_from_fork+0x3fc/0x770
[  169.717186][ T5863]  ? __pfx_ret_from_fork+0x10/0x10
[  169.718968][ T5863]  ? __switch_to_asm+0x39/0x70
[  169.720587][ T5863]  ? __switch_to_asm+0x33/0x70
[  169.722512][ T5863]  ? __pfx_kthread+0x10/0x10
[  169.724068][ T5863]  ret_from_fork_asm+0x1a/0x30
[  169.725842][ T5863]  </TASK>
[  169.727776][ T5863] Kernel Offset: disabled
[  169.729265][ T5863] Rebooting in 86400 seconds..

VM DIAGNOSIS:
12:16:30  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000002f RBX=000000000000002f RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900043c7010
R8 =ffff888106ae0237 R9 =1ffff11020d5c046 R10=dffffc0000000000 R11=ffffffff854efc10
R12=dffffc0000000000 R13=ffffffff99af9910 R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854efc8c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ff9e89403b0 CR3=0000000028fd2000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 000000ffff0000ff XMM01=0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 000000ffff0000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000000 RBX=0000000000000003 RCX=dffffc0000000001 RDX=0000000000000001
RSI=ffffffff8be334e0 RDI=ffffffff8be334a0 RBP=ffff88810682b210 RSP=ffffc900001e0ad0
R8 =0000000000000003 R9 =0000000000000004 R10=dffffc0000000000 R11=fffff5200003c138
R12=ffff888020105e18 R13=ffff888024bc3100 R14=1ffff11003f44c1c R15=ffff88801fa260e0
RIP=ffffffff84d01a62 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f9d870e7d60 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00007f9d865876c3 00007f9d865876c3 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 00ff000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000ff0000 XMM05=01178004018a8a08 0001000014080606
XMM06=0122fc0008001898 0300080018900300 XMM07=0800188803000400 1884030004001880
XMM08=0300020017fe0300 020017fc03000200 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
