last executing test programs:

1m5.632572678s ago: executing program 2 (id=214):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)={0x34, r1, 0x111, 0x0, 0x3, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random='n'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BSS_BASIC_RATES={0x6, 0x24, [{0x4, 0x1}, {0x2, 0x1}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x845}, 0x4800)

1m5.497111783s ago: executing program 2 (id=216):
r0 = socket$nl_generic(0x11, 0x3, 0x10)
open$dir(&(0x7f0000000140)='./file0\x00', 0x242, 0x0)
pselect6(0x40, &(0x7f0000000100)={0x2, 0x0, 0xfffffffffffffff8, 0x10000000000000, 0x1, 0x2, 0xa8}, 0x0, &(0x7f0000000000)={0x1f, 0x4, 0x715, 0x8000000000000000, 0x0, 0x80000000000000, 0x800, 0x20000}, 0x0, 0x0)
sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2, 0x0, 0x0, 0x11000000}, 0x0)

1m4.559087716s ago: executing program 2 (id=230):
syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000001c0)='./file0\x00', 0x800000, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1, 0x373, &(0x7f00000006c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40)
pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xfffffe75}], 0x1, 0x5405, 0x0, 0x0)
creat(&(0x7f0000000080)='./file1\x00', 0x28)

1m4.030581795s ago: executing program 2 (id=235):
syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x47, 0xc16, &(0x7f0000001940)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x0, 0x0, 0x1400)

1m3.132419147s ago: executing program 2 (id=243):
syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x200000, &(0x7f0000000ac0)={[{@uid}, {@part={'part', 0x3d, 0xd}}, {@iocharset={'iocharset', 0x3d, 'euc-jp'}}, {@codepage={'codepage', 0x3d, 'cp874'}}, {@file_umask={'file_umask', 0x3d, 0xd}}, {@uid}, {@part={'part', 0x3d, 0x2}}, {@creator={'creator', 0x3d, "8c10b081"}}]}, 0x2, 0x36b, &(0x7f0000000d80)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0)
setuid(0xee01)
utimensat(r0, 0x0, &(0x7f0000000080)={{0x77359400}, {0x77359400}}, 0x0)

1m2.395900923s ago: executing program 2 (id=252):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.empty_time\x00', 0x26e1, 0x0)
close(r0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="01fdfdffff00"})

1m2.159101842s ago: executing program 32 (id=252):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.empty_time\x00', 0x26e1, 0x0)
close(r0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="01fdfdffff00"})

15.75549948s ago: executing program 3 (id=665):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0)
r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0)
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x200000e, 0x13, r1, 0x8678b000)

15.081348064s ago: executing program 3 (id=669):
syz_mount_image$cramfs(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x2200409, &(0x7f0000000400)=ANY=[], 0xfe, 0x15e, &(0x7f0000000200)="$eJzs0E2LUmEYxvH/c87jUUixyECCUmhjSeALtYvwRJKQHSjatBLs9AKKkVDuUqJdC6Gti162EfQJdHQxzKCbmS8xG3cDs3Q4z3FmmJePcP92XvdzXzeexw8WOcWJR532h49+t+u/zj736tUXe+NxJcgd6P0/NQ/fTyrwDs1Ew3IAQTxLwJv3Ld9qdlrB72UFooB7yeQRIHl0z01pBhqKhPu5WzC9Zt5ZnM/8MhGzd12DmwyzArD65RAL+q6EWdC3D9iglLM+dsPmWy2fuaqgN8r/+7v9bL5Vu3vnof+9VB3ejqft/Bf4jatim7O3u/Z6azGvP/Xq3qIcLd0vF4oW93ZMYX+IfhL/BK8U6KDPwvQ5pG/ql/BVwQ9za7mhEsD054HXjh5/6/5nOwsqM2o20pE/jdRlCzung8mKC5iJ+ZNCCCGEEEIIIYQQQgghhBBCCCHEGYcBAAD//4rMUes=")
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x80044940, &(0x7f0000001b00)={0x0, ""/256, 0x0, <r1=>0x0, <r2=>0x0, 0x0, ""/16, ""/16, ""/16, <r3=>0x0, <r4=>0x0, <r5=>0x0})
syz_mount_image$msdos(&(0x7f0000000680), &(0x7f00000003c0)='./file1\x00', 0x1a4243c, &(0x7f0000000800)=ANY=[@ANYRES16=r2, @ANYRESDEC=r3, @ANYRESDEC=r5, @ANYRESDEC, @ANYRES8=r4, @ANYBLOB="7343657a3ba3fc167a55b107111fae8df5da7f6db476c3f26d7520e1c20ba9452a9a8871935dba4c44015e39fcec8c4e89419220d703947aa8f9632d987a1a51faeb748c0861f137dfc9c357e2ee89517866b7f98863ac5f165e7b4d9fbc26862e19f8ec1c83714987076a8a6712ce1886d9a1099f06048a5b6018dabf", @ANYRES64=0x0, @ANYRES8=0x0, @ANYRES64, @ANYRES8=r1], 0x0, 0x0, &(0x7f0000000080))

14.753994466s ago: executing program 3 (id=674):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
move_mount(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/../file0\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x100)

14.601551291s ago: executing program 3 (id=676):
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000005c0)={[{@barrier_val={'barrier', 0x3d, 0x101}}, {@errors_remount}]}, 0x2, 0x445, &(0x7f0000000b00)="$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")
mkdir(&(0x7f0000000080)='./bus\x00', 0x4)
rename(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./bus\x00')
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000a80)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

14.185005716s ago: executing program 3 (id=681):
openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000)
mmap$KVM_VCPU(&(0x7f0000ec2000/0x3000)=nil, 0x930, 0xf, 0x9032, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000ec1000/0x1000)=nil, 0x930, 0xf, 0x9032, 0xffffffffffffffff, 0x0)

13.471911601s ago: executing program 3 (id=685):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1, 0x13, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000200000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000140085000000700000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r0, 0x4)
sendmsg$unix(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x448c0)

13.431266703s ago: executing program 33 (id=685):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1, 0x13, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000200000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000140085000000700000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r0, 0x4)
sendmsg$unix(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x448c0)

12.959283099s ago: executing program 1 (id=690):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x208, 0x0, 0x7}]})

12.603811182s ago: executing program 1 (id=691):
syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='map=acorn,check=strict\x00uid=', @ANYRESHEX=0x0, @ANYBLOB=',overriderockperm,map=normal,uid=', @ANYRESHEX=0x0, @ANYBLOB='Asession=0x0000000000000018,unhidd,unhide,overriderockperm,cruft,map=normal,cruft,\x00'], 0x2, 0x6b1, &(0x7f0000000840)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
getdents(r0, &(0x7f0000000200)=""/51, 0x33)
getdents(r0, 0xfffffffffffffffd, 0xbb)

12.104847969s ago: executing program 1 (id=694):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000400)='./file0\x00', 0x3, &(0x7f0000000f80)={[{@nombcache}, {@nobarrier}, {@norecovery}, {@errors_remount}, {@resgid}]}, 0x8, 0x625, &(0x7f0000002ac0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
getdents64(r0, 0x0, 0x0)
getdents64(r0, 0x0, 0x18)

11.591788328s ago: executing program 1 (id=699):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000b80)={[{@errors_remount}, {@nobh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@dioread_lock}]}, 0x3, 0x439, &(0x7f0000002380)="$eJzs3MtvG0UYAPBv105LXyRU5dEHECiIikfSpKX0wAUEEgeQkOBQjiFJq1K3QU2QaFVBQKgcUSXuiCMSfwEnuCDghMQV7qhShXJp4WS09m5iO3aauE5c8O8nrTuzO9bM592xZ3a6CWBgjWYvScTuiPg9Iobr2eYCo/V/bi1dmf576cp0EtXqW38ltXI3l65MF0WL9+0qMuWI9LMkDrapd/7S5XNTlcrsxTw/vnD+/fH5S5efO3t+6szsmdkLkydPHj828cKJyed7EmcW180DH80d2v/aO9femD517d2fv02K+Fvi6JHRtQ4+Wa32uLr+2tOQTsp9bAgbUqp30xiq9f/hKMXKyRuOVz/ta+OATVWtVqsPdD68WAX+x5LodwuA/ih+6LP5b7Ft0dDjrnDjpfoEKIv7Vr7Vj5QjzcsMtcxve2k0Ik4t/vNVtsXm3IcAAGjyfTb+ebbd+C+NxvtC9+ZrKCMRcV9E7I2IExGxLyLuj6iVfTAiHtpg/a2LJKvHP+n1rgJbp2z892K+ttU8/itGfzFSynN7avEPJafPVmaP5p/JkRjanuUn1qjjh1d++6LTscbxX7Zl9Rdjwbwd18vbm98zM7UwdScxN7rxScSBcrv4k+WVgCQi9kfEgS7rOPv0N4c6Hbt9/GvowTpT9euIp+rnfzFa4i8ka69Pjt8Tldmj48VVsdovv159s1P9dxR/D2Tnf2fb6385/pGkcb12fuN1XP3j845zmm6v/23J2037PpxaWLg4EbEteb3e6JX9pYuTLeUmV8pn8R853L7/742VT+JgRGQX8cMR8UhEPJq3/bGIeDwiDq8R/08vP/Fe9/Fvriz+mQ2d/5XEtmjd0z5ROvfjd02Vjmwk/uz8H6+ljuR71vP9t552dXc1AwAAwH9PGhG7I0nHltNpOjZW/z/8+2JnWpmbX3jm9NwHF2bqzwiMxFBa3OkabrgfOpFP64v8ZEv+WH7f+MvSjlp+bHquMtPv4GHA7erQ/zN/lvrdOmDTdbeOlva8HcDW87wmDC79HwaX/g+Dq03/39GPdgBbr93v/8d9aAew9coNr/nfBAMGhPk/DC79HwaX/g8DaX5H3P4heQmJVYlI74pmSGxSot/fTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL3xbwAAAP//1Xjmag==")
mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x20000c, &(0x7f0000000080)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
getdents64(r0, 0x0, 0x0)

10.894393772s ago: executing program 1 (id=704):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r0, &(0x7f00000002c0)="ed", 0x1, 0x8c9d0, &(0x7f00000001c0)={0xa, 0x4e22, 0x1, @private0, 0x6}, 0x1c)
shutdown(r0, 0x1)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e23, @rand_addr=0x64010101}}}, &(0x7f0000000040)=0x84)

6.407924552s ago: executing program 1 (id=724):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$key(0xffffffffffffffff, 0x0, 0x44001086)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x603, 0x70bd2f, 0x25dbdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}]}, 0x2c}}, 0x10)

6.153836371s ago: executing program 34 (id=724):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$key(0xffffffffffffffff, 0x0, 0x44001086)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x603, 0x70bd2f, 0x25dbdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}]}, 0x2c}}, 0x10)

4.437878172s ago: executing program 4 (id=743):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x10, 0x0, @mcast2}}}, 0x88)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="0b000000000000000a00000000000000ff020000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000020000000a00000000000000fe8000000000000000000000000000bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000fe8000000000000000000000000000bb"], 0x190)
syz_emit_ethernet(0xd2, &(0x7f0000000740)=ANY=[@ANYBLOB="0180c2000000ffffffffffff86dd60000000009c1100fe8000000000000000000000000000bbff020000000000000000000000000001"], 0x0)

4.179875621s ago: executing program 4 (id=744):
syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000680)='./file2\x00', 0x800000, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x1, 0x5504, &(0x7f000000c0c0)="$eJzs3M1rI2UYAPB32u1+uxbx4G0HFqGFTWj6seit6i5+YJey6sGTpsk0ZDfJlCZNa08ePIoH/xNR8OTRv8GDZ2/iQfEmKJl3qls/QGma2O3vB5Nn5p03zzxvKIVnJiQA59Z8+vOPSbgRroQQZkMI10Mo9pNyK6zH8Fx5buaxLSnHfx+4GEK4GkK4MUoecyblqU9vD2+t/fDGT199c+nCtc++/HZ6qwam7fkQQncn7u93Y8xbMT4sx+vDdhG7q8MyxhPdR+VxHuN+tlVk2K8fzasXcaUV5+c7e/1R3O7UG6PYam8X4zu9eMH+sHWUp3jDw/pucdzMtorY7udFbB3Gug4O4/+2w/4g5mmW+T4o0ofB4CjG8ewgi+vZeVTERm9Qjse8eTM7GMVhGcvLhUbeaRZ1bJ3kk/5/e7Pd2ztIh9luv5330rVq7YVq7U6ltps3s0G2Wql3m3dW04VWZzStMsjq3fVWnrc6WbWRdxfThVajUanV0oW72Va73ktrtepKdamytlju3U5fvf9O2mmmC6P4cru3N2h3+ul2vpvGdyymy9WVFxfTW7X0rY3NdPPBvXsbm2+/d/fd+y9tvP5KOekvZaULy0vLy5XaUmW5tniO1v9RWfQY1w8nkky7AICz57/2/zf1/8AYnF7/v/sghNPv/4P+fyzOVP973vv/U1g/nIj+HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg3Ppu7vPXip35eHytHH+qHHqmPE5CCDMhhF//xmy4eCznbJln7h/mz/2phq+TUGQYXeNSuV0NIayX2y9Pn/anAAAAAE+uLz68+Uns1uPL/LQLYpLiTZuZ6++PKV8SQpib/35M2WZGL8+OKVnx930hHIwpW3ED6/KYksVbbhfGle1fmT0WLj8WkhhmJloOAAAwEcc7gcl2IQAAAEzSx9MugOlIwtGjzKNnwcU37/94IHjl2BEAAABwBiXTLgAAAAA4dUX/7/f/AAAA4MkWf/8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH5j535yUgfiOID/WuiD9y+PvLj3Ku7gGB7BpUvDAbwER8AreAHPgDuPYMDQqUQU3XRKI/l8kjJMQ77MELqY3yQDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHTpsVrO7m7Ob9vmrDft5JkNAAAAcMiqWs7qN5PU/93c/9vc+t/0i4goI+LQ2n0QP/YyB01O9cnnq3djuI+oE7bfMWquXxFx0VzP/7r+FQAAAOB0PcwX07RaTy+TvgfEMaWiTfnnMlNeERHV5ClTWrnNO8sUVv+/h3GdKa0uYI0zhaWS2zBX2kcHouvHfVe1G79pitSUX0dmmzsAAHBEg72mw1UIAAAAPbvqewD0o4jXrczdVuAoNc323s+9HgAAAPANFX0PAAAAAOhcvf53/h8AAACctnT+HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF1aVctZNV9M2+asN+3kmQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALywP+8oEAJhEAZ713cmc//DSoOmpiZVIHz8jcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAm9/95f/E1DiTzL02lp5HkrVTY+vU2Ds3jv4wvn4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMX+vKRACARBFMwZ/zvp+x9WEvQMIkRAw6OKWjQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBFv/vl/8TUOJPMnTaWjkeStavG1lVj70Hj6MF4+zcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMXO/bzGUcUBAP/uzs7WVsUYJYeIKHjQi023tbU38aAED/4JQki3NXbrjzYHW4qQizfJuRfRo4igxFv/h55b6KXeesihghcvlTc/kmkMuFo7s20+H3jzvjsZ3vu+GQj5zkwWAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgNr2u7txljZzZdyv9t28d3U19bf29Mn1zduLqaW412bSj4eXmx96C90lAgAAwMGR1fV9RNzJt5ZT358r6v+8PibV/N89W8Z1Pb+37q/7uvZP7ddf7r64M9FcOU8a9OzaZHzs76kMHt0qZ9tz/3jEoDjzxb2XrLgg/Q82XtjOi/PZ++bGjfeGRXiojWwBgP/iaN1XQf33UOpHXSYGwIExaBTedf2fzXWbEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAbtjfi6TruRcTiYDdObt27urpff33z9mLdTl27ttkcMw2RR8TZtcn4WItrmXWXLl85vzKZjC+2H7wSEV3N/k61/PMfTXFwRCfnR/A/Bf3qYs9KPg8T5NVaHv1cHf1CAgDgiZVXLdX1d/Kt5bSvNx9x//sH6//XG3FMWf/f/fjUzeZczfp/1NoKZ9/S+oXPly5dvvLm2oWVc+Nz40/fOj56e3Ti9MmTp5eKeyVL7pgAAADwcIZVa9b/wz3HpJ8dacQxZf3/xbejr5rjZOr/fe0+9Os6EwAAgIPt+Vf/+L23z/7ecBhfrqyvXxyV253Px8ttB6n+a4eq1qz/s/muswIAAADasL3Re+D9/zONOKZ8/v/MDy/91Bwzi4jD1fP/o6ufTc60t5yZ1sa/Lne9RgAAALp1uGrN5//5fKr/+zuvPPQj4o3Xyrj6GsCp6v/s/a9/bM7VfP//RHtLnEn9hfJ8FP1CxGCh64wAAAB4Uv15P+KpKFsq9n/Lt5Y/+fnIh0Pv/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC07a8AAAD//3npOno=")
r0 = open(&(0x7f0000000180)='.\x00', 0x10000, 0x2)
flock(r0, 0x1)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0)

4.094739744s ago: executing program 0 (id=745):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01134f9b3a000000fc006700000008000300", @ANYRES32=r2, @ANYBLOB="0c00990000000000000000000800c300741300000800c4"], 0x3c}}, 0x40000)

3.780693185s ago: executing program 0 (id=746):
r0 = inotify_init1(0x0)
capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140))
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x200)

3.539631124s ago: executing program 0 (id=748):
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x3200c00, &(0x7f00000000c0)=ANY=[@ANYRES64=0x0], 0xa, 0xac7, &(0x7f0000000400)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105142, 0x2c)
renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000001240)='./file0/file0\x00', 0x2)
write$cgroup_subtree(r0, &(0x7f0000000200)=ANY=[], 0x32600)

3.281993393s ago: executing program 5 (id=749):
ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000000)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}})
syz_mount_image$exfat(&(0x7f00000009c0), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000580)={[{@utf8}, {@umask={'umask', 0x3d, 0x8000}}, {@uid={'uid', 0x3d, 0xee01}}, {@iocharset={'iocharset', 0x3d, 'cp949'}}, {@errors_remount}, {@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@errors_remount}, {@dmask={'dmask', 0x3d, 0x1}}, {@time_offset={'time_offset', 0x3d, 0x6}}, {@errors_remount}]}, 0x1, 0x152b, &(0x7f0000002f80)="$eJzs3AmYjtXbAPD7Puc8Y0zS2yTLcM65H95kOSZJsiTJkiRJkmRLSJrkLwmJIVvSkIRkGZJlCMkyMWns+74kJEmTJCHZkvNdir/66r8vvuub+3ddzzXnfs9zn+c87/0+8yyzfNN5SI1GNas2ICL4l+AvX5IBIBYABgDANQAQAEDZ+LLxF/pzSkz+1zbC/r0eSrvSM2BXEtc/e+P6Z29c/+yN65+9cf2zN65/9sb1z964/oxlZ5umFbiWl+y78PP/7IzP//+PZJUa88WaUtd3AYj5e1O4/tkb1///reDvWYnrn71x/bOr2Cs9AfZ/AB//2UGOv9jD9c/euP6MZWdX+vnzf36Rf7UfItnhPfgr+88YY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjP0XnPaXKQC41L7S82KMMcYYY4wxxti/j89xpWfAGGOMMcYYY4yx/zwEARIUBBADOSAWckIcCAC4GnLDNRCBayEeroM8cD3khXyQHwpAAhSEQqDBgAWCEApDEYjCDVAUboRiUBxKQElwUAoS4SYoDTdDGbgFysKtUA5ug/JQASpCJbgdKsMdUAXuhKpwF1SD6lADasLdUAvugdpwL9SB+6Au3A/14AGoDw9CA3gIGsLD0AgegcbwKDSBptAMmkOLfyr/BegOL0IP6AnJ0At6w0vQB/pCP+gPA+BlGAivwCB4FVJgMAyB12AovA7D4A0YDiNgJLwJo+AtGA1jYCyMg1QYDxPgbZgI78AkmAxTYCqkwTSYDu/CDJgJs+A9mA3vwxyYC/NgPqTDB7AAFkIGfAiL4CPIhMWwBJbCMlgOK2AlrILVsAbWwjpYDxtgI2yCzbAFtsI22A474GPYCZ/ALtgNe/5cv38k/9Sv8j+FvdAFAQEFClSoMAZjMBZjMQ7jMBfmwtyYGyMYwXiMxzyYB/NiXsyP+TEBE7AQFkKDBgkJC2NhjGIUi2JRLIbFsASWQIcOEzERS+PNWAbLYFksi+WwHJbHClgBK2ElrIyVsQpWwapYFathNayBNfBuvBt7YW2sjXWwDtbFupceT2EDbIANsSE2wkbYGBtjE2yCzbAZtsAW2BJbYitshW2wDbbFttgO22ESJmF7bI8dsAN2xI7YCTthZ+yMXbArds16IQfgi/gi9sRqohf2xt7YB1Ny9MP+2B9fxoH4Cr6Cr2IKDsYh+Bq+hq/jMDyJw3EEjsSRWFm8haNxDJIYh6mYihNwAk7EiTgJJ+NknIppOA2n43ScgTNxJr6Hs/F9fB/n4lycj+mYjgtwIWZgBi7CU5iJi3EJLsVluByX4UpchStxDa7FNbge1+NG3IibcTNuxa24Hbfjx6gA8BPcjbsxBffiXtyH+3A/7scDeACzMAsP4kE8hIfwMB7GI3gEj+IxPI7H8ASewJN4Ck/jaTyLZ/EcPpfwVcOPi69OAXGBEkrEiBgRK2JFnIgTuUQukVvkFhEREfEiXuQReURekVfkF/lFgkgQhUQhYYQRJMIYABBRERVFRVFRTBQTJUQJ4YQTiSJRlBalRRlRRpQVt4py4jZRXlQQrV0lUUlUFm1cFXGnqCqqimqiuqghaoqaopaoJWqL2qKOqCPqirqinnhA1Be9sB8+JC5UppEYjI3FEGwimgp58QhoKYZhK9FatBFPiBE4HNuJli5JPC3ai9HYQfxJjMFnRScxDjuL50UX0VV0Ey+I7qKV6yF6iknYS/QWU7GP6Cv6if5iBlYX7+HsnDXEqyJFDBZDxGtiPr4uhok3xHAxQowUb4pR4i0xWowRY8U4kSrGiwnibTFRvCMmicliipgq0sQ0MV28K2aImWKWeE/MFu+LOWKumCfmi3TxgVggFooM8aFYJD4SmWKxWCKWimViuVghVopVYrVYI9aKdWK92CA2ik1is9gitoptYrvYIT4WO8UnYpfYLfaIT8Ve8ZnYJz4X+8UX4oD4UmSJr8RB8bU4JL4Rh8W34oj4ThwVx8Rx8b04IX4QJ8UpcVqcEWfFj+Kc+EmcF16ARCmklEoGMkbmkLEyp4yTV8lcMrj47l4r4+V1Mo+8XuaV+WR+WUAmyIKykNTSSCtJhrKwLCKj8gZZVN4oi8nisoQsKZ0sJRPlTbK0vFmWkbfIsvJWWU7eJsvLCrKirCRvl5XlHRIiv2yjmqwua8ia8m6ZDPfI2vJeWUfeJ+vK+2U9+YCsLx+UDeRDsqF8WDaSj8jG8lHZRDaVzWRz2UI+JlvKx2Ur2Vq2kU/ItvJJ2U4+JZPk07K99Bc/Is/KTvI52Vk+L7vIrrKb/Emel172kD0l9ALZW74k+8i+sp/sLwfIl+VA+YocJF+VKXKwHCJfk0Pl63KYfEMOlyPkSPmmHCXfkqPlGDlWjpOpcrycIN+WE+U7cpKcLKfIqTJNTpP9Lo40S8q/mf/2r/MvnHrlNDno561vlJvkZrlFbpXb5Ha5Q34sd8qdcpfcJffIPXKv3Cv3yX1yv9wvD8gDMktmyYPyoDwkD8nD8rA8Io/Io/KYPCO/lyfkD/KkPCVPyTPyrDwrz118D0ChEkoqpQIVo3KoWJVTxamrVC51tcqtrlERda2KV9epPOp6lVflU/lVAZWgCqpCSiujrCIVqsKqiIqqG/DiB0aVUCWVU6VUorrpH8lXRdWNqpgq/pv8S/NL/gvza6FaqJaqpWqlWqk2qo1qq9qqdqqdSlJJqr1qrzqoDqqj6qg6qU6qs+qsuqguqpvqprqr7qqH6qGSVbLqrV5SfVRf1U/1VwPUy2qgGqgGqUEqRaWoIWqIGqqGqmFqmBquhquRaqQapUap0Wq0GqvGqlSVqiaoCWqimqgmqUlqipqi0lSamq6mqxlqhpqlZqnZaraao+aoeWqeSlfpaoFaoDJUhlqkFqlMtVgtVkvVUrVcLVcr1Uq1Wq1Wa9VatV6tV5lqk9qktqgtapvapnaoHWqn2ql2qV1qj9qj9qq9ap/ap/ar/eqAOqCyVJY6qA6qQ+qQOqwOqyPqiDqqjqrj6rg6oU6ok+qkOq1Oq7PqrDqnzqnz6ryCQIAIRKACFcQEMUFsEBvEBXFBriBXkDvIHUSCSBAfxAd5guuDvEG+IH9QIEgICgaFAh2YwAbiYtGjwQ1B0eDGoFhQPCgRlAxcUCpIDG4KSgc3B2WCW4Kywa1BueC2oHxQIagYVApuDyoHdwRVgjuDqsFdQbWgelAjqBncHdQK7glqB/cGdYL7grrB/UG94IGgfvBg0CB4KGgYPBw0Ch4JGgePBk2CpkGzoHnQ4t86vvcn8z3ueuieOln30r31S7qP7qv76f56gH5ZD9Sv6EH6VZ2iB+sh+jU9VL+uh+k39HA9Qo/Ub+pR+i09Wo/RY/U4narH6wn6bT1Rv6Mn6cl6ip6q0/Q0PV2/q2fomXqWfk/P1u/rOXqunqfn63T9gV6gF+oM/aFepD/SmXqxXqKX6mV6uV6hV+pVerVeo9fqdXq93qA36k16s96it+pterveoT/WO/UnepferffoT/Ve/Znepz/X+/UX+oD+Umfpr/RB/bU+pL/Rh/W3+oj+Th/Vx/Rx/b0+oX/QJ/UpfVqf0Wf1j/qc/kmf1/7Cxf2F07tRRpkYE2NiTayJM3Eml8llcpvcJmIiJt7Emzwmj8lr8pr8Jr9JMAmmkClkLiBDprApbKImaoqaoqaYKWZKmBLGGWcSTaIpbUqbMqaMKWvKmnKmnClvypuKpqK53dxu7jB3mDvNneYuc5epbqqbmqamqWVqmdqmtqlj6pi6pq6pZ+qZ+qa+aWAamIamoWlkGpnGprFpYpqYZqaZaWFamJampWllWpk2po1pa9qadqadSTJJpr1pbzqYDqaj6Wg6mU6ms+lsupguppvpZrqb7qaH6WGSTbLpbXqbPqaP6Wf6mQFmgBloBppBZpBJMSlmiBlihpqhZpgZZoabEWbkhQtV85YZbcaYsWacSTWpZoKZYCaaiWaSmWSmmCkmzaSZ6Wa6mWFmmFlmlpltZps5Zo6ZZ+aZdJNuFpgFJsNkmEVmkck0mWaJWWKWmWVmhVlhVplVZo1ZY9bBOrPBbDCbzCazxWwx28w2s8PsMDvNTrPL7DJ7zB6z1+w1+8w+s9/sNwfMAZNlssxBc9AcMofMYXPYHDFHzFFz1Bw3x80Jc8KcNCfNaXPanDX5Lp4vvYm1OW2cvcrmslfb3PYa+7/j/LaATbAFbSGrbV6b7zexsdYWs8VtCVvSOlvKJtqbfheXtxVsRVvJ3m4r2ztsld/Ftew9tra919ax99ma9u7fxHXt/baefcTWRwSwTW1D29w2so/YxvZR28Q2tc1sc9vWPmnb2adskn3atrfP/C5eYBfaVXa1XWPX2l12tz1tz9hD9ht71v5oe9iedoB92Q60r9hB9lWbYgf/Lh5p37Sj7Ft2tB1jx9pxv4un2Kk2zU6z0+27doad+bs43X5gZ9sMO8fOtfPs/J/jC3PKsB/aRfYjm2kDWGKX2mV2uV1hV/55rkvtervBbrQ77Sd2i91qt9ntdselC2G72+6xn9q99jN70H5t99sv7AF72GbZr36OL+zfYfutPWK/s0ftMXvcfm9P2B/UpewL+/69/cmet94CIQFJUhRQDOWgWMpJcXQV5aKrKTddQxG6luLpOspD11Neykf5qQAlUEEqRJoMWSIKqTAVoSjdQJemV4JKkqNSlEg3UWm6mcrQLVSWbqVydBuVpwpUkSrR7VSZ7qAqdCdVpbuoGlWnGlST7qZadA/VpnupDt1Hdel+qkcPUH16kBrQQ9SQHqZG9Ag1pkepCTWlZtScWtBj1JIep1bUmtrQE9SWnqR29BQl0dPUnp6hDvQn6kjPUid6jjrT89SFulI3eoG604vUg3pSMvWi3vQS9aG+1I/60wB6mQbSKzSIXqUUGkxD6DUaSq/TMHqDhtMIGklv0ih6i0bTGBpL4yiVxtMEepsm0js0iSbTFJpKaTSNptO7NINm0ix6j2bT+zSH5tI8mk/p9AEtoIWUQR/SIvqIMmkxLaGltIyW0wpaSatoNa2htbSO1tMG2kibaDNtoa20jbbTDvqYdtIntIt20x76lPbSZ7SPPqf99AUdoC8pi76ig/Q1HaJv6DB963vSd3SUjtFx+p5O0A90kk7RaTpDZ+lHOkc/0XnyBCGGIpShCoMwJswRxoY5w7jwqjBXeHWYO7wmjITXhvHhdWGe8Powb5gvzB8WCBPCgmGhUIcmtCGFYVg4LBJGwxvCouGNYbGweFgiLBm6sFSYGN4Ulg5vDsuEt4Rlw1vDcuFtYfmwQvjIfZXC28PK4R1hlfDOsGp4V1gtrB7WCGuGd4e1wnvC2uG9YZ3wvrBMeH9YL3wgrB8+GDYIHwobhg+HjcJHwsbho2GTsGnYLGwetggfC1uGj4etwtZhm/CJsG34ZNgufCpMCp8O24fP/Nx//8K/3J8c9gp7hy+FL4Xe3yvnRedH06MfRBdEF0Yzoh9GF0U/imZGF0eXRJdGl0WXR1dEV0ZXRVdH10TXRtdF10c3RDdGva+ZAxw64aRTLnAxLoeLdTldnLvK5XJXu9zuGhdx17p4d53L4653eV0+l98VcAmuoCvktDPOOnKhK+yKuKi7wRV1N7pirrgr4Uo650q5RNfctXAtXEv3uGvlWrs27gn3hHvSPemeck+5p11794zr4P7kOrpnXSf3nHvOPe+6uK6um3vBdXfjc/9yTCa73q636+P6uH6unxvgBriBbqAb5Aa5FJfihrghbqgb6oa5YW64G+5GupFulBvlRrvRbqwb61JdqpvgJriJbqKb5Ca5KW6KS3Npbrqb7ma4Ga7yzF+2MsfNcfPcPJfu0t0Cd+GaMcMtcotcpst0S9wSt8wtcyvcCrfKrXJr3Bq3zq1zG9wGt8ltclvcFrfNbXM73A630+10u/w1vwzq9rp9bp/b7/a7A+5Ll+W+cgfd1+6Q+8Yddt+6I+47d9Qdc8fd9+6E+8GddKfcaXfGnXU/unPuJ3feeZcaGR+ZEHk7MjHyTmRSZHJkSmRqJC0yLTI98m5kRmRmZFbkvcjsyPuROZG5kXmR+ZH0yAeRBZGFkYzIh5FFkY8imZHFkSWRpZFlkeUR7wtuCX1hX8RH/Q2+qL/RF/PFfQlf0jtfyif6m3xpf7Mv42/xZf2tvpy/zZf3FXxF/6hv4pv6Zr65b+Ef8y39476Vb+3b+Cd8W/+kb+ef8kn+ad/eP+M7+D/5jv5Z38k/5zv7530X39V38y/47v5F38P39Mm+l+/tX/J9fF/fz/f3A/zLfqB/xQ/yr/oUP9gP8a/5of51P8y/4Yf7EX5kzJt+1KVbZBjnU/14P8G/7Sf6d/wkP9lP8VN9mp/mp/t3/Qw/08/y7/nZ/n0/x8/18/x8n+4/8Av8Qp/hP/SL/Ec+0y++9FDSr/Ar/Sq/2q/xa/06v95v8Bv9Jr/Zb/Fb/Ta/3e/wH/ud/hO/y+/2e/ynfq//zO/zn/v9/gt/wH/ps/xX/qD/2h/y3/jD/lt/xH/nj/pj/rj/3p/wP/iT/pQ/7c/4s/5Hf87/5M/z36wxxhhjjP1dxl9uit/2/PI4v9cf5IhfrdwbAK7eWiDr1/0XrijX5f2l3VcktI0AwNM9Oz90aalWLTk5+eK6mRKCInMBLv0k6IIYuBwvhjbwJCRBayj9h/PvK7qepb8xfvRWgLhf5cTC5fjy+J8DYPIfjP/YEyMXlAtPx/+V8ecCFCtyOScnXI4XQ5ufn6+0hjJ/Yf75Wv6N+ef8IhWg1a9ycsHl+PL8E+FxeAaSfrMmY4wxxhhjjDH2i76iYsdL95+XfuPzj+7PE9TlnBxwOf5b9+eMMcYYY4wxxhi78p7t2u2px5KSWnf8xxtV/qmsv7vRGP5TI3PjDxveA1x6RQHAvzggwIWG/G/uxeb/yrZSLh46/7tr2RkfwP+NUv7zjbF/fuUKf2NijDHGGGOM/dtdvvr/7evqSk2IMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhjLhv4b/1fsSu8jY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxdqX9TwAAAP//HmP+kg==")
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)

2.655769945s ago: executing program 5 (id=750):
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7})
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r0, 0x400448e1, 0x0)

2.615246347s ago: executing program 0 (id=751):
r0 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000001b00)={&(0x7f0000000040)=@in6={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x80, 0x0}, 0x2)
sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0xafe6)
close_range(r0, 0xffffffffffffffff, 0x0)

2.51099827s ago: executing program 5 (id=752):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8482, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x3})
ioctl$TUNSETDEBUG(r0, 0x400454c9, 0xffffffffffffffff)
ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0)

2.22847759s ago: executing program 0 (id=753):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendto$inet6(r0, &(0x7f0000000280)="6cf43f7b2d39399ced87954bc28b1b4da8a355f265b01d3af4b5cbd689e5e074968bde9de6112c92cfbd9402ca136ccb765bbc118b9834", 0xfd74, 0x8000, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f00000007c0)="87", 0x19fff, 0x4000, 0x0, 0xfffffffffffffe00)

2.046411977s ago: executing program 0 (id=754):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000407d1ed43001000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000840)=ANY=[@ANYBLOB="20fc83"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x1, 0x3, "b8c189"}, 0x0})

1.871245123s ago: executing program 4 (id=755):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)={'team0\x00', <r2=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000000)={0x5c, r1, 0x405, 0x70bd2c, 0x25d7dbfe, {0x1, 0x0, 0xf0}, [{{0x8, 0x1, r2}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x21}}, {0x8, 0x6, r2}}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40004b1}, 0x40400d4)

1.67956278s ago: executing program 5 (id=756):
syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x200000, &(0x7f00000024c0)=ANY=[@ANYRES16=0x0, @ANYBLOB="3fdc639c8504020000000000002ad363946bb66d00a525edf723a91fcfe564765d9bb9aa48b1ebe211f7c9aacac0b0403170bc23f6645393b3505758df5ec7945c61eeadd8a3ec78", @ANYRESOCT, @ANYRES8, @ANYRES8, @ANYRES16, @ANYRES16, @ANYRESDEC, @ANYRES8, @ANYRES8, @ANYRESDEC, @ANYRESDEC=0x0], 0x1, 0x1de, &(0x7f00000004c0)="$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")
syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000a80)='./file0\x00', 0x2800c10, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x3, 0x185, &(0x7f00000003c0)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='.\x00', 0x0, 0x0)
open_by_handle_at(r0, &(0x7f0000000780)=ANY=[@ANYBLOB="0800000002000000"], 0x4942)

1.504174527s ago: executing program 5 (id=757):
syz_mount_image$jfs(&(0x7f0000000180), &(0x7f0000000140)='./file2\x00', 0x0, &(0x7f0000000000)=ANY=[], 0xfd, 0x609c, &(0x7f0000011b00)="$eJzs3UuPHFfZB/CnL9NzyRvbil5ZxmLhOBASQny3IdzisGABSCAhr7E1mUQGB5BtEIksPJEXiAWXjwCbbFjki4Qda8QHwJLNKhKEQjVzjl3d0zM9jme6uuf8flK76ulT1X3K/6np7qmqPgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAxHe+/cOznYi4+st0x5GI/4teRDdiua5PRD1zOS/fj4hjG0tFHI2I3mJEvf7GP4cjLkTER4ciHjy8s1rffW6X/bh45vbNT777rb//5g/3jv34zR99MNr+g/8//+Fv70Yc+f5rH35yd082HQAAAIpRVVXVSR/zj6fP9922OwUATEV+/a+SfL9arVar97T+fXe2+qMutG6qxrvbLCJivblO/Z7B4XgAmDPr8XHbXaBF8i9aPyKeabsTwEzrtN0B9sWDh3dWOynfTvP14MRme/475VD+651H13dsN51k9ByTaf183YtePLdNf5an1IdZkvPvjuZ/dbN9kJbb7/ynZbv8B5EuaipMzr83mv+Iofz/GBFzm393bP6lyvn3nyT/9d4c7//yBwAAAADg4Mt//z/S8vHfxafflF3Z6fjviSn1AQAAAAAAAAD22qcc/2/jePnR5gMZ/w8AAABmVv1ZvfanQ4/v60T87fCYZeuP+Fc6Ec+OLA8UJl0ss9J2PwAAAAAAAAAAAACgJP3Nc3ivdCIWIuLZlZWqqupb02j9pJ52/XlX+vZDydr+JQ8AAJs+OpSu5b+/tHlHJ6Keu5K+629hZWWlqpaWV6qVankxv58dLC5Vy43PtXla37c42MUb4v6gqh9sqbFe06TPy5PaRx+vfq5B1dtFx6aj7dQBKN3mq9EDr0gHTFUdjrbf5TAf7P8Hj/2f3Wj75xQAAADYf1VVVZ30dd7H0zH/btudAgCmYSm//o8eF1Cr1Wq1Wn3w6qZqvLvNIiLWm+vU7xkMxw8Ac2Y9Pm67C7RI/kXrR8SxtjsBzLRO2x1gXzx4eGe1k/LtNF8P0vju+VyQofzXOxvr5fXHTScZPcdkWj9f96IXz23Tn6NT6sMsyfl3R/O/utk+SMvtd/7Tsl3+9XYeaaE/bcv590bzH3Fw8u+Ozb9UOf/+E+Xfkz8AAAAAAMyw/Pf/I47/5k0GAAAAAAAAgLnz4OGd1Xzdaz7+/9kxy3Wac67/PDBy/p1d5+/634Mk598dzX/khJxeY/7+G4/z/9fDO6sf3P7nZ/J05vNf6A3q517odHv9dM5PtfBWXI8bsRZntizfH2o/u6V9Yaj93IT281vaB3X7cm4/Favxs7gRbz5qX5xwYtTShPZqQnvOv2f/L1LOv9+41fmvpPbOyLR2//3ulv2+OR33PJf/8p8Xt+5de20wcYl70Xu0bU319p3clz7tbOP/5JlB/OLW2s1Tv7p2+/bNs5EmQ/eeizTZYzn/hXTL+b/0wmZ7/r3f3F/vvz944vxnxb3ob5v/C435entfnnLf2pDzH6Rbzj+/Ao3f/+c5/+33/1da6A8AAAAAAAAAAAAAAADspKqqjUtEL0fEpXT9T1vXZgIAU/W776WZKgm1Wq1Wq9V7VfdnrD9DqvFebxaxNLzOpYj49bgHAwBm2X8j4h9td4LWyL9g+fv+6unn2u4MMFW33n3vJ9du3Fi7eavtngAAAAAAAAAAn1Ye//NEY/znjfOARsaNHhr/9Y04Mbfjf3YHvY2xztMGPR87j/99MnYe/7s/4fkWJrRPGrF4cUL70oT2sRd6NOT8n08Z5/yPpw0rafzXl1roT9ty/ifTWM85/y+MLNfMv/rzPOffHcr/9O13fn761rvvvXr9nWtvr7299tOzZy5dOH/xwvmLF0+/df3G2pnNf1vs8f7K+eexr50HWpacf85c/mXJ+X8+1fIvS87/xVTLvyw5//x+T/5lyfnnzz7yL0vO/+VUy78sOf8vplr+Zcn5v5Jq+Zcl5/+lVMu/LDn/V1Mt/7Lk/E+lWv5lyfmfTrX8y5Lzz0e45F+WnH8+s0H+Zcn5n0u1/MuS8z+favmXJed/IdXyL0vO/2Kq5V+WnP+lVMu/LDn/L6da/mXJ+X8l1fIvS87/tVTLvyw5/6+mWv5lyfl/LdXyL0vO/+upln9Zcv7fSLX8y5Lz/2aq5V+WnP/rqZZ/WR5//7+ZKc/8+68RM9CN/ZipqqqagW6YeYqZtn8zAQAAAAAAAAAAAACjpnE6cdvbCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA/9iBAwEAAAAAIP/XRqiqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrCDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFfbuN0aOs74D+Nw/++wE4pIQQjDk7DjBkIvvzv8SE0wcIDQNLU0DodCGOsY+Owb/q8+GJIqaS5O2QURqpPZF+qIUEEVIbZUIIZVKKYpUpPZd8woUVUKtlBeWmlQmgla0JFfNzvM8t7u3t3u27+zZmc8nin++29nd52Zn9+571ncHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaLbhI9N/MpBlWf5/4491WXZ5/vc12Z78w9mdl3qFAAAAwIV6o/Hn316RPrFnCVdq2uaf3/Ov35ubm5vLPv/6mTf/bG4uXTCWZUOrs6xxWfQvv/j5XPM2wRPZ6MBg08eDPe5+qMflwz0uH+lx+aoel6/ucfloj8sX7IAF1hS/j2nc2KbGX9cVuzS7KhtpXLapw7WeGFg9OBh/l9Mw0LjO3MjB7HB2JJvOJhdcZ6DxX5a9sCG/r7uyeF+DTfe1Psuysz99dH9cw0DYx5uyljtraH7sXrsjG3v9p4/u//apV9/ZafbcDQtWmmWbN+brfDLL5n9dlQ1kq9M+iescbFrn+g7rHGpZ50Djevnf29d5donrjF/3aFjnS13WuT587qHrsyybzRbdpt0T2WC2tu1e0/4eLY6I/Dbyh/Jt2fA5HScblnCc5Nd55frW46T9mIz7f0PYJ8OLrKH54Xjt8VUL9vv5Hif5V12GYzW/7XvyOx0dbf7Vasuxmm/z6A2LHwMdH7sOx0A6lpuOgY29joHBVUONY2Bwfs0bW46BqQXXGcwGGvd15obux8DEqaMnJmYefuTmw0f3HZo+NH1sanLn9m07tm/bsWPi4OEj05PFn+e2S/vI2mwwHYMbw2tNPAbf27Zt8yE5943lex6MluR5kH/tn7oxX9Dlg9kix3i+zZObL/x5kL7vNz0PhpueBx1fUzs8D4aX8DzItzm7eWnfM4eb/u+0hpV6LVzXdAxcyu+H+X3e/77FXwvXh3U99f5z/X44tOAYiF/WQHju5Z9JP++N3hr2y8Lj4tr8gstWZadnpk9ueWjfqVMnp7IwLoormx6r9uNlbdPXlC04XgbP+XjZ8ze/vPHaDp9fF/bV6E3dH6t8m+3j3R+rxqt76/5clRX7s+WzW7MwltnF3p+dvpvl+zNliS77M9/myZsv/GfBlEuaXv9Ger3+DY0MF69/Q2lvjLS8/i18aIYaK8uyszcv7fVvJPx/sV//rirJ61++r+7f0v0YyLd5auJcj4Hhrq9/14c5ENbzvpAYRpty/5uNy2eLw7Tpsex53AwPj4TjZjjeY+txs23BdfJby+978+T5HTebr299rFp+bqngcZPvqz+f7H7c5Nu8OHXhrx1r4l+bXjtW9ToGRoZW5esdSQdB8Xo3tyYeA1uy/dnx7Eh2IF0nf5Tz+xrfurRjYFX4/2K/dlxTkmMg31fPbu1+DOTb/HDb8v7stDl8Jm3T9LNT++8XFsv81w7P3177blvuzJ+v86M/+kT6XKcMkW/z6vZzzRnd99NN4TOXddhP7c+fxY7pA9nF2U/XhHUe2dH9d1P5NlftXOLxtCfLspenXm78viv8fve7p3/0vZbf+3b6nfLLUy/fPXHvj89l/QAAnL83G3/Orip+1mz6F+ul/Ps/AAAA0Bdi7h8MM5H/AQAAoDJi7h8KM5H/AQAAoDJi7h8OM6lJ/n/w1l3PvfFYlt4NcC6Il8fdcM+Hiu1ix3s2fDw2Ny///Ie/NfLcVx5b2n0PZln2y7vf1XH7Bz8U11U4Edf5gdbPL3DNdUu6/wfum9+u+f0Tzu4qbj9+PUs9DGJX+YWJrY3bHXt4qjFfvDtrzHtnn3qiuP3i47j9mW3F9n8Z3rRkz8GBlutvDuvZFOZYeE+Ze/bM74d8xus9t/49/3Tlp+fvL15vYONbG1/ms39Q3G58j6hnriy2j1/3Yuv/x69+57l8+4du6Lz+xwY7r/9MuN1XwvzF7mL75n3+lab1/1FYf7y/eL0t3/xBx/U//45i++fDcfH1MNvXf8efvvuNTo9XvJ89txXXi/c/+d/bG9eLtxdvv339o49NteyP9tt/8fXidnZ/6WdDzdvHz8f7iR64rfX4HgiPb0uPPMuy7/xx1rKfsw8W1/uHtvXH2ztxW+f139S2zhMD1zWuP//1rGv5ur7211s7fr1xPXv+bl3L1/PMnWH/vT7xw/x2z9wbjsdw+f++VNxe+3uZPn9n6+tN3P7r64rnbby9ibb1P9O2/tnr8n3Xe/13vV6s//nbV7esf8/HwvF0VzF7rf/QX13Rcv1vfLt4PE5+efzY8ZnThw807dXm5/Hq0TVrL7v8LW+9IryWtn+89/ipB6dPjk2OTWbZWB++ZeBKr/+bYf5XMWaX/x4KP/5Zcdw9/fHi+9Z7f158/Ez4/APh8YzfH7/2FyMtx2v74z57ezEvdP3vD+tYqnd89T+uW9KGZz73wum//8NX238uiF/PibePNr6+Zzdc3bhs4MXi8vbXq17+/e2tz+ufDE825vfDfp0L78y88eri/tpvP743ydOfLJ6/8Se5eP2s7f1E1g21fh0Xuv6fhJ9jfnBN6+tfPD6+/1jbuzmvywbyJcyG14dstrg8bhX399Nnr+54f/F9eLLZd57LMhc18/DMxJHDx04/NHFqeubUxMzDj+w9evz0sVN7G+9duvcLva4///xe23h+H5jeuT1rPNuPF2OFXer1n7hv/4FbJm88MH1w3+mDp+47MX3y0P6Zmf3TB2Zu3Hfw4PSXe13/8IHdU1t3bbtl6/ihwwd237pr17Zd44ePHc+XUSyqh52TXxw/dnJv4yozu7fvmtqxY/vk+NHjB6Z33zI5OX661/Ub35vG82t/afzk9JF9pw4fnR6fOfzI9O6pXTt3bu357o9HTxycGZs4efrYxOmZ6ZMTxdcydqrx6fx7X6/rUw8zx8PrXZuB8NP5Z2/amd4fN/etxxe9qWKT1h9Ps9fCe0HF72+9Po65fyTMpCb5HwAAAOog5v7wxv/zF8j/AAAAUBkx968OM5H/AQAAoDJi7i+S/2g6/Xtd8v9y9f8f1/9v0P/X/8/0/xP9f/3/TP9f/78H/X/9/35ev/6//j+9la3/H3J/tibL/Ps/AAAAVFTM/WvDTOR/AAAAqIyY+y8LM5H/AQAAoDJi7r88zKQm+d/5//X/9f+79f/jtvr/mf5/Gfr/m/5T/38B/X/9/0z//7xd6v58v6+/hP3/Nfr/lE3Z+v8x978lzKQm+R8AAADqIOb+t4aZyP8AAABQGTH3XxFmIv8DAABAZcTcvy7MpCb5X/9f/1//3/n/9f/7pv/v/P8d6P/r/2f6/+dtkf58/kOh/n9/9v+d/5/SKVv/P+b+XwkzqUn+BwAAgDqIuf9tYSbyPwAAAFRGzP1XhpnI/wAAAFAZMfdfFWZSk/xfz/7/K1mW6f9n+v/6/23r1P/X/18J+v/6/93o/5ey/+/8//r/+v8sm7L1/2Puf3uYSU3yPwAAANRBzP1Xh5nI/wAAAFAZMfe/I8xE/gcAAIDKiLn/mjCTmuT/evb/nf9f/7+g/9+6Tv1//f+VoP+v/9+N/r/+fz+vX/9f/5/eytb/j7n/nWEmNcn/AAAAUAcx918bZiL/AwAAQGXE3P+uMBP5HwAAACoj5v71YSY1yf/6//r/+v/6//r/+v8rqb/6/4OLXqL/X9D/b7V8/f/Z+QXo//fN+vX/9f/prWz9/5j73x1mUpP8DwAAAHUQc/97wkzkfwAAAKiMmPuvCzOR/wEAAKAyYu4fCzOpSf7X/9f/1//X/9f/1/9fSf3V/1+c/n9B/7/V0vr/A8PzC3D+/+V0qdev/6//T29l6//H3L8hzKQm+R8AAADqIOb+jWEm8j8AAABURsz914eZyP8AAABQGTH3bwozqUn+1//X/9f/1//X/9f/X0n6//r/3dSj/9+8AP3/5XSp16//r/9Pb2Xr/8fcf0OYSU3yPwAAANRBzP03hpnI/wAAAFAZMfe/N8xE/gcAAIDKiLl/c5hJTfK//r/+v/5/H/f/h/T/M/3/0tP/1//vRv+/XP3/Yf1//X/9f5ZZ2fr/Mfe/L8ykJvkfAAAA6iDm/veHmcj/AAAAUBkx998UZiL/AwAAQGXE3D8eZlKT/K//r/+v/9/H/X/n/29Z/zL0/0eaP6//vzz0//X/u9H/L1f/3/n/9f/1/1luZev/x9x/c5hJTfI/AAAA1EHM/VvCTOR/AAAAqIyY+yfCTOR/AAAAqIyY+yfDTKqQ///tbM9N9P8vZv+/sY/1//X/9f/D5SXs/zv//wrQ/9f/70b/X/+/n9ev/6//T29l6//H3D8VZlKF/A8AAAA0xNy/NcxE/gcAAIDKiLl/W5iJ/A8AAACVEXP/9jCTmuT/Pun/b0kFqL7u/zv/v/6//n8t+v//E14U9f8b9P/1/7vR/9f/7+f1X4L+/3DzB/r/lM1gh8+Vrf8fc/+OMJOa5H8AAACog5j7d4aZyP8AAABQGTH33xJmIv8DAABAZcTcf2uYSU3yf5/0/yty/n/9f/1//f9a9P8D5/8v6P/r/3ej/6//38/rP7f+/2fav905/z+1ULb+f8z9u8JMapL/AQAAoA5i7v9AmIn8DwAAAJURc/9tYSbyPwAAAPSVTuchjGLu/2CYSU3yv/5/1fv/c6v1//X/9f+7r1//f2Xp/+v/d6P/r//fz+u/BOf/b6H/Tz8oW/8/5v7dYSY1yf8AAABQBzH3fyjMRP4HAACAyoi5//YwE/kfAAAAKiPm/j1hJjXJ//r/Ve//1+b8/43L9f/1//X/y0f/X/+/G/3//uz/hx9b9P9L1P/PjyH9f8qobP3/mPvvCDOpSf4HAACAOoi5/8NhJvI/AAAAVEbM/R8JM5H/AQAAoDJi7v9omElN8r/+v/5/Rfr/zv+v/6//X1L6/yvW/2+8FOr/Fxbt/6/R/+9mvj9/hfP/93n/3/n/Kauy9f9j7r8zzKQm+R8AAADqIOb+j4WZyP8AAABQGTH3/2qYifwPAAAAlRFz/11hJjXJ//r/+v/6//r/+v/6/ytJ/9/5/7tx/v+y9P8vTX++39ev/6//T29l6//H3P9rYSY1yf8AAABQBzH33x1mIv8DAABAZcTc//EwE/kfAAAA+syqRS+Juf/Xw0xqkv/7r/8/1pf9/8F0+/r/+v/6//r/+v/LSf9f/z/T/z9vl7o/3+/r1//X/6e3svX/Y+7/jTCTmuR/AAAAqIOY+z8RZiL/AwAAQGXE3P+bYSbyPwAAAFRGzP33hJnUJP8vd/+//frdOP+//n+m/6//r/+v/3+B+qn/P6L/v4D+v/5/P69f/1//n97K1v+Puf+3wkxqkv8BAACgDmLuvzfMRP4HAACAknrwnK8Rc/8nw0zkfwAAAKiMmPs/FWZSk/zff+f/77/+f377+v/6/5n+v/5/017V/18+/dT/d/7/hfT/9f/7ef36//r/9Fa2/n/M/feFmdQk/wMAAEAdxNz/6TAT+R8AAAAqI+b+3w4zkf8BAACgMmLu/0yYSU3yv/6/8//r/+v/6//r/68k/f+F/f/8NUz/v6D/r//fz+vX/9f/p7ey9f9j7v9smElN8j8AAADUQcz9vxNmIv8DAABAZcTc/7thJvI/AAAAVEbM/feHmdQk/+v/6//r/+v/6//r/68k/X/n/+9G/1//v5/Xr/+v/09vZev/x9z/uTCTmuR/AAAAqIOY+38vzET+BwAAgMqIuX9vmIn8DwAAAJURc/8DYSY1yf/6//r/+v/17f+vblun/r/+/0rQ/9f/70b/X/+/n9ev/6//T29l6//H3L8vzGRP690AAAAA/Svm/s+HmdTk3/8BAACgDmLu3x9mIv8DAABAZcTcfyDMpCb5X/9f/1//v779f+f/L+j/ryz9f/3/bvT/9f/7ef36//r/9Hax+//x+8Bi/f+Y+6ezrJb5HwAAAOog5v6DYSbyPwAAAFRGzP2HwkzkfwAAAKiMmPsfDDOpSf7X/9f/1/+vbf//pe+2rVP/X/9/Jej/6/93o/+v/9/P69f/1/+nt7Kd/z/m/sNhJjXJ/wAAAFAHMfd/IcxE/gcAAIDKiLn/i2Em8j8AAABURsz9R8JMapL/9f/1//X/z6v//39z/d//X9r5/9fM36/+v/7/+dD/1//vRv9f/7+f16//r/9Pb2Xr/8fcfzTMpCb5HwAAAOog5v5jYSbyPwAAAFRGzP3Hw0zkfwAAAKiMmPtPhJnUJP/r/59b/39gkW6g/n/n9Ve4/99Qi/5/E/1//f/zof+v/9/NRej/v9l8Ff3/Vpe6P9/v69f/1/+nt1L0/0fmP465//fDTGqS/wEAAKAOYu4/GWYi/wMAAPD/7N1Xs6V1lcfxPYduGmqKmrfA1VzPXHnpS/A1WMU7MGcwY1bMWRFzQswYMOecE+aIKCoG1Cqs7rPWavp0n2fv7t67z/P81+dz4Rqa9DDTTM2v4Dt/hpG7/0Fxi/0PAAAAw8jd/+C4pcn+P7P/P6b/9/6//l//r/8P+v/t0P/r/6d4/1//v+Tv1//r/1lvFv3/fX45d/9D4pYm+x8AAAA6yN3/0LjF/gcAAIBh5O5/WNxi/wMAAMAwcvc/PG5psv+9/6//1//r//X/+v9d0v/r/w+T/7tI/6//X+r36//1/6w3t/4/d/8j4pYm+x8AAAA6yN3/yLjF/gcAAIBh5O5/VNxi/wMAAMAwcvc/Om5psv/1//p//b/+X/9/zv7/bv3/duj/9f9TvP+v/1/y9+v/z7//P7buD8pw5tb/5+5/TNzSZP8DAABAB7n7Hxu32P8AAAAwjNz9j4tb7H8AAAAYRu7+a+OWFvv/mP5f/6//X2L/f0z/7/3/5dD/6/+n6P/1/0f3/VetViv9v/f/2bW59f+5+6+LW1rsfwAAAOghd//j4xb7HwAAABZgb6PfKnf/E+IW+x8AAACGkbv/iXFLk/2v/9f/6/8X2P97/1//vyD6//H7///R/+v/F9n/e/9f/8+lMLf+P3f/k+KWJvsfAAAAOsjd/+S4xf4HAACAYeTuf0rcYv8DAADAMHL3PzVuabL/9f/6f/2//l//r//fJf3/+P3/6lz9/InNvkf/r/9f8vfr//X/rLfz/v8B15+6m/b/ufuvj1ua7H8AAADoIHf/0+IW+x8AAACGkbv/6XGL/Q8AAADDyN3/jLilyf7X/+v/T/f/9/6X/l//r/8//eP6/+3Q/zft/zek/9f/L/n79f/6f9bbef+/pvc/+Mu5+58ZtzTZ/wAAANBB7v5nxS32PwAAAAwjd/+z4xb7HwAAAIaRu/85cUuT/a//1/97/1//r//X/++S/n+2/f/Bv/XOpP/fiP5f/39Y/3//Db5f/08Hc+v/c/c/N25psv8BAACgg9z9z4tb7H8AAAAYRu7+G+IW+x8AAACGkbv/+XFLk/3fpv8/kPPp//fp//X/q7P6/72W/f/JH9P/74b+f7b9/zT9/0b0//p/7//r/5k2t/4/d/8L4pYm+x8AAAA6yN3/wrjF/gcAAIBh5O5/Udxi/wMAAMAwcve/OG5psv/b9P8H6P/3XXT/f0L/P17/f57v/182Rv/v/f/d0f/r/6fo//X/S/5+/b/+n/Xm1v/n7n9J3NJk/wMAAMDw9la1+18at9j/AAAAMIzc/S+LW+x/AAAAGEbu/pfHLU32v/5f/+/9f/3/RfX/g7z/r//fHf2//n/Kpv3/Sv9ffy36//l8v/5f/896c+v/c/e/Im5psv8BAACgg9z9r4xb7H8AAAAYRu7+V8Ut9j8AAAAMI3f/q+OWJvtf/6//1//r//X/+v9d0v/r/6d4/1//v+Tv1//r/1lvbv1/7v7XxC1N9j8AAAB0kLv/tXGL/Q8AAADDyN1/Y9xi/wMAAMAwcve/Lm45uP/3LuVXXTr6f/2//l//r//X/++S/l//P2Xk/v/eExfe/19xyJ9P/7/h999yXP+/w/4//57S/7OJufX/uftvilv8838AAAAYRu7+18ct9j8AAAAMI3f/G+IW+x8AAACGkbv/jXFLk/1/WP9/13/v/3r9/2b0/+f+fv2//n/T/v+e20//fvp//f/50P/r/1cz7f+9/+/9/3W//1L7/6T/ZxNz6/9z978pbmmy/wEAAKCD3P1vjlvsfwAAABhG7v63xC32PwAAAAwjd/9b45Ym+3/77/9frf/X/+v/4+r/vf+v/9f/6/+n6f/1/0v+fv2//p/1ttP/X7baVv+fu/9tcUuT/Q8AAAAd5O5/e9xi/wMAAMAwcve/I26x/wEAAGAYufvfGbc02f/b7/+9/6//P8/+f69Z/3/jbfr/+PX6f/3/Nuj/9f8r/f8FO+p+funfr//X/7Pe3N7/z91/86mp12//AwAAQAc3n/rPK1bvilvsfwAAABhG7v5b4hb7HwAAAIaRu//dcUuT/a//1/8fef/v/f+i/4//uer/9f/nQf+v/1/p/y/YUffzS/9+/b/+n/Xm1v/n7n9P3NJk/wMAAEAHufvfG7fY/wAAADCM2P37//K7/Q8AAABDet+p/7xi9f64pcn+b9z/X32x/f+V9/mv9f/n/n79/1b6/5sP/tzT/+v/l0T/r/+fov/X/y/5++fT/8cPXKv/Z37m1v/n7v9A3NJk/wMAAEAHufs/GLfY/wAAADCM3P23xi32PwAAAAwjd/+H4pYm+79x/z/I+/8PvDO+QP8/bv/v/f+4i+r/79L/J/2//n+K/l//v+Tvn0//7/1/5mtu/X/u/g/HLU32PwAAAHSQu/8jcYv9DwAAAMPI3f/RuMX+BwAAgGHk7r8tbmmy//X/S+//vf+v/9f/z7L/9/5/0f/r/6fo//dO/V8i+v9lfr/+X//PenPr/3P3fyxuabL/AQAAoIPc/R+PW+x/AAAAGEbu/k/ELfY/AAAADCN3/yfjlib7X/+v/99V/3/yT6L/b9L/X6f/X+n/D6X/1/9P0f97/3/J36//1/+z3tz6/9z9n4pbmux/AAAA6CB3/6fjFvsfAAAAhpG7/zNxi/0PAAAAw8jd/9m44f+vOrpP2q7jh/x49Ob6/9Vq7z7xsf7f+//6f+//J/3/duj/9f9T9P/6/yV/v/5f/896c+v/c/d/Lm7xz/8BAABgGLn7Px+32P8AAAAwjNz9X4hb7H8AAAAYRu7+L8YtTfa//t/7//r/xfb/V+r/z/x+/f886f/1/1P0//r/JX+//l//z3pz6/9z938pbmmy/wEAAKCD3P1fjlvsfwAAABhG7v6vxC32PwAAAAwjd/9X45Ym+1//r//X/y+2//f+/4Hv1//Pk/5f/z9F/6//X/L36//1/6w3t/4/d//X4pYm+x8AAAA6yN3/9bjF/gcAAIBh5O7/Rtxi/wMAAMAwcvd/M25psv/1//p//b/+X/+v/98l/f94/f/Jvwf0//v0/7Po//Onif5f/88Mza3/z93/rbilyf4HAACADnL3fztusf8BAABg7g7+652Hyt3/nbjF/gcAAIBh5O7/btzSZP+P3P9P/Wb6/336f/3/Sv+v/98x/f94/b/3/0/bpP8/4/8DgP5/q476+/X/+n/Wm1v/n7v/e3FLk/0PAAAAHeTu/37cYv8DAADAMHL3/yBusf8BAABgGLn7fxi3NNn/I/f/U/T/+/T/+v+V/l//v2P6f/3/lA79/xn0/1t11N+v/9f/s94R9f/HV4f0/7n7fxS3NNn/AAAA0EHu/tvjFvsfAAAAhpG7/8dxi/0PAAAAw8jd/5O4ZZz9f82tE79S/7/1/v/UTyL9v/5/pf/X/+v/T9H/6/+n6P/1/0v+fv2//p/15vb+f+7+n8Yt4+x/AAAAaC93/8/iFvsfAAAAhpG7/+dxi/0PAAAAw8jd/4u4pcn+n2v/f/C//Qvq/y/o/f/8Bv2//n/H/f9lK/2//v8S0//r/6csp/8/ds4f1f/r//X/+n+mza3/z93/y7ilyf4HAACADnL3/ypusf8BAABgGLn7fx232P8AAAAwjNz9v4lbmuz/ufb/C37//4L6/4t7//90Pa3/P8r+f++sP/4M+3/v/+v/Lzn9v/5/ynL6/3PT/+v/7/d//3tN/rzT/+v/Odvc+v/c/b+NW5rsfwAAAOggd//v4hb7HwAAAIaRu/+OuMX+BwAAgGHk7v993NJk/+v/R+j/vf8/j/7/7D++/n93/f/JH9P/L4P+X/8/Rf+v/1/y93v/X//PenPr/3P33xm3NNn/AAAA0EHu/j/ELfY/AAAADCN3/x/jltj/lx/JVwEAAADblLv/rrilyT//1//r/4fs/0/07f/vaNL/e/9/OfT/+v8p+n/9/5K/X/+v/2e9ufX/ufv/FLc02f8AAADQQe7+P8ct9j8AAAAMI3f/X+IW+x8AAACGkbv/7rilyf7X/+v/z7//P15/3bPt/73/r//X/8/GuP3/5fp//f9F9/833LT/w/r/ZX6//l//z3pz6/9z9/81bmmy/wEAAKCD3P1/i1vsfwAAABhG7v6/xy32PwAAAAwjd/8/4pYm+1//r/8f8v1//b/+X/8/G+P2/97/1/97///i+vm9hX+//l//zybm1v/n7r8nbmmy/wEAAKCD3P3/jFvsfwAAABhG7v5/xS32PwAAAAwjd/+/45Ym+1//r//X/+v/9f/6/13S/+v/p+j/O/f/y/9+/b/+n/Xm1v/n7v9PAAAA//9AODfC")
truncate(&(0x7f0000000040)='./file1\x00', 0x7fff)
r0 = open(&(0x7f0000000000)='./file1\x00', 0x143142, 0x80)
sendfile(r0, r0, 0x0, 0x1000000201005)

848.958509ms ago: executing program 4 (id=758):
syz_mount_image$romfs(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="00d0867e65d443152ee691a70d225b73c01164645c70ff689f607da7a169dbbfebbeb349b043f54d088bcd11a44f2074aa41532279b5718bc4d89fe5010d6bf465008743337cddaefbc0f0293d06483bec82e15366358709c5d5c0049ff9dcb7ea7e855e3c24bc3b4173720476fb379ce25c0ea42027ba6a7d"], 0x1, 0x13a, &(0x7f0000000280)="$eJzs2r9Kw1AUBvCjFoQ+glOhAauQ/1oHd0Fw8gkMbZIGb7wlEaSdiquD4nAdHV3dRDcfIbNPoC9xJW1q7b2zGvD7Lfej53J6s5zpmBlP3Sg3ibYmt8fvqxlPW11/rxe5UUAzh0TUKkMh5Z1FmpOveiEnlnah/VKdnVgcPUcJCz29BwAAAAAAAAAAAAAAAAAAAADAP9H+qEJzIPhDlLDQ/VbNR+PTgLEwy+e/GFTt6ND2Pd8v7/tL/ToNImO6v5OIg8uy7izVjXmnzYHgK+r/2efp0M5HYzNJgziMwzPP87vOjuPseva0l612NG6qN1Ehn4b6PpHxuNgnenP0fSJqzo7GRiKuL9Tui+9H+KlwRbV4hhrkWi2egVDPoM4P6q/77ddyflg9zvq/OD+0iQbwRz4DAAD//05cOC0=")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x60000, 0x3)
getdents(r0, &(0x7f0000000380)=""/4085, 0xff5)
getdents64(r0, 0x0, 0x0)

521.062671ms ago: executing program 6 (id=686):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000403810101400000000000109022400010000000009040000030300000009210000000122070009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000140)={0x20, 0x16, 0x2, "e7a1"}, 0x0, 0x0})
syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB='@!\b'], 0x0, 0x0, 0x0, 0x0}, 0x0)

397.535756ms ago: executing program 4 (id=759):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20)
prlimit64(0x0, 0x7, &(0x7f00000000c0), 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r0, 0x20, &(0x7f0000000100)={0x0, 0x0, <r1=>0x0, 0x0}}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r1, 0x4)

303.62µs ago: executing program 5 (id=760):
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x3200c00, &(0x7f00000000c0)=ANY=[@ANYRES64=0x0], 0xa, 0xac7, &(0x7f0000000400)="$eJzs3U2MG1cBAOBn73qTzQ9xSkKXJDQJP2356W6zWcJPBE3VXIiailulikuUpiUiDYhUglaVmuTUG61KkDhBEaciUQFCai8o6olLJRqJS0+FA0JEQYrEAUoTV9l9zzt+sTNex1nb6++T3j6/eTN+b2bH4/HMvPcCMLaqi38XFmYqIVx469XD/7r3H9M3pjzUnKO++HeykKqFECoxPZm93/sTS/G1qy8cbxdXwvzi35QOj11pLrsxhHA27AkXQz3suHDplXfmHz167sj5ve++fvDynVl7AAAYL9++eHBh+9/+snPrB2/ccyisa05P5+f1mN4Uz/sPxRP/dP5fDa3pSiEUTWXzTcZQzeabaDNfsZxaNt9kh/KnsvetNfN3tsy3rqT8icK0dusNoyztx/VQqc62pKvV2dml3+Rh8Xf9VGX29MlTT50ZUEWBvvvP7sJ32R7hFuFsMd1oNF60zYRRD40tvR451vfpCASwJL9feJOz+ZWF29N8t8nuyr/ycLX98tAHq73/K3+0yv/1OUcc+met7k1pvdLnaFNM5/cR8ueXVvr5T++X34+odVnPTvcRRuX+Qqd6TqxyPXrVqf75frFWfSPGaTt8M8svfn7y/+mo/I+B9v67u4frhld7WOa16f5dt/xp78vuGYJrrms61IagDkJrSA/DtMlrDPj4Awyv5efmljSilJ8/15fnryvJX1+SP12Sv6Ekf2NJPoyzPzz7k/ByZfl3fv6bfqXXw9J1ts0x/tgK65Nfj+yq/MIzDPlzvyvVU/kF+fPEMMzePPb4ia8++cSlpef/K839/3rc3/fEdD1+ti7GGdL1wvy6evPZ/3prOdUO892V1WfzTfM3lkrc1jpfZdvy+4TCceamesy0Lrel03y7WuerZ/NNx5A/9ZSfn2zIlkvnH+m4mrbXZLa+tWw9prJ6pOPK1hh7+op+SPtjp+f/0/45E2qVp06eOvFgTKf99M8TtXU3pu8rvulvVqfuwO3ptv3PTGht/7OpOb1WLR4XtixPrxSPC/Vs+vxSsnmbPE3fH9Ppe+67E9OL02ePf//Uk/1eeRhzZ557/nvHTp068UMv0ovpkdgs6cg5LPXp5sWHjaGohhfdvCg7cqzVJwdhfMw9+8wP5s489/wDJ5859vSJp0+c3n/gwP75+QNf278wt3heP1c8uwfWkuUv/UHXBAAAAAAAAAAAAOjWj44cvvTXt7/y3lL7/+X2f6n9f3ryN7X/fylr/5+3k0+tAlI7wK1t8hfH3XuztR5T2Xy1GD6e1XdbVs72bLlPxLg5jl9s/5/a2+f9uqb63J1Nz/vvTfNl3Qnc1F/KVNYHSXO8wNhg/9MxfT7GvwowQJXp9pNjfMv+rX/7UnP+1D+FfilGU/q/pb0h9WOS2n936tcpHf+3rkId6b/VaE446HUE2vt3L/1/pzCxGv0XF87Eb/u9/rm5P+/TNjQag+7nuTVM9rTcnds+whCGRsMoHsBwGPT4n+m6Z4pP/+lb62+ENNuVh1uPl3n/pXA7hn38SeWvrfE/m+PfdXX8a9O7eks/z92PrvC/X1x+r1Bs2NHt8Tdf/9QP9LbyMos+iOWn9b8vdFd+47Ws/PyGUJf+n5W/ocvyb1r/Xb2V/2EsP222+z/TbflLNa5UW+uRXzdO9//y68bJtWz9U9+eK17/HgdqvB7Lh3HWeZzZbkewHU7txv+dHMLxfzvJn8P4ckynA2F6ziH/Rl5p/dPzFel7YHv2/pWS77dRGae4k3Ef//frMS77PKTxf9P+WG+TrhbStTbbdtT3FVhr3k/3/6q930P4+brB38cYmnB2COogDGno4xjYfQqNRmOgHXnrRXywBr39b333uc1oio0XV7H8O2/Q279MPv5vfg6fj/9bzX5A5OP/5svn4//m+fn4etVswXz833x75uP/5vl3Z++bX8GeKcn/ZEn+jpL8ncv50+3yd5Us/6mS/L0l+feU5O8uyb+rJH+iJP+zJfmfK8m/tyT//pL8z5fkr3WL7VEKH7pxW38YZ3n7PJ9/GB+L938KN5Hyz3+6L+T4AGvPz97Y98gTv/9Ofan9/1Tz91q6j3copmvxt/OPYzq/7x0K6Rt5b8f037P8Yb/eAeMk7z8j/36/ryQfGF3pOS+fbxhDlfY99uT32zr1W9XpPJ/R8oUYfzHGX4rxAzGejfFcjPfFeH6V6sed8cjv/njw5cry7/0tWX63z5Pn7YHyfqL2d1mf/PrASp9nz/vxW6nbLb/H5mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADU138u7AwUwnhwluvHn786Mm5G1Meas5RX/w7WUjVmsuF8GCMJ2L8y/ji2tUXjhfj6zGuhPlQCZXm9PDYlWZJG0MIZ8OecDHUw44Ll155Z/7Ro+eOnN/77usHL9+5LQAAAABr30cBAAD//0p1HfQ=")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105142, 0x2c)
renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000001240)='./file0/file0\x00', 0x2)
write$cgroup_subtree(r0, &(0x7f0000000200)=ANY=[], 0x32600)

0s ago: executing program 4 (id=761):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000})
mkdir(&(0x7f0000000100)='./bus\x00', 0xe8)
mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

kernel console output (not intermixed with test programs):

s (loop1): Mounted with checkpoint version = 48b305e5
[   66.171372][ T4231] gspca_main: sonixj-2.14.0 probing 0471:0327
[   66.213502][ T4344] loop0: detected capacity change from 0 to 32768
[   66.270128][ T4362] loop2: detected capacity change from 0 to 1024
[   66.306237][ T4344] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz.0.31 (4344)
[   66.361074][ T4362] EXT4-fs (loop2): Ignoring removed bh option
[   66.413494][ T4344] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm
[   66.450237][ T4344] BTRFS info (device loop0): force zlib compression, level 3
[   66.461613][ T4344] BTRFS info (device loop0): turning on flush-on-commit
[   66.469670][ T4344] BTRFS info (device loop0): max_inline at 4096
[   66.476584][ T4344] BTRFS info (device loop0): using free space tree
[   66.483256][ T4344] BTRFS info (device loop0): has skinny extents
[   66.491340][ T4362] EXT4-fs (loop2): mounted filesystem without journal. Opts: nojournal_checksum,auto_da_alloc,barrier,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,usrquota,noauto_da_alloc,bh,init_itable,,errors=continue. Quota mode: writeback.
[   66.587805][ T4349] loop4: detected capacity change from 0 to 40427
[   66.620429][ T4349] F2FS-fs (loop4): Small segment_count (9 < 1 * 24)
[   66.627664][ T4349] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[   66.671768][ T4349] F2FS-fs (loop4): Found nat_bits in checkpoint
[   66.864301][ T4344] BTRFS info (device loop0): enabling ssd optimizations
[   66.889549][ T4349] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[   66.899087][ T4349] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   67.074185][ T4231] gspca_sonixj: reg_r err -71
[   67.078972][ T4231] sonixj: probe of 4-1:0.0 failed with error -71
[   67.113034][ T4231] usb 4-1: USB disconnect, device number 2
[   67.228144][ T4374] attempt to access beyond end of device
[   67.228144][ T4374] loop4: rw=2049, want=45104, limit=40427
[   67.552008][ T4410] sctp: [Deprecated]: syz.1.42 (pid 4410) Use of int in max_burst socket option.
[   67.552008][ T4410] Use struct sctp_assoc_value instead
[   68.117333][ T4417] loop2: detected capacity change from 0 to 4096
[   68.166197][ T4417] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512)
[   68.298916][ T4233] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   68.485590][ T4412] loop0: detected capacity change from 0 to 131072
[   68.550116][ T4420] loop1: detected capacity change from 0 to 2048
[   68.557240][ T4412] F2FS-fs (loop0): invalid crc value
[   68.574163][ T4233] usb 5-1: Using ep0 maxpacket: 16
[   68.593520][ T4412] F2FS-fs (loop0): Found nat_bits in checkpoint
[   68.663813][ T4412] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   68.709500][ T4425] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   68.774663][ T4233] usb 5-1: unable to get BOS descriptor or descriptor too short
[   68.830366][ T4420] NILFS (loop1): failed to count free inodes: err=-34
[   68.856352][ T4412] F2FS-fs (loop0): inode (7) has corrupted xattr
[   68.874570][ T4233] usb 5-1: config 9 has an invalid interface number: 57 but max is 0
[   68.896091][ T4233] usb 5-1: config 9 has no interface number 0
[   68.933031][ T4233] usb 5-1: config 9 interface 57 has no altsetting 0
[   69.073317][ T4185] NILFS (loop1): DAT doesn't have a block to manage vblocknr = 8796093022222
[   69.113034][ T4185] NILFS error (device loop1): nilfs_bmap_truncate: broken bmap (inode number=16)
[   69.153172][ T4185] Remounting filesystem read-only
[   69.166862][ T4185] NILFS (loop1): error -5 truncating bmap (ino=16)
[   69.189973][ T4185] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer
[   69.224287][ T4233] usb 5-1: string descriptor 0 read error: -22
[   69.230791][ T4233] usb 5-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=61.f7
[   69.271162][ T4233] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   69.461165][ T4444] set_capacity_and_notify: 1 callbacks suppressed
[   69.461182][ T4444] loop3: detected capacity change from 0 to 256
[   69.469316][ T4445] loop1: detected capacity change from 0 to 128
[   69.479609][ T4444] exfat: Deprecated parameter 'utf8'
[   69.522035][ T4444] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d)
[   69.562339][ T4445] VFS: Found a Xenix FS (block size = 512) on device loop1
[   69.603029][ T4445] sysv_count_free_blocks: free block count was -2041545935, correcting to 3
[   69.663494][ T4444] process 'syz.3.56' launched '*' with NULL argv: empty string added
[   69.677854][ T4445] sysv_count_free_inodes: unable to read inode table
[   69.743007][ T4185] sysv_free_block: trying to free block not in datazone
[   69.753499][ T4185] sysv_free_inode: inode 0,1,2 or nonexistent inode
[   69.897620][ T4450] sctp: [Deprecated]: syz.3.58 (pid 4450) Use of int in max_burst socket option.
[   69.897620][ T4450] Use struct sctp_assoc_value instead
[   70.028612][ T4454] loop1: detected capacity change from 0 to 128
[   70.071908][ T4454] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[   70.103277][ T4454] hpfs: filesystem error: improperly stopped
[   70.112974][ T4454] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[   70.127368][ T4454] hpfs: You really don't want any checks? You are crazy...
[   70.138036][ T4454] hpfs: hpfs_map_sector(): read error
[   70.148472][ T4454] hpfs: code page support is disabled
[   70.163018][ T4454] hpfs: hpfs_map_4sectors(): unaligned read
[   70.169277][ T4454] hpfs: hpfs_map_4sectors(): unaligned read
[   70.194805][ T4454] hpfs: filesystem error: unable to find root dir
[   70.264351][ T4233] video4linux radio48: keene_cmd_main failed (-71)
[   70.271237][ T4233] radio-keene 5-1:9.57: V4L2 device registered as radio48
[   70.289639][ T4454] hpfs: hpfs_map_4sectors(): unaligned read
[   70.305295][ T4454] hpfs: filesystem error: invalid bitmap block pointer 00000000 -> 7b3184b5 at aib
[   70.315245][ T4233] usb 5-1: USB disconnect, device number 2
[   70.360889][ T4467] loop3: detected capacity change from 0 to 16
[   70.507213][ T4467] erofs: (device loop3): mounted with root inode @ nid 36.
[   70.574287][ T1111] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   70.589043][ T4397] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   70.671546][ T4471] loop1: detected capacity change from 0 to 2048
[   70.689938][ T4184] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 46
[   70.707503][ T4184] erofs: (device loop3): erofs_readdir: invalid de[0].nameoff 0 @ nid 89
[   70.718036][ T4184] erofs: (device loop3): erofs_readdir: invalid de[0].nameoff 0 @ nid 89
[   70.733191][ T4471] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[   70.740321][ T4261] udevd[4261]: incorrect nilfs2 checksum on /dev/loop1
[   70.766531][ T4472] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   70.842227][ T4474] loop3: detected capacity change from 0 to 1024
[   70.944289][ T1111] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   70.966968][ T1111] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[   70.994521][ T4397] usb 3-1: config 220 has an invalid interface number: 76 but max is 2
[   71.008178][ T4397] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[   71.030348][ T4397] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[   71.045881][ T4397] usb 3-1: config 220 has no interface number 2
[   71.052296][ T4397] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[   71.054446][ T1111] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[   71.066470][ T4397] usb 3-1: config 220 interface 0 has no altsetting 0
[   71.081714][ T4397] usb 3-1: config 220 interface 76 has no altsetting 0
[   71.088992][ T4397] usb 3-1: config 220 interface 1 has no altsetting 0
[   71.131147][ T1111] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   71.155342][ T1111] usb 1-1: SerialNumber: syz
[   71.297014][ T4397] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[   71.318867][ T4397] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   71.333092][ T1416] ieee802154 phy0 wpan0: encryption failed: -22
[   71.339986][ T1416] ieee802154 phy1 wpan1: encryption failed: -22
[   71.357764][ T4397] usb 3-1: Product: syz
[   71.362202][ T4397] usb 3-1: Manufacturer: syz
[   71.370073][ T4397] usb 3-1: SerialNumber: syz
[   71.458595][ T1111] usb 1-1: 0:2 : does not exist
[   71.515192][ T1111] usb 1-1: USB disconnect, device number 2
[   71.515739][ T4492] netlink: 8 bytes leftover after parsing attributes in process `syz.1.76'.
[   71.701862][ T4500] netlink: 60 bytes leftover after parsing attributes in process `syz.4.80'.
[   71.721313][ T4500] netlink: 60 bytes leftover after parsing attributes in process `syz.4.80'.
[   71.736797][ T4500] netlink: 60 bytes leftover after parsing attributes in process `syz.4.80'.
[   71.753266][ T4500] netlink: 60 bytes leftover after parsing attributes in process `syz.4.80'.
[   71.765377][ T4397] usb 3-1: selecting invalid altsetting 0
[   71.783123][ T4397] usb 3-1: Found UVC 7.01 device syz (8086:0b07)
[   71.791598][ T4261] udevd[4261]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   71.818350][ T4397] usb 3-1: No valid video chain found.
[   71.837948][ T4504] Zero length message leads to an empty skb
[   71.929801][ T4397] usb 3-1: selecting invalid altsetting 0
[   71.943735][ T4397] usbtest: probe of 3-1:220.1 failed with error -22
[   71.975243][ T4397] usb 3-1: USB disconnect, device number 2
[   71.997535][ T4510] loop1: detected capacity change from 0 to 1024
[   71.999502][ T4508] loop4: detected capacity change from 0 to 512
[   72.162124][   T26] audit: type=1800 audit(1774708453.951:7): pid=4508 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.84" name="bus" dev="loop4" ino=1048591 res=0 errno=0
[   72.338762][ T4517] openvswitch: netlink: Actions may not be safe on all matching packets
[   72.762065][ T4539] loop2: detected capacity change from 0 to 1024
[   72.774254][ T4534] loop3: detected capacity change from 0 to 2048
[   72.866408][ T4534] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[   72.971707][ T4534] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[   72.992823][ T4534] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found
[   73.013060][ T4534] UDF-fs: Scanning with blocksize 512 failed
[   73.075962][ T4534] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   73.107177][ T4548] netlink: 72 bytes leftover after parsing attributes in process `syz.1.104'.
[   73.163103][ T4548] netlink: 12 bytes leftover after parsing attributes in process `syz.1.104'.
[   73.254180][ T4548] netlink: 20 bytes leftover after parsing attributes in process `syz.1.104'.
[   73.263289][ T4548] netlink: 20 bytes leftover after parsing attributes in process `syz.1.104'.
[   73.516782][ T4525] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 scanned by syz.4.92 (4525)
[   73.605178][ T4525] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm
[   73.635905][ T4525] BTRFS info (device loop4): force zlib compression, level 3
[   73.636596][ T4562] syz.0.110 (4562) used greatest stack depth: 19472 bytes left
[   73.646826][ T4525] BTRFS info (device loop4): turning on flush-on-commit
[   73.692936][ T4566] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.111: inode has both inline data and extents flags
[   73.718594][ T4566] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.111: couldn't read orphan inode 15 (err -117)
[   73.764192][ T4525] BTRFS info (device loop4): max_inline at 4096
[   73.770620][ T4525] BTRFS info (device loop4): using free space tree
[   73.893354][ T4525] BTRFS info (device loop4): has skinny extents
[   73.903711][ T4566] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   74.000398][ T4566] EXT4-fs warning (device loop1): ext4_empty_dir:3147: inode #2: comm syz.1.111: directory missing '.'
[   74.147899][ T4590] ax25_connect(): syz.0.117 uses autobind, please contact jreuter@yaina.de
[   74.185230][ T4582] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[   74.239228][ T4582] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002]
[   74.313142][ T4582] EXT4-fs (loop2): orphan cleanup on readonly fs
[   74.337991][ T4582] EXT4-fs error (device loop2): ext4_orphan_get:1426: comm syz.2.116: bad orphan inode 3
[   74.419874][ T4582] EXT4-fs (loop2): Remounting filesystem read-only
[   74.426775][ T4582] EXT4-fs (loop2): mounted filesystem without journal. Opts: nojournal_checksum,noblock_validity,discard,errors=remount-ro,data=writeback. Quota mode: none.
[   74.442913][ T4525] BTRFS info (device loop4): enabling ssd optimizations
[   74.733186][ T4613] set_capacity_and_notify: 3 callbacks suppressed
[   74.733202][ T4613] loop0: detected capacity change from 0 to 2048
[   74.776888][ T4616] netlink: 'syz.1.124': attribute type 3 has an invalid length.
[   74.794996][ T4618] loop3: detected capacity change from 0 to 8
[   74.977376][ T4613] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   75.070170][ T4618] SQUASHFS error: Failed to read block 0x6de: -5
[   75.100482][ T4618] SQUASHFS error: Unable to read metadata cache entry [6dc]
[   75.152809][ T4618] SQUASHFS error: Failed to read block 0x63a: -5
[   75.211351][ T4618] SQUASHFS error: Unable to read metadata cache entry [638]
[   75.213176][ T4186] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1161: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[   75.251589][ T4618] SQUASHFS error: Unable to read directory block [26067d:ffff]
[   75.466846][ T4645] loop0: detected capacity change from 0 to 164
[   75.597100][ T4645] rock: directory entry would overflow storage
[   75.641155][ T4645] rock: sig=0x66, size=4, remaining=3
[   75.735714][ T4645] rock: directory entry would overflow storage
[   75.742227][ T4645] rock: sig=0x66, size=4, remaining=3
[   75.915426][ T4582] EXT4-fs warning (device loop2): dx_probe:893: inode #2: comm syz.2.116: dx entry: limit 0 != root limit 125
[   75.960489][ T4582] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.116: Corrupt directory, running e2fsck is recommended
[   76.425436][ T4653] loop4: detected capacity change from 0 to 40427
[   76.446282][ T4628] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   76.502635][ T4655] loop1: detected capacity change from 0 to 40427
[   76.546018][ T4653] F2FS-fs (loop4): invalid crc value
[   76.562389][ T4655] F2FS-fs (loop1): invalid crc value
[   76.577484][ T4655] F2FS-fs (loop1): Found nat_bits in checkpoint
[   76.597532][ T4653] F2FS-fs (loop4): Found nat_bits in checkpoint
[   76.748067][ T4655] F2FS-fs (loop1): Start checkpoint disabled!
[   76.757263][ T4653] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   76.773146][ T4679] bond0: (slave macvlan2): Error -98 calling set_mac_address
[   76.824188][ T4628] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   76.835036][ T4655] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[   76.876870][ T4628] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   77.089847][ T4197] attempt to access beyond end of device
[   77.089847][ T4197] loop4: rw=2049, want=45104, limit=40427
[   77.104383][ T4628] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   77.153886][ T4628] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   77.178548][ T4628] usb 3-1: Product: syz
[   77.189234][ T4628] usb 3-1: Manufacturer: syz
[   77.193869][ T4628] usb 3-1: SerialNumber: syz
[   77.258345][    T9] attempt to access beyond end of device
[   77.258345][    T9] loop1: rw=2049, want=40976, limit=40427
[   77.286998][ T4628] usb 3-1: selecting invalid altsetting 1
[   77.484280][ T4397] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   77.735381][ T4397] usb 4-1: Using ep0 maxpacket: 16
[   77.874661][ T4397] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   77.895612][ T4397] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   77.955880][ T4628] cdc_ncm 3-1:1.0: SET_CRC_MODE failed
[   77.974132][ T4628] usb 3-1: selecting invalid altsetting 1
[   77.980091][ T4628] cdc_ncm 3-1:1.0: bind() failure
[   78.024243][ T4397] usb 4-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00
[   78.027114][ T4628] usb 3-1: USB disconnect, device number 3
[   78.039888][ T4397] usb 4-1: New USB device strings: Mfr=34, Product=0, SerialNumber=0
[   78.039915][ T4397] usb 4-1: Manufacturer: syz
[   78.058755][ T4397] usb 4-1: config 0 descriptor??
[   78.215515][ T4713] loop4: detected capacity change from 0 to 512
[   78.236482][ T4713] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   78.332541][ T4713] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 548)
[   78.353972][ T4713] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 548)
[   78.418102][ T4713] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF
[   78.464393][ T4721] loop0: detected capacity change from 0 to 512
[   78.497044][ T4721] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[   78.555068][ T4397] hid (null): unknown global tag 0xe
[   78.600736][ T4397] creative-sb0540 0003:041E:3100.0001: unknown global tag 0xe
[   78.623495][ T4397] creative-sb0540 0003:041E:3100.0001: item 0 1 1 14 parsing failed
[   78.639622][ T4397] creative-sb0540 0003:041E:3100.0001: parse failed
[   78.655918][ T4397] creative-sb0540: probe of 0003:041E:3100.0001 failed with error -22
[   78.820999][ T4628] usb 4-1: USB disconnect, device number 3
[   78.838173][ T4736] loop2: detected capacity change from 0 to 64
[   78.942622][ T4742] loop1: detected capacity change from 0 to 512
[   78.974457][ T4397] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   79.017946][ T4742] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   79.029525][ T4227] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   79.034349][ T4742] ext4 filesystem being mounted at /46/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   79.344520][ T4227] usb 1-1: too many configurations: 9, using maximum allowed: 8
[   79.434215][ T4397] usb 5-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 99
[   79.450678][ T4397] usb 5-1: config 0 interface 0 has no altsetting 0
[   79.460545][ T4227] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[   79.474519][ T4227] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   79.486192][ T4227] usb 1-1: config 0 interface 0 has no altsetting 0
[   79.542924][ T4753] loop2: detected capacity change from 0 to 32768
[   79.577477][ T4227] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[   79.600392][ T4227] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   79.627231][ T4763] netlink: 8 bytes leftover after parsing attributes in process `syz.3.183'.
[   79.638010][ T4227] usb 1-1: config 0 interface 0 has no altsetting 0
[   79.653108][ T4763] netlink: 8 bytes leftover after parsing attributes in process `syz.3.183'.
[   79.663630][ T4753] ocfs2: Slot 0 on device (7,2) was already allocated to this node!
[   79.674554][ T4397] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[   79.683648][ T4397] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[   79.722973][ T4397] usb 5-1: Product: syz
[   79.733263][ T4227] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[   79.749110][ T4397] usb 5-1: Manufacturer: syz
[   79.765209][ T4227] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   79.780746][ T4753] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[   79.793599][ T4397] usb 5-1: SerialNumber: syz
[   79.835005][ T4397] usb 5-1: config 0 descriptor??
[   79.854091][ T4227] usb 1-1: config 0 interface 0 has no altsetting 0
[   79.900785][ T4726] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   79.952051][ T4397] usb 5-1: selecting invalid altsetting 0
[   79.975188][ T4227] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[   80.003008][ T4227] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   80.046092][ T4227] usb 1-1: config 0 interface 0 has no altsetting 0
[   80.067269][ T4191] ocfs2: Unmounting device (7,2) on (node local)
[   80.155179][ T4227] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[   80.180958][ T4227] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   80.184998][ T4774] capability: warning: `syz.1.188' uses 32-bit capabilities (legacy support in use)
[   80.223956][ T4726] usb 5-1: selecting invalid altsetting 0
[   80.230505][ T4726] usb 5-1: 0:0: usb_set_interface failed (-22)
[   80.251760][ T4227] usb 1-1: config 0 interface 0 has no altsetting 0
[   80.256330][ T4725] usb 5-1: selecting invalid altsetting 0
[   80.290533][ T4725] usb 5-1: 0:0: usb_set_interface failed (-22)
[   80.329864][ T4725] usb 5-1: selecting invalid altsetting 0
[   80.337636][ T4725] usb 5-1: 0:0: usb_set_interface failed (-22)
[   80.346645][ T4725] usb 5-1: selecting invalid altsetting 0
[   80.352830][ T4725] usb 5-1: 0:0: usb_set_interface failed (-22)
[   80.360590][ T4628] usb 5-1: USB disconnect, device number 3
[   80.374343][ T4227] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[   80.383940][ T4227] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   80.405371][ T4227] usb 1-1: config 0 interface 0 has no altsetting 0
[   80.489676][ T4770] loop3: detected capacity change from 0 to 32768
[   80.514700][ T4227] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[   80.534147][ T4227] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   80.548667][ T4783] netlink: 1 bytes leftover after parsing attributes in process `syz.1.190'.
[   80.549061][ T4227] usb 1-1: config 0 interface 0 has no altsetting 0
[   80.671923][ T4789] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check.
[   80.696570][ T4227] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[   80.712091][ T4227] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   80.733511][ T4227] usb 1-1: config 0 interface 0 has no altsetting 0
[   80.888027][ T4797] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   80.964393][ T4227] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[   81.004229][ T4227] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[   81.012738][ T4227] usb 1-1: Product: syz
[   81.026421][ T4227] usb 1-1: Manufacturer: syz
[   81.031159][ T4227] usb 1-1: SerialNumber: syz
[   81.057949][ T4803] loop2: detected capacity change from 0 to 8
[   81.081586][ T4227] usb 1-1: config 0 descriptor??
[   81.155011][ T4803] squashfs image failed sanity check
[   81.191824][ T4227] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0
[   81.295065][ T4803] loop2: detected capacity change from 0 to 1024
[   81.302225][ T4813] loop4: detected capacity change from 0 to 256
[   81.352347][ T4803] EXT4-fs (loop2): Ignoring removed bh option
[   81.408079][ T4803] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodelalloc,stripe=0x000000000000000c,barrier=0x0000000000000004,nolazytime,grpjquota=,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none.
[   81.442361][ T4813] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   81.544108][ T4813] exFAT-fs (loop4): Medium has reported failures. Some data may be lost.
[   81.567363][   T23] cfg80211: failed to load regulatory.db
[   81.595842][ T4799] loop1: detected capacity change from 0 to 32768
[   81.614938][ T4813] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb94faefa, utbl_chksum : 0xe619d30d)
[   81.733519][ T4819] loop3: detected capacity change from 0 to 128
[   81.771106][ T4397] usb 1-1: USB disconnect, device number 3
[   81.792706][ T4397] yurex 1-1:0.0: USB YUREX #0 now disconnected
[   81.805730][ T4819] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[   81.827029][ T4819] hpfs: filesystem error: improperly stopped
[   81.842845][ T4819] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[   81.851225][ T4819] hpfs: You really don't want any checks? You are crazy...
[   81.859010][ T4819] hpfs: hpfs_map_sector(): read error
[   81.864985][ T4819] hpfs: code page support is disabled
[   81.870651][ T4819] hpfs: hpfs_map_4sectors(): unaligned read
[   81.877234][ T4819] hpfs: hpfs_map_4sectors(): unaligned read
[   81.883263][ T4819] hpfs: filesystem error: unable to find root dir
[   81.924792][ T4799] XFS (loop1): Mounting V5 Filesystem
[   82.043685][ T4799] XFS (loop1): Ending clean mount
[   82.212694][ T4840] loop3: detected capacity change from 0 to 512
[   82.244867][ T4842] loop4: detected capacity change from 0 to 128
[   82.349192][ T4185] XFS (loop1): Unmounting Filesystem
[   82.396152][ T4840] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   82.456206][ T4840] ext4 filesystem being mounted at /41/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   82.476529][ T4850] loop0: detected capacity change from 0 to 4096
[   82.561138][ T4850] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512)
[   82.631690][ T4850] ntfs3: loop0: ntfs_set_state r=3 failed, -22.
[   82.653376][ T4840] EXT4-fs (loop3): re-mounted. Opts: (null). Quota mode: writeback.
[   82.749641][   T26] audit: type=1800 audit(1774708464.541:8): pid=4850 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.218" name="file1" dev="loop0" ino=30 res=0 errno=0
[   82.815451][ T4856] device batadv0 entered promiscuous mode
[   82.824881][ T4339] ntfs3: loop0: ntfs3_write_inode r=3 failed, -22.
[   82.832865][ T4186] ntfs3: loop0: ntfs_set_state r=3 failed, -22.
[   82.842285][ T4856] device macvlan1 entered promiscuous mode
[   82.850588][ T4186] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[   82.871400][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready
[   82.904591][ T4186] ntfs3: loop0: ntfs_set_state r=3 failed, -22.
[   82.936301][  T155] ntfs3: loop0: ntfs3_write_inode r=3 failed, -22.
[   82.951910][ T4186] ntfs3: loop0: ntfs_evict_inode r=3 failed, -22.
[   83.249679][ T4869] loop4: detected capacity change from 0 to 4096
[   83.301005][ T4876] ISOFS: primary root directory is empty. Disabling Rock Ridge and switching to Joliet.
[   83.345713][ T4878] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   83.429584][ T4881] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   83.443509][ T4869] NILFS error (device loop4): nilfs_readdir: zero-length directory entry
[   83.485598][ T4878] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 548)
[   83.508491][ T4869] Remounting filesystem read-only
[   83.564667][ T4878] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548)
[   83.587598][ T4883] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF
[   83.884490][ T4886] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   83.985670][ T4886] EXT4-fs (loop3): shut down requested (2)
[   84.083828][ T4894] netlink: 36 bytes leftover after parsing attributes in process `syz.4.236'.
[   84.083936][ T4892] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   84.298352][ T4898] ialloc: diAlloc returned -5!
[   84.350364][ T4892] overlayfs: upper fs needs to support d_type.
[   84.407751][ T4892] overlayfs: upper fs does not support RENAME_WHITEOUT.
[   84.429188][ T4902] netlink: 4 bytes leftover after parsing attributes in process `syz.4.238'.
[   84.435510][ T4892] overlayfs: failed to set xattr on upper
[   84.450420][ T4892] overlayfs: ...falling back to index=off,metacopy=off.
[   84.739295][ T4907] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[   84.774884][ T4915] netlink: 8 bytes leftover after parsing attributes in process `syz.4.246'.
[   84.806324][ T4914] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   84.811059][ T4191] UDF-fs: error (device loop2): udf_read_inode: (ino 1416) failed !bh
[   84.837278][ T4907] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   84.849100][ T4916] exfat: Deprecated parameter 'utf8'
[   84.855866][ T4191] UDF-fs: error (device loop2): udf_read_inode: (ino 1416) failed !bh
[   84.866355][ T4916] exfat: Deprecated parameter 'namecase'
[   84.872105][ T4916] exfat: Deprecated parameter 'namecase'
[   84.881850][ T4916] exfat: Deprecated parameter 'utf8'
[   84.910105][ T4907] [U] 
[   84.913544][ T4907] [U] 
[   84.932231][ T4916] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[   84.976357][ T4907] [U] \ÀÀ
N¼.ÜZÀ‚9Q¡ÝÌZ׎ۤØ!QÒÝH‰'»ßÝ��™��ÍŽ
[   84.987786][ T4914] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 548)
[   85.058451][ T4907] [U] ÊL
[   85.060353][ T4914] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548)
[   85.062361][ T4907] [U] Û$GETÛPR¯YEÔ§ÔÞJGM×)GWE´÷¥’9Ï÷ÞÕÄU›§_O¿ZŸŽÄC¯¨V¿?´ÒÏ›\9:Ë_Ñ%SAµ3ƒ–ÓKC2:0PÅWÈ—>V´÷Ä©�ÈC×2ÛÑB÷ÛÔJÎɱÈÐÁ¬Ò
[   85.090334][ T4919] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF
[   85.159301][ T4907] [U] „ºS,Ì›KªÖÚÍÆÑÅÙ,Á;„#Ý»¢ÉšY~ˆ÷CI{\Ú' 1ŒQÔ'£ÑVÛ¹  -ɃLÜW2ÚÓË=6Ή{AÁEšÔ»ÃÙÉ\·Û³Œ¾Ú'ˆÕ§™I³�ÝÆF¼XGF�©ŒÝBCW„±Y/Ö¤Œ~®»3ŒÍÑB?�ÑÌÉ 6ÁÅ>ICSAÌÞÑÉɱ¦ÐÇÕß×E´ÍÅ´     ÊÒ–—ÍF;ʱWÞÛÛ›Õ;ºOŸ_OߟŒ,»IÛÁ=¯½ÏÖÛž¿^�ÚÍÕ–Œ¾Ù~��[L+Q»~«ß;L¯OÈHÂ×ÊØ„�ÝÆFV\°M«߷E”-,”ËÆÖ¿­�ÈÝ?RßOT·Ž&ÕßÖȲ¤=ΦƜ:$ǯ]™œÌÍ’ A‚D9±Ú=ZÁ»ß&£7ÏßVÏØÛ¿V‡Ã¿¿¯‡÷ß#Õ;JÒÝ[DÙ;‰UJÎÜÔL,%¹ÅÙKÏŧF&R¹BO6S¸ÛÐ�ÞL,ŒÍÂTÝEµ.Å̳ڕ¿.?ŸUŽßJ�ßÕ;JRÝO�,KTŒWÊ>UØÚß]FOÝ´P~Ž~ÐØ?XÎZÆ©ÅÏÒÕÙ¤Ú¿Y–´Ç}¤1§
[   85.201264][    C0] vkms_vblank_simulate: vblank timer overrun
[   85.258506][ T4907] [U] 8RÔ…ŒÖªDNX¶HG¢ŸX×Þ
[   85.263005][ T4907] [U] 
[   85.265721][ T4907] [U] 
[   85.268431][ T4907] [U] 
[   85.312840][ T4907] [U] 
[   85.315594][ T4907] [U] 
[   85.318312][ T4907] [U] 
[   85.449588][  T155] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.460330][ T4906] [U] 
[   85.469433][ T4925] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   85.559321][ T4925] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   85.698429][  T155] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.742682][ T4931] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[   85.772411][ T4933] set_capacity_and_notify: 9 callbacks suppressed
[   85.772427][ T4933] loop3: detected capacity change from 0 to 2048
[   85.789986][ T4339] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   85.830099][  T155] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.937821][ T4933] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   85.973216][  T155] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.987784][ T4942] program syz.0.258 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   86.213133][ T4339] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1161: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[   86.247978][ T4956] loop4: detected capacity change from 0 to 16
[   86.261158][ T4339] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[   86.299064][ T4339] EXT4-fs (loop3): This should not happen!! Data will be lost
[   86.299064][ T4339] 
[   86.338857][ T4339] EXT4-fs (loop3): Total free blocks count 0
[   86.370346][ T4339] EXT4-fs (loop3): Free/Dirty block details
[   86.383173][ T4956] erofs: (device loop4): mounted with root inode @ nid 36.
[   86.391203][ T4339] EXT4-fs (loop3): free_blocks=2415919504
[   86.419075][ T4339] EXT4-fs (loop3): dirty_blocks=16
[   86.452901][ T4339] EXT4-fs (loop3): Block reservation details
[   86.487802][ T4339] EXT4-fs (loop3): i_reserved_data_blocks=1
[   86.507985][ T4962] tipc: Started in network mode
[   86.531106][ T4964] loop0: detected capacity change from 0 to 2048
[   86.574844][ T4962] tipc: Node identity ac14140f, cluster identity 4711
[   86.582343][ T4962] tipc: New replicast peer: 255.255.255.255
[   86.598645][ T4962] tipc: Enabled bearer <udp:syz2>, priority 10
[   86.610655][ T4964] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found!
[   86.638482][ T4964] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   86.971410][ T4943] chnl_net:caif_netlink_parms(): no params data found
[   87.233451][ T4984] loop4: detected capacity change from 0 to 1024
[   87.531536][ T4990] loop1: detected capacity change from 0 to 2048
[   87.564867][ T4943] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.589270][ T4943] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.610782][ T4943] device bridge_slave_0 entered promiscuous mode
[   87.643001][ T4397] tipc: Node number set to 2886997007
[   87.661012][ T4943] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.674892][ T4975] loop3: detected capacity change from 0 to 131072
[   87.727579][ T4943] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.763434][ T4984] hfsplus: bad catalog entry type
[   87.772145][ T4943] device bridge_slave_1 entered promiscuous mode
[   87.772787][ T4975] F2FS-fs (loop3): invalid crc value
[   87.794291][ T4993] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   87.825327][ T4975] F2FS-fs (loop3): Found nat_bits in checkpoint
[   87.881313][ T4975] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   87.936218][ T4943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   88.006211][ T4263] hfsplus: b-tree write err: -5, ino 25
[   88.028952][ T4943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   88.044548][   T23] Bluetooth: hci3: command 0x0409 tx timeout
[   88.044888][ T4263] hfsplus: b-tree write err: -5, ino 4
[   88.103570][ T4981] loop0: detected capacity change from 0 to 32768
[   88.116649][ T4981] XFS: attr2 mount option is deprecated.
[   88.154838][ T4263] hfsplus: b-tree write err: -5, ino 2
[   88.233659][ T4981] XFS (loop0): Mounting V5 Filesystem
[   88.298199][ T4943] team0: Port device team_slave_0 added
[   88.307111][ T4943] team0: Port device team_slave_1 added
[   88.476702][ T4981] XFS (loop0): Ending clean mount
[   88.517966][ T4981] XFS (loop0): Quotacheck needed: Please wait.
[   88.608433][ T4943] batman_adv: batadv0: Adding interface: batadv_slave_0
[   88.694179][ T4943] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   88.720159][    C0] vkms_vblank_simulate: vblank timer overrun
[   88.723258][ T4981] XFS (loop0): Quotacheck: Done.
[   88.925887][ T4943] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   89.034995][ T4186] XFS (loop0): Unmounting Filesystem
[   89.052559][ T4943] batman_adv: batadv0: Adding interface: batadv_slave_1
[   89.109743][ T4943] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   89.135705][    C0] vkms_vblank_simulate: vblank timer overrun
[   89.291171][ T4943] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   89.538728][ T5054] capability: warning: `syz.1.292' uses deprecated v2 capabilities in a way that may be insecure
[   89.856829][ T4943] device hsr_slave_0 entered promiscuous mode
[   89.934789][ T4943] device hsr_slave_1 entered promiscuous mode
[   89.946061][ T5060] loop0: detected capacity change from 0 to 32768
[   90.000708][ T5065] loop1: detected capacity change from 0 to 256
[   90.007709][ T4943] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   90.029695][ T4943] Cannot create hsr debugfs directory
[   90.060107][ T5060] 
[   90.060107][ T5060]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   90.060107][ T5060] 
[   90.132301][ T4186] 
[   90.132301][ T4186]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   90.132301][ T4186] 
[   90.144609][ T4403] Bluetooth: hci3: command 0x041b tx timeout
[   90.166962][ T5065] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x46ae1815, utbl_chksum : 0xe619d30d)
[   90.194568][ T5065] exFAT-fs (loop1): bogus allocation bitmap size(need : 2, cur : 17179869186)
[   90.211960][ T4186] 
[   90.211960][ T4186]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   90.211960][ T4186] 
[   90.274374][   T23] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   90.320291][ T5065] attempt to access beyond end of device
[   90.320291][ T5065] loop1: rw=524288, want=408, limit=256
[   90.354798][  T155] device hsr_slave_0 left promiscuous mode
[   90.368738][  T155] device hsr_slave_1 left promiscuous mode
[   90.396291][ T5065] attempt to access beyond end of device
[   90.396291][ T5065] loop1: rw=524288, want=664, limit=256
[   90.426116][  T155] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   90.447506][  T155] batman_adv: batadv0: Removing interface: batadv_slave_0
[   90.474156][ T5065] attempt to access beyond end of device
[   90.474156][ T5065] loop1: rw=0, want=288, limit=256
[   90.505750][  T155] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   90.513306][  T155] batman_adv: batadv0: Removing interface: batadv_slave_1
[   90.549197][   T26] audit: type=1800 audit(1774708472.341:9): pid=5065 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.295" name="file1" dev="loop1" ino=1048603 res=0 errno=0
[   90.580633][  T155] device bridge_slave_1 left promiscuous mode
[   90.615286][  T155] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.634522][   T23] usb 5-1: config 0 has an invalid interface number: 22 but max is 0
[   90.645668][   T23] usb 5-1: config 0 has no interface number 0
[   90.651824][   T23] usb 5-1: config 0 interface 22 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   90.671356][  T155] device bridge_slave_0 left promiscuous mode
[   90.707878][  T155] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.753437][   T23] usb 5-1: config 0 interface 22 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   90.783353][   T23] usb 5-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00
[   90.818467][ T5046] loop3: detected capacity change from 0 to 40427
[   90.828224][   T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   90.845916][  T155] device veth1_macvtap left promiscuous mode
[   90.852791][  T155] device veth0_macvtap left promiscuous mode
[   90.874425][  T155] device veth1_vlan left promiscuous mode
[   90.875048][   T23] usb 5-1: config 0 descriptor??
[   90.893797][  T155] device veth0_vlan left promiscuous mode
[   90.946955][ T5046] F2FS-fs (loop3): invalid crc value
[   91.024622][ T5046] F2FS-fs (loop3): Found nat_bits in checkpoint
[   91.108325][ T5086] loop0: detected capacity change from 0 to 1024
[   91.185293][ T3078] hfsplus: b-tree write err: -5, ino 25
[   91.191107][ T3078] hfsplus: b-tree write err: -5, ino 4
[   91.230880][ T3078] hfsplus: b-tree write err: -5, ino 2
[   91.236265][ T5046] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   91.324223][ T4628] usb 2-1: new full-speed USB device number 2 using dummy_hcd
[   91.386052][   T23] elo 0003:04E7:0030.0002: item fetching failed at offset 6/7
[   91.395307][   T23] elo 0003:04E7:0030.0002: parse failed
[   91.400925][   T23] elo: probe of 0003:04E7:0030.0002 failed with error -22
[   91.459355][ T4184] attempt to access beyond end of device
[   91.459355][ T4184] loop3: rw=2049, want=45104, limit=40427
[   91.637372][   T23] usb 5-1: USB disconnect, device number 4
[   91.714510][ T4628] usb 2-1: config 150 has an invalid interface number: 204 but max is 1
[   91.723971][  T155] team0 (unregistering): Port device team_slave_1 removed
[   91.732986][ T4628] usb 2-1: config 150 has no interface number 0
[   91.757425][ T4628] usb 2-1: config 150 interface 204 has no altsetting 0
[   91.782155][  T155] team0 (unregistering): Port device team_slave_0 removed
[   91.816738][  T155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   91.843737][  T155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   91.926239][ T4628] usb 2-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb
[   91.939991][ T4628] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   91.963094][ T5093] loop3: detected capacity change from 0 to 64
[   91.974167][ T4628] usb 2-1: Product: syz
[   91.978380][ T4628] usb 2-1: Manufacturer: syz
[   91.983096][ T4628] usb 2-1: SerialNumber: syz
[   92.019899][  T155] bond0 (unregistering): Released all slaves
[   92.078382][ T5093] hfs: hfs: Invalid key length: 94
[   92.222887][ T4403] Bluetooth: hci3: command 0x040f tx timeout
[   92.275620][ T4628] xr_serial 2-1:150.204: xr_serial converter detected
[   92.606395][ T4943] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   92.657400][ T4943] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   92.705569][ T4943] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   92.745596][ T4943] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   92.924633][ T4628] xr_serial ttyUSB0: Failed to set reg 0x0d: -71
[   92.941415][ T4628] xr_serial: probe of ttyUSB0 failed with error -71
[   92.984162][ T4628] usb 2-1: USB disconnect, device number 2
[   93.019405][ T4628] xr_serial 2-1:150.204: device disconnected
[   93.058419][ T4943] 8021q: adding VLAN 0 to HW filter on device bond0
[   93.145555][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   93.157357][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   93.205593][ T4943] 8021q: adding VLAN 0 to HW filter on device team0
[   93.236668][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   93.272187][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   93.320721][ T4339] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.327989][ T4339] bridge0: port 1(bridge_slave_0) entered forwarding state
[   93.384409][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   93.418601][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   93.470977][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   93.484461][ T4339] bridge0: port 2(bridge_slave_1) entered blocking state
[   93.491579][ T4339] bridge0: port 2(bridge_slave_1) entered forwarding state
[   93.548711][ T5106] loop4: detected capacity change from 0 to 40427
[   93.595842][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   93.629785][ T5128] overlayfs: invalid origin (0000)
[   93.662942][ T5106] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[   93.672610][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   93.690906][ T5106] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[   93.709671][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   93.731083][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   93.761435][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   93.785028][ T5106] F2FS-fs (loop4): invalid crc value
[   93.804789][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   93.820447][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   93.840783][ T5106] F2FS-fs (loop4): Found nat_bits in checkpoint
[   93.866259][ T5119] loop3: detected capacity change from 0 to 32768
[   93.873328][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   93.932748][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   93.961283][ T5136] loop1: detected capacity change from 0 to 256
[   93.987923][ T5117] loop0: detected capacity change from 0 to 32768
[   94.041927][ T5106] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[   94.057636][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   94.057636][ T5136] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[   94.066589][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   94.092669][ T4943] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   94.106003][ T5106] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   94.145908][ T5117] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.314 (5117)
[   94.162169][ T5119] XFS (loop3): Mounting V5 Filesystem
[   94.284620][ T4227] Bluetooth: hci3: command 0x0419 tx timeout
[   94.306376][ T5117] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[   94.354241][ T5117] BTRFS info (device loop0): setting nodatasum
[   94.373468][ T5117] BTRFS info (device loop0): force zlib compression, level 3
[   94.401947][ T5117] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8)
[   94.415531][ T5119] XFS (loop3): Ending clean mount
[   94.428428][ T5117] BTRFS info (device loop0): use lzo compression, level 0
[   94.451108][ T5117] BTRFS info (device loop0): turning on flush-on-commit
[   94.496083][ T5117] BTRFS info (device loop0): enabling auto defrag
[   94.502814][ T5117] BTRFS info (device loop0): max_inline at 4096
[   94.557152][ T5117] BTRFS info (device loop0): using free space tree
[   94.613794][ T5117] BTRFS info (device loop0): has skinny extents
[   94.915021][ T4184] XFS (loop3): Unmounting Filesystem
[   94.993063][ T5117] BTRFS info (device loop0): enabling ssd optimizations
[   95.057873][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   95.066674][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   95.096682][ T5176] netlink: 8 bytes leftover after parsing attributes in process `syz.1.321'.
[   95.138890][ T4943] 8021q: adding VLAN 0 to HW filter on device batadv0
[   95.164587][ T5176] netlink: 8 bytes leftover after parsing attributes in process `syz.1.321'.
[   96.149750][ T5210] netlink: 48 bytes leftover after parsing attributes in process `syz.0.323'.
[   96.382620][ T5217] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   96.435353][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   96.470381][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   96.633622][ T4943] device veth0_vlan entered promiscuous mode
[   96.671250][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   96.689347][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   96.738479][ T4943] device veth1_vlan entered promiscuous mode
[   96.763778][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   96.789688][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   96.809085][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   96.883500][ T5235] loop4: detected capacity change from 0 to 2048
[   96.908454][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   96.925160][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   96.944204][ T5203] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   96.960802][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   97.003863][ T4943] device veth0_macvtap entered promiscuous mode
[   97.028671][ T4943] device veth1_macvtap entered promiscuous mode
[   97.065215][ T5235] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   97.099623][ T4943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   97.145092][ T4943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   97.156945][ T4943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   97.179598][ T4943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   97.206307][ T4943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   97.224111][ T4943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   97.244095][ T4943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   97.277454][ T4943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   97.301628][ T4943] batman_adv: batadv0: Interface activated: batadv_slave_0
[   97.315642][ T5203] usb 1-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 99
[   97.330861][ T5139] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   97.360719][ T5139] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   97.395101][ T5203] usb 1-1: config 0 interface 0 has no altsetting 0
[   97.395313][ T5218] loop1: detected capacity change from 0 to 32768
[   97.419703][ T5139] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   97.436393][ T5139] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   97.468713][ T4943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   97.488387][ T4943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   97.503380][ T4943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   97.523782][ T4943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   97.534091][ T4943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   97.551261][ T4943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   97.592584][ T4943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   97.594344][ T5203] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[   97.624224][ T5203] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[   97.628828][ T4943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   97.642368][ T5203] usb 1-1: Product: syz
[   97.642391][ T5203] usb 1-1: Manufacturer: syz
[   97.642406][ T5203] usb 1-1: SerialNumber: syz
[   97.656410][ T5203] usb 1-1: config 0 descriptor??
[   97.674569][ T5232] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   97.674766][ T4943] batman_adv: batadv0: Interface activated: batadv_slave_1
[   97.702060][ T5218] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.327 (5218)
[   97.705679][ T5203] usb 1-1: selecting invalid altsetting 0
[   97.734490][ T5139] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   97.772276][ T5139] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   97.773484][ T5218] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[   97.822439][ T4943] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   97.872462][ T5254] loop4: detected capacity change from 0 to 64
[   97.878805][ T4943] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   97.901303][ T5218] BTRFS info (device loop1): metadata ratio 2
[   97.909139][ T5228] loop3: detected capacity change from 0 to 32768
[   97.934077][ T5218] BTRFS info (device loop1): force zlib compression, level 3
[   97.936175][ T4943] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   97.967799][ T5228] XFS: ikeep mount option is deprecated.
[   97.981234][ T5218] BTRFS info (device loop1): enabling auto defrag
[   97.994289][ T4943] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   98.024634][ T5218] BTRFS info (device loop1): max_inline at 0
[   98.041037][ T5218] BTRFS info (device loop1): using free space tree
[   98.051178][ T5218] BTRFS info (device loop1): has skinny extents
[   98.064912][ T5232] usb 1-1: selecting invalid altsetting 0
[   98.070785][ T5232] usb 1-1: 0:0: usb_set_interface failed (-22)
[   98.084818][ T5226] usb 1-1: selecting invalid altsetting 0
[   98.090908][ T5226] usb 1-1: 0:0: usb_set_interface failed (-22)
[   98.098444][ T5226] usb 1-1: selecting invalid altsetting 0
[   98.106699][ T5228] XFS (loop3): Mounting V5 Filesystem
[   98.121166][ T5226] usb 1-1: 0:0: usb_set_interface failed (-22)
[   98.153175][ T5226] usb 1-1: selecting invalid altsetting 0
[   98.213864][ T5226] usb 1-1: 0:0: usb_set_interface failed (-22)
[   98.221552][   T13] usb 1-1: USB disconnect, device number 4
[   98.350662][ T5228] XFS (loop3): Ending clean mount
[   98.359945][  T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.434045][  T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.510909][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   98.544087][ T5218] BTRFS error (device loop1): target device  is invalid!
[   98.558247][ T5285] IPv6: NLM_F_CREATE should be specified when creating new route
[   98.605868][  T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.649323][  T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.695319][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   98.777279][ T4184] XFS (loop3): Unmounting Filesystem
[   98.850723][ T5295] netlink: 4 bytes leftover after parsing attributes in process `syz.0.342'.
[   99.170975][ T5312] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   99.292209][ T5318] netlink: 'syz.1.344': attribute type 11 has an invalid length.
[   99.317289][ T5318] netlink: 8 bytes leftover after parsing attributes in process `syz.1.344'.
[   99.349176][ T5321] loop0: detected capacity change from 0 to 1024
[   99.496680][ T5321] EXT4-fs (loop0): mounted filesystem without journal. Opts: barrier,nodioread_nolock,jqfmt=vfsv0,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none.
[   99.534569][ T5321] ext4 filesystem being mounted at /67/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   99.608282][   T26] audit: type=1800 audit(1774708481.401:10): pid=5321 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.345" name="file1" dev="loop0" ino=15 res=0 errno=0
[  100.119081][ T5340] loop1: detected capacity change from 0 to 8192
[  100.206664][ T5349] loop0: detected capacity change from 0 to 32768
[  100.225861][ T5358] loop5: detected capacity change from 0 to 64
[  100.564650][ T5349] XFS (loop0): Mounting V5 Filesystem
[  100.804919][ T5361] loop4: detected capacity change from 0 to 32768
[  100.837574][ T5361] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.358 (5361)
[  100.865521][ T5199] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  100.888207][ T5349] XFS (loop0): Ending clean mount
[  100.902406][ T5349] XFS (loop0): Quotacheck needed: Please wait.
[  100.943860][ T5361] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  100.966732][ T5361] BTRFS info (device loop4): enabling auto defrag
[  100.973224][ T5361] BTRFS info (device loop4): use no compression
[  100.987875][ T5349] XFS (loop0): Quotacheck: Done.
[  101.038844][ T5361] BTRFS info (device loop4): max_inline at 4096
[  101.074950][ T5361] BTRFS info (device loop4): using free space tree
[  101.081853][ T4186] XFS (loop0): Unmounting Filesystem
[  101.104939][ T5361] BTRFS info (device loop4): has skinny extents
[  101.114314][ T5199] usb 6-1: Using ep0 maxpacket: 8
[  101.234366][ T5199] usb 6-1: config 179 has an invalid interface number: 65 but max is 0
[  101.271460][ T5199] usb 6-1: config 179 has no interface number 0
[  101.282292][ T5199] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  101.315920][ T5199] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  101.351780][ T5199] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  101.394090][ T5199] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  101.508274][ T5199] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  101.552251][ T5361] BTRFS info (device loop4): enabling ssd optimizations
[  101.559734][ T5199] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  101.584126][ T5199] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  101.635156][ T5371] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  101.733446][ T5421] loop1: detected capacity change from 0 to 64
[  101.833534][   T26] audit: type=1800 audit(1774708483.621:11): pid=5421 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.368" name="file1" dev="loop1" ino=18 res=0 errno=0
[  101.971726][   T26] audit: type=1804 audit(1774708483.761:12): pid=5427 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.368" name="/newroot/98/file1/file1" dev="loop1" ino=18 res=1 errno=0
[  102.005689][ T5203] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input6
[  102.079335][ T5429] netlink: 4 bytes leftover after parsing attributes in process `syz.3.369'.
[  102.188867][ T5307] usb 6-1: USB disconnect, device number 2
[  102.204281][    C1] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  102.213710][    C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  102.225644][ T5307] xpad 6-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  102.555513][ T5441] netlink: 48 bytes leftover after parsing attributes in process `syz.0.373'.
[  103.134203][ T5203] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  103.154923][ T5462] loop0: detected capacity change from 0 to 4096
[  103.216842][ T5462] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  103.265752][ T5462] ntfs: (device loop0): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk.
[  103.320478][ T5307] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  103.329628][ T5462] ntfs: (device loop0): ntfs_read_locked_inode(): $DATA attribute is missing.
[  103.356551][ T5462] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -2.  Marking corrupt inode 0x1 as bad.  Run chkdsk.
[  103.394159][ T5203] usb 4-1: Using ep0 maxpacket: 8
[  103.400321][ T5462] ntfs: (device loop0): load_system_files(): Failed to load $MFTMirr.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  103.480546][ T5462] ntfs: volume version 3.1.
[  103.510848][ T5462] ntfs: (device loop0): load_and_init_quota(): Failed to find inode number for $Quota.
[  103.564590][ T5462] ntfs: (device loop0): load_system_files(): Failed to load $Quota.  Will not be able to remount read-write.  Run chkdsk.
[  103.594410][ T5307] usb 6-1: Using ep0 maxpacket: 32
[  103.604471][ T5203] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7
[  103.638508][ T5203] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1056, setting to 1024
[  103.735082][ T5307] usb 6-1: config 0 has an invalid interface number: 51 but max is 0
[  103.770409][ T5307] usb 6-1: config 0 has no interface number 0
[  103.834512][ T5203] usb 4-1: New USB device found, idVendor=0582, idProduct=0121, bcdDevice= 0.40
[  103.843599][ T5203] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  103.870692][ T5203] usb 4-1: Product: syz
[  103.890855][ T5203] usb 4-1: Manufacturer: syz
[  103.916206][ T5203] usb 4-1: SerialNumber: syz
[  103.965342][ T5307] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  103.981985][ T5307] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  104.014059][ T5307] usb 6-1: Product: syz
[  104.024131][ T5307] usb 6-1: Manufacturer: syz
[  104.038134][ T5307] usb 6-1: SerialNumber: syz
[  104.074984][ T5307] usb 6-1: config 0 descriptor??
[  104.153311][ T5307] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  104.251243][ T5475] loop1: detected capacity change from 0 to 32768
[  104.304389][ T5203] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  104.334951][ T5203] usb 4-1: unit 1 not found!
[  104.390218][ T5307] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  104.422596][ T5203] usb 4-1: USB disconnect, device number 4
[  104.452198][ T5307] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  104.532056][ T5517] loop4: detected capacity change from 0 to 512
[  104.629701][ T5517] EXT4-fs error (device loop4): ext4_iget_extra_inode:4566: inode #15: comm syz.4.395: corrupted in-inode xattr
[  104.657582][ T5517] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.395: couldn't read orphan inode 15 (err -117)
[  104.674159][    C0] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 112
[  104.690617][ T5009] udevd[5009]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  104.717903][ T5517] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  104.773959][ T5525] netlink: 8 bytes leftover after parsing attributes in process `syz.3.397'.
[  104.783704][ T5525] netlink: 20 bytes leftover after parsing attributes in process `syz.3.397'.
[  104.887030][ T5307] usb 6-1: USB disconnect, device number 3
[  104.908993][    C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -108
[  104.921618][ T5307] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  104.941477][ T5307] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  104.981216][ T5307] quatech2 6-1:0.51: device disconnected
[  105.073829][ T5534] loop0: detected capacity change from 0 to 64
[  105.168443][   T26] audit: type=1800 audit(1774708486.961:13): pid=5534 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.401" name="file1" dev="loop0" ino=18 res=0 errno=0
[  105.234125][   T26] audit: type=1804 audit(1774708486.991:14): pid=5534 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.401" name="/newroot/74/file1/file1" dev="loop0" ino=18 res=1 errno=0
[  105.594442][ T5546] loop0: detected capacity change from 0 to 4096
[  105.675637][ T5546] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a802c018, mo2=0003]
[  105.683852][ T5546] System zones: 0-5
[  105.754170][ T5546] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,delalloc,resuid=0x0000000000000000,nodioread_nolock,errors=continue,data_err=ignore,nodiscard,barrier,,errors=continue. Quota mode: writeback.
[  105.845144][ T5546] fs-verity (loop0, inode 13): Unknown hash algorithm number: 0
[  105.885861][ T5568] netlink: 316 bytes leftover after parsing attributes in process `syz.3.414'.
[  105.908501][ T5567] bridge0: port 1(bridge_slave_0) entered listening state
[  106.126642][ T5538] loop4: detected capacity change from 0 to 32768
[  106.154252][ T5206] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  106.225132][ T5578] pimreg: tun_chr_ioctl cmd 21731
[  106.320109][ T5538] XFS (loop4): Mounting V5 Filesystem
[  106.400106][ T5206] usb 6-1: Using ep0 maxpacket: 8
[  106.426887][ T5538] XFS (loop4): Ending clean mount
[  106.474621][ T5538] XFS (loop4): Quotacheck needed: Please wait.
[  106.524370][ T5206] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[  106.532706][ T5206] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  106.600284][ T5206] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  106.644128][ T5206] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  106.674111][ T5206] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  106.723420][ T5206] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  106.754290][ T4260] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  106.764591][ T5206] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  106.791238][ T5603] loop1: detected capacity change from 0 to 8192
[  106.821081][ T5538] XFS (loop4): Quotacheck: Done.
[  106.881502][ T5603] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal
[  106.923293][ T5603] REISERFS (device loop1): using ordered data mode
[  106.969805][ T5603] reiserfs: using flush barriers
[  107.024136][ T4260] usb 4-1: Using ep0 maxpacket: 8
[  107.030585][ T5603] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  107.064385][ T5206] usb 6-1: GET_CAPABILITIES returned 0
[  107.080027][ T4197] XFS (loop4): Unmounting Filesystem
[  107.089497][ T5206] usbtmc 6-1:16.0: can't read capabilities
[  107.094853][ T5603] REISERFS (device loop1): checking transaction log (loop1)
[  107.130142][ T5603] REISERFS (device loop1): Using rupasov hash to sort names
[  107.145181][ T5603] REISERFS (device loop1): using 3.5.x disk format
[  107.179501][ T5603] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  107.230928][ T5603] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  107.262830][ T5603] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  107.272396][ T5206] usb 6-1: USB disconnect, device number 4
[  107.302895][ T5603] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  107.348981][ T5612] loop0: detected capacity change from 0 to 32768
[  107.397676][ T4260] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2
[  107.432212][ T4260] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  107.444696][ T4260] usb 4-1: Product: syz
[  107.448901][ T4260] usb 4-1: Manufacturer: syz
[  107.453521][ T4260] usb 4-1: SerialNumber: syz
[  107.465957][ T4260] usb 4-1: config 0 descriptor??
[  107.550633][ T5612] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.425 (5612)
[  107.597044][ T5612] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  107.632595][ T5612] BTRFS info (device loop0): enabling auto defrag
[  107.658690][ T5612] BTRFS info (device loop0): use no compression
[  107.674738][ T5612] BTRFS info (device loop0): max_inline at 4096
[  107.704180][ T5612] BTRFS info (device loop0): using free space tree
[  107.725826][ T4260] usb 4-1: dvb_usb_v2: found a 'Terratec H7' in warm state
[  107.745242][ T5612] BTRFS info (device loop0): has skinny extents
[  107.886336][ T5206] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  107.917079][ T5636] loop5: detected capacity change from 0 to 128
[  107.966324][ T5206] hid-generic 0000:0000:0000.0003: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  108.154831][ T5612] BTRFS info (device loop0): enabling ssd optimizations
[  108.164546][ T4260] usb write operation failed. (-71)
[  108.192378][ T5642] fido_id[5642]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  108.195820][ T4260] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  108.294536][ T4260] dvbdev: DVB: registering new adapter (Terratec H7)
[  108.323130][ T4260] usb 4-1: media controller created
[  108.357701][ T4260] usb read operation failed. (-71)
[  108.398454][ T4260] usb write operation failed. (-71)
[  108.458722][ T4260] dvb_usb_az6007: probe of 4-1:0.0 failed with error -5
[  108.511679][ T4260] usb 4-1: USB disconnect, device number 5
[  108.858064][ T5667] loop5: detected capacity change from 0 to 64
[  109.052704][   T26] audit: type=1800 audit(1774708490.841:15): pid=5667 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.437" name="file1" dev="loop5" ino=18 res=0 errno=0
[  109.095926][ T5672] loop3: detected capacity change from 0 to 128
[  109.124120][   T26] audit: type=1804 audit(1774708490.881:16): pid=5673 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.437" name="/newroot/14/file1/file1" dev="loop5" ino=18 res=1 errno=0
[  109.494126][ T4260] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  109.583975][ T5690] sp0: Synchronizing with TNC
[  109.605573][ T5689] [U] è``
[  109.934324][ T4260] usb 2-1: config index 0 descriptor too short (expected 23569, got 27)
[  109.975391][ T4260] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  110.012602][ T5712] loop0: detected capacity change from 0 to 512
[  110.094606][ T4260] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  110.115320][ T4260] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  110.123364][ T4260] usb 2-1: Manufacturer: syz
[  110.188632][ T4260] usb 2-1: config 0 descriptor??
[  110.255981][ T4260] igorplugusb 2-1:0.0: endpoint incorrect
[  110.343883][ T5724] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  110.381127][ T5712] EXT4-fs (loop0): Test dummy encryption mode enabled
[  110.404166][ T5712] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  110.494878][ T5712] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  110.507549][ T5305] usb 2-1: USB disconnect, device number 3
[  110.576460][ T5712] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2807: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  110.614694][ T5712] EXT4-fs (loop0): 1 truncate cleaned up
[  110.622205][ T5712] EXT4-fs (loop0): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,nombcache,test_dummy_encryption,usrquota,nogrpid,resgid=0x0000000000000000,. Quota mode: writeback.
[  110.825853][ T5697] loop4: detected capacity change from 0 to 32768
[  110.869376][ T5697] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.446 (5697)
[  110.909696][ T5712] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[  110.982089][ T5697] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  110.999619][ T5697] BTRFS info (device loop4): using free space tree
[  111.070875][ T5697] BTRFS info (device loop4): has skinny extents
[  111.104109][ T5712] fscrypt (loop0): Missing crypto API support for AES-256-XTS (API name: "xts(aes)")
[  111.156870][ T5712] overlayfs: upper fs does not support tmpfile.
[  111.212875][ T5712] fscrypt (loop0): Missing crypto API support for AES-256-XTS (API name: "xts(aes)")
[  111.401629][ T5713] loop5: detected capacity change from 0 to 32768
[  111.489136][   T26] audit: type=1800 audit(1774708493.281:17): pid=5713 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.453" name="file1" dev="loop5" ino=7 res=0 errno=0
[  111.553083][ T5697] BTRFS info (device loop4): enabling ssd optimizations
[  111.838988][ T5792] loop3: detected capacity change from 0 to 64
[  111.918742][ T4326] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop4 scanned by udevd (4326)
[  113.483767][ T5817] input: syz0 as /devices/virtual/input/input7
[  113.562925][ T5808] loop5: detected capacity change from 0 to 131072
[  113.602394][ T5819] loop4: detected capacity change from 0 to 2048
[  113.736516][ T5808] F2FS-fs (loop5): Found nat_bits in checkpoint
[  113.792249][ T5808] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  113.808388][ T5826] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  113.937963][ T5074] Bluetooth: hci5: Frame reassembly failed (-84)
[  114.264222][ T4260] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  114.555022][ T4260] usb 5-1: Using ep0 maxpacket: 32
[  115.644841][ T5845] loop3: detected capacity change from 0 to 131072
[  115.651884][ T4260] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  115.665197][ T4260] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  115.684794][ T4260] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  115.693876][ T4260] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  115.703817][ T4260] usb 5-1: config 0 descriptor??
[  115.740162][ T5845] F2FS-fs (loop3): invalid crc value
[  115.765438][ T4260] hub 5-1:0.0: USB hub found
[  115.797422][ T5845] F2FS-fs (loop3): Found nat_bits in checkpoint
[  115.841406][ T5845] F2FS-fs (loop3): Cannot turn on quotas: -2 on 2
[  115.860491][ T5845] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[  115.922464][ T5861] loop1: detected capacity change from 0 to 2048
[  115.964288][ T4195] Bluetooth: hci5: Entering manufacturer mode failed (-110)
[  116.014623][ T4260] hub 5-1:0.0: config failed, can't read hub descriptor (err -90)
[  116.165111][ T5861] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodioread_nolock,min_batch_time=0x0000000000000000,barrier=0x0000000000000040,nodelalloc,,errors=continue. Quota mode: none.
[  116.460537][ T4260] hid-generic 0003:046D:C31C.0004: item fetching failed at offset 0/1
[  116.477541][ T4260] hid-generic: probe of 0003:046D:C31C.0004 failed with error -22
[  116.824490][ T5305] usb 5-1: USB disconnect, device number 5
[  116.899193][ T5872] loop0: detected capacity change from 0 to 32768
[  116.993335][ T5891] loop1: detected capacity change from 0 to 64
[  117.219824][ T5872] XFS (loop0): Mounting V5 Filesystem
[  117.482782][ T5872] XFS (loop0): Ending clean mount
[  117.761596][ T5880] loop5: detected capacity change from 0 to 32768
[  117.831788][ T4186] XFS (loop0): Unmounting Filesystem
[  117.888364][ T5880] JBD2: Ignoring recovery information on journal
[  117.922731][ T5938] loop3: detected capacity change from 0 to 512
[  117.935287][ T5880] jbd2_journal_bmap: journal block not found at offset 32 on loop5-75
[  117.944149][ T5880] JBD2: bad block at offset 32
[  118.047688][ T5938] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.487: inode has both inline data and extents flags
[  118.061058][ T5880] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  118.217064][ T5938] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.487: couldn't read orphan inode 15 (err -117)
[  118.278756][ T5880] OCFS2: ERROR (device loop5): int __ocfs2_find_path(struct ocfs2_caching_info *, struct ocfs2_extent_list *, u32, path_insert_t *, void *): Owner 65 has invalid tree depth 312 in extent list
[  118.341610][ T5938] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  118.404229][ T5880] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  118.461175][ T5880] OCFS2: File system is now read-only.
[  118.529310][ T5880] (syz.5.490,5880,0):ocfs2_find_leaf:1941 ERROR: status = -30
[  118.566326][ T5880] (syz.5.490,5880,0):ocfs2_get_clusters_nocache:421 ERROR: status = -30
[  118.622941][ T5880] (syz.5.490,5880,0):ocfs2_get_clusters:624 ERROR: status = -30
[  118.634202][ T5880] (syz.5.490,5880,1):ocfs2_extent_map_get_blocks:671 ERROR: status = -30
[  118.639936][ T5931] loop4: detected capacity change from 0 to 32768
[  118.642672][ T5880] (syz.5.490,5880,1):ocfs2_read_virt_blocks:989 ERROR: status = -30
[  118.805288][ T5305] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  118.850641][ T5305] hid-generic 0000:0000:0000.0005: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  118.895250][ T5880] (syz.5.490,5880,0):ocfs2_read_dir_block:511 ERROR: status = -30
[  118.903921][ T5880] (syz.5.490,5880,0):ocfs2_find_dir_space_el:3504 ERROR: status = -5
[  118.904919][ T5931] XFS (loop4): Mounting V5 Filesystem
[  118.912241][ T5880] (syz.5.490,5880,0):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -5
[  118.926651][ T5880] (syz.5.490,5880,0):ocfs2_mknod:298 ERROR: status = -5
[  118.935020][ T5880] (syz.5.490,5880,0):ocfs2_mknod:502 ERROR: status = -5
[  118.979228][ T5880] (syz.5.490,5880,0):ocfs2_create:676 ERROR: status = -5
[  119.039087][ T5954] loop1: detected capacity change from 0 to 8192
[  119.075237][ T5950] OCFS2: ERROR (device loop5): int __ocfs2_find_path(struct ocfs2_caching_info *, struct ocfs2_extent_list *, u32, path_insert_t *, void *): Owner 65 has invalid tree depth 312 in extent list
[  119.131687][ T5950] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  119.144082][ T5950] (syz.5.490,5950,1):ocfs2_find_leaf:1941 ERROR: status = -30
[  119.151837][ T5950] (syz.5.490,5950,1):ocfs2_get_clusters_nocache:421 ERROR: status = -30
[  119.160984][ T5950] (syz.5.490,5950,1):ocfs2_get_clusters:624 ERROR: status = -30
[  119.170460][ T5950] (syz.5.490,5950,1):ocfs2_extent_map_get_blocks:671 ERROR: status = -30
[  119.181895][ T5954] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal
[  119.186106][ T5950] (syz.5.490,5950,1):ocfs2_read_virt_blocks:989 ERROR: status = -30
[  119.201198][ T5954] REISERFS (device loop1): using ordered data mode
[  119.231803][ T5950] (syz.5.490,5950,1):ocfs2_read_dir_block:511 ERROR: status = -30
[  119.242848][ T5954] reiserfs: using flush barriers
[  119.248563][ T5931] XFS (loop4): Ending clean mount
[  119.308292][ T5977] loop0: detected capacity change from 0 to 64
[  119.332468][ T5954] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  119.403852][ T4943] ocfs2: Unmounting device (7,5) on (node local)
[  119.452818][ T5954] REISERFS (device loop1): checking transaction log (loop1)
[  119.497762][ T5954] REISERFS (device loop1): Using r5 hash to sort names
[  119.540090][ T5954] REISERFS (device loop1): using 3.5.x disk format
[  119.570061][ T5954] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  119.640988][ T4197] XFS (loop4): Unmounting Filesystem
[  120.000597][ T5992] netlink: 20 bytes leftover after parsing attributes in process `syz.3.513'.
[  120.222165][ T6004] loop3: detected capacity change from 0 to 65
[  120.288307][ T6004] BFS-fs: bfs_fill_super(): NOTE: filesystem loop3 was created with 512 inodes, the real maximum is 511, mounting anyway
[  120.802754][ T6013] loop1: detected capacity change from 0 to 4096
[  120.921687][ T6013] ntfs: volume version 3.1.
[  121.309960][ T6042] mmap: syz.3.527 (6042) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst.
[  121.748885][ T6065] loop5: detected capacity change from 0 to 128
[  121.857113][ T6070] loop3: detected capacity change from 0 to 164
[  121.908274][ T6059] loop4: detected capacity change from 0 to 4096
[  121.968138][    C1] blk_update_request: operation not supported error, dev loop5, sector 32 op 0x9:(WRITE_ZEROES) flags 0x800800 phys_seg 0 prio class 0
[  122.000337][ T6059] ntfs: (device loop4): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match.  Run ntfsfix or chkdsk.
[  122.048628][ T6059] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  122.085651][ T6059] ntfs: (device loop4): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn.
[  122.232246][ T6059] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[  122.327063][ T6059] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  122.408142][ T6059] ntfs: volume version 3.1.
[  122.439704][ T6059] ntfs: (device loop4): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty.
[  122.516135][ T6059] ntfs: (device loop4): load_system_files(): Failed to load $LogFile.  Will not be able to remount read-write.  Mount in Windows.
[  122.546357][ T6059] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5.
[  122.583315][ T6059] ntfs: (device loop4): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys.
[  122.648973][ T6059] ntfs: (device loop4): load_system_files(): Failed to determine if Windows is hibernated.  Will not be able to remount read-write.  Run chkdsk.
[  122.976127][ T6068] loop1: detected capacity change from 0 to 32768
[  123.047613][ T6068] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.537 (6068)
[  123.102446][ T6068] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  123.140726][ T6068] BTRFS info (device loop1): setting nodatasum
[  123.184658][ T6068] BTRFS info (device loop1): force zlib compression, level 3
[  123.239933][ T6068] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8)
[  123.314051][ T6068] BTRFS info (device loop1): use lzo compression, level 0
[  123.314237][ T6101] netlink: 8 bytes leftover after parsing attributes in process `syz.4.545'.
[  123.321229][ T6068] BTRFS info (device loop1): turning on flush-on-commit
[  123.445561][ T6068] BTRFS info (device loop1): enabling auto defrag
[  123.452165][ T6068] BTRFS info (device loop1): max_inline at 4096
[  123.460952][ T6104] netlink: 24 bytes leftover after parsing attributes in process `syz.5.546'.
[  123.524301][ T6068] BTRFS info (device loop1): using free space tree
[  123.530869][ T6068] BTRFS info (device loop1): has skinny extents
[  123.773307][ T6127] loop5: detected capacity change from 0 to 1024
[  124.000875][ T6068] BTRFS info (device loop1): enabling ssd optimizations
[  124.146886][ T6127] hfsplus: catalog searching failed
[  124.275229][  T155] hfsplus: bad catalog file entry
[  124.282734][  T155] hfsplus: b-tree write err: -5, ino 3
[  124.434561][ T6159] netlink: 'syz.5.560': attribute type 5 has an invalid length.
[  124.684678][ T6170] netlink: 'syz.0.566': attribute type 3 has an invalid length.
[  124.714230][ T6170] netlink: 92 bytes leftover after parsing attributes in process `syz.0.566'.
[  125.440622][ T6201] loop3: detected capacity change from 0 to 256
[  125.467601][ T6202] loop1: detected capacity change from 0 to 1024
[  125.496391][ T6201] exfat: Deprecated parameter 'utf8'
[  125.501829][ T6201] exfat: Deprecated parameter 'utf8'
[  125.565398][ T6201] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[  125.759067][ T6216] loop5: detected capacity change from 0 to 512
[  125.837012][ T6216] EXT4-fs (loop5): Ignoring removed nobh option
[  125.851484][ T6216] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled
[  125.854208][ T4260] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  125.878782][ T6220] loop0: detected capacity change from 0 to 512
[  125.912700][ T6216] EXT4-fs error (device loop5): ext4_orphan_get:1400: inode #15: comm syz.5.587: iget: bad i_size value: 38620345925642
[  125.949701][ T6216] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.587: couldn't read orphan inode 15 (err -117)
[  125.983744][ T6228] dvmrp1: tun_chr_ioctl cmd 1074812118
[  125.997112][ T6220] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,usrquota,minixdf,nombcache,. Quota mode: writeback.
[  126.022278][ T6216] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobh,jqfmt=vfsv0,nodelalloc,,errors=continue. Quota mode: writeback.
[  126.055811][ T6220] ext4 filesystem being mounted at /109/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  126.135154][ T4233] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  126.319799][ T6234] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  126.331473][ T4260] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  126.351452][ T4260] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  126.399844][ T6234] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  126.410566][ T6238] loop5: detected capacity change from 0 to 2048
[  126.426917][ T4233] usb 4-1: Using ep0 maxpacket: 16
[  126.464594][ T4260] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  126.475534][ T6238] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  126.484067][ T4260] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67
[  126.511089][ T4260] usb 2-1: SerialNumber: syz
[  126.554584][ T4233] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  126.569270][ T4233] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  126.581469][ T4233] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  126.608939][ T4233] usb 4-1: New USB device found, idVendor=045e, idProduct=17da, bcdDevice= 0.00
[  126.645201][ T4233] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  126.674639][ T4233] usb 4-1: config 0 descriptor??
[  126.820576][ T4260] usb 2-1: 0:2 : does not exist
[  126.927170][ T4260] usb 2-1: USB disconnect, device number 4
[  127.086033][ T6251] loop0: detected capacity change from 0 to 4096
[  127.164884][ T4233] hid (null): nested delimiters
[  127.176486][ T6251] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  127.186179][ T4233] hid (null): report_id 24797 is invalid
[  127.200587][ T4233] hid-generic 0003:045E:17DA.0006: nested delimiters
[  127.209752][ T6251] ntfs3: loop0: Failed to load $Extend.
[  127.234732][ T5009] udevd[5009]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  127.245002][ T4233] hid-generic 0003:045E:17DA.0006: item 0 2 2 10 parsing failed
[  127.286961][ T4233] hid-generic: probe of 0003:045E:17DA.0006 failed with error -22
[  127.356312][ T6251] ntfs3: loop0: ino=1b, "file0" directory corrupted
[  127.371184][ T4233] usb 4-1: USB disconnect, device number 6
[  127.573399][ T6268] loop5: detected capacity change from 0 to 256
[  127.627416][ T6271] loop1: detected capacity change from 0 to 256
[  127.712687][ T6268] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x311d6643, utbl_chksum : 0xe619d30d)
[  127.725658][ T6271] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  127.831863][   T26] kauditd_printk_skb: 6 callbacks suppressed
[  127.831879][   T26] audit: type=1800 audit(1774708509.621:18): pid=6271 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.611" name="file1" dev="loop1" ino=1048620 res=0 errno=0
[  128.049426][ T6287] loop4: detected capacity change from 0 to 256
[  128.134871][ T6287] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  128.182603][ T6287] exFAT-fs (loop4): Medium has reported failures. Some data may be lost.
[  128.226483][ T6287] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d)
[  128.335747][ T6296] loop1: detected capacity change from 0 to 128
[  128.402432][ T6298] loop3: detected capacity change from 0 to 128
[  128.425065][ T6296] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  128.454091][ T6296] hpfs: filesystem error: improperly stopped
[  128.470529][ T6296] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  128.481409][ T6296] hpfs: You really don't want any checks? You are crazy...
[  128.495578][ T6296] hpfs: hpfs_map_sector(): read error
[  128.501129][ T6296] hpfs: code page support is disabled
[  128.503061][ T6272] loop0: detected capacity change from 0 to 32768
[  128.526691][ T6296] hpfs: hpfs_map_4sectors(): unaligned read
[  128.532789][ T6296] hpfs: hpfs_map_4sectors(): unaligned read
[  128.544326][ T6296] hpfs: filesystem error: unable to find root dir
[  128.560569][ T6298] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  128.598008][ T6298] hpfs: filesystem error: improperly stopped
[  128.612507][ T6298] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  128.644352][ T6296] hpfs: filesystem error: invalid bitmap block pointer 00000000 -> 7b3184b5 at trim
[  128.654105][ T6298] hpfs: You really don't want any checks? You are crazy...
[  128.690026][ T6298] hpfs: hpfs_map_sector(): read error
[  128.712729][ T6298] hpfs: code page support is disabled
[  128.729354][ T6298] hpfs: hpfs_map_4sectors(): unaligned read
[  128.742178][ T6298] hpfs: hpfs_map_4sectors(): unaligned read
[  128.748475][ T6298] hpfs: filesystem error: unable to find root dir
[  128.854626][ T6304] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  128.960805][ T6306] autofs4:pid:6306:autofs_fill_super: called with bogus options
[  129.218817][ T6317] tun0: tun_chr_ioctl cmd 1074025677
[  129.238854][ T6317] tun0: linktype set to 774
[  129.258727][ T6323] program syz.4.634 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  129.483133][ T6330] loop3: detected capacity change from 0 to 1024
[  129.646433][  T155] hfsplus: b-tree write err: -5, ino 25
[  129.691185][  T155] hfsplus: b-tree write err: -5, ino 4
[  129.720294][  T155] hfsplus: b-tree write err: -5, ino 2
[  129.841401][ T6336] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal
[  129.879871][ T6336] REISERFS (device loop5): using ordered data mode
[  129.897316][ T6347] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  129.899332][ T6336] reiserfs: using flush barriers
[  129.920672][ T6336] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  129.961326][ T6336] REISERFS (device loop5): checking transaction log (loop5)
[  130.096986][ T6336] REISERFS (device loop5): Using r5 hash to sort names
[  130.119542][ T6336] REISERFS (device loop5): using 3.5.x disk format
[  130.151400][ T6336] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage.
[  130.386260][ T6359] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d)
[  130.564755][ T6361] XFS: attr2 mount option is deprecated.
[  130.678684][ T6361] XFS (loop1): Mounting V5 Filesystem
[  130.841113][ T6361] XFS (loop1): Ending clean mount
[  130.851010][ T6361] XFS (loop1): Quotacheck needed: Please wait.
[  130.944612][ T6354] set_capacity_and_notify: 4 callbacks suppressed
[  130.944629][ T6354] loop0: detected capacity change from 0 to 32768
[  130.957720][ T6361] XFS (loop1): Quotacheck: Done.
[  131.014304][ T4185] XFS (loop1): Unmounting Filesystem
[  131.020301][ T6354] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 scanned by syz.0.651 (6354)
[  131.108642][ T6354] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[  131.144466][ T6354] BTRFS info (device loop0): using free space tree
[  131.174440][ T6354] BTRFS info (device loop0): has skinny extents
[  131.343355][ T6382] loop5: detected capacity change from 0 to 16
[  131.493695][ T6388] loop3: detected capacity change from 0 to 8192
[  131.497578][ T6382] erofs: (device loop5): mounted with root inode @ nid 36.
[  131.546153][ T6388] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal
[  131.593807][ T6388] REISERFS (device loop3): using ordered data mode
[  131.601517][ T6388] reiserfs: using flush barriers
[  131.640382][ T6354] BTRFS info (device loop0): enabling ssd optimizations
[  131.658484][ T6388] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  131.801387][ T6388] REISERFS (device loop3): checking transaction log (loop3)
[  131.827265][ T6388] REISERFS (device loop3): Using r5 hash to sort names
[  131.848014][ T6388] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  131.870326][ T6355] loop4: detected capacity change from 0 to 40427
[  131.961896][ T6355] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x1ffff
[  132.081837][ T6355] F2FS-fs (loop4): invalid crc value
[  132.146097][ T6355] F2FS-fs (loop4): Found nat_bits in checkpoint
[  132.201944][ T4229] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  132.262983][ T6355] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  132.464218][ T4229] usb 6-1: Using ep0 maxpacket: 16
[  132.538390][ T4197] attempt to access beyond end of device
[  132.538390][ T4197] loop4: rw=2049, want=45104, limit=40427
[  132.615394][ T4229] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  132.623472][ T4229] usb 6-1: config 0 has no interface number 0
[  132.670581][ T4229] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  132.734172][ T4229] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  132.757299][ T4229] usb 6-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00
[  132.768701][ T1416] ieee802154 phy0 wpan0: encryption failed: -22
[  132.775223][ T1416] ieee802154 phy1 wpan1: encryption failed: -22
[  132.781011][ T4229] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  132.805657][ T6427] loop3: detected capacity change from 0 to 16
[  132.849246][ T4229] usb 6-1: config 0 descriptor??
[  132.884938][ T6427] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  133.056095][ T6435] IPv6: NLM_F_CREATE should be specified when creating new route
[  133.063928][ T6435] netlink: 4 bytes leftover after parsing attributes in process `syz.1.673'.
[  133.167256][ T6439] loop1: detected capacity change from 0 to 16
[  133.204788][ T6439] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  133.243415][ T6439] openvswitch: netlink: Actions may not be safe on all matching packets
[  133.247677][ T5009] udevd[5009]: incorrect cramfs checksum on /dev/loop1
[  133.257971][ T6441] loop3: detected capacity change from 0 to 512
[  133.308521][ T6441] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  133.330068][ T6441] EXT4-fs (loop3): 1 truncate cleaned up
[  133.344503][ T6441] EXT4-fs (loop3): mounted filesystem without journal. Opts: barrier=0x0000000000000101,errors=remount-ro,. Quota mode: none.
[  133.381316][ T6441] EXT4-fs error (device loop3): ext4_generic_delete_entry:2729: inode #2: block 13: comm syz.3.676: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[  133.445580][ T6441] EXT4-fs (loop3): Remounting filesystem read-only
[  133.452317][ T6441] EXT4-fs error (device loop3) in ext4_delete_entry:2800: Corrupt filesystem
[  133.462688][ T6441] EXT4-fs (loop3): Remounting filesystem read-only
[  133.470998][ T6441] EXT4-fs warning (device loop3): ext4_rename_delete:3792: inode #2: comm syz.3.676: Deleting old file: nlink 5, error=-117
[  133.491383][ T6451] netlink: 'syz.1.677': attribute type 29 has an invalid length.
[  133.519012][ T6453] loop4: detected capacity change from 0 to 64
[  133.526305][ T6450] overlayfs: failed to create directory ./bus/work (errno: 2); mounting read-only
[  133.538286][ T6451] netlink: 'syz.1.677': attribute type 29 has an invalid length.
[  133.583654][ T4229] input: HID 28bd:0071 Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.1/0003:28BD:0071.0007/input/input8
[  133.603374][ T4184] EXT4-fs error (device loop3): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[  133.689314][ T4197] Trying to free block not in datazone
[  133.717578][ T4184] EXT4-fs (loop3): Remounting filesystem read-only
[  133.731641][ T4229] input: HID 28bd:0071 Pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.1/0003:28BD:0071.0007/input/input9
[  133.798349][ T4229] uclogic 0003:28BD:0071.0007: input,hidraw0: USB HID v0.02 Keypad [HID 28bd:0071] on usb-dummy_hcd.5-1/input1
[  133.832107][ T4229] usb 6-1: USB disconnect, device number 5
[  133.998997][ T6460] fido_id[6460]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory
[  134.189172][ T6457] loop4: detected capacity change from 0 to 32768
[  134.231401][    T9] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  134.330028][ T6457] XFS (loop4): Mounting V5 Filesystem
[  134.421664][    T9] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  134.583800][ T6457] XFS (loop4): Ending clean mount
[  134.665061][    T9] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  134.737285][    T9] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  134.804296][ T4197] XFS (loop4): Unmounting Filesystem
[  135.062718][ T6473] chnl_net:caif_netlink_parms(): no params data found
[  135.218021][ T6485] loop1: detected capacity change from 0 to 164
[  135.324587][ T6485] Unable to read rock-ridge attributes
[  135.412863][ T6473] bridge0: port 1(bridge_slave_0) entered blocking state
[  135.463875][ T6473] bridge0: port 1(bridge_slave_0) entered disabled state
[  135.472943][ T6473] device bridge_slave_0 entered promiscuous mode
[  135.532233][ T6485] Unable to read rock-ridge attributes
[  135.559241][ T6493] EXT4-fs (loop4): mounted filesystem without journal. Opts: barrier,nombcache,noquota,barrier,minixdf,barrier,,errors=continue. Quota mode: none.
[  135.579012][ T6473] bridge0: port 2(bridge_slave_1) entered blocking state
[  135.621369][ T6473] bridge0: port 2(bridge_slave_1) entered disabled state
[  135.626257][ T6493] ext4 filesystem being mounted at /138/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  135.664592][ T6473] device bridge_slave_1 entered promiscuous mode
[  135.668726][ T6493] EXT4-fs error (device loop4): ext4_map_blocks:739: inode #15: block 1: comm syz.4.692: lblock 1 mapped to illegal pblock 1 (length 5)
[  135.699015][ T6493] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 5 with error 117
[  135.720384][ T6493] EXT4-fs (loop4): This should not happen!! Data will be lost
[  135.720384][ T6493] 
[  135.817719][ T6473] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  135.846639][ T6473] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  135.881405][ T6505] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[  135.918531][ T6507] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  135.942971][ T6505] EXT4-fs (loop1): mounted filesystem without journal. Opts: nombcache,nobarrier,norecovery,errors=remount-ro,resgid=0x0000000000000000,. Quota mode: writeback.
[  135.980847][ T5139] EXT4-fs error (device loop4): ext4_map_blocks:739: inode #15: block 8: comm kworker/u4:8: lblock 8 mapped to illegal pblock 8 (length 8)
[  136.012116][ T6507] ext4 filesystem being mounted at /69/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  136.064424][ T6505] EXT4-fs error (device loop1): htree_dirblock_to_tree:1112: inode #2: block 48: comm syz.1.694: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=16, rec_len=5, size=1024 fake=0
[  136.096847][ T5139] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  136.114732][ T5139] EXT4-fs (loop4): This should not happen!! Data will be lost
[  136.114732][ T5139] 
[  136.191010][ T6507] EXT4-fs error (device loop5): ext4_validate_inode_bitmap:106: comm syz.5.695: Corrupt inode bitmap - block_group = 0, inode_bitmap = 20
[  136.221546][ T6473] team0: Port device team_slave_0 added
[  136.326175][ T6473] team0: Port device team_slave_1 added
[  136.354890][ T6525] set_capacity_and_notify: 3 callbacks suppressed
[  136.354907][ T6525] loop4: detected capacity change from 0 to 512
[  136.373344][ T6527] loop1: detected capacity change from 0 to 512
[  136.419436][ T6473] batman_adv: batadv0: Adding interface: batadv_slave_0
[  136.425971][ T6520] EXT4-fs error (device loop5) in ext4_free_inode:362: Corrupt filesystem
[  136.442432][ T6473] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  136.486172][ T6473] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  136.497300][ T6527] EXT4-fs (loop1): Ignoring removed nobh option
[  136.504153][ T6525] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  136.539942][ T6527] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  136.571221][ T6525] EXT4-fs (loop4): orphan cleanup on readonly fs
[  136.595787][ T6525] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2
[  136.606257][ T4230] Bluetooth: hci1: command 0x0409 tx timeout
[  136.623763][ T6525] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2
[  136.625817][ T6527] EXT4-fs (loop1): 1 truncate cleaned up
[  136.644499][ T6527] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nobh,debug_want_extra_isize=0x0000000000000068,mb_optimize_scan=0x0000000000000001,max_batch_time=0x0000000000000007,dioread_lock,. Quota mode: none.
[  136.660506][ T6525] EXT4-fs (loop4): 1 truncate cleaned up
[  136.673120][ T6473] batman_adv: batadv0: Adding interface: batadv_slave_1
[  136.673492][ T6525] EXT4-fs (loop4): mounted filesystem without journal. Opts: resgid=0x0000000000000000,usrjquota="errors=continue,noload,data_err=ignore,grpjquota="errors=continue,grpquota,jqfmt=vfsv1,,errors=continue. Quota mode: writeback.
[  136.683589][ T6473] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  136.737054][ T6525] EXT4-fs (loop4): re-mounted. Opts: (null). Quota mode: writeback.
[  136.850764][ T6473] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  136.903469][ T4185] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /160/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  136.929943][ T4185] EXT4-fs (loop1): Remounting filesystem read-only
[  136.965169][ T4185] EXT4-fs error (device loop1): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  137.014801][ T4185] EXT4-fs (loop1): Remounting filesystem read-only
[  137.027888][ T6473] device hsr_slave_0 entered promiscuous mode
[  137.052982][ T4185] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /160/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  137.082026][ T6473] device hsr_slave_1 entered promiscuous mode
[  137.091433][ T6473] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  137.100555][ T6473] Cannot create hsr debugfs directory
[  137.106771][ T4185] EXT4-fs (loop1): Remounting filesystem read-only
[  137.116139][ T4185] EXT4-fs error (device loop1): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  137.143260][ T4185] EXT4-fs (loop1): Remounting filesystem read-only
[  137.150437][ T4229] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  137.185297][ T4185] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /160/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  137.220857][ T4185] EXT4-fs (loop1): Remounting filesystem read-only
[  137.248449][ T4185] EXT4-fs error (device loop1): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  137.289942][ T4185] EXT4-fs (loop1): Remounting filesystem read-only
[  137.299850][ T4185] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /160/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  137.361355][ T4185] EXT4-fs (loop1): Remounting filesystem read-only
[  137.380182][ T4185] EXT4-fs error (device loop1): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  137.434299][ T4229] usb 6-1: Using ep0 maxpacket: 16
[  137.463505][ T4185] EXT4-fs (loop1): Remounting filesystem read-only
[  137.512106][ T4185] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /160/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  137.549396][ T4185] EXT4-fs (loop1): Remounting filesystem read-only
[  137.584244][ T4229] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 130, changing to 11
[  137.613541][ T4185] EXT4-fs error (device loop1): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  137.634287][ T4229] usb 6-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 10
[  137.674939][ T4185] EXT4-fs (loop1): Remounting filesystem read-only
[  137.686301][ T6473] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  137.698780][ T6561] loop4: detected capacity change from 0 to 2048
[  137.702090][ T4229] usb 6-1: config 0 interface 0 has no altsetting 0
[  137.714724][ T6473] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  137.720206][ T4229] usb 6-1: New USB device found, idVendor=044f, idProduct=b320, bcdDevice= 0.00
[  137.751740][ T4229] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  137.786575][ T4229] usb 6-1: config 0 descriptor??
[  137.813144][ T6566] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  137.862117][    T9] device hsr_slave_0 left promiscuous mode
[  137.890892][   T26] audit: type=1800 audit(1774708519.681:19): pid=6561 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.709" name="file2" dev="loop4" ino=16 res=0 errno=0
[  137.912116][ T6569] NILFS error (device loop4): nilfs_lookup: deleted inode referenced: 12
[  137.960664][ T6570] loop0: detected capacity change from 0 to 512
[  138.019709][    T9] device hsr_slave_1 left promiscuous mode
[  138.063004][ T6569] Remounting filesystem read-only
[  138.068304][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  138.073532][ T6570] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  138.084090][    T9] batman_adv: batadv0: Removing interface: batadv_slave_0
[  138.095873][ T6570] ext4 filesystem being mounted at /129/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  138.161745][ T6570] EXT4-fs error (device loop0): ext4_validate_inode_bitmap:106: comm syz.0.711: Corrupt inode bitmap - block_group = 0, inode_bitmap = 20
[  138.195754][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  138.213761][    T9] batman_adv: batadv0: Removing interface: batadv_slave_1
[  138.225103][ T6572] EXT4-fs error (device loop0) in ext4_free_inode:362: Corrupt filesystem
[  138.238391][ T4197] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer
[  138.257454][    T9] device bridge_slave_1 left promiscuous mode
[  138.263917][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[  138.284786][ T4229] hid (null): invalid report_size 26545
[  138.292426][    T9] device bridge_slave_0 left promiscuous mode
[  138.301535][ T4229] thrustmaster 0003:044F:B320.0008: unknown main item tag 0x6
[  138.309379][ T4229] thrustmaster 0003:044F:B320.0008: invalid report_size 26545
[  138.317404][ T4229] thrustmaster 0003:044F:B320.0008: item 0 2 1 7 parsing failed
[  138.325973][ T4229] thrustmaster 0003:044F:B320.0008: parse failed
[  138.332346][ T4229] thrustmaster: probe of 0003:044F:B320.0008 failed with error -22
[  138.357170][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[  138.507413][ T6576] loop0: detected capacity change from 0 to 512
[  138.523421][ T5203] usb 6-1: USB disconnect, device number 6
[  138.578505][ T6576] FAT-fs (loop0): error, clusters badly computed (0 != 1)
[  138.610795][ T6576] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 51)
[  138.644286][    T9] device veth1_macvtap left promiscuous mode
[  138.650936][    T9] device veth0_macvtap left promiscuous mode
[  138.657305][    T9] device veth1_vlan left promiscuous mode
[  138.663343][    T9] device veth0_vlan left promiscuous mode
[  138.684310][ T4621] Bluetooth: hci1: command 0x041b tx timeout
[  139.194748][    T9] team0 (unregistering): Port device team_slave_1 removed
[  139.229647][    T9] team0 (unregistering): Port device team_slave_0 removed
[  139.271734][    T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  139.311252][    T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  139.429734][    T9] bond0 (unregistering): Released all slaves
[  139.462534][ T6580] loop0: detected capacity change from 0 to 32768
[  139.480961][ T6473] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  139.523923][ T6580] JBD2: Ignoring recovery information on journal
[  139.614414][ T6473] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  139.640759][ T6580] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  140.061890][ T6591] loop4: detected capacity change from 0 to 32768
[  140.100810][ T6591] gfs2: fsid=__Š°"_½z#²˱1Ä	¢ “I¡3ØÆÆåwÕÊ‚X9: Trying to join cluster "lock_nolock", "__Š°"_½z#²˱1Ä	¢ “I¡3ØÆÆåwÕÊ‚X9"
[  140.115998][ T6591] gfs2: fsid=__Š°"_½z#²˱1Ä	¢ “I¡3ØÆÆåwÕÊ‚X9: Now mounting FS (format 0)...
[  140.148822][ T6591] gfs2: fsid=__Š°"_½z#²˱1Ä	¢ “I¡3ØÆÆåwÕÊ‚X9.s: no journals!
[  140.683999][    C1] sched: RT throttling activated
[  140.721668][ T4186] ocfs2: Unmounting device (7,0) on (node local)
[  141.237089][ T4621] Bluetooth: hci1: command 0x040f tx timeout
[  141.310092][ T6473] 8021q: adding VLAN 0 to HW filter on device bond0
[  141.534405][ T6473] 8021q: adding VLAN 0 to HW filter on device team0
[  141.561887][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  141.601082][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  141.631301][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  141.648356][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  141.677221][ T4339] bridge0: port 1(bridge_slave_0) entered blocking state
[  141.684477][ T4339] bridge0: port 1(bridge_slave_0) entered forwarding state
[  141.754638][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  141.774592][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  141.785053][ T4339] bridge0: port 2(bridge_slave_1) entered blocking state
[  141.792140][ T4339] bridge0: port 2(bridge_slave_1) entered forwarding state
[  141.882870][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  141.915444][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  141.926799][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  142.034177][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  142.057062][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  142.088056][ T4229] kernel read not supported for file /dsp1 (pid: 4229 comm: kworker/0:5)
[  142.115374][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  142.144836][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  142.181796][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  142.190746][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  142.267960][ T6473] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  142.358081][ T6473] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  142.399928][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  142.420956][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  142.449017][ T6642] loop0: detected capacity change from 0 to 1024
[  142.461566][ T6641] loop5: detected capacity change from 0 to 1024
[  142.468754][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  142.519110][ T6642] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  143.057741][ T6660] bridge0: port 2(bridge_slave_1) entered disabled state
[  143.112065][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  143.134734][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  143.148319][ T6473] 8021q: adding VLAN 0 to HW filter on device batadv0
[  143.194560][ T6630] chnl_net:caif_netlink_parms(): no params data found
[  143.265925][ T5206] Bluetooth: hci1: command 0x0419 tx timeout
[  143.517981][ T6630] bridge0: port 1(bridge_slave_0) entered blocking state
[  143.550081][ T6630] bridge0: port 1(bridge_slave_0) entered disabled state
[  143.585140][ T6630] device bridge_slave_0 entered promiscuous mode
[  143.604527][ T6670] loop5: detected capacity change from 0 to 4096
[  143.632280][ T6630] bridge0: port 2(bridge_slave_1) entered blocking state
[  143.660237][ T6630] bridge0: port 2(bridge_slave_1) entered disabled state
[  143.691666][ T6630] device bridge_slave_1 entered promiscuous mode
[  143.858756][ T6630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  143.908480][ T6691] netlink: 4 bytes leftover after parsing attributes in process `syz.0.745'.
[  143.942516][ T6630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  144.087609][ T6630] team0: Port device team_slave_0 added
[  144.142297][ T6630] team0: Port device team_slave_1 added
[  144.274847][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  144.284522][ T5206] Bluetooth: hci0: command 0x0409 tx timeout
[  144.325392][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  144.371410][ T6699] loop0: detected capacity change from 0 to 2048
[  144.381298][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  144.420560][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  144.445288][ T6630] batman_adv: batadv0: Adding interface: batadv_slave_0
[  144.452266][ T6630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  144.535904][ T6630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  144.564544][ T6702] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  144.606512][ T6630] batman_adv: batadv0: Adding interface: batadv_slave_1
[  144.613588][ T6630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  144.634058][ T6699] NILFS error (device loop0): nilfs_lookup: deleted inode referenced: 12
[  144.639858][   T26] audit: type=1800 audit(1774708526.421:20): pid=6699 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.748" name="file2" dev="loop0" ino=16 res=0 errno=0
[  144.702830][ T6704] loop5: detected capacity change from 0 to 256
[  144.714304][ T6630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  144.744105][ T6699] Remounting filesystem read-only
[  144.757020][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  144.778822][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  144.833880][ T6473] device veth0_vlan entered promiscuous mode
[  144.842116][ T6704] exfat: Deprecated parameter 'utf8'
[  144.892949][ T6473] device veth1_vlan entered promiscuous mode
[  144.935265][ T6630] device hsr_slave_0 entered promiscuous mode
[  144.955408][ T6704] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[  144.976412][ T6630] device hsr_slave_1 entered promiscuous mode
[  145.044688][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  145.054746][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  145.181493][ T6686] loop4: detected capacity change from 0 to 40427
[  145.195028][ T4186] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer
[  145.206162][ T6473] device veth0_macvtap entered promiscuous mode
[  145.255263][ T6686] F2FS-fs (loop4): Small segment_count (9 < 1 * 24)
[  145.263933][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  145.264428][ T6686] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  145.293206][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  145.333008][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  145.389000][ T6473] device veth1_macvtap entered promiscuous mode
[  145.471685][ T6686] F2FS-fs (loop4): Found nat_bits in checkpoint
[  145.491963][ T6716] pimreg: tun_chr_ioctl cmd 1074812117
[  145.545152][ T6473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  145.636415][ T6473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  145.674092][ T6686] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  145.691414][ T6473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  145.705163][ T6686] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  145.729334][ T6473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  145.775930][ T6473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  145.824290][ T6473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  145.862978][ T6473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  145.891881][ T6473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  145.931258][ T6473] batman_adv: batadv0: Interface activated: batadv_slave_0
[  145.949520][ T4197] attempt to access beyond end of device
[  145.949520][ T4197] loop4: rw=2049, want=45104, limit=40427
[  145.981380][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  145.991783][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  146.017413][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  146.048000][ T6473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  146.097002][ T6473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  146.150208][ T6473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  146.164335][ T6731] loop5: detected capacity change from 0 to 8
[  146.208263][ T6473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  146.253700][ T6473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  146.289085][ T6473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  146.311827][ T6473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  146.322872][ T6473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  146.339135][ T6473] batman_adv: batadv0: Interface activated: batadv_slave_1
[  146.361232][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  146.369836][ T5206] Bluetooth: hci0: command 0x041b tx timeout
[  146.414952][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  146.498591][ T6473] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  146.524342][ T6473] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  146.561361][ T6473] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  146.591538][ T6473] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  146.841813][ T6741] netlink: 12 bytes leftover after parsing attributes in process `syz.4.755'.
[  146.879743][ T6630] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  146.917972][ T6630] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  146.925304][ T5763] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  146.933235][ T5763] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  147.009598][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  147.021942][ T6630] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  147.042963][ T6747] loop4: detected capacity change from 0 to 22
[  147.074408][ T6630] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  147.110776][ T5763] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  147.114981][ T6747] MTD: Attempt to mount non-MTD device "/dev/loop4"
[  147.130144][ T5763] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  147.165633][ T5763] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  147.219199][ T6747] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  147.348632][    T9] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  147.409137][ T6738] loop5: detected capacity change from 0 to 32768
[  147.428367][ T6630] 8021q: adding VLAN 0 to HW filter on device bond0
[  147.522150][    T9] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  147.544644][ T6738] ERROR: (device loop5): dbAlloc: the hint is outside the map
[  147.544644][ T6738] 
[  147.590304][ T6630] 8021q: adding VLAN 0 to HW filter on device team0
[  147.614684][ T6738] ERROR: (device loop5): remounting filesystem as read-only
[  147.615310][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  147.642252][ T6738] attempt to access beyond end of device
[  147.642252][ T6738] loop5: rw=2049, want=4680040, limit=32768
[  147.652682][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  147.693435][    T9] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  147.718179][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  147.731163][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  147.747665][  T144] bridge0: port 1(bridge_slave_0) entered blocking state
[  147.754917][  T144] bridge0: port 1(bridge_slave_0) entered forwarding state
[  147.763245][ T4943] ------------[ cut here ]------------
[  147.782538][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  147.785939][ T4943] kernel BUG at fs/jfs/inode.c:175!
[  147.802076][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  147.812331][ T4943] invalid opcode: 0000 [#1] PREEMPT SMP KASAN
[  147.818442][ T4943] CPU: 1 PID: 4943 Comm: syz-executor Not tainted syzkaller #0
[  147.820186][  T144] bridge0: port 2(bridge_slave_1) entered blocking state
[  147.826003][ T4943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  147.826017][ T4943] RIP: 0010:jfs_evict_inode+0x42d/0x430
[  147.826044][ T4943] Code: f2 fe e9 e0 fd ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 23 fe ff ff 4c 89 f7 e8 bd a2 f2 fe e9 16 fe ff ff e8 63 97 ad fe <0f> 0b 90 41 57 41 56 41 54 53 48 89 fb 49 bc 00 00 00 00 00 fc ff
[  147.826060][ T4943] RSP: 0018:ffffc9000322fb40 EFLAGS: 00010293
[  147.833100][  T144] bridge0: port 2(bridge_slave_1) entered forwarding state
[  147.843127][ T4943] RAX: ffffffff82cb89ad RBX: ffff888073b00d70 RCX: ffff888021285940
[  147.843146][ T4943] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888073b00d70
[  147.843158][ T4943] RBP: 0000000000000001 R08: ffffffff901d41e7 R09: 1ffffffff203a83c
[  147.849336][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  147.868369][ T4943] R10: dffffc0000000000 R11: fffffbfff203a83d R12: dffffc0000000000
[  147.868386][ T4943] R13: dffffc0000000000 R14: ffff888073b009f8 R15: ffff888073b00d98
[  147.868400][ T4943] FS:  0000555570e4d500(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000
[  147.868418][ T4943] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  147.868433][ T4943] CR2: 0000001b3291cff8 CR3: 0000000056725000 CR4: 00000000003506e0
[  147.868451][ T4943] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  147.868463][ T4943] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  147.868475][ T4943] Call Trace:
[  147.868482][ T4943]  <TASK>
[  147.868488][ T4943]  ? evict+0x4c3/0x8d0
[  147.868523][ T4943]  ? jfs_write_inode+0x220/0x220
[  147.868542][ T4943]  evict+0x4c9/0x8d0
[  147.868564][ T4943]  ? proc_nr_inodes+0x320/0x320
[  147.868587][ T4943]  ? do_raw_spin_unlock+0x11d/0x230
[  147.868608][ T4943]  evict_inodes+0x60c/0x6a0
[  147.868626][ T4943]  ? __dentry_kill+0x530/0x650
[  147.868646][ T4943]  ? clear_inode+0x150/0x150
[  147.868668][ T4943]  generic_shutdown_super+0x93/0x300
[  147.868689][ T4943]  kill_block_super+0x7c/0xe0
[  147.868709][ T4943]  deactivate_locked_super+0x93/0xf0
[  147.868728][ T4943]  cleanup_mnt+0x42d/0x4e0
[  147.868747][ T4943]  ? lockdep_hardirqs_on+0x94/0x140
[  147.868768][ T4943]  task_work_run+0x125/0x1a0
[  147.868789][ T4943]  exit_to_user_mode_loop+0x10f/0x130
[  147.868809][ T4943]  exit_to_user_mode_prepare+0xee/0x180
[  147.868827][ T4943]  syscall_exit_to_user_mode+0x16/0x40
[  147.868847][ T4943]  do_syscall_64+0x58/0xa0
[  147.868864][ T4943]  ? clear_bhb_loop+0x30/0x80
[  147.868882][ T4943]  ? clear_bhb_loop+0x30/0x80
[  147.868900][ T4943]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  147.868920][ T4943] RIP: 0033:0x7f0e77104a57
[  147.868939][ T4943] Code: a2 c7 05 9c fc 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  147.868955][ T4943] RSP: 002b:00007ffe3f286888 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  147.868978][ T4943] RAX: 0000000000000000 RBX: 00007f0e77199048 RCX: 00007f0e77104a57
[  147.868992][ T4943] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe3f286940
[  147.869004][ T4943] RBP: 00007ffe3f286940 R08: 00007ffe3f287940 R09: 00000000ffffffff
[  147.878367][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  147.882257][ T4943] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe3f2879d0
[  147.882275][ T4943] R13: 00007f0e77199048 R14: 00000000000240b6 R15: 00007ffe3f287a10
[  148.159086][ T4943]  </TASK>
[  148.162220][ T4943] Modules linked in:
[  148.170396][ T4943] ---[ end trace bca3fb62a9069d10 ]---
[  148.178245][ T4943] RIP: 0010:jfs_evict_inode+0x42d/0x430
[  148.185464][ T4943] Code: f2 fe e9 e0 fd ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 23 fe ff ff 4c 89 f7 e8 bd a2 f2 fe e9 16 fe ff ff e8 63 97 ad fe <0f> 0b 90 41 57 41 56 41 54 53 48 89 fb 49 bc 00 00 00 00 00 fc ff
[  148.206185][ T4943] RSP: 0018:ffffc9000322fb40 EFLAGS: 00010293
[  148.212385][ T4943] RAX: ffffffff82cb89ad RBX: ffff888073b00d70 RCX: ffff888021285940
[  148.213809][    T9] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  148.220448][ T4943] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888073b00d70
[  148.220468][ T4943] RBP: 0000000000000001 R08: ffffffff901d41e7 R09: 1ffffffff203a83c
[  148.220481][ T4943] R10: dffffc0000000000 R11: fffffbfff203a83d R12: dffffc0000000000
[  148.220495][ T4943] R13: dffffc0000000000 R14: ffff888073b009f8 R15: ffff888073b00d98
[  148.220508][ T4943] FS:  0000555570e4d500(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000
[  148.220527][ T4943] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  148.220542][ T4943] CR2: 0000001b3291cff8 CR3: 0000000056725000 CR4: 00000000003506e0
[  148.220562][ T4943] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  148.220574][ T4943] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  148.220589][ T4943] Kernel panic - not syncing: Fatal exception
[  148.220677][ T4943] Kernel Offset: disabled
[  148.313066][ T4943] Rebooting in 86400 seconds..