last executing test programs:

28.013273196s ago: executing program 1 (id=240):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree_skb\x00', r1}, 0x10)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001030000000000000000fc0100000000000000000000000000003ed30000000000000000000000000000000000000000000002"], 0xb8}}, 0x0)

27.918287858s ago: executing program 1 (id=241):
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
r0 = creat(&(0x7f0000000540)='./file1\x00', 0xd)
ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0xa, 0x3, 0x800000, 0x7ffffc, 0xbffffff8})

27.7687518s ago: executing program 1 (id=242):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x129000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000100)={0x0, 0x95d, &(0x7f0000000240)="a87c9f096cd50b568f652ff07b0e22153a265a8a55f924cd147a8e6f0b193a5751f7", 0x0, 0x22})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f00000001c0)="b979090000b80c000000ba000000000f30660f015d000f20e035800000000f22e08fc978c2e8640f01b304f4dc20650fc7a03fa5ad000f22850fc729d9fab8080000000f23c00f21f835000004000f23f8", 0x51}], 0x1, 0x9, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

27.202207148s ago: executing program 1 (id=243):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x549, &(0x7f0000001800)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_all\x00', 0x275a, 0x0)
creat(&(0x7f0000001700)='./file0\x00', 0x191)
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2029c1b, 0x0, 0x1, 0x0, &(0x7f0000000080))
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
mkdirat(r0, &(0x7f0000000000)='./bus/file0\x00', 0x0)
renameat2(r0, &(0x7f0000000240)='./bus/file0\x00', r0, &(0x7f00000001c0)='./file0\x00', 0x2)

26.65406032s ago: executing program 1 (id=245):
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
write$vga_arbiter(r0, &(0x7f0000000000)=@other={'lock', ' ', 'io'}, 0x8)
syz_open_procfs(0x0, &(0x7f0000000000)='loginuid\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080))
pselect6(0x40, &(0x7f0000000580), 0x0, &(0x7f0000000d00)={0xd0}, 0x0, 0x0)
close(r0)

25.610609073s ago: executing program 1 (id=249):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000800)={&(0x7f0000000780)='contention_end\x00', r0}, 0x18)
move_pages(0x0, 0x20000000000001ab, &(0x7f0000000000), 0x0, &(0x7f0000000000)=[0x0], 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0)
r1 = userfaultfd(0x801)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4})

8.675666574s ago: executing program 0 (id=288):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x30, 0x10, 0x0, 0x0, 0x0, {}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x4}]}, 0x30}}, 0x0)
r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='-'], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0})
io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0)

8.462487639s ago: executing program 0 (id=289):
getuid()
ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f00)
sendmmsg$sock(r1, &(0x7f0000003bc0)=[{{0x0, 0xfe3d, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4000000000002ca, 0x4040014)

7.381971094s ago: executing program 0 (id=294):
ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0)
syz_mount_image$xfs(&(0x7f000000b840), &(0x7f000000b880)='./file0\x00', 0x0, &(0x7f0000000080), 0x1, 0xb823, &(0x7f0000017140)="$eJzs3QtsnWX9wPG3XVu6/5+QkSyIcnGKRBSRbSWOiYa2jG7lUhAQKxfZ2NptbDAuG4whrEwk3AYT0AwE3JDhECYTt6HCcMTGKA5CzGLU4IWIiSSiRIm6wKh5ey60Z11Dn+55mrHPJ1nPed/T37P2fM/znkAIp73lzOYsq8kKurJKr3Sc1HnhX1pnrj206qj7p132eOFsY33x4cbibVPxtjnrXaz3dHXhVM3KDRur84Pqvuv+3+jRVftl2cyKdSYVbq6ZUPq+ngrF0+NKj1eXD6tuKfwp+//8ywvdy67LsmxMn/mqLMvG7/SL7qXam6a2FJ+TrE+3UcWHq955rPe2pvDn+Oey7Pgt2S5fHyMq/znHnLpj7Ukj/YPsCdqbprZW9G8sdq4q7sfGyj24N6p8nT/71PseLT6Fva+3EUw4LO1NLadkg+zjI9e+fV5P4bpZm2VZXZZl+2RZVj/SPdg9mpob8vfs6tJxMXtp/48Z6HUx74IJS7IsOyB/Gy9cLwrvBcCepam54YQB9n/dYPt/0d87L7L/Yc/X2tTckO/1iv1fP9j+P/ysW88u7PvGSYWpt0f2lwAAAAAABnTF1UvmzZg/v+Nyd9xxx53ynZG+MgGxvbPpR/onAQAAAAAAAAAAAN6tFP858Uj/jgAAAAAAAAAAAADwXtHa1vTaqKp+p0b1PTjk+Y7e22P+0z5nzZpN+5duiw+fPMCS/T7nv6enp+eXWz61sXi4T8XnZddXDufrL92+pr142Fj5+YO1vWdrs+mdc+d3jM//qhNqs8X5wYR83ZbabEV+MDE/mFqbrc0PGnoPRmdb8oNPzlwwf1Z+YlrgM/be0trWlY3qVyzr92ro23/p9u6VpdtBliytVpMV+z/50w2rKx4r2UX/8vpNu/pccnaPofXfOqd0O8iSO+3/5+75RftAj+26f3n9Zv3jGuD6369R5XW/4vo/boAly/Od259fnPefcemr3cVTNe/m+t9n/RMq+/cuXr7+50tNKV3/8/eWE4f1ZOyFWtuuf22w/T94/5oPFL+tus9sebWHnt20PO//u/PPLb1OaofYf8pg+79q3E7XE4aotW11T8X+H0L/7KMDLFluctjC21bm/V++8qBFfR4bSv8TK/sfvfDiS4++4uolR829eMbsjtkdlzRMmjh5csPkYyc1HN17SSh8Hd6TshcZ3v7v/fz/vjNVWXZ4eX599wP/yPt/fM7cscVT9UPs3zLo/p/e/2eljw9XZ3V12eIZCxdePqHwtXQ4sfC18G0D9B/C+/9hRxS/bXTxtirLDizPX3n75rfy/p++a8f04qm6IfafOmj/rvLfS6Bh7v9ZFTP9+tcduP+OvP9pJz7zRPHUUN//pw3Wv3qV/T9crW0V/8JnN8v7X7hq1dbA8Vb//BdXiv6T1z+2JnD8JP3jStH/9Z+sXRY4frL+caXof8eKDVcFjp+if1wp+rd8a/3pgeOn6h9Xiv6H3PH05MDxNv3jStF/W9cPDw0cP03/uFL0n77p9XWB46frH1eK/o/86I1bAsc/p39cKfr/85H//jlw/Az940rR/7iH3+oOHD9T/7hS9J9y858mBI6fpX9cKfovv/GVAwLHP69/XCn6//obf10aOH62/nGl6P/Be/7WHjj+Bf3jStH/t898ZkXgeLv+caXoP+b7xz4ZOP5F/eNK0f/k1cf8IXD8HP3jStF/2ffGbw8cP1f/uFL033H9J/YNHD9P/7hS9D/m9iOODBw/X/+4UvRf8MBHmgPHv6R/XCn6P/y1cR2B4xfoH1eK/v/+avuHAsen6x9Xiv7H33JeXeD4DP3jStF/1r2nLwgcv1D/uFL0X/f1s0L/Zysz9Y8rRf9f/Xja5sDxWfrHlaL/QRtPuTdwvEP/uFL0b1zT+K/A8U7940rR/+bvTtkWOD5b/7hS9D9t+d0HB47P0T+uFP1vXLbiuMDxufrHlaL/7++874zA8Yv0jytF/7H3r1wUOD5P/7hS9J/3xA1dgePz9Y8rRf8HN3d9J3D8Yv3jStF/+7rbXggcv0T/uFL0H//gTa8Gji/QP64U/W+4e8s5geOX6h9Xiv6nfrP72sDxy/SPK0X/A279+djA8cv1jytF/z/esLUhcPwK/eNK0X/Voy/+LHB8of5xpeg/96FtLweOL9I/rhT9J274zU2B41fqH1eK/m8+9VJot6v0jytF/8/et+/swPHF+seVov8bd9U3Bo5frX9cKfo//pWajwWOL9E/rhT9O2/L9gscv0b/uFL0f/+3D34zcPzL+seVov+Ljx34UuD4tfrHlaL/rU+P3Rg4fp3+caXo3/yDMXcGji/VHwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP7HDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhb27gLasLvj/f2eYGVIkFBEESUGlUQFB6VIsQlGRTumUUMJCEBAUFSUkFVEEEVBRuru7u7v7v4YJcfwMD4+L/49HP6/XWnPvqbtnn+97733P3O89ewAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3norL7XCYgMDQ0Ze2/lf7r9rnU+tu+bdy6515LSDZj9wmc2PGXHrIuONvHuRV8cw8NrCFhl+3+ARDxmy3/FHDB5+ZfDrlzvB+OMPmnhg0Fp5rXZY9X9Y7elGXRg8+uqg3Uf8GW3C4R+G7XvK8HWe5H9YXq2VF116qeGDN+LP6G7jjLx75O2jLw8Z8WfB1QYGFlxlYKzbx9vvmSPOGPR2r8N/gpUXXXrZMfoPjOz82viNuX+3GnM7n37/deZ8W8O9RVZedKnlhrce23687oyzbffqa8f1IQcPDAw5ZGBgyKEDA0MOe7t78NZYdLF5Fxt+zB91fUT1nUe9IEjH90EnTrfu2QMDA0NHfJ8Ycvio7wXAf5ZFF5t38bD/Dxt1f9r/j9xn7qvt//Cfb9lFF5t34HWv80fcuvOof9/H/X+LzTb5n/59DgAAAPwf8srDJ50ycq5v8MDAtANjzPe+ZuTPBQYde9pll71tK/p/Q5gn+9ffmfgPM7zzeEdNNzCwyUpv96rwNvB7Et3076Z/N/276d9N/276d9O/m/7d9O+mfzf9u+nfTf9iY5n/n2TU51fm2GuOkQ+d+diTtj1/zK8fftt4/8/X+m3z3zr/P7DBoBEthzffYGBg4LOLLr/irAMDA+dve9KxMwyMvm/+4fctONk4I08QMOtrH5ccy4JHvZv8tZM1TDB6Gce+tvxlXz1knEFjrMTrTHriEUesv/KzHxnz8yxjfx6jzy+x3x5bzTjqvSyDx3jQ2LbVUcsf9VzG7Dxy3Wcdvu5zbrXxZnNuud32s2+w8RrrrbPeOpvMO988Cyww7wLzzzfvnOtusNE6c434OJYxG3HqisXfzJgNG3PMHl709WM25nMb25hN98Zj9toSt734+XVHjdmQ/+WYLf7GYzbdBqPWdZGhA6u/NjTD/8olhg5sO/zK3OMO34RGPnbK4Y9daLLBAwN7/+OJDr807uhtcNDOG7wF5y0Z+XnRkZ8Xi+ctOWFs5y0ZWGuM5Sww4tNWJ4963Jjvsx5585s+b8lCZ6wy//B9cYyv///Dv/X9/196zT9o9ECNOmnIyMeM6PWP80yMGrZFXneeifnSuWTeSv+yvtMNHr1dp/Ud+b64QWOM/xu9L25g7d2Om3XE81pkvhFf9cq/HSUfO5b7x+gF/3TsGHjjY8c4/7j4j1vXuXiaMY8dnx77Kv7TfjFqjMYd40FjO3asfMTzOw1f/qh1HsuxY7kNRr7R+B/HjuF/7eKjjh3D132poQN7D78yz/ArSw8dOHL4lXlfuzL+wGnDr8yx1qYbrT38hmX+dbudddA//cJj2G6XGmO7fRPnx1n4goGBhU9Lz2vsw5ml7XbYG6xvfj/3wBu+n3vDu+a4bGBgYIoR36WHP8kR6/7vSOs75I3XN5x/YuCNzj8xsPVK2532Fq/v6P3stW1t5OmilhnL1/zTfjbJv+xnu4zzuj3jzb6uWTs8fsTlKUcv7eVJpxw2aoyGjrHc/+l79KjnkvqPes33eoMPHhj0RmOz9JsZm4nfeGze7OuXWWcccf/4bzA2L5281zajxmbY/3Jslh7L2Lz+9fDrDdp5YPx/Hpshr70Gnmnk2Cz1ZsZmordmu5kgPH7E5ZlH3/ToQWcdO2pswljE7/+jlr/U/3ZsVh+93cz02n0zDB4YNmxg2zW22mqLuUd8HHV1nhEf33gfXOLNjOV4b81YTjXyqDP4Xwdn9E17nnj64f/uPrjE/3YspxsYPOrf3BuMubO8dfz8p5v+3fTvpn83/bvp303/bvoXG8v8/3Sjfi643zybfHTkD2OGTr3jlJu93ev7Nvuvnv8f2fef5v83m3LHqQcPjL7vDednRzzm/+T87HwjPu0w96jHjTk/OPLmNz0/e8qE6y3+/2h+9t8yal99Ez83dPzvpn83/bvp303/bvp307+b/t3076Z/N/276d9N/276FxvL/P9co34PYPJLl9ti5ETo0CU3223Xt3t932b/1fP/I/v+0/z/rrtttuTggdH3veH8/4jHdMz/b7baAgf8X57/H7Wvmv/nf6B/N/276d9N/276d9O/m/7d9O+mfzf9u+nfTf9u+hcby/z/IqN+D2CFo3eff/TvA+xy2DNv9/q+zf5b5//9//+9HP+76d9N/276d9O/m/7d9O+mfzf9u+nfTf9u+nfTv5v+xUbO/w+M8d8eft52EYX5//9sY+n/Bf2jlv7L6x+19F9B/6il/4r6Ry39V9I/aun/Rf2jlv5f0j9q6b+y/lFL/y/rH7X0/4r+UUv/r+oftfRfRf+opf/X9I9a+q+qf9TSfzX9o5b+q+sftfRfQ/+opf+a+kct/dfSP2rpv7b+UUv/dfSPWvqvq3/U0n89/aOW/uvrH7X030D/qKX/1/WPWvpvqH/U0n8j/aOW/hvrH7X030T/qKX/pvpHLf030z9q6b+5/lFL/y30j1r6b6l/1NJ/K/2jlv5b6x+19N9G/6il/zf0j1r6b6t/1NJ/O/2jlv7b6x+19N9B/6il/zf1j1r6f0v/qKX/jvpHLf130j9q6b+z/lFL/130j1r6f1v/qKX/d/SPWvp/V/+opf/39I9a+n9f/6il/676Ry39f6B/1NJ/N/2jlv676x+19P+h/lFL/z30j1r676l/1NJ/L/2jlv4/0j9q6b+3/lFL/330j1r6/1j/qKX/T/SPWvrvq3/U0v+n+kct/X+mf9TS/+f6Ry3999M/aun/C/2jlv6/1D9q6b+//lFL/wP0j1r6H6h/1NL/IP2jlv6/0j9q6X+w/lFL/0P0j1r6H6p/1NL/MP2jlv6H6x+19D9C/6il/6/1j1r6/0b/qKX/kfpHLf1/q3/U0v8o/aOW/r/TP2rp/3v9o5b+R+sftfT/g/5RS/9j9I9a+h+rf9TS/4/6Ry39j9M/aun/J/2jlv7H6x+19D9B/6il/4n6Ry39/6x/1NL/L/pHLf3/qn/U0v8k/aOW/n/TP2rp/3f9o5b+J+sftfQ/Rf+opf+p+kct/U/TP2rpf7r+UUv/M/SPWvqfqX/U0v8s/aOW/mfrH7X0P0f/qKX/ufpHLf3P0z9q6X++/lFL/wv0j1r6X6h/1NL/Iv2jlv4X6x+19L9E/6il/6X6Ry39L9M/aul/uf5RS/8r9I9a+l+pf9TS/yr9o5b+V+sftfS/Rv+opf+1+kct/a/TP2rpf73+UUv/G/SPWvrfqH/U0v8m/aOW/jfrH7X0v0X/qKX/rfpHLf1v0z9q6X+7/lFL/zv0j1r636l/1NL/Lv2jlv536x+19L9H/6il/736Ry3979M/aul/v/5RS/8H9I9a+j+of9TS/yH9o5b+D+sftfR/RP+opf+j+kct/R/TP2rp/7j+UUv/J/SPWvo/qX/U0v8p/aOW/k/rH7X0f0b/qKX/s/pHLf2f0z9q6f+8/lFL/xf0j1r6v6h/1NL/Jf2jlv4v6x+19H9F/6il/6v6RyX9Bw3oH7X0H6R/1NJ/sP5RS/9x9I9a+g/RP2rpP1T/qKX/MP2jlv7j6h+19B9P/6il//j6Ry39J9A/auk/of5RS/+J9I9a+r9D/6il/8T6Ry3936l/1NJ/Ev2jlv6T6h+19J9M/6il/+T6Ry3936V/1NL/3fpHLf2n0D9q6f8e/aOW/lPqH7X0f6/+UUv/qfSPWvpPrX/U0v99+kct/afRP2rpP63+UUv/9+sftfSfTv+opf/0+kct/WfQP2rpP6P+UUv/mfSPWvrPrH/U0v8D+kct/WfRP2rpP6v+UUv/D+oftfT/kP5RS/8P6x+19J9N/6il/+z6Ry3959A/auk/p/5RS/+59I9a+s+tf9TSfx79o5b+8+oftfT/iP5RS/+P6h+19P+Y/lFL//n0j1r6z69/1NJ/Af2jlv4f1z9q6b+g/lFL/4X0j1r6f0L/qKX/J/WPWvovrH/U0n8R/aOW/ovqH7X0X0z/qKX/4vpHLf2X0D9q6b+k/lFL/6X0j1r6L61/1NJ/Gf2jlv7L6h+19P+U/lFL/0/rH7X0X07/qKX/Z/SPWvp/Vv+opf/n9I9a+n9e/6il/xf0j1r6L69/1NJ/Bf2jlv4r6h+19F9J/6il/xf1j1r6f0n/qKX/yvpHLf2/rH/U0v8r+kct/b+qf9TSfxX9o5b+X9M/aum/qv5RS//V9I9a+q+uf9TSfw39o5b+a+oftfRfS/+opf/a+kct/dfRP2rpv67+UUv/9fSPWvqvr3/U0n8D/aOW/l/XP2rpv6H+UUv/jfSPWvpvrH/U0n8T/aOW/pvqH7X030z/qKX/5vpHLf230D9q6b+l/lFL/630j1r6b61/1NJ/G/2jlv7f0D9q6b+t/lFL/+30j1r6b69/1NJ/B/2jlv7f1D9q6f8t/aOW/jvqH7X030n/qKX/zvpHLf130T9q6f9t/aOW/t/RP2rp/139o5b+39M/aun/ff2jlv676h+19P+B/lFL/930j1r6765/1NL/h/pHLf330D9q6b+n/lFL/730j1r6/0j/qKX/3vpHLf330T9q6f9j/aOW/j/RP2rpv6/+UUv/n+oftfT/mf5RS/+f6x+19N9P/6il/y/0j1r6/1L/qKX//vpHLf0P0D9q6X+g/lFL/4P0j1r6/0r/qKX/wfpHLf0P0T9q6X+o/lFL/8P0j1r6H65/1NL/CP2jlv6/1j9q6f8b/aOW/kfqH7X0/63+UUv/o/SPWvr/Tv+opf/v9Y9a+h+tf9TS/w/6Ry39j9E/aul/rP5RS/8/6h+19D9O/6il/5/0j1r6H69/1NL/BP2jlv4n6h+19P+z/lFL/7/oH7X0/6v+UUv/k/SPWvr/Tf+opf/f9Y9a+p+sf9TS/xT9o5b+p+oftfQ/Tf+opf/p+kct/c/QP2rpf6b+UUv/s/SPWvqfrX/U0v8c/aOW/ufqH7X0P0//qKX/+fpHLf0v0D9q6X+h/lFL/4v0j1r6X6x/1NL/Ev2jlv6X6h+19L9M/6il/+X6Ry39r9A/aul/pf5RS/+r9I9a+l+tf9TS/xr9o5b+1+oftfS/Tv+opf/1+kct/W/QP2rpf6P+UUv/m/SPWvrfrH/U0v8W/aOW/rfqH7X0v03/qKX/7fpHLf3v0D9q6X+n/lFL/7v0j1r6361/1NL/Hv2jlv736h+19L9P/6il//36Ry39H9A/aun/oP5RS/+H9I9a+j+sf9TS/xH9o5b+j+oftfR/TP+opf/j+kct/Z/QP2rp/6T+UUv/p/SPWvo/rX/U0v8Z/aOW/s/qH7X0f07/qKX/8/pHLf1f0D9q6f+i/lFL/5f0j1r6v6x/1NL/Ff2jlv6v6h+V9H/tov7/qqX/IP2jlv6D9Y9a+o+jf9TSf4j+UUv/ofpHLf2H6R+19B9X/6il/3j6Ry39x9c/auk/gf5RS/8J9Y9a+k+kf9TS/x36Ry39J9Y/aun/Tv2jlv6T6B+19J9U/6il/2T6Ry39J9c/aun/Lv2jlv7v1j9q6T+F/lFL//foH7X0n1L/qKX/e/WPWvpPpX/U0n9q/aOW/u/TP2rpP43+UUv/afWPWvq/X/+opf90+kct/afXP2rpP4P+UUv/GfWPWvrPpH/U0n9m/aOW/h/QP2rpP4v+UUv/WfWPWvp/UP+opf+H9I9a+n9Y/6il/2z6Ry39Z9c/auk/h/5RS/859Y9a+s+lf9TSf279o5b+8+gftfSfV/+opf9H9I9a+n9U/6il/8f0j1r6z6d/1NJ/fv2jlv4L6B+19P+4/lFL/wX1j1r6L6R/1NL/E/pHLf0/qX/U0n9h/aOW/ovoH7X0X1T/qKX/YvpHLf0X1z9q6b+E/lFL/yX1j1r6L6V/1NJ/af2jlv7L6B+19F9W/6il/6f0j1r6f1r/qKX/cvpHLf0/o3/U0v+z+kct/T+nf9TS//P6Ry39v6B/1NJ/ef2jlv4r6B+19F9R/6il/0r6Ry39v6h/1NL/S/pHLf1X1j9q6f9l/aOW/l/RP2rp/1X9o5b+q+gftfT/mv5RS/9V9Y9a+q+mf9TSf3X9o5b+a+gftfRfU/+opf9a+kct/dfWP2rpv47+UUv/dfWPWvqvp3/U0n99/aOW/hvoH7X0/7r+UUv/DfWPWvpvpH/U0n9j/aOW/pvoH7X031T/qKX/ZvpHLf031z9q6b+F/lFL/y31j1r6b6V/1NJ/a/2jlv7b6B+19P+G/lFL/231j1r6b6d/1NJ/e/2jlv476B+19P+m/lFL/2/pH7X031H/qKX/TvpHLf131j9q6b+L/lFL/2/rH7X0/47+UUv/7+oftfT/nv5RS//v6x+19N9V/6il/w/0j1r676Z/1NJ/d/2jlv4/1D9q6b+H/lFL/z31j1r676V/1NL/R/pHLf331j9q6b+P/lFL/x/rH7X0/4n+UUv/ffWPWvr/VP+opf/P9I9a+v9c/6il/376Ry39f6F/1NL/l/pHLf331z9q6X+A/lFL/wP1j1r6H6R/1NL/V/pHLf0P1j9q6X+I/lFL/0P1j1r6H6Z/1NL/cP2jlv5H6B+19P+1/lFL/9/oH7X0P1L/qKX/b/WPWvofpX/U0v93+kct/X+vf9TS/2j9o5b+f9A/aul/jP5RS/9j9Y9a+v9R/6il/3H6Ry39/6R/1NL/eP2jlv4n6B+19D9R/6il/5/1j1r6/0X/qKX/X/WPWvqfpH/U0v9v+kct/f+uf9TS/2T9o5b+p+gftfQ/Vf+opf9p+kct/U/XP2rpf4b+UUv/M/WPWvqfpX/U0v9s/aOW/ufoH7X0P1f/qKX/efpHLf3P1z9q6X+B/lFL/wv1j1r6X6R/1NL/Yv2jlv6X6B+19L9U/6il/2X6Ry39L9c/aul/hf5RS/8r9Y9a+l+lf9TS/2r9o5b+1+gftfS/Vv+opf91+kct/a/XP2rpf4P+UUv/G/WPWvrfpH/U0v9m/aOW/rfoH7X0v1X/qKX/bfpHLf1v1z9q6X+H/lFL/zv1j1r636V/1NL/bv2jlv736B+19L9X/6il/336Ry3979c/aun/gP5RS/8H9Y9a+j+kf9TS/2H9o5b+j+gftfR/VP+opf9j+kct/R/XP2rp/4T+UUv/J/WPWvo/pX/U0v9p/aOW/s/oH7X0f1b/qKX/c/pHLf2f1z9q6f+C/lFL/xf1j1r6v6R/1NL/Zf2jlv6v6B+19H9V/6ik/zgD+kct/QfpH7X0H6x/1NJ/HP2jlv5D9I9a+g/VP2rpP0z/qKX/uPpHLf3H0z9q6T++/lFL/wn0j1r6T6h/1NJ/Iv2jlv7v0D9q6T+x/lFL/3fqH7X0n0T/qKX/pPpHLf0n0z9q6T+5/lFL/3fpH7X0f7f+UUv/KfSPWvq/R/+opf+U+kct/d+rf9TSfyr9o5b+U+sftfR/n/5RS/9p9I9a+k+rf9TS//36Ry39p9M/auk/vf5RS/8Z9I9a+s+of9TSfyb9o5b+M+sftfT/gP5RS/9Z9I9a+s+qf9TS/4P6Ry39P6R/1NL/w/pHLf1n0z9q6T+7/lFL/zn0j1r6z6l/1NJ/Lv2jlv5z6x+19J9H/6il/7z6Ry39P6J/1NL/o/pHLf0/pn/U0n8+/aOW/vPrH7X0X0D/qKX/x/WPWvovqH/U0n8h/aOW/p/QP2rp/0n9o5b+C+sftfRfRP+opf+i+kct/RfTP2rpv7j+UUv/JfSPWvovqX/U0n8p/aOW/kvrH7X0X0b/qKX/svpHLf0/pX/U0v/T+kct/ZfTP2rp/xn9o5b+n9U/aun/Of2jlv6f1z9q6f8F/aOW/svrH7X0X0H/qKX/ivpHLf1X0j9q6f9F/aOW/l/SP2rpv7L+UUv/L+sftfT/iv5RS/+v6h+19F9F/6il/9f0j1r6r6p/1NJ/Nf2jlv6r6x+19F9D/6il/5r6Ry3919I/aum/tv5RS/919I9a+q+rf9TSfz39o5b+6+sftfTfQP+opf/X9Y9a+m+of9TSfyP9o5b+G+sftfTfRP+opf+m+kct/TfTP2rpv7n+UUv/LfSPWvpvqX/U0n8r/aOW/lvrH7X030b/qKX/N/SPWvpvq3/U0n87/aOW/tvrH7X030H/qKX/N/WPWvp/S/+opf+O+kct/XfSP2rpv7P+UUv/XfSPWvp/W/+opf939I9a+n9X/6il//f0j1r6f1//qKX/rvpHLf1/oH/U0n83/aOW/rvrH7X0/6H+UUv/PfSPWvrvqX/U0n8v/aOW/j/SP2rpv7f+UUv/ffSPWvr/WP+opf9P9I9a+u+rf9TS/6f6Ry39f6Z/1NL/5/pHLf330z9q6f8L/aOW/r/UP2rpv7/+UUv/A/SPWvofqH/U0v8g/aOW/r/SP2rpf7D+UUv/Q/SPWvofqn/U0v8w/aOW/ofrH7X0P0L/qKX/r/WPWvr/Rv+opf+R+kct/X+rf9TS/yj9o5b+v9M/aun/e/2jlv5H6x+19P+D/lFL/2P0j1r6H6t/1NL/j/pHLf2P0z9q6f8n/aOW/sfrH7X0P0H/qKX/ifpHLf3/rH/U0v8v+kct/f+qf9TS/yT9o5b+f9M/aun/d/2jlv4n6x+19D9F/6il/6n6Ry39T9M/aul/uv5RS/8z9I9a+p+pf9TS/yz9o5b+Z+sftfQ/R/+opf+5+kct/c/TP2rpf77+UUv/C/SPWvpfqH/U0v8i/aOW/hfrH7X0v0T/qKX/pfpHLf0v0z9q6X+5/lFL/yv0j1r6X6l/1NL/Kv2jlv5X6x+19L9G/6il/7X6Ry39r9M/aul/vf5RS/8b9I9a+t+of9TS/yb9o5b+N+sftfS/Rf+opf+t+kct/W/TP2rpf7v+UUv/O/SPWvrfqX/U0v8u/aOW/nfrH7X0v0f/qKX/vfpHLf3v0z9q6X+//lFL/wf0j1r6P6h/1NL/If2jlv4P6x+19H9E/6il/6P6Ry39H9M/aun/uP5RS/8n9I9a+j+pf9TS/yn9o5b+T+sftfR/Rv+opf+z+kct/Z/TP2rp/7z+UUv/F/SPWvq/qH/U0v8l/aOW/i/rH7X0f0X/qKX/q/pHJf2HDOgftfQfpH/U0n+w/lFL/3H0j1r6D9E/auk/VP+opf8w/aOW/uPqH7X0H0//qKX/+PpHLf0n0D9q6T+h/lFL/4n0j1r6v0P/qKX/xPpHLf3fqX/U0n8S/aOW/pPqH7X0n0z/qKX/5PpHLf3fpX/U0v/d+kct/afQP2rp/x79o5b+U+oftfR/r/5RS/+p9I9a+k+tf9TS/336Ry39p9E/auk/rf5RS//36x+19J9O/6il//T6Ry39Z9A/auk/o/5RS/+Z9I9a+s+sf9TS/wP6Ry39Z9E/auk/q/5RS/8P6h+19P+Q/lFL/w/rH7X0n03/qKX/7PpHLf3n0D9q6T+n/lFL/7n0j1r6z61/1NJ/Hv2jlv7z6h+19P+I/lFL/4/qH7X0/5j+UUv/+fSPWvrPr3/U0n8B/aOW/h/XP2rpv6D+UUv/hfSPWvp/Qv+opf8n9Y9a+i+sf9TSfxH9o5b+i+oftfRfTP+opf/i+kct/ZfQP2rpv6T+UUv/pfSPWvovrX/U0n8Z/aOW/svqH7X0/5T+UUv/T+sftfRfTv+opf9n9I9a+n9W/6il/+f0j1r6f17/qKX/F/SPWvovr3/U0n8F/aOW/ivqH7X0X0n/qKX/F/WPWvp/Sf+opf/K+kct/b+sf9TS/yv6Ry39v6p/1NJ/Ff2jlv5f0z9q6b+q/lFL/9X0j1r6r65/1NJ/Df2jlv5r6h+19F9L/6il/9r6Ry3919E/aum/rv5RS//19I9a+q+vf9TSfwP9o5b+X9c/aum/of5RS/+N9I9a+m+sf9TSfxP9o5b+m+oftfTfTP+opf/m+kct/bfQP2rpv6X+UUv/rfSPWvpvrX/U0n8b/aOW/t/QP2rpv63+UUv/7fSPWvpvr3/U0n8H/aOW/t/UP2rp/y39o5b+O+oftfTfSf+opf/O+kct/XfRP2rp/239o5b+39E/aun/Xf2jlv7f0z9q6f99/aOW/rvqH7X0/4H+UUv/3fSPWvrvrn/U0v+H+kct/ffQP2rpv6f+UUv/vfSPWvr/SP+opf/e+kct/ffRP2rp/2P9o5b+P9E/aum/r/5RS/+f6h+19P+Z/lFL/5/rH7X030//qKX/L/SPWvr/Uv+opf/++kct/Q/QP2rpf6D+UUv/g/SPWvr/Sv+opf/B+kct/Q/RP2rpf6j+UUv/w/SPWvofrn/U0v8I/aOW/r/WP2rp/xv9o5b+R+oftfT/rf5RS/+j9I9a+v9O/6il/+/1j1r6H61/1NL/D/pHLf2P0T9q6X+s/lFL/z/qH7X0P07/qKX/n/SPWvofr3/U0v8E/aOW/ifqH7X0/7P+UUv/v+gftfT/q/5RS/+T9I9a+v9N/6il/9/1j1r6n6x/1NL/FP2jlv6n6h+19D9N/6il/+n6Ry39z9A/aul/pv5RS/+z9I9a+p+tf9TS/xz9o5b+5+oftfQ/T/+opf/5+kct/S/QP2rpf6H+UUv/i/SPWvpfrH/U0v8S/aOW/pfqH7X0v0z/qKX/5fpHLf2v0D9q6X+l/lFL/6v0j1r6X61/1NL/Gv2jlv7X6h+19L9O/6il//X6Ry39b9A/aul/o/5RS/+b9I9a+t+sf9TS/xb9o5b+t+oftfS/Tf+opf/t+kct/e/QP2rpf6f+UUv/u/SPWvrfrX/U0v8e/aOW/vfqH7X0v0//qKX//fpHLf0f0D9q6f+g/lFL/4f0j1r6P6x/1NL/Ef2jlv6P6h+19H9M/6il/+P6Ry39n9A/aun/pP5RS/+n9I9a+j+tf9TS/xn9o5b+z+oftfR/Tv+opf/z+kct/V/QP2rp/6L+UUv/l/SPWvq/rH/U0v8V/aOW/q/qH5X0Hzqgf9TSf5D+UUv/wfpHLf3H0T9q6T9E/6il/1D9o5b+w/SPWvqPq3/U0n88/aOW/uPrH7X0n0D/qKX/hPpHLf0n0j9q6f8O/aOW/hPrH7X0f6f+UUv/SfSPWvpPqn/U0n8y/aOW/pPrH7X0f5f+UUv/d+sftfSfQv+opf979I9a+k+pf9TS/736Ry39p9I/auk/tf5RS//36R+19J9G/6il/7T6Ry39369/1NJ/Ov2jlv7T6x+19J9B/6il/4z6Ry39Z9I/auk/s/5RS/8P6B+19J9F/6il/6z6Ry39P6h/1NL/Q/pHLf0/rH/U0n82/aOW/rPrH7X0n0P/qKX/nPpHLf3n0j9q6T+3/lFL/3n0j1r6z6t/1NL/I/pHLf0/qn/U0v9j+kct/efTP2rpP7/+UUv/BfSPWvp/XP+opf+C+kct/RfSP2rp/wn9o5b+n9Q/aum/sP5RS/9F9I9a+i+qf9TSfzH9o5b+i+sftfRfQv+opf+S+kct/ZfSP2rpv7T+UUv/ZfSPWvovq3/U0v9T+kct/T+tf9TSfzn9o5b+n9E/aun/Wf2jlv6f0z9q6f95/aOW/l/QP2rpv7z+UUv/FfSPWvqvqH/U0n8l/aOW/l/UP2rp/yX9o5b+K+sftfT/sv5RS/+v6B+19P+q/lFL/1X0j1r6f03/qKX/qvpHLf1X0z9q6b+6/lFL/zX0j1r6r6l/1NJ/Lf2jlv5r6x+19F9H/6il/7r6Ry3919M/aum/vv5RS/8N9I9a+n9d/6il/4b6Ry39N9I/aum/sf5RS/9N9I9a+m+qf9TSfzP9o5b+m+sftfTfQv+opf+W+kct/bfSP2rpv7X+UUv/bfSPWvp/Q/+opf+2+kct/bfTP2rpv73+UUv/HfSPWvp/U/+opf+39I9a+u+of9TSfyf9o5b+O+sftfTfRf+opf+39Y9a+n9H/6il/3f1j1r6f0//qKX/9/WPWvrvqn/U0v8H+kct/XfTP2rpv7v+UUv/H+oftfTfQ/+opf+e+kct/ffSP2rp/yP9o5b+e+sftfTfR/+opf+P9Y9a+v9E/6il/776Ry39f6p/1NL/Z/pHLf1/rn/U0n8//aOW/r/QP2rp/0v9o5b+++sftfQ/QP+opf+B+kct/Q/SP2rp/yv9o5b+B+sftfQ/RP+opf+h+kct/Q/TP2rpf7j+UUv/I/SPWvr/Wv+opf9v9I9a+h+pf9TS/7f6Ry39j9I/aun/O/2jlv6/1z9q6X+0/lFL/z/oH7X0P0b/qKX/sfpHLf3/qH/U0v84/aOW/n/SP2rpf7z+UUv/E/SPWvqfqH/U0v/P+kct/f+if9TS/6/6Ry39T9I/aun/N/2jlv5/1z9q6X+y/lFL/1P0j1r6n6p/1NL/NP2jlv6n6x+19D9D/6il/5n6Ry39z9I/aul/tv5RS/9z9I9a+p+rf9TS/zz9o5b+5+sftfS/QP+opf+F+kct/S/SP2rpf7H+UUv/S/SPWvpfqn/U0v8y/aOW/pfrH7X0v0L/qKX/lfpHLf2v0j9q6X+1/lFL/2v0j1r6X6t/1NL/Ov2jlv7X6x+19L9B/6il/436Ry39b9I/aul/s/5RS/9b9I9a+t+qf9TS/zb9o5b+t+sftfS/Q/+opf+d+kct/e/SP2rpf7f+UUv/e/SPWvrfq3/U0v8+/aOW/vfrH7X0f0D/qKX/g/pHLf0f0j9q6f+w/lFL/0f0j1r6P6p/1NL/Mf2jlv6P6x+19H9C/6il/5P6Ry39n9I/aun/tP5RS/9n9I9a+j+rf9TS/zn9o5b+z+sftfR/Qf+opf+L+kct/V/SP2rp/7L+UUv/V/SPWvq/qn9U0n/YgP5RS/9B+kct/QfrH7X0H0f/qKX/EP2jlv5D9Y9a+g/TP2rpP67+UUv/8fSPWvqPr3/U0n8C/aOW/hPqH7X0n0j/qKX/O/SPWvpPrH/U0v+d+kct/SfRP2rpP6n+UUv/yfSPWvpPrn/U0v9d+kct/d+tf9TSfwr9o5b+79E/auk/pf5RS//36h+19J9K/6il/9T6Ry3936d/1NJ/Gv2jlv7T6h+19H+//lFL/+n0j1r6T69/1NJ/Bv2jlv4z6h+19J9J/6il/8z6Ry39P6B/1NJ/Fv2jlv6z6h+19P+g/lFL/w/pH7X0/7D+UUv/2fSPWvrPrn/U0n8O/aOW/nPqH7X0n0v/qKX/3PpHLf3n0T9q6T+v/lFL/4/oH7X0/6j+UUv/j+kftfSfT/+opf/8+kct/RfQP2rp/3H9o5b+C+oftfRfSP+opf8n9I9a+n9S/6il/8L6Ry39F9E/aum/qP5RS//F9I9a+i+uf9TSfwn9o5b+S+oftfRfSv+opf/S+kct/ZfRP2rpv6z+UUv/T+kftfT/tP5RS//l9I9a+n9G/6il/2f1j1r6f07/qKX/5/WPWvp/Qf+opf/y+kct/VfQP2rpv6L+UUv/lfSPWvp/Uf+opf+X9I9a+q+sf9TS/8v6Ry39v6J/1NL/q/pHLf1X0T9q6f81/aOW/qvqH7X0X03/qKX/6vpHLf3X0D9q6b+m/lFL/7X0j1r6r61/1NJ/Hf2jlv7r6h+19F9P/6il//r6Ry39N9A/aun/df2jlv4b6h+19N9I/6il/8b6Ry39N9E/aum/qf5RS//N9I9a+m+uf9TSfwv9o5b+W+oftfTfSv+opf/W+kct/bfRP2rp/w39o5b+2+oftfTfTv+opf/2+kct/XfQP2rp/039o5b+39I/aum/o/5RS/+d9I9a+u+sf9TSfxf9o5b+39Y/aun/Hf2jlv7f1T9q6f89/aOW/t/XP2rpv6v+UUv/H+gftfTfTf+opf/u+kct/X+of9TSfw/9o5b+e+oftfTfS/+opf+P9I9a+u+tf9TSfx/9o5b+P9Y/aun/E/2jlv776h+19P+p/lFL/5/pH7X0/7n+UUv//fSPWvr/Qv+opf8v9Y9a+u+vf9TS/wD9o5b+B+oftfQ/SP+opf+v9I9a+h+sf9TS/xD9o5b+h+oftfQ/TP+opf/h+kct/Y/QP2rp/2v9o5b+v9E/aul/pP5RS//f6h+19D9K/6il/+/0j1r6/17/qKX/0fpHLf3/oH/U0v8Y/aOW/sfqH7X0/6P+UUv/4/SPWvr/Sf+opf/x+kct/U/QP2rpf6L+UUv/P+sftfT/i/5RS/+/6h+19D9J/6il/9/0j1r6/13/qKX/yfpHLf1P0T9q6X+q/lFL/9P0j1r6n65/1NL/DP2jlv5n6h+19D9L/6il/9n6Ry39z9E/aul/rv5RS//z9I9a+p+vf9TS/wL9o5b+F+oftfS/SP+opf/F+kct/S/RP2rpf6n+UUv/y/SPWvpfrn/U0v8K/aOW/lfqH7X0v0r/qKX/1fpHLf2v0T9q6X+t/lFL/+v0j1r6X69/1NL/Bv2jlv436h+19L9J/6il/836Ry39b9E/aul/q/5RS//b9I9a+t+uf9TS/w79o5b+d+oftfS/S/+opf/d+kct/e/RP2rpf6/+UUv/+/SPWvrfr3/U0v8B/aOW/g/qH7X0f0j/qKX/w/pHLf0f0T9q6f+o/lFL/8f0j1r6P65/1NL/Cf2jlv5P6h+19H9K/6il/9P6Ry39n9E/aun/rP5RS//n9I9a+j+vf9TS/wX9o5b+L+oftfR/Sf+opf/L+kct/V/RP2rp/6r+UUn/cQf0j1r6D9I/auk/WP+opf84+kct/YfoH7X0H6p/1NJ/mP5RS/9x9Y9a+o+nf9TSf3z9o5b+E+gftfSfUP+opf9E+kct/d+hf9TSf2L9o5b+79Q/auk/if5RS/9J9Y9a+k+mf9TSf3L9o5b+79I/aun/bv2jlv5T6B+19H+P/lFL/yn1j1r6v1f/qKX/VPpHLf2n1j9q6f8+/aOW/tPoH7X0n1b/qKX/+/WPWvpPp3/U0n96/aOW/jPoH7X0n1H/qKX/TPpHLf1n1j9q6f8B/aOW/rPoH7X0n1X/qKX/B/WPWvp/SP+opf+H9Y9a+s+mf9TSf3b9o5b+c+gftfSfU/+opf9c+kct/efWP2rpP4/+UUv/efWPWvp/RP+opf9H9Y9a+n9M/6il/3z6Ry3959c/aum/gP5RS/+P6x+19F9Q/6il/0L6Ry39P6F/1NL/k/pHLf0X1j9q6b+I/lFL/0X1j1r6L6Z/1NJ/cf2jlv5L6B+19F9S/6il/1L6Ry39l9Y/aum/jP5RS/9l9Y9a+n9K/6il/6f1j1r6L6d/1NL/M/pHLf0/q3/U0v9z+kct/T+vf9TS/wv6Ry39l9c/aum/gv5RS/8V9Y9a+q+kf9TS/4v6Ry39v6R/1NJ/Zf2jlv5f1j9q6f8V/aOW/l/VP2rpv4r+UUv/r+kftfRfVf+opf9q+kct/VfXP2rpv4b+UUv/NfWPWvqvpX/U0n9t/aOW/uvoH7X0X1f/qKX/evpHLf3X1z9q6b+B/lFL/6/rH7X031D/qKX/RvpHLf031j9q6b+J/lFL/031j1r6b6Z/1NJ/c/2jlv5b6B+19N9S/6il/1b6Ry39t9Y/aum/jf5RS/9v6B+19N9W/6il/3b6Ry39t9c/aum/g/5RS/9v6h+19P+W/lFL/x31j1r676R/1NJ/Z/2jlv676B+19P+2/lFL/+/oH7X0/67+UUv/7+kftfT/vv5RS/9d9Y9a+v9A/6il/276Ry39d9c/aun/Q/2jlv576B+19N9T/6il/176Ry39f6R/1NJ/b/2jlv776B+19P+x/lFL/5/oH7X031f/qKX/T/WPWvr/TP+opf/P9Y9a+u+nf9TS/xf6Ry39f6l/1NJ/f/2jlv4H6B+19D9Q/6il/0H6Ry39f6V/1NL/YP2jlv6H6B+19D9U/6il/2H6Ry39D9c/aul/hP5RS/9f6x+19P+N/lFL/yP1j1r6/1b/qKX/UfpHLf1/p3/U0v/3+kct/Y/WP2rp/wf9o5b+x+gftfQ/Vv+opf8f9Y9a+h+nf9TS/0/6Ry39j9c/aul/gv5RS/8T9Y9a+v9Z/6il/1/0j1r6/1X/qKX/SfpHLf3/pn/U0v/v+kct/U/WP2rpf4r+UUv/U/WPWvqfpn/U0v90/aOW/mfoH7X0P1P/qKX/WfpHLf3P1j9q6X+O/lFL/3P1j1r6n6d/1NL/fP2jlv4X6B+19L9Q/6il/0X6Ry39L9Y/aul/if5RS/9L9Y9a+l+mf9TS/3L9o5b+V+gftfS/Uv+opf9V+kct/a/WP2rpf43+UUv/a/WPWvpfp3/U0v96/aOW/jfoH7X0v1H/qKX/TfpHLf1v1j9q6X+L/lFL/1v1j1r636Z/1NL/dv2jlv536B+19L9T/6il/136Ry3979Y/aul/j/5RS/979Y9a+t+nf9TS/379o5b+D+gftfR/UP+opf9D+kct/R/WP2rp/4j+UUv/R/WPWvo/pn/U0v9x/aOW/k/oH7X0f1L/qKX/U/pHLf2f1j9q6f+M/lFL/2f1j1r6P6d/1NL/ef2jlv4v6B+19H9R/6il/0v6Ry39X9Y/aun/iv5RS/9X9Y9K+o83oH/U0n+Q/lFL/8H6Ry39x9E/auk/RP+opf9Q/aOW/sP0j1r6j6t/1NJ/PP2jlv7j6x+19J9A/6il/4T6Ry39J9I/aun/Dv2jlv4T6x+19H+n/lFL/0n0j1r6T6p/1NJ/Mv2jlv6T6x+19H+X/lFL/3frH7X0n0L/qKX/e/SPWvpPqX/U0v+9+kct/afSP2rpP7X+UUv/9+kftfSfRv+opf+0+kct/d+vf9TSfzr9o5b+0+sftfSfQf+opf+M+kct/WfSP2rpP7P+UUv/D+gftfSfRf+opf+s+kct/T+of9TS/0P6Ry39P6x/1NJ/Nv2jlv6z6x+19J9D/6il/5z6Ry3959I/auk/t/5RS/959I9a+s+rf9TS/yP6Ry39P6p/1NL/Y/pHLf3n0z9q6T+//lFL/wX0j1r6f1z/qKX/gvpHLf0X0j9q6f8J/aOW/p/UP2rpv7D+UUv/RfSPWvovqn/U0n8x/aOW/ovrH7X0X0L/qKX/kvpHLf2X0j9q6b+0/lFL/2X0j1r6L6t/1NL/U/pHLf0/rX/U0n85/aOW/p/RP2rp/1n9o5b+n9M/aun/ef2jlv5f0D9q6b+8/lFL/xX0j1r6r6h/1NJ/Jf2jlv5f1D9q6f8l/aOW/ivrH7X0/7L+UUv/r+gftfT/qv5RS/9V9I9a+n9N/6il/6r6Ry39V9M/aum/uv5RS/819I9a+q+pf9TSfy39o5b+a+sftfRfR/+opf+6+kct/dfTP2rpv77+UUv/DfSPWvp/Xf+opf+G+kct/TfSP2rpv7H+UUv/TfSPWvpvqn/U0n8z/aOW/pvrH7X030L/qKX/lvpHLf230j9q6b+1/lFL/230j1r6f0P/qKX/tvpHLf230z9q6b+9/lFL/x30j1r6f1P/qKX/t/SPWvrvqH/U0n8n/aOW/jvrH7X030X/qKX/t/WPWvp/R/+opf939Y9a+n9P/6il//f1j1r676p/1NL/B/pHLf130z9q6b+7/lFL/x/qH7X030P/qKX/nvpHLf330j9q6f8j/aOW/nvrH7X030f/qKX/j/WPWvr/RP+opf+++kct/X+qf9TS/2f6Ry39f65/1NJ/P/2jlv6/0D9q6f9L/aOW/vvrH7X0P0D/qKX/gfpHLf0P0j9q6f8r/aOW/gfrH7X0P0T/qKX/ofpHLf0P0z9q6X+4/lFL/yP0j1r6/1r/qKX/b/SPWvofqX/U0v+3+kct/Y/SP2rp/zv9o5b+v9c/aul/tP5RS/8/6B+19D9G/6il/7H6Ry39/6h/1NL/OP2jlv5/0j9q6X+8/lFL/xP0j1r6n6h/1NL/z/pHLf3/on/U0v+v+kct/U/SP2rp/zf9o5b+f9c/aul/sv5RS/9T9I9a+p+qf9TS/zT9o5b+p+sftfQ/Q/+opf+Z+kct/c/SP2rpf7b+UUv/c/SPWvqfq3/U0v88/aOW/ufrH7X0v0D/qKX/hfpHLf0v0j9q6X+x/lFL/0v0j1r6X6p/1NL/Mv2jlv6X6x+19L9C/6il/5X6Ry39r9I/aul/tf5RS/9r9I9a+l+rf9TS/zr9o5b+1+sftfS/Qf+opf+N+kct/W/SP2rpf7P+UUv/W/SPWvrfqn/U0v82/aOW/rfrH7X0v0P/qKX/nfpHLf3v0j9q6X+3/lFL/3v0j1r636t/1NL/Pv2jlv736x+19H9A/6il/4P6Ry39H9I/aun/sP5RS/9H9I9a+j+qf9TS/zH9o5b+j+sftfR/Qv+opf+T+kct/Z/SP2rp/7T+UUv/Z/SPWvo/q3/U0v85/aOW/s/rH7X0f0H/qKX/i/pHLf1f0j9q6f+y/lFL/1f0j1r6v6p/VNJ//AH9o5b+g/SPWvoP1j9q6T+O/lFL/yH6Ry39h+oftfQfpn/U0n9c/aOW/uPpH7X0H1//qKX/BPpHLf0n1D9q6T+R/lFL/3foH7X0n1j/qKX/O/WPWvpPon/U0n9S/aOW/pPpH7X0n1z/qKX/u/SPWvq/W/+opf8U+kct/d+jf9TSf0r9o5b+79U/auk/lf5RS/+p9Y9a+r9P/6il/zT6Ry39p9U/aun/fv2jlv7T6R+19J9e/6il/wz6Ry39Z9Q/auk/k/5RS/+Z9Y9a+n9A/6il/yz6Ry39Z9U/aun/Qf2jlv4f0j9q6f9h/aOW/rPpH7X0n13/qKX/HPpHLf3n1D/6r+sPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8P+xAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhR04EAAAAAAA8n9thKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqirswIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOSAAAAAAE/X/djkABAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABuCgAA//91iAl0")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
r1 = open_tree(r0, &(0x7f0000000640)='\x00', 0x81000)
renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', r1, &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000080)='.\x02\x00', 0x0, 0x0, 0x0, 0x0, 0x0)

4.123292448s ago: executing program 0 (id=305):
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mremap(&(0x7f0000241000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil)
mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000)
mremap(&(0x7f0000b8e000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f00004e5000/0x2000)=nil)
syz_clone(0x88600, 0x0, 0x0, 0x0, 0x0, 0x0)
move_pages(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000a7a000/0x3000)=nil], &(0x7f00000001c0)=[0x1], 0x0, 0x0)

4.103312995s ago: executing program 4 (id=306):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
r1 = syz_io_uring_setup(0xed0, &(0x7f0000000400)={0x0, 0x0, 0x10300}, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r1, 0xa3d, 0x0, 0x0, 0x0, 0xff39)
sendto$inet6(r0, &(0x7f0000000040)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
sendto$inet6(r0, &(0x7f0000001240)='>', 0x1, 0x0, &(0x7f00000012c0)={0xa, 0x0, 0x0, @local, 0x1}, 0x1c)
shutdown(r0, 0x1)

3.807580851s ago: executing program 4 (id=308):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000140), 0xfc, 0x560, &(0x7f00000008c0)="$eJzs3d9rW1UcAPDvTdut+6HtYAz1QQp7cDKXrq0/JvgwH0WHA33XkGRlNF1Gk461Dtwe3IsvMgQRB6Lvvvs4/Af8KwY6GDKKPuwlctObLluTNu3StVs+H7jtOffe9Jxv7v2enpubkAAG1kT6IxfxakR8l0SMtW0bjmzjxOp+Kw+uFdMliUbjs3+SSLJ1rf2T7PehrPJKRPzxTcTJ3Pp2a0vLc4VKpbyQ1Sfr85cna0vLpy7OF2bLs+VL0zMzZ96ZmX7/vXf7Fuub5//78dM7H5359vjKD7/dO3IribNxONvWHsdTuN5emYiJ7DkZibNP7DjVh8b2kmS3O8C2DGV5PhLpGDAWQ1nWd9QYe5ZdA3bY12laAwMqkf8woFrzgNa1fZ+ug58b9z9cvQBaH//w6msjMdq8Njq4kjx2ZZRe7473of20jd//vn0rXaJ/r0MAbOr6jYg4PTy8fvxLsvFv+073sM+TbRj/4Nm5k85/3uo0/8mtzX+iw/znUIfc3Y7N8z93rw/NdJXO/z7oOP9du2k1PpTVXmrO+UaSCxcr5XRsezkiTsTI/rS+wf2cL3MrdxvdNrbP/9Ilbb81F8z6cW94/+OPKRXqhacKus39GxGvdZz/JmvHP+lw/NPn43yPbRwr336927bN499ZjV8i3uh4/B/d0Uo2vj852TwfJltnxXr/3jz2Z7f2dzv+9Pgf3Dj+8aT9fm1t6238PPqw3G3bds//fcnnzfK+bN3VQr2+MBWxL/lk/frpR49t1Vv7p/GfOL7x+Nfp/D+QJnaP8d88erN919Gtxb+z0vhLWzr+Wy/c/firn7q139vxf7tZOpGt6WX867WDT/PcAQAAAAAAwF6Ti4jDkeTya+VcLp9ffX/H0TiYq1Rr9ZMXqouXStH8rOx4jORad7rH2t4PMZW9H7ZVn36iPhMRRyLi+6EDzXq+WK2Udjt4AAAAAAAAAAAAAAAAAAAA2CMORYx2+vx/6q+h3e4dsOM2+Mpv4AXXPf+zLf34pidgT/L/HwaX/IfBJf9hcMl/GFzyHwaX/IfBJf9hcG0l/389t4MdAQAAAAAAAAAAAAAAAAAAAAAAAAAAgBfD+XPn0qWx8uBaMa2XriwtzlWvnCqVa3P5+cVivlhduJyfrVZnK+V8sTq/2d+rVKuXp6Zj8epkvVyrT9aWlr+Yry5eethYVR55JlEBAAAAAAAAAAAAAAAAAADA86W2tDxXqFTKCwoK2yoM741uKPS5sNsjEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA88n8AAAD//75iP7A=")
chdir(&(0x7f0000000240)='./file0\x00')
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_sys\x00', 0x275a, 0x0)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8)
getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8)

3.558058173s ago: executing program 2 (id=310):
syz_mount_image$erofs(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x0, 0x17d, &(0x7f0000001ac0)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f00000004c0)='./bus\x00', 0x0)
prlimit64(0x0, 0x1, &(0x7f0000000200)={0x1, 0x5}, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00')

3.419425564s ago: executing program 3 (id=311):
r0 = io_uring_setup(0x253d, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x2000000, 0x4})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040))
r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000400), 0x82, 0x0)
io_setup(0xff, &(0x7f0000000080)=<r2=>0x0)
io_submit(r2, 0x7, &(0x7f0000000040)=[&(0x7f0000000000)={0x2, 0x960010, 0x0, 0x0, 0x0, r1, &(0x7f00000001c0)="10000040030000000000000000000000b22025285db74192e7576d9062ec6e2fe8ffff3ff248691861d03a71091d334252afb1af5b8f0474c2ed58338226131291198f3d70dcf797ac42d0eeed042c06b56b89f02f92b12ebe4c45948a362a76def2f4955f100a13131f474b140942110257e173cea102775e1b3873ebf98dac6421f6d449544114b8ce29f4b48d1738b5be127afce74b41c9ef761c96f24c9d3c130e1a6c2eb5b3f12eb6a1f5051594545cbb895e65d83c08d2d6cd56694e5a6c00f54aceaf498f57b2a56634a23ae7", 0xffffff15, 0x0, 0x0, 0x2}])
close_range(r0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

3.324024783s ago: executing program 2 (id=312):
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="14"], 0x14}}, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
write$binfmt_aout(r0, &(0x7f00000002c0)=ANY=[], 0xc1)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r0, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r2 = dup(r1)
ioctl$SIOCSIFHWADDR(r2, 0x800442d2, &(0x7f0000000080)={'macsec0\x00', @dev})

3.150653191s ago: executing program 2 (id=313):
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0xf5, 0x1, {0x22, 0xa60}}}}, 0x0)
r0 = syz_io_uring_setup(0x16d2, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0})
io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0)

3.149512189s ago: executing program 4 (id=314):
r0 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0x64, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xffff639c}]}, 0x64}}, 0x0)
sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x14, 0x7, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x8044004}, 0xc0)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000002011d04000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x38}}, 0x0)

2.921933642s ago: executing program 3 (id=315):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x0)
r3 = openat$cgroup_procs(r2, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f0000000280), 0x12)
sendfile(r0, r3, 0x0, 0x401)

2.876078747s ago: executing program 4 (id=316):
open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, <r2=>0x0}, &(0x7f0000000280)=0x5)
setuid(r2)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, 0x0)

2.858284462s ago: executing program 0 (id=317):
socket(0x6, 0x3, 0xff)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10)
getdents64(0xffffffffffffffff, 0x0, 0x0)

2.721955357s ago: executing program 4 (id=318):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r0 = userfaultfd(0x1)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
r1 = io_uring_setup(0x3eaf, &(0x7f0000000100))
io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000080)={&(0x7f0000c15000/0x1000)=nil, &(0x7f0000508000/0x4000)=nil, 0x1000})

2.632591276s ago: executing program 3 (id=319):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
write$binfmt_script(r0, &(0x7f0000000100), 0xfecc)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000080)=@gcm_256={{}, "f24aeb3ba314bc65", "e9c8b345648ea25653057b0b04e617fa6656de3f9a12635490cefdecb3cf2e8d", "a3733ce8", "94795b9bd5cbf43e"}, 0x38)
setsockopt$inet_int(r1, 0x0, 0x13, &(0x7f0000000040), 0x4)

1.455400279s ago: executing program 2 (id=320):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f00000000c0)={0x50, 0x0, r1, {0x7, 0x27, 0x0, 0x4c0680}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}}}, 0x0, 0x0, 0x0, 0x0})
statx(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x0, 0x0)

1.343702287s ago: executing program 3 (id=321):
r0 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r0, &(0x7f0000000040), 0xc)
r1 = socket$qrtr(0x2a, 0x2, 0x0)
recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0)
connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc)
ioctl$sock_qrtr_TIOCINQ(r0, 0x890c, 0x0)
writev(r1, &(0x7f0000000340)=[{&(0x7f0000000080)='~', 0x1}], 0x1)

1.336820518s ago: executing program 0 (id=322):
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x20001, 0x4)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000100)={@in={{0x2, 0x0, @private}}, 0x0, 0x0, 0x11, 0x0, "3c982b2bf01cf3cba642d926a9b478c7242d59b62119a4bb9c8fc8ab386ef7c15e29bdd5c551445dd5a59b3d8ce81fc117f007a585e6f6a140426acae47f8e35d4a94ca47759f310808440717dad795d"}, 0xd8)
setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000600)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x0, 0x35, 0x0, "679f672c00b69e65b0934066fc7c3406caf2c09e33bd50116312e2b00fee650af69b2150ccaa762a3db7ad752fe616e085e991c0436e7e7111238865d27b4e82dcc94700ddd1878b088736009d15f1fa"}, 0xd8)
setsockopt$inet_tcp_int(r0, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6)
sendto$inet(r1, 0x0, 0x0, 0x20000010, &(0x7f0000000540)={0x2, 0x0, @empty}, 0x10)

1.180086752s ago: executing program 2 (id=323):
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x10, 0x0)
landlock_restrict_self(r1, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r2, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r2, 0x0)
connect$unix(r0, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)

1.11034446s ago: executing program 4 (id=324):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1000e, &(0x7f0000000300), 0x3, 0x445, &(0x7f0000000b00)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x30000, 0x0, 0x41, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
chdir(&(0x7f0000000000)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20)
statx(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0xffff4a9c0080ffff, &(0x7f0000000240))

1.000658005s ago: executing program 2 (id=325):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x0)
r0 = fanotify_init(0x0, 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
fanotify_mark(r0, 0x1, 0x8000001, r1, 0x0)
fanotify_mark(r0, 0x71, 0x8000000, r1, 0x0)
fanotify_mark(r0, 0x80, 0x0, 0xffffffffffffffff, 0x0)

963.859301ms ago: executing program 3 (id=326):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
getrandom(&(0x7f0000000180)=""/198, 0xc6, 0x1)

0s ago: executing program 3 (id=327):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001f00)=ANY=[@ANYBLOB="200000005e00250e00000000000000000c000080eec47c8e670527ab04000180"], 0x20}], 0x1}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
pipe(0x0)
sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e001400028008000100080000000600020001000000080005"], 0x54}}, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe6, 0x0)
recvmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x40000000, 0x0)

kernel console output (not intermixed with test programs):

aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   85.149827][ T5419] loop4: detected capacity change from 0 to 1764
[   85.318494][ T5409] overlayfs: failed to create directory ./file0/work (errno: 28); mounting read-only
[   85.359092][ T5343] [drm:udl_init] *ERROR* Selecting channel failed
[   85.416886][ T5343] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2
[   85.463428][ T5424] hsr0: entered promiscuous mode
[   85.474697][ T5343] [drm] Initialized udl on minor 2
[   85.489175][ T5343] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[   85.508573][ T5343] udl 4-1:0.0: [drm] Cannot find any crtc or sizes
[   85.565497][ T5401] loop0: detected capacity change from 0 to 40427
[   85.578289][ T5240] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   85.601118][ T5401] F2FS-fs (loop0): invalid crc value
[   85.606010][   T25] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[   85.611204][ T5401] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[   85.626326][ T5343] usb 4-1: USB disconnect, device number 3
[   85.628438][   T25] udl 4-1:0.0: [drm] Cannot find any crtc or sizes
[   85.762879][ T5401] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   85.821195][ T5428] loop4: detected capacity change from 0 to 4096
[   86.119574][   T29] audit: type=1800 audit(1729041129.964:3): pid=5433 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.28" name="bus" dev="loop4" ino=33 res=0 errno=0
[   86.328481][ T5438] Zero length message leads to an empty skb
[   86.545921][ T5446] loop1: detected capacity change from 0 to 128
[   86.569111][ T5446] FAT-fs (loop1): invalid media value (0x00)
[   86.580014][ T5446] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; no bootstrapping code
[   86.608429][ T5446] FAT-fs (loop1): Can't find a valid FAT filesystem
[   86.652944][ T5446] loop2: detected capacity change from 0 to 7
[   86.667132][ T5446] Dev loop2: unable to read RDB block 7
[   86.681315][ T5446]  loop2: unable to read partition table
[   86.693361][ T5446] loop2: partition table beyond EOD, truncated
[   86.699720][ T5446] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[   86.751321][ T5455] loop4: detected capacity change from 0 to 256
[   86.781319][ T5455] vfat: Unknown parameter 'nnonumtail'
[   86.925577][ T5457] loop1: detected capacity change from 0 to 1024
[   87.043358][  T938] cfg80211: failed to load regulatory.db
[   87.065519][ T5455] loop4: detected capacity change from 0 to 4096
[   87.092278][ T5455] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512).
[   87.216501][ T5455] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[   87.332762][ T5324] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   87.426691][ T5466] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   87.482791][ T5324] usb 1-1: Using ep0 maxpacket: 32
[   87.496472][ T5324] usb 1-1: config 0 has an invalid interface number: 67 but max is 0
[   87.512819][ T5324] usb 1-1: config 0 has no interface number 0
[   87.539355][ T5324] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[   87.559422][ T5324] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   87.581646][ T5324] usb 1-1: Product: syz
[   87.586623][ T5324] usb 1-1: Manufacturer: syz
[   87.604139][ T5324] usb 1-1: SerialNumber: syz
[   87.619676][ T5324] usb 1-1: config 0 descriptor??
[   87.636446][ T5324] smsc95xx v2.0.0
[   87.981042][ T5477] loop2: detected capacity change from 0 to 2048
[   88.054331][ T5324] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[   88.074845][ T5324] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[   88.166664][ T5469] loop1: detected capacity change from 0 to 32768
[   88.190221][ T5469] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.44 (5469)
[   88.246600][ T5469] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   88.270530][ T5469] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[   88.299248][ T5469] BTRFS info (device loop1): using free-space-tree
[   88.318183][ T5248] UDF-fs: error (device loop2): udf_read_inode: (ino 1317) failed !bh
[   88.330198][ T5248] UDF-fs: error (device loop2): udf_read_inode: (ino 1317) failed !bh
[   88.535080][   T29] audit: type=1800 audit(1729041132.384:4): pid=5469 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.44" name="file1" dev="loop1" ino=260 res=0 errno=0
[   88.726892][ T5481] UDF-fs: warning (device loop2): udf_evict_inode: Inode 1367 (mode 100000) has inode size 65546 different from extent length 66048. Filesystem need not be standards compliant.
[   88.850732][   T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.903170][ T5240] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   88.950510][ T5324] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[   88.973580][ T5324] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71
[   88.993328][ T5324] usb 1-1: USB disconnect, device number 2
[   89.081894][   T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   89.114729][ T5250] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[   89.123460][ T5250] Bluetooth: hci2: Injecting HCI hardware error event
[   89.132989][ T5250] Bluetooth: hci2: hardware error 0x00
[   89.214965][ T5483] loop4: detected capacity change from 0 to 32768
[   89.225264][ T5483] =======================================================
[   89.225264][ T5483] WARNING: The mand mount option has been deprecated and
[   89.225264][ T5483]          and is ignored by this kernel. Remove the mand
[   89.225264][ T5483]          option from the mount to silence this warning.
[   89.225264][ T5483] =======================================================
[   89.269387][ T5483] XFS: attr2 mount option is deprecated.
[   89.280385][ T5483] XFS: ikeep mount option is deprecated.
[   89.286644][ T5483] XFS: noikeep mount option is deprecated.
[   89.337106][   T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   89.445963][   T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   89.518049][ T5246] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   89.549757][ T5483] XFS (loop4): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[   89.558993][ T5246] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   89.568388][ T5246] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   89.754255][ T5246] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   89.797267][ T5246] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   89.797687][   T35] bridge_slave_1: left allmulticast mode
[   89.831022][ T5246] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   89.858500][   T35] bridge_slave_1: left promiscuous mode
[   89.871337][ T5516] loop0: detected capacity change from 0 to 1024
[   89.879491][   T35] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.894385][ T5516] EXT4-fs: Ignoring removed orlov option
[   89.900135][ T5516] EXT4-fs: Ignoring removed nomblk_io_submit option
[   89.927213][ T5483] XFS (loop4): Ending clean mount
[   89.937855][   T35] bridge_slave_0: left allmulticast mode
[   89.944558][   T35] bridge_slave_0: left promiscuous mode
[   89.953207][   T35] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.979350][ T5516] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   90.002035][ T5483] XFS (loop4): Quotacheck needed: Please wait.
[   90.053520][   T29] audit: type=1800 audit(1729041133.904:5): pid=5516 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.55" name="bus" dev="loop0" ino=18 res=0 errno=0
[   90.109511][   T25] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   90.137992][ T5483] XFS (loop4): Quotacheck: Done.
[   90.144498][ T5516] loop0: detected capacity change from 1024 to 64
[   90.292130][ T5239] EXT4-fs warning (device loop0): ext4_empty_dir:3090: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[   90.308173][ T5239] EXT4-fs warning (device loop0): ext4_empty_dir:3090: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[   90.308243][ T5242] XFS (loop4): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[   90.322237][   T25] usb 2-1: too many configurations: 9, using maximum allowed: 8
[   90.342137][ T5239] EXT4-fs warning (device loop0): ext4_empty_dir:3090: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[   90.358181][ T5239] EXT4-fs warning (device loop0): ext4_empty_dir:3090: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[   90.372460][ T5239] EXT4-fs warning (device loop0): ext4_empty_dir:3090: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[   90.386750][ T5239] EXT4-fs warning (device loop0): ext4_empty_dir:3090: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[   90.409916][ T5239] EXT4-fs warning (device loop0): ext4_empty_dir:3090: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[   90.427027][ T5239] EXT4-fs warning (device loop0): ext4_empty_dir:3090: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[   90.441791][ T5239] EXT4-fs warning (device loop0): ext4_empty_dir:3090: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[   90.455873][   T25] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[   90.465598][ T5239] EXT4-fs warning (device loop0): ext4_empty_dir:3090: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[   90.479271][   T25] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   90.490282][   T25] usb 2-1: config 0 interface 0 has no altsetting 0
[   90.499757][   T25] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[   90.510762][   T25] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   90.549542][   T25] usb 2-1: config 0 interface 0 has no altsetting 0
[   90.586443][   T25] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[   90.633222][   T25] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   90.652759][   T25] usb 2-1: config 0 interface 0 has no altsetting 0
[   90.681027][   T25] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[   90.690395][   T25] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   90.730741][   T25] usb 2-1: config 0 interface 0 has no altsetting 0
[   90.743860][   T25] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[   90.754709][   T25] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   90.766077][   T25] usb 2-1: config 0 interface 0 has no altsetting 0
[   90.787718][   T25] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[   90.798160][   T25] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   90.809251][   T25] usb 2-1: config 0 interface 0 has no altsetting 0
[   90.825389][   T25] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[   90.839318][   T25] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   90.859400][   T25] usb 2-1: config 0 interface 0 has no altsetting 0
[   90.869896][   T25] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[   90.892237][   T25] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   90.903607][   T25] usb 2-1: config 0 interface 0 has no altsetting 0
[   90.925408][   T25] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[   90.934892][   T25] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[   90.943785][   T25] usb 2-1: Product: syz
[   90.948019][   T25] usb 2-1: Manufacturer: syz
[   90.953199][   T25] usb 2-1: SerialNumber: syz
[   90.960429][   T25] usb 2-1: config 0 descriptor??
[   90.977413][   T25] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0
[   91.097372][ T5525] loop4: detected capacity change from 0 to 128
[   91.132435][ T5525] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   91.154600][ T5525] ext4 filesystem being mounted at /12/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   91.240485][ T5525] overlayfs: failed to create directory ./file0/work (errno: 28); mounting read-only
[   91.271221][   T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   91.272832][ T5250] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[   91.298460][   T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   91.321248][   T35] bond0 (unregistering): Released all slaves
[   91.328119][    C1] usb 2-1: yurex_control_callback - control failed: -2
[   91.340918][ T5242] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   91.377609][  T938] usb 2-1: USB disconnect, device number 2
[   91.386216][  T938] yurex 2-1:0.0: USB YUREX #0 now disconnected
[   91.684994][ T5239] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   91.759734][ T5517] kmmpd-loop0: attempt to access beyond end of device
[   91.759734][ T5517] loop0: rw=14337, sector=128, nr_sectors = 2 limit=64
[   91.799885][ T5517] Buffer I/O error on dev loop0, logical block 64, lost sync page write
[   91.913490][ T5250] Bluetooth: hci3: command tx timeout
[   92.194093][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   92.201805][   T35] batman_adv: batadv0: Removing interface: batadv_slave_0
[   92.240407][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   92.272905][   T35] batman_adv: batadv0: Removing interface: batadv_slave_1
[   92.338658][   T35] veth1_macvtap: left promiscuous mode
[   92.355233][   T35] veth0_macvtap: left promiscuous mode
[   92.360906][   T35] veth1_vlan: left promiscuous mode
[   92.384452][   T35] veth0_vlan: left promiscuous mode
[   92.514099][ T5557] loop4: detected capacity change from 0 to 2048
[   92.828260][ T5255] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   92.838576][ T5255] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   92.848913][ T5255] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   92.861061][ T5255] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   92.869013][ T5255] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   92.879349][ T5255] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   93.001921][ T5554] loop1: detected capacity change from 0 to 32768
[   93.102682][ T5293] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   93.143853][ T5554] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode.
[   93.283286][ T5293] usb 5-1: Using ep0 maxpacket: 8
[   93.292284][ T5293] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   93.314461][ T5293] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   93.326810][ T5293] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[   93.340636][ T5293] usb 5-1: New USB device found, idVendor=05ac, idProduct=0274, bcdDevice= 0.00
[   93.352721][ T5293] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   93.366724][ T5240] ocfs2: Unmounting device (7,1) on (node local)
[   93.396557][ T5293] usb 5-1: config 0 descriptor??
[   93.624986][   T35] team0 (unregistering): Port device team_slave_1 removed
[   93.723155][   T35] team0 (unregistering): Port device team_slave_0 removed
[   93.826931][ T5293] apple 0003:05AC:0274.0001: unexpected long global item
[   93.837664][ T5293] apple 0003:05AC:0274.0001: parse failed
[   93.843798][ T5293] apple 0003:05AC:0274.0001: probe with driver apple failed with error -22
[   93.946867][  T938] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   94.006435][ T5255] Bluetooth: hci3: command tx timeout
[   94.045848][ T5293] usb 5-1: USB disconnect, device number 2
[   94.130836][  T938] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[   94.142705][  T938] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[   94.153642][  T938] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[   94.163967][  T938] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   94.177439][ T5568] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[   94.202179][  T938] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[   94.500450][ T5504] chnl_net:caif_netlink_parms(): no params data found
[   94.690246][ T5293] usb 2-1: USB disconnect, device number 3
[   94.750465][ T5575] loop4: detected capacity change from 0 to 1024
[   94.889651][ T5575] hfsplus: failed to load root directory
[   94.907207][ T5504] bridge0: port 1(bridge_slave_0) entered blocking state
[   94.939293][ T5575] netlink: 4 bytes leftover after parsing attributes in process `syz.4.71'.
[   94.952932][ T5255] Bluetooth: hci0: command tx timeout
[   94.974386][ T5504] bridge0: port 1(bridge_slave_0) entered disabled state
[   94.981657][ T5504] bridge_slave_0: entered allmulticast mode
[   94.989527][ T5504] bridge_slave_0: entered promiscuous mode
[   95.014332][ T5504] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.044509][ T5504] bridge0: port 2(bridge_slave_1) entered disabled state
[   95.051823][ T5504] bridge_slave_1: entered allmulticast mode
[   95.098727][ T5504] bridge_slave_1: entered promiscuous mode
[   95.205409][ T5504] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   95.220345][ T5504] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   95.342342][ T5504] team0: Port device team_slave_0 added
[   95.426575][ T5504] team0: Port device team_slave_1 added
[   95.463793][ T5591] loop1: detected capacity change from 0 to 512
[   95.489111][ T5504] batman_adv: batadv0: Adding interface: batadv_slave_0
[   95.498565][ T5504] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   95.530555][ T5504] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   95.570079][ T5591] EXT4-fs (loop1): orphan cleanup on readonly fs
[   95.604048][ T5591] EXT4-fs warning (device loop1): ext4_enable_quotas:7097: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[   95.645929][   T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.648913][ T5591] EXT4-fs (loop1): Cannot turn on quotas: error -22
[   95.678382][ T5504] batman_adv: batadv0: Adding interface: batadv_slave_1
[   95.686029][ T5504] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   95.713415][ T5504] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   95.714614][ T5591] EXT4-fs error (device loop1): ext4_ext_check_inode:524: inode #13: comm syz.1.73: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[   95.799478][ T5591] EXT4-fs error (device loop1): ext4_orphan_get:1393: comm syz.1.73: couldn't read orphan inode 13 (err -117)
[   95.815023][ T5591] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   95.841449][   T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.871764][ T5591] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended
[   95.898107][ T5591] EXT4-fs warning (device loop1): read_mmp_block:115: Error -117 while reading MMP block 2
[   95.932078][ T5560] chnl_net:caif_netlink_parms(): no params data found
[   95.975242][   T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.997319][ T5240] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   96.019648][ T5504] hsr_slave_0: entered promiscuous mode
[   96.036120][ T5504] hsr_slave_1: entered promiscuous mode
[   96.048480][ T5504] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   96.081271][ T5504] Cannot create hsr debugfs directory
[   96.087916][ T5255] Bluetooth: hci3: command tx timeout
[   96.210153][   T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.278839][ T5600] netlink: 356 bytes leftover after parsing attributes in process `syz.1.75'.
[   96.540597][ T5586] loop4: detected capacity change from 0 to 40427
[   96.639086][ T5586] F2FS-fs (loop4): Found nat_bits in checkpoint
[   96.741784][ T5560] bridge0: port 1(bridge_slave_0) entered blocking state
[   96.773730][ T5560] bridge0: port 1(bridge_slave_0) entered disabled state
[   96.781757][ T5560] bridge_slave_0: entered allmulticast mode
[   96.830496][ T5560] bridge_slave_0: entered promiscuous mode
[   96.837155][ T5586] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   96.971318][ T5560] bridge0: port 2(bridge_slave_1) entered blocking state
[   97.009301][ T5560] bridge0: port 2(bridge_slave_1) entered disabled state
[   97.040380][ T5255] Bluetooth: hci0: command tx timeout
[   97.072947][ T5560] bridge_slave_1: entered allmulticast mode
[   97.080267][ T5560] bridge_slave_1: entered promiscuous mode
[   97.093488][ T5586] syz.4.72: attempt to access beyond end of device
[   97.093488][ T5586] loop4: rw=0, sector=77824, nr_sectors = 8 limit=40427
[   97.129172][ T5586] syz.4.72: attempt to access beyond end of device
[   97.129172][ T5586] loop4: rw=0, sector=77824, nr_sectors = 8 limit=40427
[   97.185677][ T5250] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   97.198178][ T5250] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   97.213684][ T5250] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   97.226052][ T5250] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   97.236486][ T5242] syz-executor: attempt to access beyond end of device
[   97.236486][ T5242] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   97.261525][ T5242] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[   97.264464][ T5250] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[   97.286491][ T5250] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   97.327525][ T5560] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   97.456739][   T35] bridge_slave_1: left allmulticast mode
[   97.462544][   T35] bridge_slave_1: left promiscuous mode
[   97.468294][   T35] bridge0: port 2(bridge_slave_1) entered disabled state
[   97.481757][   T35] bridge_slave_0: left allmulticast mode
[   97.490199][   T35] bridge_slave_0: left promiscuous mode
[   97.496844][   T35] bridge0: port 1(bridge_slave_0) entered disabled state
[   97.902298][ T5639] loop1: detected capacity change from 0 to 512
[   97.999241][ T5639] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[   98.076889][ T5641] loop4: detected capacity change from 0 to 4096
[   98.085489][ T5641] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512).
[   98.135228][ T5639] EXT4-fs error (device loop1): ext4_orphan_get:1388: inode #15: comm syz.1.82: iget: bad i_size value: -67835469387268086
[   98.159302][ T5255] Bluetooth: hci3: command tx timeout
[   98.178218][ T5639] EXT4-fs error (device loop1): ext4_orphan_get:1393: comm syz.1.82: couldn't read orphan inode 15 (err -117)
[   98.192344][ T5639] EXT4-fs (loop1): mounted filesystem f7ff0000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   98.205155][ T5639] ext2 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   98.270520][ T5240] EXT4-fs (loop1): unmounting filesystem f7ff0000-0000-0000-0000-000000000000.
[   98.341092][   T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   98.380199][   T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   98.410512][   T35] bond0 (unregistering): Released all slaves
[   98.414341][ T5641] ntfs3(loop4): ino=1d, "file2" attr_set_size
[   98.431989][ T5560] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   98.582579][ T5650] loop1: detected capacity change from 0 to 128
[   98.781642][ T5560] team0: Port device team_slave_0 added
[   98.867750][ T5560] team0: Port device team_slave_1 added
[   98.902738][   T25] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   99.086920][   T25] usb 5-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad
[   99.098733][   T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   99.110580][ T5560] batman_adv: batadv0: Adding interface: batadv_slave_0
[   99.118722][ T5255] Bluetooth: hci0: command tx timeout
[   99.128160][   T25] usb 5-1: config 0 descriptor??
[   99.133989][ T5560] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   99.174814][   T25] gspca_main: spca508-2.14.0 probing 8086:0110
[   99.201028][ T5560] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   99.203529][ T5657] loop1: detected capacity change from 0 to 512
[   99.268841][   T35] hsr_slave_0: left promiscuous mode
[   99.278152][ T5657] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   99.291105][ T5657] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   99.304991][   T35] hsr_slave_1: left promiscuous mode
[   99.312569][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   99.322428][   T35] batman_adv: batadv0: Removing interface: batadv_slave_0
[   99.333850][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   99.347734][ T5293] kernel read not supported for file / (pid: 5293 comm: kworker/0:3)
[   99.352913][ T5255] Bluetooth: hci5: command tx timeout
[   99.356533][   T35] batman_adv: batadv0: Removing interface: batadv_slave_1
[   99.381022][   T25] gspca_spca508: reg_read err -32
[   99.390954][   T25] gspca_spca508: reg_read err -32
[   99.397421][   T25] gspca_spca508: reg_read err -32
[   99.404953][   T25] gspca_spca508: reg_read err -32
[   99.410745][   T25] gspca_spca508: reg_read err -32
[   99.441129][   T35] veth1_macvtap: left promiscuous mode
[   99.453756][ T5240] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   99.463460][   T35] veth0_macvtap: left promiscuous mode
[   99.469112][   T35] veth1_vlan: left promiscuous mode
[   99.475452][   T35] veth0_vlan: left promiscuous mode
[   99.570710][ T5662] loop1: detected capacity change from 0 to 64
[   99.618436][   T25] gspca_spca508: reg write: error -71
[   99.642007][   T25] spca508 5-1:0.0: probe with driver spca508 failed with error -71
[   99.675028][   T25] usb 5-1: USB disconnect, device number 3
[  100.339864][ T5669] fuse: root generation should be zero
[  100.379551][   T35] team0 (unregistering): Port device team_slave_1 removed
[  100.523516][   T35] team0 (unregistering): Port device team_slave_0 removed
[  100.533102][ T5671] loop4: detected capacity change from 0 to 512
[  100.550351][ T5671] EXT4-fs: Ignoring removed bh option
[  100.560854][ T5666] loop1: detected capacity change from 0 to 32768
[  100.569437][ T5671] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  100.600875][ T5666] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.90 (5666)
[  100.669430][ T5666] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  100.675528][ T5671] EXT4-fs error (device loop4): __ext4_iget:4952: inode #15: block 1803188595: comm syz.4.92: invalid block
[  100.707534][ T5671] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.92: couldn't read orphan inode 15 (err -117)
[  100.723671][ T5666] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  100.730111][ T5671] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  100.760130][ T5666] BTRFS info (device loop1): using free-space-tree
[  100.860460][ T5242] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  101.204615][ T5255] Bluetooth: hci0: command tx timeout
[  101.318014][ T5240] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  101.436916][ T5255] Bluetooth: hci5: command tx timeout
[  101.941113][ T5560] batman_adv: batadv0: Adding interface: batadv_slave_1
[  101.981087][ T5560] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  102.026324][ T5560] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  102.127328][ T5707] loop4: detected capacity change from 0 to 1024
[  102.217142][ T5560] hsr_slave_0: entered promiscuous mode
[  102.241147][ T5707] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  102.254047][ T5560] hsr_slave_1: entered promiscuous mode
[  102.280817][ T5560] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  102.305718][ T5560] Cannot create hsr debugfs directory
[  102.497679][ T5242] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  102.687061][ T5504] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  102.705956][ T5504] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  102.739102][ T5504] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  102.766791][ T5504] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  102.918057][ T5628] chnl_net:caif_netlink_parms(): no params data found
[  103.247873][ T5504] 8021q: adding VLAN 0 to HW filter on device bond0
[  103.273223][ T5504] 8021q: adding VLAN 0 to HW filter on device team0
[  103.358482][ T5713] loop1: detected capacity change from 0 to 40427
[  103.430062][ T5713] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x1fffff
[  103.472944][ T5713] F2FS-fs (loop1): Image doesn't support compression
[  103.479940][ T5713] F2FS-fs (loop1): Image doesn't support compression
[  103.497844][   T35] bridge0: port 1(bridge_slave_0) entered blocking state
[  103.513025][   T35] bridge0: port 1(bridge_slave_0) entered forwarding state
[  103.523122][ T5255] Bluetooth: hci5: command tx timeout
[  103.540398][ T5713] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x4
[  103.548275][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[  103.548390][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[  103.568267][ T5713] F2FS-fs (loop1): invalid crc value
[  103.684124][ T5713] F2FS-fs (loop1): Found nat_bits in checkpoint
[  103.745518][ T5628] bridge0: port 1(bridge_slave_0) entered blocking state
[  103.772967][ T5628] bridge0: port 1(bridge_slave_0) entered disabled state
[  103.780530][ T5628] bridge_slave_0: entered allmulticast mode
[  103.820798][ T5628] bridge_slave_0: entered promiscuous mode
[  103.842907][ T5628] bridge0: port 2(bridge_slave_1) entered blocking state
[  103.857233][ T5628] bridge0: port 2(bridge_slave_1) entered disabled state
[  103.864999][ T5628] bridge_slave_1: entered allmulticast mode
[  103.865845][ T5713] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  103.872321][ T5628] bridge_slave_1: entered promiscuous mode
[  104.005375][ T5628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  104.018572][ T5628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  104.024015][ T5713] syz.1.98: attempt to access beyond end of device
[  104.024015][ T5713] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  104.085617][ T5713] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  104.137531][ T5628] team0: Port device team_slave_0 added
[  104.185400][ T5628] team0: Port device team_slave_1 added
[  104.273560][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_0
[  104.280665][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  104.329190][ T5628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  104.342352][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_1
[  104.349661][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  104.378142][ T5628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  104.497817][ T5560] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  104.621384][ T5628] hsr_slave_0: entered promiscuous mode
[  104.673641][ T5628] hsr_slave_1: entered promiscuous mode
[  104.694156][ T5628] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  104.727355][ T5628] Cannot create hsr debugfs directory
[  104.748330][ T5560] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  104.791119][ T5560] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  104.902943][ T5560] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  105.033324][ T5504] 8021q: adding VLAN 0 to HW filter on device batadv0
[  105.041026][ T5762] netlink: 8 bytes leftover after parsing attributes in process `syz.1.103'.
[  105.392253][ T5628] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.569342][ T5628] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.594962][ T5255] Bluetooth: hci5: command tx timeout
[  105.741070][ T5628] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.809301][ T5504] veth0_vlan: entered promiscuous mode
[  105.886080][ T5628] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.946215][ T5560] 8021q: adding VLAN 0 to HW filter on device bond0
[  105.963261][ T5504] veth1_vlan: entered promiscuous mode
[  106.063006][ T5560] 8021q: adding VLAN 0 to HW filter on device team0
[  106.117352][   T35] bridge0: port 1(bridge_slave_0) entered blocking state
[  106.124920][   T35] bridge0: port 1(bridge_slave_0) entered forwarding state
[  106.193146][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[  106.200344][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[  106.323991][ T5504] veth0_macvtap: entered promiscuous mode
[  106.357878][ T5504] veth1_macvtap: entered promiscuous mode
[  106.511237][ T5628] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  106.541743][ T5628] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  106.568510][ T5628] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  106.610170][ T5628] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  106.644271][ T5504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  106.677633][ T5504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.691732][ T5504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  106.717282][ T5504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.737207][ T5504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  106.751406][ T5504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.772465][ T5504] batman_adv: batadv0: Interface activated: batadv_slave_0
[  106.812037][ T5504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  106.877375][ T5504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.907643][ T5504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  106.932796][ T5504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.957241][ T5504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  106.979418][ T5504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  107.006760][ T5504] batman_adv: batadv0: Interface activated: batadv_slave_1
[  107.059779][ T5504] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  107.107293][ T5504] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  107.153548][ T5504] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  107.162361][ T5504] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  107.238856][ T5824] loop1: detected capacity change from 0 to 128
[  107.349055][ T5824] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  107.375455][ T5824] ext4 filesystem being mounted at /39/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  107.400553][ T5560] 8021q: adding VLAN 0 to HW filter on device batadv0
[  107.525867][ T5560] veth0_vlan: entered promiscuous mode
[  107.607392][ T5628] 8021q: adding VLAN 0 to HW filter on device bond0
[  107.630827][ T5628] 8021q: adding VLAN 0 to HW filter on device team0
[  107.652729][   T29] audit: type=1804 audit(1729041151.414:6): pid=5824 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.111" name="/newroot/39/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/bus" dev="loop1" ino=12 res=1 errno=0
[  107.671669][ T5628] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  107.706459][ T5628] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  107.748783][   T35] bridge0: port 1(bridge_slave_0) entered blocking state
[  107.756055][   T35] bridge0: port 1(bridge_slave_0) entered forwarding state
[  107.766863][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[  107.774328][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[  107.818494][ T5560] veth1_vlan: entered promiscuous mode
[  107.923960][ T3012] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  107.932574][ T5240] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  107.952580][ T3012] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  108.046435][ T5560] veth0_macvtap: entered promiscuous mode
[  108.141728][ T5560] veth1_macvtap: entered promiscuous mode
[  108.176979][ T5848] netlink: 12 bytes leftover after parsing attributes in process `syz.4.115'.
[  108.202369][ T5848] vlan2: entered promiscuous mode
[  108.211116][ T5848] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  108.232219][ T5848] netdevsim netdevsim4 netdevsim0: left promiscuous mode
[  108.291177][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  108.306398][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  108.353584][ T5560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  108.423071][ T5560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  108.469598][ T5560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  108.490512][ T5560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  108.502893][ T5560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  108.520674][ T5560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  108.531339][ T5560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  108.543765][ T5560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  108.566449][ T5560] batman_adv: batadv0: Interface activated: batadv_slave_0
[  108.651333][ T5560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  108.682035][ T5560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  108.713237][ T5560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  108.725014][ T5866] loop4: detected capacity change from 0 to 764
[  108.753589][ T5560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  108.773802][ T5560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  108.785089][ T5560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  108.813076][ T5560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  108.825891][ T5560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  108.855454][ T5560] batman_adv: batadv0: Interface activated: batadv_slave_1
[  108.953063][ T5628] 8021q: adding VLAN 0 to HW filter on device batadv0
[  108.975588][ T5560] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  108.997651][ T5560] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  109.031397][ T5560] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  109.068196][ T5560] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  109.133108][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  109.388748][ T5628] veth0_vlan: entered promiscuous mode
[  109.492200][ T5628] veth1_vlan: entered promiscuous mode
[  109.531303][   T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  109.576276][   T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  109.697171][   T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  109.727630][ T5628] veth0_macvtap: entered promiscuous mode
[  109.742832][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  109.751947][   T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  109.770191][ T5628] veth1_macvtap: entered promiscuous mode
[  109.883304][ T5628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  109.974997][ T5628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  110.039781][ T5628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  110.131381][ T5628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  110.154659][ T5628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  110.171300][ T5898] netlink: 4 bytes leftover after parsing attributes in process `syz.0.64'.
[  110.203177][ T5628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  110.218169][ T5628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  110.228965][ T5628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  110.259238][ T5628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  110.284674][ T5628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  110.320731][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_0
[  110.370690][ T5628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  110.405854][ T5628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  110.435739][ T5628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  110.472445][ T5628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  110.504179][ T5628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  110.555856][ T5628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  110.598924][ T5628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  110.637695][ T5628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  110.659007][ T5628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  110.690619][ T5628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  110.743448][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_1
[  110.826776][ T5628] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  110.870982][ T5628] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  110.904525][ T5628] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  110.955174][ T5874] loop2: detected capacity change from 0 to 40427
[  110.956539][ T5628] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  111.053599][ T5874] F2FS-fs (loop2): Found nat_bits in checkpoint
[  111.316944][   T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  111.334005][ T5874] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  111.352037][   T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  111.464501][ T1100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  111.482559][ T1100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  111.482972][ T5907] f2fs_ckpt-7:2: attempt to access beyond end of device
[  111.482972][ T5907] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  111.513205][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[  111.535615][ T5907] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  111.556214][ T5874] syz.2.53: attempt to access beyond end of device
[  111.556214][ T5874] loop2: rw=524288, sector=45064, nr_sectors = 8 limit=40427
[  111.631388][ T5874] syz.2.53: attempt to access beyond end of device
[  111.631388][ T5874] loop2: rw=0, sector=45064, nr_sectors = 8 limit=40427
[  112.143531][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  112.242665][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[  112.302781][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  112.311345][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  112.396680][ T5904] loop0: detected capacity change from 0 to 40427
[  112.449042][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  112.458650][ T5904] F2FS-fs (loop0): Invalid Fs Meta Ino: node(1) meta(2) root(0)
[  112.475737][ T5904] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  112.512926][ T5904] F2FS-fs (loop0): build fault injection attr: rate: 18446, type: 0x1fffff
[  112.529032][ T5904] F2FS-fs (loop0): invalid crc value
[  112.605521][ T5904] F2FS-fs (loop0): Found nat_bits in checkpoint
[  112.816996][ T5904] F2FS-fs (loop0): Start checkpoint disabled!
[  112.858693][ T5917] syz.3.76 (5917): drop_caches: 2
[  112.878655][ T5904] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  112.902628][ T5904] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  112.969998][ T5904] syz.0.124: attempt to access beyond end of device
[  112.969998][ T5904] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  113.076186][ T5929] loop2: detected capacity change from 0 to 1024
[  113.099160][ T5929] EXT4-fs: Ignoring removed oldalloc option
[  113.102003][ T5904] syz.0.124: attempt to access beyond end of device
[  113.102003][ T5904] loop0: rw=2049, sector=45104, nr_sectors = 128 limit=40427
[  113.112357][ T5929] EXT4-fs (loop2): stripe (3) is not aligned with cluster size (16), stripe is disabled
[  113.187256][ T5933] loop3: detected capacity change from 0 to 512
[  113.187903][ T5929] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  113.239261][ T5933] EXT4-fs error (device loop3): __ext4_fill_super:5458: inode #2: comm syz.3.132: casefold flag without casefold feature
[  113.325028][ T5933] EXT4-fs (loop3): get root inode failed
[  113.330765][ T5933] EXT4-fs (loop3): mount failed
[  113.430384][ T1100] kworker/u8:6: attempt to access beyond end of device
[  113.430384][ T1100] loop0: rw=1, sector=45104, nr_sectors = 8 limit=40427
[  113.515490][ T1100] kworker/u8:6: attempt to access beyond end of device
[  113.515490][ T1100] loop0: rw=1, sector=45168, nr_sectors = 8 limit=40427
[  113.554326][ T1100] kworker/u8:6: attempt to access beyond end of device
[  113.554326][ T1100] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  113.560349][ T5504] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  113.589182][ T1100] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  113.607873][ T1100] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  114.273182][ T5294] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  114.481230][ T5294] usb 4-1: Using ep0 maxpacket: 8
[  114.510267][ T5294] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2
[  114.529953][ T5294] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  114.569372][ T5970] loop0: detected capacity change from 0 to 2048
[  114.577621][ T5294] usb 4-1: Product: syz
[  114.581941][ T5294] usb 4-1: Manufacturer: syz
[  114.587825][ T5294] usb 4-1: SerialNumber: syz
[  114.601698][ T5294] usb 4-1: config 0 descriptor??
[  114.621226][ T5970] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  114.836921][ T5294] usb 4-1: dvb_usb_v2: found a 'Terratec H7' in warm state
[  114.938596][ T5976] trusted_key: syz.1.149 sent an empty control message without MSG_MORE.
[  115.077992][ T5963] syz.2.143 (5963): drop_caches: 2
[  115.382871][ T5980] loop4: detected capacity change from 0 to 8192
[  115.458916][ T5980]  loop4: AHDI p2 p3
[  115.472856][ T5980] loop4: p2 size 65535 extends beyond EOD, truncated
[  115.602708][    T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  115.653106][ T5996] cgroup: fork rejected by pids controller in /syz1
[  115.773275][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  115.798918][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  115.833348][    T9] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  115.865030][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  115.883917][    T9] usb 3-1: config 0 descriptor??
[  116.254665][ T5294] usb write operation failed. (-71)
[  116.284457][ T5294] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  116.343317][ T5294] dvbdev: DVB: registering new adapter (Terratec H7)
[  116.351005][ T5294] usb 4-1: media controller created
[  116.363567][    T9] cp2112 0003:10C4:EA90.0002: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0
[  116.365742][   T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.396598][ T5294] usb read operation failed. (-71)
[  116.414383][ T5294] usb write operation failed. (-71)
[  116.436484][ T5294] dvb_usb_az6007 4-1:0.0: probe with driver dvb_usb_az6007 failed with error -5
[  116.495177][ T5294] usb 4-1: USB disconnect, device number 4
[  116.514415][    T9] cp2112 0003:10C4:EA90.0002: Part Number: 0x82 Device Version: 0xFE
[  116.635548][   T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.732182][ T5995] loop0: detected capacity change from 0 to 40427
[  116.776757][ T5995] F2FS-fs (loop0): build fault injection attr: rate: 771, type: 0x1fffff
[  116.814798][ T5995] F2FS-fs (loop0): invalid crc value
[  116.827589][   T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.855411][ T5995] F2FS-fs (loop0): Found nat_bits in checkpoint
[  116.985932][   T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  117.025530][ T5995] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  117.138640][    T9] cp2112 0003:10C4:EA90.0002: error reading lock byte: -71
[  117.139583][ T5995] syz.0.158: attempt to access beyond end of device
[  117.139583][ T5995] loop0: rw=2049, sector=77824, nr_sectors = 8 limit=40427
[  117.171825][    T9] usb 3-1: USB disconnect, device number 3
[  117.246194][ T5995] syz.0.158: attempt to access beyond end of device
[  117.246194][ T5995] loop0: rw=0, sector=77824, nr_sectors = 8 limit=40427
[  117.424243][ T6007] loop7: detected capacity change from 0 to 16384
[  117.546759][ T5250] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  117.560224][ T5250] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  117.570427][ T5250] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  117.610606][ T5560] syz-executor: attempt to access beyond end of device
[  117.610606][ T5560] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  117.625498][ T5560] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  117.710559][ T5250] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  117.823123][   T35] bridge_slave_1: left allmulticast mode
[  117.829019][ T5250] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  117.837014][ T5250] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  117.856369][ T6008] Invalid logical block size (1)
[  117.884496][   T35] bridge_slave_1: left promiscuous mode
[  117.942922][   T35] bridge0: port 2(bridge_slave_1) entered disabled state
[  118.044290][   T35] bridge_slave_0: left allmulticast mode
[  118.050032][   T35] bridge_slave_0: left promiscuous mode
[  118.072835][   T35] bridge0: port 1(bridge_slave_0) entered disabled state
[  118.436673][ T6018] loop0: detected capacity change from 0 to 16
[  118.595556][ T6018] erofs: (device loop0): mounted with root inode @ nid 36.
[  119.913312][ T5250] Bluetooth: hci1: command tx timeout
[  120.288160][   T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  120.306720][   T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  120.329033][   T35] bond0 (unregistering): Released all slaves
[  122.000077][ T5250] Bluetooth: hci1: command tx timeout
[  124.073064][ T5250] Bluetooth: hci1: command tx timeout
[  124.318686][ T6086] input: syz1 as /devices/virtual/input/input5
[  125.047277][ T6081] loop0: detected capacity change from 0 to 40427
[  125.077365][ T6081] F2FS-fs (loop0): Invalid Fs Meta Ino: node(1) meta(2) root(0)
[  125.085709][ T6081] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  125.091383][ T6091] loop3: detected capacity change from 0 to 256
[  125.171819][ T6081] F2FS-fs (loop0): invalid crc value
[  125.210395][ T6091] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  125.265117][ T6081] F2FS-fs (loop0): Found nat_bits in checkpoint
[  125.489213][ T6081] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  125.496490][ T6081] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  125.898936][ T6098] loop3: detected capacity change from 0 to 32768
[  125.924677][ T5560] syz-executor: attempt to access beyond end of device
[  125.924677][ T5560] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  125.947632][ T6098] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.182 (6098)
[  125.979371][ T5560] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  126.019933][ T6098] BTRFS info (device loop3): first mount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f
[  126.042684][ T6098] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm
[  126.052005][ T6098] BTRFS info (device loop3): using free-space-tree
[  126.152800][ T5250] Bluetooth: hci1: command tx timeout
[  126.461024][ T5255] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  126.478410][ T5255] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  126.519288][ T5255] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  126.548263][ T5255] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  126.571083][ T5255] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  126.618417][ T5255] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  126.909137][ T1092] BTRFS info (device loop3): qgroup scan completed (inconsistency flag cleared)
[  126.920856][ T5628] BTRFS info (device loop3): last unmount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f
[  127.048911][ T5360] udevd[5360]: '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0' [6119] terminated by signal 1 (Hangup)
[  127.680068][ T6123] loop0: detected capacity change from 0 to 1024
[  127.688808][ T6123] EXT4-fs (loop0): Cannot use DAX on a filesystem that may contain inline data
[  128.278785][ T5250] Bluetooth: hci1: command tx timeout
[  128.727717][ T5250] Bluetooth: hci6: command tx timeout
[  129.623010][ T6137] loop3: detected capacity change from 0 to 32768
[  129.630348][ T6137] XFS: ikeep mount option is deprecated.
[  129.840646][ T6137] XFS (loop3): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  129.919210][ T6137] XFS (loop3): Ending clean mount
[  129.960608][ T6137] XFS (loop3): Quotacheck needed: Please wait.
[  130.115463][ T6137] XFS (loop3): Quotacheck: Done.
[  130.263719][ T5628] XFS (loop3): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  130.482723][ T5255] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  130.495976][ T5255] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  130.534025][ T5255] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  130.627114][ T6146] loop0: detected capacity change from 0 to 32768
[  130.682789][ T5255] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  130.705795][ T5255] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  130.758034][ T6146] XFS (loop0): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  130.765360][ T5255] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  130.792602][ T5255] Bluetooth: hci6: command tx timeout
[  130.796753][ T6146] XFS (loop0): Ending clean mount
[  130.902675][  T938] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_bnobt block 0x4 
[  130.943816][  T938] XFS (loop0): Unmount and run xfs_repair
[  130.963975][  T938] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  130.973817][  T938] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff  AB3B............
[  130.986716][  T938] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10  ................
[  131.010803][  T938] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a  .7.nt.N..._.'K.:
[  131.021840][  T938] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01  .....;%.........
[  131.041596][  T938] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0  ........... ....
[  131.058779][  T938] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  131.070727][  T938] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  131.097447][  T938] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  131.144423][ T6146] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x4 len 4 error 74
[  131.251074][ T6146] XFS (loop0): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xad0 (fs/xfs/xfs_trans_buf.c:296).  Shutting down filesystem.
[  131.266482][   T35] hsr_slave_0: left promiscuous mode
[  131.276656][   T35] hsr_slave_1: left promiscuous mode
[  131.286255][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  131.301529][ T6146] XFS (loop0): Please unmount the filesystem and rectify the problem(s)
[  131.303356][   T35] batman_adv: batadv0: Removing interface: batadv_slave_0
[  131.341405][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  131.356553][   T35] batman_adv: batadv0: Removing interface: batadv_slave_1
[  131.415493][ T5560] XFS (loop0): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  131.426771][   T35] veth1_macvtap: left promiscuous mode
[  131.452144][   T35] veth0_macvtap: left promiscuous mode
[  131.458103][   T35] veth1_vlan: left promiscuous mode
[  131.465211][   T35] veth0_vlan: left promiscuous mode
[  131.782382][ T6170] loop3: detected capacity change from 0 to 2048
[  131.886352][ T6170] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found
[  131.894778][ T6170] UDF-fs: Scanning with blocksize 512 failed
[  131.967037][ T6170] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  132.231261][ T6169] UDF-fs: error (device loop3): udf_truncate_tail_extent: Extent after EOF in inode 818
[  132.416920][   T66] kworker/u8:4: attempt to access beyond end of device
[  132.416920][   T66] loop3: rw=1, sector=2048, nr_sectors = 2 limit=2048
[  132.440650][   T66] Buffer I/O error on dev loop3, logical block 1024, lost async page write
[  132.475382][   T66] kworker/u8:4: attempt to access beyond end of device
[  132.475382][   T66] loop3: rw=1, sector=2048, nr_sectors = 2 limit=2048
[  132.510138][   T66] Buffer I/O error on dev loop3, logical block 1024, lost async page write
[  132.551210][   T66] kworker/u8:4: attempt to access beyond end of device
[  132.551210][   T66] loop3: rw=1, sector=2048, nr_sectors = 2 limit=2048
[  132.574075][   T66] Buffer I/O error on dev loop3, logical block 1024, lost async page write
[  132.583026][   T66] kworker/u8:4: attempt to access beyond end of device
[  132.583026][   T66] loop3: rw=1, sector=2048, nr_sectors = 2 limit=2048
[  132.590623][ T6174] loop0: detected capacity change from 0 to 32768
[  132.616591][   T66] Buffer I/O error on dev loop3, logical block 1024, lost async page write
[  132.660548][   T66] kworker/u8:4: attempt to access beyond end of device
[  132.660548][   T66] loop3: rw=1, sector=2050, nr_sectors = 2 limit=2048
[  132.684451][   T66] Buffer I/O error on dev loop3, logical block 1025, lost async page write
[  132.693355][   T66] kworker/u8:4: attempt to access beyond end of device
[  132.693355][   T66] loop3: rw=1, sector=2050, nr_sectors = 2 limit=2048
[  132.703859][ T6174] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  132.723741][   T66] Buffer I/O error on dev loop3, logical block 1025, lost async page write
[  132.734145][   T66] kworker/u8:4: attempt to access beyond end of device
[  132.734145][   T66] loop3: rw=1, sector=2050, nr_sectors = 2 limit=2048
[  132.783863][   T66] Buffer I/O error on dev loop3, logical block 1025, lost async page write
[  132.796198][   T66] kworker/u8:4: attempt to access beyond end of device
[  132.796198][   T66] loop3: rw=1, sector=2050, nr_sectors = 2 limit=2048
[  132.809959][   T66] Buffer I/O error on dev loop3, logical block 1025, lost async page write
[  132.818810][   T66] kworker/u8:4: attempt to access beyond end of device
[  132.818810][   T66] loop3: rw=1, sector=2052, nr_sectors = 2 limit=2048
[  132.837944][   T66] Buffer I/O error on dev loop3, logical block 1026, lost async page write
[  132.846827][   T66] kworker/u8:4: attempt to access beyond end of device
[  132.846827][   T66] loop3: rw=1, sector=2052, nr_sectors = 2 limit=2048
[  132.861151][   T66] Buffer I/O error on dev loop3, logical block 1026, lost async page write
[  132.876633][ T5250] Bluetooth: hci6: command tx timeout
[  132.879417][ T5628] UDF-fs: warning (device loop3): udf_evict_inode: Inode 818 (mode 100755) has inode size 134220898 different from extent length 134222848. Filesystem need not be standards compliant.
[  132.882348][ T5255] Bluetooth: hci2: command tx timeout
[  133.066810][   T35] team0 (unregistering): Port device team_slave_1 removed
[  133.108184][ T6174] XFS (loop0): Ending clean mount
[  133.116385][ T1271] ieee802154 phy0 wpan0: encryption failed: -22
[  133.124694][ T1271] ieee802154 phy1 wpan1: encryption failed: -22
[  133.162418][   T35] team0 (unregistering): Port device team_slave_0 removed
[  133.237046][ T6194] XFS (loop0): User initiated shutdown received.
[  133.259688][ T6194] XFS (loop0): Log I/O Error (0x6) detected at xfs_fs_goingdown+0xe2/0x160 (fs/xfs/xfs_fsops.c:457).  Shutting down filesystem.
[  133.283685][ T6194] XFS (loop0): Please unmount the filesystem and rectify the problem(s)
[  133.447987][ T5560] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  134.443202][ T6214] loop0: detected capacity change from 0 to 128
[  134.482741][ T6214] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  134.502727][ T6214] ext4 filesystem being mounted at /24/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  134.643852][ T6214] loop0: detected capacity change from 128 to 11
[  134.664937][ T6218] EXT4-fs warning (device loop0): ext4_read_inode_bitmap:148: Cannot read inode bitmap - block_group = 0, inode_bitmap = 19
[  134.769070][ T6005] chnl_net:caif_netlink_parms(): no params data found
[  134.789880][ T5560] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5780: Out of memory
[  134.860427][ T5560] EXT4-fs error (device loop0): ext4_dirty_inode:5984: inode #2: comm syz-executor: mark_inode_dirty error
[  134.952682][ T5255] Bluetooth: hci2: command tx timeout
[  134.958240][ T5250] Bluetooth: hci6: command tx timeout
[  135.369512][ T5560] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  135.522370][ T6151] chnl_net:caif_netlink_parms(): no params data found
[  135.556689][ T6005] bridge0: port 1(bridge_slave_0) entered blocking state
[  135.567918][ T6005] bridge0: port 1(bridge_slave_0) entered disabled state
[  135.590833][ T6005] bridge_slave_0: entered allmulticast mode
[  135.613832][ T6005] bridge_slave_0: entered promiscuous mode
[  135.634221][ T6005] bridge0: port 2(bridge_slave_1) entered blocking state
[  135.641390][ T6005] bridge0: port 2(bridge_slave_1) entered disabled state
[  135.674496][ T6005] bridge_slave_1: entered allmulticast mode
[  135.681803][ T6005] bridge_slave_1: entered promiscuous mode
[  135.704434][ T6116] chnl_net:caif_netlink_parms(): no params data found
[  135.938656][ T6005] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  135.987503][ T6005] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  136.102329][ T5250] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  136.115001][ T5250] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  136.138768][ T5250] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  136.143713][   T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  136.165466][ T5250] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  136.185709][ T5250] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  136.197965][ T5250] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  136.290443][ T6231] loop3: detected capacity change from 0 to 40427
[  136.311866][ T6231] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x1fffff
[  136.337486][ T6231] F2FS-fs (loop3): Image doesn't support compression
[  136.346546][ T6231] F2FS-fs (loop3): Image doesn't support compression
[  136.353486][ T6231] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x4
[  136.379116][ T6231] F2FS-fs (loop3): invalid crc value
[  136.389683][   T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  136.390726][ T6231] F2FS-fs (loop3): Found nat_bits in checkpoint
[  136.433189][ T6116] bridge0: port 1(bridge_slave_0) entered blocking state
[  136.440466][ T6116] bridge0: port 1(bridge_slave_0) entered disabled state
[  136.448286][ T6116] bridge_slave_0: entered allmulticast mode
[  136.463824][ T6116] bridge_slave_0: entered promiscuous mode
[  136.501363][ T6005] team0: Port device team_slave_0 added
[  136.513473][ T6151] bridge0: port 1(bridge_slave_0) entered blocking state
[  136.520622][ T6151] bridge0: port 1(bridge_slave_0) entered disabled state
[  136.528443][ T6151] bridge_slave_0: entered allmulticast mode
[  136.529498][ T6231] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  136.536075][ T6151] bridge_slave_0: entered promiscuous mode
[  136.552063][ T6151] bridge0: port 2(bridge_slave_1) entered blocking state
[  136.559646][ T6151] bridge0: port 2(bridge_slave_1) entered disabled state
[  136.567151][ T6151] bridge_slave_1: entered allmulticast mode
[  136.574381][ T6151] bridge_slave_1: entered promiscuous mode
[  136.598474][ T6116] bridge0: port 2(bridge_slave_1) entered blocking state
[  136.606018][ T6116] bridge0: port 2(bridge_slave_1) entered disabled state
[  136.606023][   T29] audit: type=1800 audit(1729041180.454:7): pid=6231 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.208" name="bus" dev="loop3" ino=14 res=0 errno=0
[  136.637571][ T6116] bridge_slave_1: entered allmulticast mode
[  136.644939][ T6116] bridge_slave_1: entered promiscuous mode
[  136.674768][ T5628] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  136.681756][   T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  136.682125][ T5628] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  136.700605][ T5628] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  136.711792][ T6005] team0: Port device team_slave_1 added
[  136.756342][ T6151] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  136.769182][ T6151] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  136.858415][ T6005] batman_adv: batadv0: Adding interface: batadv_slave_0
[  136.867584][ T6005] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  136.893821][ T6005] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  136.971748][   T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  137.031283][ T6151] team0: Port device team_slave_0 added
[  137.037362][ T5255] Bluetooth: hci2: command tx timeout
[  137.055776][ T6116] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  137.067883][ T6005] batman_adv: batadv0: Adding interface: batadv_slave_1
[  137.075043][ T6005] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  137.111153][ T6005] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  137.344987][ T6151] team0: Port device team_slave_1 added
[  137.409763][ T6116] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  137.461485][ T6005] hsr_slave_0: entered promiscuous mode
[  137.479781][ T6005] hsr_slave_1: entered promiscuous mode
[  137.524216][ T6151] batman_adv: batadv0: Adding interface: batadv_slave_0
[  137.541699][ T6151] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  137.569119][ T6151] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  137.660652][ T6151] batman_adv: batadv0: Adding interface: batadv_slave_1
[  137.682666][ T6151] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  137.720968][ T6151] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  137.767136][ T6116] team0: Port device team_slave_0 added
[  137.857099][ T6116] team0: Port device team_slave_1 added
[  137.931930][   T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  138.017561][ T6151] hsr_slave_0: entered promiscuous mode
[  138.033691][ T6151] hsr_slave_1: entered promiscuous mode
[  138.040415][ T6151] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  138.061192][ T6151] Cannot create hsr debugfs directory
[  138.098330][ T6271] loop3: detected capacity change from 0 to 32768
[  138.155470][ T6271] XFS (loop3): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[  138.195679][   T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  138.244458][ T6271] XFS (loop3): Ending clean mount
[  138.282111][   T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  138.308106][ T6116] batman_adv: batadv0: Adding interface: batadv_slave_0
[  138.315460][ T5255] Bluetooth: hci0: command tx timeout
[  138.322311][ T6116] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  138.351129][ T6116] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  138.379025][ T6116] batman_adv: batadv0: Adding interface: batadv_slave_1
[  138.387028][ T6116] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  138.422323][ T6116] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  138.436273][ T5628] XFS (loop3): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[  138.496895][   T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  138.634267][ T6116] hsr_slave_0: entered promiscuous mode
[  138.641819][ T6116] hsr_slave_1: entered promiscuous mode
[  138.650809][ T6116] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  138.658895][ T6116] Cannot create hsr debugfs directory
[  138.872121][ T6249] chnl_net:caif_netlink_parms(): no params data found
[  139.112933][ T5255] Bluetooth: hci2: command tx timeout
[  139.121612][   T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  139.266595][   T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  139.370177][   T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  139.408752][ T6249] bridge0: port 1(bridge_slave_0) entered blocking state
[  139.416446][ T6249] bridge0: port 1(bridge_slave_0) entered disabled state
[  139.434158][ T6249] bridge_slave_0: entered allmulticast mode
[  139.441658][ T6249] bridge_slave_0: entered promiscuous mode
[  139.491572][   T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  139.510674][ T6249] bridge0: port 2(bridge_slave_1) entered blocking state
[  139.520098][ T6249] bridge0: port 2(bridge_slave_1) entered disabled state
[  139.527745][ T6249] bridge_slave_1: entered allmulticast mode
[  139.536567][ T6249] bridge_slave_1: entered promiscuous mode
[  139.765400][ T6249] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  139.799620][ T6249] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  139.899077][ T6005] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  139.956392][ T6005] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  139.988654][ T6249] team0: Port device team_slave_0 added
[  140.031136][ T6005] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  140.057666][ T6249] team0: Port device team_slave_1 added
[  140.065443][   T35] bridge_slave_1: left allmulticast mode
[  140.071163][   T35] bridge_slave_1: left promiscuous mode
[  140.083929][   T35] bridge0: port 2(bridge_slave_1) entered disabled state
[  140.092928][   T25] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  140.102003][   T35] bridge_slave_0: left allmulticast mode
[  140.107781][   T35] bridge_slave_0: left promiscuous mode
[  140.114077][   T35] bridge0: port 1(bridge_slave_0) entered disabled state
[  140.128064][   T35] bridge_slave_1: left allmulticast mode
[  140.135687][   T35] bridge_slave_1: left promiscuous mode
[  140.141412][   T35] bridge0: port 2(bridge_slave_1) entered disabled state
[  140.152246][   T35] bridge_slave_0: left allmulticast mode
[  140.160351][   T35] bridge_slave_0: left promiscuous mode
[  140.166301][   T35] bridge0: port 1(bridge_slave_0) entered disabled state
[  140.176874][   T35] bridge_slave_1: left allmulticast mode
[  140.183472][   T35] bridge_slave_1: left promiscuous mode
[  140.189254][   T35] bridge0: port 2(bridge_slave_1) entered disabled state
[  140.201229][   T35] bridge_slave_0: left allmulticast mode
[  140.207401][   T35] bridge_slave_0: left promiscuous mode
[  140.213373][   T35] bridge0: port 1(bridge_slave_0) entered disabled state
[  140.262728][   T25] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc
[  140.282367][   T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  140.290687][   T25] usb 4-1: Product: syz
[  140.307618][   T25] usb 4-1: Manufacturer: syz
[  140.312304][   T25] usb 4-1: SerialNumber: syz
[  140.330634][   T25] usb 4-1: config 0 descriptor??
[  140.352025][   T25] i2c-tiny-usb 4-1:0.0: version 6d.cc found at bus 004 address 005
[  140.392606][ T5255] Bluetooth: hci0: command tx timeout
[  140.916650][   T25]  (null): failure setting delay to 10us
[  140.938165][   T25] i2c-tiny-usb 4-1:0.0: probe with driver i2c-tiny-usb failed with error -5
[  140.952731][   T25] usb 4-1: USB disconnect, device number 5
[  141.437695][   T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  141.452849][   T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  141.474204][   T35] bond0 (unregistering): Released all slaves
[  141.691311][   T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  141.706033][   T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  141.721252][   T35] bond0 (unregistering): Released all slaves
[  141.815781][   T25] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  141.877398][   T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  141.889517][   T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  141.902884][   T35] bond0 (unregistering): Released all slaves
[  141.915317][ T6005] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  141.972896][   T25] usb 4-1: Using ep0 maxpacket: 32
[  142.013453][   T25] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[  142.026799][ T6249] batman_adv: batadv0: Adding interface: batadv_slave_0
[  142.032685][   T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  142.036665][ T6249] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  142.063714][   T25] usb 4-1: config 0 descriptor??
[  142.089075][   T25] gspca_main: nw80x-2.14.0 probing 055f:d001
[  142.107594][ T6249] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  142.257249][ T6249] batman_adv: batadv0: Adding interface: batadv_slave_1
[  142.264706][ T6249] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  142.292101][ T6249] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  142.474306][ T5255] Bluetooth: hci0: command tx timeout
[  142.508790][ T6249] hsr_slave_0: entered promiscuous mode
[  142.516344][ T6249] hsr_slave_1: entered promiscuous mode
[  142.523091][ T6249] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  142.530706][ T6249] Cannot create hsr debugfs directory
[  143.049295][ T6005] 8021q: adding VLAN 0 to HW filter on device bond0
[  143.116535][ T6005] 8021q: adding VLAN 0 to HW filter on device team0
[  143.214156][ T6151] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  143.227413][ T6151] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  143.306712][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  143.313928][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  143.331577][ T6151] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  143.366897][ T6151] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  143.444778][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  143.452049][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  143.553242][ T5294] usb 4-1: USB disconnect, device number 6
[  143.804979][   T35] hsr_slave_0: left promiscuous mode
[  143.893475][   T35] hsr_slave_1: left promiscuous mode
[  143.899637][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  143.907448][   T35] batman_adv: batadv0: Removing interface: batadv_slave_0
[  143.924195][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  143.941944][   T35] batman_adv: batadv0: Removing interface: batadv_slave_1
[  143.954357][   T35] hsr_slave_0: left promiscuous mode
[  143.971609][   T35] hsr_slave_1: left promiscuous mode
[  143.980718][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  144.010555][   T35] batman_adv: batadv0: Removing interface: batadv_slave_0
[  144.019039][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  144.028515][   T35] batman_adv: batadv0: Removing interface: batadv_slave_1
[  144.039867][   T35] hsr_slave_0: left promiscuous mode
[  144.046366][   T35] hsr_slave_1: left promiscuous mode
[  144.052639][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  144.060131][   T35] batman_adv: batadv0: Removing interface: batadv_slave_0
[  144.068143][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  144.076167][   T35] batman_adv: batadv0: Removing interface: batadv_slave_1
[  144.125375][   T35] veth1_macvtap: left promiscuous mode
[  144.130955][   T35] veth0_macvtap: left promiscuous mode
[  144.136738][   T35] veth1_vlan: left promiscuous mode
[  144.142089][   T35] veth0_vlan: left promiscuous mode
[  144.155067][   T35] veth1_macvtap: left promiscuous mode
[  144.160763][   T35] veth0_macvtap: left promiscuous mode
[  144.167833][   T35] veth1_vlan: left promiscuous mode
[  144.173291][   T35] veth0_vlan: left promiscuous mode
[  144.181646][   T35] veth1_macvtap: left promiscuous mode
[  144.193132][   T35] veth0_macvtap: left promiscuous mode
[  144.203024][   T35] veth1_vlan: left promiscuous mode
[  144.208395][   T35] veth0_vlan: left promiscuous mode
[  144.408960][ T6313] netlink: 20 bytes leftover after parsing attributes in process `syz.3.216'.
[  144.553099][ T5255] Bluetooth: hci0: command tx timeout
[  145.273799][   T35] team0 (unregistering): Port device team_slave_1 removed
[  145.327016][   T35] team0 (unregistering): Port device team_slave_0 removed
[  146.016347][ T6327] loop3: detected capacity change from 0 to 2048
[  146.035579][ T6327] EXT4-fs: Ignoring removed nomblk_io_submit option
[  146.042302][ T6327] EXT4-fs: Ignoring removed orlov option
[  146.093225][ T6327] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement.
[  146.111084][   T66] Bluetooth: (null): Invalid header checksum
[  146.145499][   T66] Bluetooth: (null): Invalid header checksum
[  146.191225][ T6327] Bluetooth: (null): Too short H5 packet
[  146.516600][   T35] team0 (unregistering): Port device team_slave_1 removed
[  146.580873][   T35] team0 (unregistering): Port device team_slave_0 removed
[  147.621994][   T35] team0 (unregistering): Port device team_slave_1 removed
[  147.675822][   T35] team0 (unregistering): Port device team_slave_0 removed
[  148.618360][ T6151] 8021q: adding VLAN 0 to HW filter on device bond0
[  148.691316][ T6151] 8021q: adding VLAN 0 to HW filter on device team0
[  148.797040][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  148.804250][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  148.837836][ T3012] bridge0: port 2(bridge_slave_1) entered blocking state
[  148.845049][ T3012] bridge0: port 2(bridge_slave_1) entered forwarding state
[  148.866010][ T6249] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  148.906748][ T6249] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  148.938220][ T6249] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  149.030709][ T6249] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  149.060343][ T6005] 8021q: adding VLAN 0 to HW filter on device batadv0
[  149.186981][ T6116] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  149.234683][ T6116] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  149.254824][ T6116] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  149.290140][ T6116] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  149.399971][ T6151] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  149.425343][ T6151] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  149.482260][ T6005] veth0_vlan: entered promiscuous mode
[  149.620427][ T6005] veth1_vlan: entered promiscuous mode
[  149.869437][ T6005] veth0_macvtap: entered promiscuous mode
[  149.894913][ T6005] veth1_macvtap: entered promiscuous mode
[  149.947068][ T6249] 8021q: adding VLAN 0 to HW filter on device bond0
[  150.010904][ T6116] 8021q: adding VLAN 0 to HW filter on device bond0
[  150.078375][ T6249] 8021q: adding VLAN 0 to HW filter on device team0
[  150.116118][ T1092] bridge0: port 1(bridge_slave_0) entered blocking state
[  150.123317][ T1092] bridge0: port 1(bridge_slave_0) entered forwarding state
[  150.150015][ T6116] 8021q: adding VLAN 0 to HW filter on device team0
[  150.175130][ T6005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  150.186941][ T6005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  150.212814][ T6005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  150.233016][ T6005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  150.254446][ T6005] batman_adv: batadv0: Interface activated: batadv_slave_0
[  150.277476][ T6151] 8021q: adding VLAN 0 to HW filter on device batadv0
[  150.296022][ T6005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  150.317722][ T6005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  150.327801][ T6005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  150.352664][ T6005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  150.374184][ T6005] batman_adv: batadv0: Interface activated: batadv_slave_1
[  150.387563][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[  150.394770][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[  150.470101][ T6005] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  150.486622][ T6005] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  150.495883][ T6005] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  150.523326][ T6005] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  150.552005][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[  150.559584][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[  150.581969][ T6362] loop3: detected capacity change from 0 to 32768
[  150.584879][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[  150.595638][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[  150.718007][ T6362] overlayfs: upper fs needs to support d_type.
[  150.728707][ T6362] overlayfs: upper fs does not support tmpfile.
[  150.741124][ T6362] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  150.784426][ T6151] veth0_vlan: entered promiscuous mode
[  150.824770][ T6151] veth1_vlan: entered promiscuous mode
[  150.854747][ T6151] veth0_macvtap: entered promiscuous mode
[  150.957799][ T6151] veth1_macvtap: entered promiscuous mode
[  151.018004][ T6151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  151.050097][ T6151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.064480][ T6151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  151.081695][ T6151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.095459][ T6151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  151.108781][ T6151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.135890][ T6151] batman_adv: batadv0: Interface activated: batadv_slave_0
[  151.287742][ T6151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  151.308509][ T6151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.320490][ T6151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  151.333565][ T6151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.343627][ T6151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  151.354716][ T6151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.367002][ T6151] batman_adv: batadv0: Interface activated: batadv_slave_1
[  151.425902][ T1092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  151.437527][ T6151] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  151.447956][ T1092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  151.472530][ T6151] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  151.481313][ T6151] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  151.501630][ T6151] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  151.575369][ T6116] 8021q: adding VLAN 0 to HW filter on device batadv0
[  151.671687][ T6249] 8021q: adding VLAN 0 to HW filter on device batadv0
[  151.709293][ T3012] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  151.760378][ T3012] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  151.896333][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  151.933462][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  152.202092][ T3012] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  152.325505][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  152.362206][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  152.469055][ T3012] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  152.529774][ T5250] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  152.540355][ T5250] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  152.551563][ T5250] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  152.579071][ T5250] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  152.590488][ T5250] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  152.598114][ T5250] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  152.683797][ T6249] veth0_vlan: entered promiscuous mode
[  152.779045][ T3012] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  152.845774][ T6249] veth1_vlan: entered promiscuous mode
[  152.944658][ T3012] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  152.972622][    T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  153.149217][ T6249] veth0_macvtap: entered promiscuous mode
[  153.163377][    T9] usb 3-1: Using ep0 maxpacket: 16
[  153.201346][ T6116] veth0_vlan: entered promiscuous mode
[  153.217487][    T9] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15
[  153.219106][ T6249] veth1_macvtap: entered promiscuous mode
[  153.247655][ T6415] loop1: detected capacity change from 0 to 32768
[  153.262666][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  153.270740][    T9] usb 3-1: Product: syz
[  153.278589][ T6116] veth1_vlan: entered promiscuous mode
[  153.292852][    T9] usb 3-1: Manufacturer: syz
[  153.306840][    T9] usb 3-1: SerialNumber: syz
[  153.336159][    T9] usb 3-1: config 0 descriptor??
[  153.361425][ T6415] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  153.374610][    T9] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected
[  153.580571][ T6116] veth0_macvtap: entered promiscuous mode
[  153.610436][ T6415] XFS (loop1): Ending clean mount
[  153.620489][ T6249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  153.649138][ T6249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  153.677957][ T6249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  153.695150][ T6249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  153.726625][ T6249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  153.755170][ T6249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  153.784820][ T6249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  153.804050][ T6249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  153.829012][ T6005] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  153.843641][ T6249] batman_adv: batadv0: Interface activated: batadv_slave_0
[  153.853827][ T6249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  153.864445][ T6249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  153.874375][ T6249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  153.885066][ T6249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  153.894993][ T6249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  153.905831][ T6249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  153.916222][ T6249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  153.927306][ T6249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  153.938989][ T6249] batman_adv: batadv0: Interface activated: batadv_slave_1
[  153.948700][ T3012] bridge_slave_1: left allmulticast mode
[  153.961825][ T3012] bridge_slave_1: left promiscuous mode
[  153.969051][ T3012] bridge0: port 2(bridge_slave_1) entered disabled state
[  153.987911][ T3012] bridge_slave_0: left allmulticast mode
[  154.001599][ T3012] bridge_slave_0: left promiscuous mode
[  154.010861][ T3012] bridge0: port 1(bridge_slave_0) entered disabled state
[  154.617830][    T9] usb 3-1: Quatech SSU-100 USB to Serial Driver converter now attached to ttyUSB0
[  154.715937][ T5250] Bluetooth: hci3: command tx timeout
[  154.767983][ T3012] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  154.779494][ T3012] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  154.791849][ T3012] bond0 (unregistering): Released all slaves
[  154.818008][   T25] usb 3-1: USB disconnect, device number 4
[  154.830525][   T25] ssu100 ttyUSB0: Quatech SSU-100 USB to Serial Driver converter now disconnected from ttyUSB0
[  154.866300][ T6249] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  154.882606][ T6249] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  154.891394][ T6249] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  154.902927][   T25] ssu100 3-1:0.0: device disconnected
[  154.917589][ T6249] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  154.980565][ T6116] veth1_macvtap: entered promiscuous mode
[  155.180198][ T6421] chnl_net:caif_netlink_parms(): no params data found
[  155.214935][ T6116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  155.229232][ T6116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  155.239788][ T6116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  155.257715][ T6116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  155.268946][ T6116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  155.288913][ T6116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  155.304119][ T6116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  155.315675][ T6116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  155.325658][ T6116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  155.336307][ T6116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  155.375024][ T6116] batman_adv: batadv0: Interface activated: batadv_slave_0
[  155.667711][ T6116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  155.679811][ T6116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  155.722572][ T6116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  155.733222][ T6116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  155.745730][ T6116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  155.772588][ T6116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  155.782615][ T6116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  155.793157][ T6116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  155.808373][ T6116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  155.818983][ T6116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  155.845868][ T6116] batman_adv: batadv0: Interface activated: batadv_slave_1
[  155.933824][ T6116] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  155.983760][ T6116] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  156.032577][ T6116] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  156.044972][ T6116] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  156.267143][ T3012] hsr_slave_0: left promiscuous mode
[  156.296072][ T3012] hsr_slave_1: left promiscuous mode
[  156.321484][ T3012] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  156.343042][ T3012] batman_adv: batadv0: Removing interface: batadv_slave_0
[  156.363458][ T3012] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  156.372090][ T3012] batman_adv: batadv0: Removing interface: batadv_slave_1
[  156.406445][ T3012] veth1_macvtap: left promiscuous mode
[  156.412063][ T3012] veth0_macvtap: left promiscuous mode
[  156.419332][ T3012] veth1_vlan: left promiscuous mode
[  156.426073][ T3012] veth0_vlan: left promiscuous mode
[  156.794566][ T5250] Bluetooth: hci3: command tx timeout
[  157.220094][ T3012] team0 (unregistering): Port device team_slave_1 removed
[  157.328782][ T3012] team0 (unregistering): Port device team_slave_0 removed
[  158.198527][ T6528] loop1: detected capacity change from 0 to 512
[  158.293447][ T6514] netlink: 4 bytes leftover after parsing attributes in process `syz.2.238'.
[  158.330849][ T6421] bridge0: port 1(bridge_slave_0) entered blocking state
[  158.343893][ T6528] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  158.363961][ T6528] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  158.372947][ T6421] bridge0: port 1(bridge_slave_0) entered disabled state
[  158.386931][ T6421] bridge_slave_0: entered allmulticast mode
[  158.407838][ T6421] bridge_slave_0: entered promiscuous mode
[  158.425673][ T6421] bridge0: port 2(bridge_slave_1) entered blocking state
[  158.433157][ T6421] bridge0: port 2(bridge_slave_1) entered disabled state
[  158.440430][ T6421] bridge_slave_1: entered allmulticast mode
[  158.444431][ T6528] EXT4-fs error (device loop1): ext4_do_update_inode:5121: inode #2: comm syz.1.243: corrupted inode contents
[  158.449242][ T6421] bridge_slave_1: entered promiscuous mode
[  158.487245][ T6528] EXT4-fs error (device loop1): ext4_dirty_inode:5984: inode #2: comm syz.1.243: mark_inode_dirty error
[  158.503040][ T6528] EXT4-fs error (device loop1): ext4_do_update_inode:5121: inode #2: comm syz.1.243: corrupted inode contents
[  158.521578][ T6528] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #2: comm syz.1.243: mark_inode_dirty error
[  158.591527][ T6421] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  158.631637][ T6421] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  158.694866][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  158.709496][ T6005] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  158.716000][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  158.790748][ T6421] team0: Port device team_slave_0 added
[  158.873476][ T5250] Bluetooth: hci3: command tx timeout
[  158.918938][ T6421] team0: Port device team_slave_1 added
[  158.988120][ T6421] batman_adv: batadv0: Adding interface: batadv_slave_0
[  159.000570][ T6421] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  159.039708][ T6421] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  159.088135][ T6421] batman_adv: batadv0: Adding interface: batadv_slave_1
[  159.123739][ T6421] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  159.167982][ T6421] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  159.181963][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  159.190135][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  159.255945][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  159.304213][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  159.417322][ T6421] hsr_slave_0: entered promiscuous mode
[  159.461095][ T6421] hsr_slave_1: entered promiscuous mode
[  159.475652][ T6421] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  159.484047][ T6421] Cannot create hsr debugfs directory
[  159.637223][ T1124] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  159.676682][ T1124] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  159.689561][ T6560] netlink: 4 bytes leftover after parsing attributes in process `syz.2.247'.
[  160.321072][ T6579] loop2: detected capacity change from 0 to 4096
[  160.556902][ T6588] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  160.770977][ T6592] loop4: detected capacity change from 0 to 128
[  160.859323][ T6592] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  160.923131][ T6592] ext4 filesystem being mounted at /2/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  160.963184][ T5250] Bluetooth: hci3: command tx timeout
[  161.108884][ T6598] vivid-000: disconnect
[  161.154691][ T6597] vivid-000: reconnect
[  161.198303][ T6116] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  161.776479][ T6606] vlan2: entered promiscuous mode
[  161.781609][ T6606] vlan2: entered allmulticast mode
[  162.093138][ T6606] vlan0: entered allmulticast mode
[  162.098431][ T6606] veth0_vlan: entered allmulticast mode
[  162.532674][ T6606] vlan0: entered promiscuous mode
[  163.357969][ T6606] team0: Port device vlan2 added
[  165.658468][ T6421] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  165.698864][ T6421] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  165.719092][ T6421] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  165.740249][ T6421] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  165.892941][ T5337] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  166.022681][ T6421] 8021q: adding VLAN 0 to HW filter on device bond0
[  166.095290][ T5337] usb 3-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4
[  166.108385][ T6421] 8021q: adding VLAN 0 to HW filter on device team0
[  166.122613][ T5337] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  166.163951][ T5337] usb 3-1: config 0 descriptor??
[  166.189837][ T3012] bridge0: port 1(bridge_slave_0) entered blocking state
[  166.197135][ T3012] bridge0: port 1(bridge_slave_0) entered forwarding state
[  166.231226][ T3012] bridge0: port 2(bridge_slave_1) entered blocking state
[  166.238483][ T3012] bridge0: port 2(bridge_slave_1) entered forwarding state
[  167.138639][ T6619] loop4: detected capacity change from 0 to 32768
[  167.142646][ T5337] gs_usb 3-1:0.0: Configuring for 1 interfaces
[  167.319180][ T6619] JBD2: Ignoring recovery information on journal
[  167.356581][ T5337] gs_usb 3-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO)
[  167.365179][ T6421] 8021q: adding VLAN 0 to HW filter on device batadv0
[  167.373039][ T5337] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -71
[  167.424248][ T5337] usb 3-1: USB disconnect, device number 5
[  167.567672][ T6421] veth0_vlan: entered promiscuous mode
[  167.579721][ T6421] veth1_vlan: entered promiscuous mode
[  167.607124][ T6421] veth0_macvtap: entered promiscuous mode
[  167.624732][ T6619] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  167.639066][ T6421] veth1_macvtap: entered promiscuous mode
[  167.671447][ T6421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  167.712569][ T6421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  167.742258][ T6421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  167.778268][ T6421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  167.794735][ T6421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  167.815529][ T6421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  167.842607][ T6421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  167.866852][ T6421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  167.895230][ T6421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  167.915302][ T6421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  167.946509][ T6421] batman_adv: batadv0: Interface activated: batadv_slave_0
[  167.948967][ T6641] syz.4.259 (6641) used greatest stack depth: 15928 bytes left
[  168.007161][ T6421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  168.026243][ T6116] ocfs2: Unmounting device (7,4) on (node local)
[  168.077873][ T6421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  168.137342][ T6421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  168.178935][ T6421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  168.212670][ T6421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  168.232904][ T6421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  168.252881][ T6421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  168.284126][ T6421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  168.303348][ T6421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  168.335781][ T6421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  168.360997][ T6421] batman_adv: batadv0: Interface activated: batadv_slave_1
[  168.418362][ T6421] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  168.450885][ T6421] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  168.471258][ T6421] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  168.491902][ T6421] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  168.550542][ T6621] loop0: detected capacity change from 0 to 40427
[  168.600151][ T6621] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x1fffff
[  168.722275][ T6621] F2FS-fs (loop0): Image doesn't support compression
[  168.777075][ T2551] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  168.800156][ T6621] F2FS-fs (loop0): invalid crc value
[  168.801902][ T2551] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  168.846046][ T6621] F2FS-fs (loop0): Failed to initialize F2FS segment manager (-4)
[  168.943699][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  168.988294][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  169.927169][ T6663] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  169.958337][ T6663] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  170.402797][ T6663] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  170.612636][ T6663] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  170.672584][ T6663] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[  170.679683][ T6663] Bluetooth: hci6: Error when powering off device on rfkill (-4)
[  171.005259][ T6671] loop3: detected capacity change from 0 to 32768
[  171.033729][ T6671] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.229 (6671)
[  171.066980][ T6663] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  171.081441][ T6663] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  171.090334][ T6671] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  171.144661][ T6671] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[  171.167830][ T6663] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  171.202838][ T6663] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  171.220970][ T6671] BTRFS info (device loop3): using free-space-tree
[  171.383971][ T6694] binder: 6693:6694 ioctl c018620c 20000000 returned -22
[  171.676388][ T6711] process 'syz.2.272' launched './file2' with NULL argv: empty string added
[  171.813078][ T6682] loop0: detected capacity change from 0 to 32768
[  171.841287][ T6663] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  171.882997][   T29] audit: type=1800 audit(1729041215.734:8): pid=6671 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.229" name="file1" dev="loop3" ino=260 res=0 errno=0
[  171.894232][ T6663] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  172.175210][   T29] audit: type=1800 audit(1729041216.014:9): pid=6671 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.229" name="file1" dev="loop3" ino=260 res=0 errno=0
[  172.218163][ T6682] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  172.495849][   T29] audit: type=1804 audit(1729041216.344:10): pid=6682 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.267" name="/newroot/4/file1/bus" dev="loop0" ino=17059 res=1 errno=0
[  172.524955][ T6421] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  172.647017][ T6682] (syz.0.267,6682,0):ocfs2_get_clusters:606 ERROR: status = -34
[  172.672268][ T6682] (syz.0.267,6682,0):ocfs2_reflink_remap_extent:4528 ERROR: status = -34
[  172.755102][ T5255] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  172.767088][ T5255] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  172.776150][ T5255] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  172.784433][ T5255] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  172.792233][ T5255] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  172.803024][ T5255] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  172.826532][ T5246] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  172.849731][ T5246] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  172.864182][ T5246] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  172.872293][ T5246] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  172.881242][ T5246] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  172.889014][ T5246] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  173.001967][ T6682] (syz.0.267,6682,1):ocfs2_reflink_remap_blocks:4687 ERROR: status = -34
[  173.073566][ T6682] (syz.0.267,6682,0):ocfs2_remap_file_range:2732 ERROR: status = -34
[  173.851318][ T6249] ocfs2: Unmounting device (7,0) on (node local)
[  174.007048][ T1124] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  174.378018][ T1124] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  174.638574][ T1124] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  174.952670][ T5246] Bluetooth: hci5: command tx timeout
[  174.989438][ T6767] loop2: detected capacity change from 0 to 32768
[  175.046974][ T6755] loop4: detected capacity change from 0 to 32768
[  175.073252][ T1124] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  175.115309][ T6755] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.279 (6755)
[  175.169448][ T6685] chnl_net:caif_netlink_parms(): no params data found
[  175.185439][ T6767] XFS (loop2): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4
[  175.254661][ T6755] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  175.274280][ T6755] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  175.366610][ T6755] BTRFS info (device loop4): using free-space-tree
[  175.397478][ T6767] XFS (loop2): Ending clean mount
[  175.820034][ T1124] bridge_slave_1: left allmulticast mode
[  175.859800][ T1124] bridge_slave_1: left promiscuous mode
[  175.880237][ T1124] bridge0: port 2(bridge_slave_1) entered disabled state
[  175.931858][ T1124] bridge_slave_0: left allmulticast mode
[  175.938475][ T6151] XFS (loop2): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4
[  175.953052][ T1124] bridge_slave_0: left promiscuous mode
[  175.961230][ T1124] bridge0: port 1(bridge_slave_0) entered disabled state
[  176.048044][   T29] audit: type=1800 audit(1729041219.894:11): pid=6755 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.279" name="file1" dev="loop4" ino=260 res=0 errno=0
[  176.459455][ T6116] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  177.035466][ T5246] Bluetooth: hci5: command tx timeout
[  177.573957][   T29] audit: type=1326 audit(1729041221.414:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6873 comm="syz.4.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc743f7dff9 code=0x7ffc0000
[  177.652652][   T29] audit: type=1326 audit(1729041221.424:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6873 comm="syz.4.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc743f7dff9 code=0x7ffc0000
[  177.726240][   T29] audit: type=1326 audit(1729041221.474:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6873 comm="syz.4.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc743f7dff9 code=0x7ffc0000
[  177.813745][   T29] audit: type=1326 audit(1729041221.474:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6873 comm="syz.4.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc743f7dff9 code=0x7ffc0000
[  177.891192][   T29] audit: type=1326 audit(1729041221.474:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6873 comm="syz.4.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc743f7dff9 code=0x7ffc0000
[  178.002643][   T29] audit: type=1326 audit(1729041221.474:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6873 comm="syz.4.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc743f7dff9 code=0x7ffc0000
[  178.052680][   T29] audit: type=1326 audit(1729041221.474:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6873 comm="syz.4.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc743f7dff9 code=0x7ffc0000
[  178.110845][   T29] audit: type=1326 audit(1729041221.474:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6873 comm="syz.4.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc743f7dff9 code=0x7ffc0000
[  178.156047][   T29] audit: type=1326 audit(1729041221.474:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6873 comm="syz.4.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc743f7dff9 code=0x7ffc0000
[  178.201537][   T29] audit: type=1326 audit(1729041221.474:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6873 comm="syz.4.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc743f7dff9 code=0x7ffc0000
[  178.303238][ T1124] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  178.325463][ T1124] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  178.349563][ T1124] bond0 (unregistering): Released all slaves
[  178.426873][ T6685] bridge0: port 1(bridge_slave_0) entered blocking state
[  178.451022][ T6685] bridge0: port 1(bridge_slave_0) entered disabled state
[  178.479030][ T6685] bridge_slave_0: entered allmulticast mode
[  178.503969][ T6685] bridge_slave_0: entered promiscuous mode
[  178.561037][ T6877] netlink: 'syz.4.293': attribute type 13 has an invalid length.
[  178.589621][ T6877] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  178.617684][ T6877] gretap1: entered promiscuous mode
[  178.640878][ T6877] gretap1: entered allmulticast mode
[  178.721197][ T6871] loop2: detected capacity change from 0 to 32768
[  178.740053][ T6685] bridge0: port 2(bridge_slave_1) entered blocking state
[  178.762927][ T6685] bridge0: port 2(bridge_slave_1) entered disabled state
[  178.770583][ T6685] bridge_slave_1: entered allmulticast mode
[  178.789504][ T6685] bridge_slave_1: entered promiscuous mode
[  178.809033][ T6871] XFS (loop2): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  178.867618][ T6685] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  178.930094][ T6685] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  178.974018][ T6871] XFS (loop2): Ending clean mount
[  178.991793][ T6871] XFS (loop2): Quotacheck needed: Please wait.
[  179.123302][ T5246] Bluetooth: hci5: command tx timeout
[  179.191874][ T6685] team0: Port device team_slave_0 added
[  179.428115][ T6895] loop4: detected capacity change from 0 to 256
[  179.434875][ T6871] XFS (loop2): Quotacheck: Done.
[  179.538221][ T1124] hsr_slave_0: left promiscuous mode
[  179.548429][ T1124] hsr_slave_1: left promiscuous mode
[  179.570446][ T1124] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  179.598031][ T6151] XFS (loop2): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  179.613282][ T1124] batman_adv: batadv0: Removing interface: batadv_slave_0
[  179.782000][ T1124] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  179.826951][ T1124] batman_adv: batadv0: Removing interface: batadv_slave_1
[  180.099768][ T6907] input: syz0 as /devices/virtual/input/input6
[  180.165531][ T1124] veth1_macvtap: left promiscuous mode
[  180.171158][ T1124] veth0_macvtap: left promiscuous mode
[  180.222660][ T1124] veth1_vlan: left promiscuous mode
[  180.228123][ T1124] veth0_vlan: left promiscuous mode
[  180.697715][ T6920] input: syz0 as /devices/virtual/input/input7
[  180.709530][ T6879] loop0: detected capacity change from 0 to 65536
[  180.769902][ T6917] loop2: detected capacity change from 0 to 4096
[  180.887802][ T6927] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  180.924452][ T6879] XFS (loop0): Mounting V5 Filesystem e4654a66-62e5-4963-a81e-012d9d4871af
[  181.059152][ T6932] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  181.083059][ T6932] overlayfs: failed to set xattr on upper
[  181.088319][ T6879] XFS (loop0): Ending clean mount
[  181.094303][ T6932] overlayfs: ...falling back to redirect_dir=nofollow.
[  181.101407][ T6932] overlayfs: maximum fs stacking depth exceeded
[  181.192107][ T6249] XFS (loop0): Unmounting Filesystem e4654a66-62e5-4963-a81e-012d9d4871af
[  181.201671][ T5246] Bluetooth: hci5: command tx timeout
[  181.758321][ T6939] loop4: detected capacity change from 0 to 1024
[  181.806399][ T6945] loop2: detected capacity change from 0 to 16
[  181.834269][ T6945] erofs: (device loop2): mounted with root inode @ nid 36.
[  181.888836][ T6939] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  182.159215][ T6116] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  183.908543][ T1124] team0 (unregistering): Port device team_slave_1 removed
[  184.173775][ T1124] team0 (unregistering): Port device team_slave_0 removed
[  184.351025][ T6984] loop4: detected capacity change from 0 to 512
[  184.424184][ T6984] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  184.882860][ T6984] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  185.322205][ T6249] ==================================================================
[  185.330366][ T6249] BUG: KASAN: slab-use-after-free in bpf_trace_run2+0xfa/0x540
[  185.337960][ T6249] Read of size 8 at addr ffff88807fffb618 by task syz-executor/6249
[  185.345958][ T6249] 
[  185.348330][ T6249] CPU: 1 UID: 0 PID: 6249 Comm: syz-executor Not tainted 6.12.0-rc3-next-20241015-syzkaller #0
[  185.358715][ T6249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  185.368816][ T6249] Call Trace:
[  185.372129][ T6249]  <TASK>
[  185.375092][ T6249]  dump_stack_lvl+0x241/0x360
[  185.379807][ T6249]  ? __pfx_dump_stack_lvl+0x10/0x10
[  185.385034][ T6249]  ? __pfx__printk+0x10/0x10
[  185.389645][ T6249]  ? _printk+0xd5/0x120
[  185.393815][ T6249]  ? __virt_addr_valid+0x183/0x530
[  185.398932][ T6249]  ? __virt_addr_valid+0x183/0x530
[  185.404048][ T6249]  print_report+0x169/0x550
[  185.408560][ T6249]  ? __virt_addr_valid+0x183/0x530
[  185.413680][ T6249]  ? __virt_addr_valid+0x183/0x530
[  185.418792][ T6249]  ? __virt_addr_valid+0x45f/0x530
[  185.423914][ T6249]  ? __phys_addr+0xba/0x170
[  185.428421][ T6249]  ? bpf_trace_run2+0xfa/0x540
[  185.433196][ T6249]  kasan_report+0x143/0x180
[  185.437709][ T6249]  ? bpf_trace_run2+0xfa/0x540
[  185.442484][ T6249]  bpf_trace_run2+0xfa/0x540
[  185.447080][ T6249]  ? arch_do_signal_or_restart+0x51f/0x860
[  185.452902][ T6249]  ? __pfx_lock_release+0x10/0x10
[  185.457929][ T6249]  ? __pfx_bpf_trace_run2+0x10/0x10
[  185.463223][ T6249]  ? __might_fault+0xc6/0x120
[  185.467906][ T6249]  ? trace_sys_enter+0x9d/0x150
[  185.472787][ T6249]  __bpf_trace_sys_enter+0x38/0x60
[  185.477902][ T6249]  trace_sys_enter+0xd9/0x150
[  185.482591][ T6249]  syscall_trace_enter+0xf8/0x150
[  185.487633][ T6249]  do_syscall_64+0xcc/0x230
[  185.492142][ T6249]  ? clear_bhb_loop+0x35/0x90
[  185.496919][ T6249]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  185.502828][ T6249] RIP: 0033:0x7f51a5f19959
[  185.507251][ T6249] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25
[  185.526869][ T6249] RSP: 002b:00007ffdd68f74c0 EFLAGS: 00000293 ORIG_RAX: 000000000000000f
[  185.535322][ T6249] RAX: ffffffffffffffda RBX: 000000000000002e RCX: 00007f51a5f19959
[  185.543388][ T6249] RDX: 00007ffdd68f74c0 RSI: 00007ffdd68f75f0 RDI: 0000000000000011
[  185.551376][ T6249] RBP: 00007ffdd68f7abc R08: 0000000000000000 R09: 7fffffffffffffff
[  185.559462][ T6249] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000032
[  185.567541][ T6249] R13: 000000000002cf9c R14: 000000000002cf2e R15: 00007ffdd68f7b10
[  185.575536][ T6249]  </TASK>
[  185.578559][ T6249] 
[  185.580903][ T6249] Allocated by task 6986:
[  185.585505][ T6249]  kasan_save_track+0x3f/0x80
[  185.590304][ T6249]  __kasan_kmalloc+0x98/0xb0
[  185.594910][ T6249]  __kmalloc_cache_noprof+0x243/0x390
[  185.600302][ T6249]  bpf_raw_tp_link_attach+0x2a0/0x6e0
[  185.605721][ T6249]  bpf_raw_tracepoint_open+0x177/0x1f0
[  185.611208][ T6249]  __sys_bpf+0x3c0/0x810
[  185.615519][ T6249]  __x64_sys_bpf+0x7c/0x90
[  185.619950][ T6249]  do_syscall_64+0xf3/0x230
[  185.624495][ T6249]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  185.630415][ T6249] 
[  185.632756][ T6249] Freed by task 6956:
[  185.636751][ T6249]  kasan_save_track+0x3f/0x80
[  185.641446][ T6249]  kasan_save_free_info+0x40/0x50
[  185.646517][ T6249]  __kasan_slab_free+0x59/0x70
[  185.651292][ T6249]  kfree+0x1a0/0x460
[  185.655218][ T6249]  rcu_core+0xaaa/0x17a0
[  185.659469][ T6249]  handle_softirqs+0x2c5/0x980
[  185.664366][ T6249]  __irq_exit_rcu+0xf4/0x1c0
[  185.668987][ T6249]  irq_exit_rcu+0x9/0x30
[  185.673239][ T6249]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  185.678887][ T6249]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  185.684874][ T6249] 
[  185.687198][ T6249] Last potentially related work creation:
[  185.692910][ T6249]  kasan_save_stack+0x3f/0x60
[  185.697595][ T6249]  __kasan_record_aux_stack+0xac/0xc0
[  185.702980][ T6249]  call_rcu+0x167/0xa70
[  185.707227][ T6249]  bpf_link_release+0x78/0x90
[  185.711909][ T6249]  __fput+0x23c/0xa50
[  185.715893][ T6249]  task_work_run+0x24f/0x310
[  185.720489][ T6249]  get_signal+0x15e8/0x1740
[  185.725000][ T6249]  arch_do_signal_or_restart+0x96/0x860
[  185.730553][ T6249]  syscall_exit_to_user_mode+0xc9/0x370
[  185.736227][ T6249]  do_syscall_64+0x100/0x230
[  185.740838][ T6249]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  185.746738][ T6249] 
[  185.749061][ T6249] The buggy address belongs to the object at ffff88807fffb600
[  185.749061][ T6249]  which belongs to the cache kmalloc-128 of size 128
[  185.763115][ T6249] The buggy address is located 24 bytes inside of
[  185.763115][ T6249]  freed 128-byte region [ffff88807fffb600, ffff88807fffb680)
[  185.776830][ T6249] 
[  185.779154][ T6249] The buggy address belongs to the physical page:
[  185.785659][ T6249] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7fffb
[  185.794423][ T6249] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  185.801756][ T6249] page_type: f5(slab)
[  185.805756][ T6249] raw: 00fff00000000000 ffff88801ac41a00 ffffea0001f7a9c0 dead000000000004
[  185.814372][ T6249] raw: 0000000000000000 0000000080100010 00000001f5000000 0000000000000000
[  185.822962][ T6249] page dumped because: kasan: bad access detected
[  185.829388][ T6249] page_owner tracks the page as allocated
[  185.835102][ T6249] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 1150, tgid 1150 (kworker/0:1H), ts 94639249880, free_ts 94322829633
[  185.855777][ T6249]  post_alloc_hook+0x1f3/0x230
[  185.860635][ T6249]  get_page_from_freelist+0x3123/0x3270
[  185.866193][ T6249]  __alloc_pages_noprof+0x292/0x710
[  185.871408][ T6249]  alloc_pages_mpol_noprof+0x3e8/0x680
[  185.876903][ T6249]  alloc_slab_page+0x6a/0x120
[  185.881586][ T6249]  allocate_slab+0x5a/0x2f0
[  185.886103][ T6249]  ___slab_alloc+0xcd1/0x14b0
[  185.890871][ T6249]  __slab_alloc+0x58/0xa0
[  185.895206][ T6249]  __kmalloc_cache_noprof+0x27b/0x390
[  185.900595][ T6249]  dummy_urb_enqueue+0x7d/0x760
[  185.905488][ T6249]  usb_hcd_submit_urb+0x36c/0x1e80
[  185.910607][ T6249]  snd_usbmidi_do_output+0x2a6/0x530
[  185.915913][ T6249]  process_scheduled_works+0xa63/0x1850
[  185.921471][ T6249]  worker_thread+0x870/0xd30
[  185.926193][ T6249]  kthread+0x2f0/0x390
[  185.930276][ T6249]  ret_from_fork+0x4b/0x80
[  185.934697][ T6249] page last free pid 4693 tgid 4693 stack trace:
[  185.941022][ T6249]  free_unref_page+0xcfb/0xf20
[  185.945812][ T6249]  __put_partials+0xeb/0x130
[  185.950453][ T6249]  put_cpu_partial+0x17c/0x250
[  185.955326][ T6249]  __slab_free+0x2ea/0x3d0
[  185.959764][ T6249]  qlist_free_all+0x9a/0x140
[  185.964365][ T6249]  kasan_quarantine_reduce+0x14f/0x170
[  185.969830][ T6249]  __kasan_slab_alloc+0x23/0x80
[  185.974686][ T6249]  kmem_cache_alloc_noprof+0x1d9/0x380
[  185.980158][ T6249]  getname_flags+0xb7/0x540
[  185.984672][ T6249]  do_sys_openat2+0xd2/0x1d0
[  185.989273][ T6249]  __x64_sys_openat+0x247/0x2a0
[  185.994153][ T6249]  do_syscall_64+0xf3/0x230
[  185.998677][ T6249]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  186.004593][ T6249] 
[  186.006922][ T6249] Memory state around the buggy address:
[  186.012552][ T6249]  ffff88807fffb500: 00 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc
[  186.020614][ T6249]  ffff88807fffb580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  186.028677][ T6249] >ffff88807fffb600: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  186.036738][ T6249]                             ^
[  186.041588][ T6249]  ffff88807fffb680: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  186.049650][ T6249]  ffff88807fffb700: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  186.057721][ T6249] ==================================================================
[  186.065882][    C1] vkms_vblank_simulate: vblank timer overrun
[  186.072602][ T6249] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  186.079853][ T6249] CPU: 1 UID: 0 PID: 6249 Comm: syz-executor Not tainted 6.12.0-rc3-next-20241015-syzkaller #0
[  186.090220][ T6249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  186.100358][ T6249] Call Trace:
[  186.103668][ T6249]  <TASK>
[  186.106627][ T6249]  dump_stack_lvl+0x241/0x360
[  186.111356][ T6249]  ? __pfx_dump_stack_lvl+0x10/0x10
[  186.116605][ T6249]  ? __pfx__printk+0x10/0x10
[  186.121238][ T6249]  ? vscnprintf+0x5d/0x90
[  186.125610][ T6249]  panic+0x349/0x880
[  186.129552][ T6249]  ? check_panic_on_warn+0x21/0xb0
[  186.134711][ T6249]  ? __pfx_panic+0x10/0x10
[  186.139182][ T6249]  ? _raw_spin_unlock_irqrestore+0xd8/0x140
[  186.145126][ T6249]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  186.151082][ T6249]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  186.157479][ T6249]  ? print_report+0x502/0x550
[  186.162206][ T6249]  check_panic_on_warn+0x86/0xb0
[  186.167200][ T6249]  ? bpf_trace_run2+0xfa/0x540
[  186.172014][ T6249]  end_report+0x77/0x160
[  186.176319][ T6249]  kasan_report+0x154/0x180
[  186.180870][ T6249]  ? bpf_trace_run2+0xfa/0x540
[  186.185697][ T6249]  bpf_trace_run2+0xfa/0x540
[  186.190339][ T6249]  ? arch_do_signal_or_restart+0x51f/0x860
[  186.196206][ T6249]  ? __pfx_lock_release+0x10/0x10
[  186.201283][ T6249]  ? __pfx_bpf_trace_run2+0x10/0x10
[  186.206542][ T6249]  ? __might_fault+0xc6/0x120
[  186.211258][ T6249]  ? trace_sys_enter+0x9d/0x150
[  186.216151][ T6249]  __bpf_trace_sys_enter+0x38/0x60
[  186.221315][ T6249]  trace_sys_enter+0xd9/0x150
[  186.226022][ T6249]  syscall_trace_enter+0xf8/0x150
[  186.231061][ T6249]  do_syscall_64+0xcc/0x230
[  186.235581][ T6249]  ? clear_bhb_loop+0x35/0x90
[  186.240279][ T6249]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  186.246190][ T6249] RIP: 0033:0x7f51a5f19959
[  186.250615][ T6249] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25
[  186.270251][ T6249] RSP: 002b:00007ffdd68f74c0 EFLAGS: 00000293 ORIG_RAX: 000000000000000f
[  186.278766][ T6249] RAX: ffffffffffffffda RBX: 000000000000002e RCX: 00007f51a5f19959
[  186.286746][ T6249] RDX: 00007ffdd68f74c0 RSI: 00007ffdd68f75f0 RDI: 0000000000000011
[  186.294725][ T6249] RBP: 00007ffdd68f7abc R08: 0000000000000000 R09: 7fffffffffffffff
[  186.302701][ T6249] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000032
[  186.310676][ T6249] R13: 000000000002cf9c R14: 000000000002cf2e R15: 00007ffdd68f7b10
[  186.318659][ T6249]  </TASK>
[  186.321978][ T6249] Kernel Offset: disabled
[  186.326340][ T6249] Rebooting in 86400 seconds..