last executing test programs:

10m58.013475552s ago: executing program 3 (id=1103):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0x3, &(0x7f0000006680))
ioprio_set$uid(0x3, 0x0, 0x0)

10m57.848253417s ago: executing program 3 (id=1107):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003fc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0x4}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x10c}}, 0x0)

10m57.619179581s ago: executing program 3 (id=1112):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, 0x0, 0x0)

10m57.41105234s ago: executing program 3 (id=1115):
syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000b40)='./bus\x00', 0x280c089, &(0x7f00000001c0)={[{@gid}, {@iocharset={'iocharset', 0x3d, 'cp855'}}, {@discard}, {@umask={'umask', 0x3d, 0x8}}, {@umask={'umask', 0x3d, 0x80000001}}, {@utf8}, {@dmask={'dmask', 0x3d, 0x5}}, {@errors_remount}, {@namecase}, {@allow_utime={'allow_utime', 0x3d, 0x2}}]}, 0x2a, 0x151d, &(0x7f00000052c0)="$eJzs3AuYjVXbOPD7Xms9Y0zSbpLDsNa6H3ZyWCZJckiSQ5KkXklySkiaJElIDDklDUlIDkNyGEJymJg0zudDzkmSNEmSU07J+l+q+Xt763173+/r+3xXc/+u67n2uvfz3OtZy733s9d+rm2+6TK0VuPa1RsSEfy34M8PyQAQCwADAeAqAAgAoHx8+fiL+3NLTP7vnYT9uR5Iu9wjYJcT1z9n4/rnbFz/nI3rn7Nx/XM2rn/OxvXP2bj+jOVkm6cXupq3nLvx/f+cjD///0Kyyoz9Ym2Za7v+Bylc/78q8W8dxfX/ywr+nYO4/jkb1/+v5t+77mfj+udsXP+cINc/3cP1z9m4/ozlZJf7/jNvl3e73K8/xhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGM5wxl/iQKA7PblHhdjjDHGGGOMMcb+PD7X5R4BY4wxxhhjjDHG/uchCJCgIIAYyAWxkBviQADAlZAXroIIXA3xcA3kg2shPxSAglAIEqAwFAENBiwQhFAUikEUroPicD2UgJJQCkqDgzKQCDdAWbgRysFNUB5uhgpwC1SESlAZqsCtUBVug2pwO1SHO6AG1IRaUBvuhDpwF9SFu6Ee3AP14V5oAPfB/fA3aAgPQCN4EBrDQ9AEHoam0AyaQwto+Y/5Qfa8/lX+89ADXoCe0AuSoTf0gRehL/SD/jAABsJLMAhehsHwCqTAEBgKr8IweA2Gw+swAkbCKHgDRsObMAbGwjgYD6kwASbCWzAJ3obJMAWmwjRIg+kwA96BmTALZsO7MAfeg7kwD+bDAkiH92EhLIIM+AAWw4eQCUtgKSyD5bACVsIqWA1rYC2sg/WwATbCJtgMH8EW2ArbYDvsgJ2wCz6G3fAJ7IFPYS989h/mn/6H/K4ICChQoEKFMRiDsRiLcRiHeTAP5sW8GMEIxmM85sN8mB/zY0EsiAmYgEWwCBo0SEhYFItiFKNYHItjCSyBpbAUOnSYiIlYFm/EclgOy2N5rIAVsCJWwkpYBatgVayK1bAaVsfqWANrYC2shXfindgb62JdrIf1sD7Wz749hQ2xITbCRtgYG2MTbIJNsSk2x+bYEltiK2yFrbE1tsW22A7bYXtsj0mYhB2wA3bEjtgJO2Fn7IxdsAt2xW7YDZ/PBfgCvoC9sIbojX2wD/bFvtgfB+AAfAkH4cv4Mr6CKTgEh+Kr+Cq+hsPxFI7AkTgKR2FV8SaOwbFIYjymYipOxIk4CSfhZJyCU3AapuF0nIEzcCbOwln4Ls7B9/A9nIfzcAGmYzouxEWYgRm4GE9jJi7BpbgMl+MKXI6rcDWuwrW4DtfiBtyAm3ATfoQf4VbcittxO+5EBYAf4yf4CabgXtyL+3Af7sf9eAAPYBZm4UE8iIfwEB7Gw3gEj+BRPIbH8RiexJN4Ck/jGTyD5/AcnsdnE75qtLPkmhQQFymhRIyIEbEiVsSJOJFH5BF5RV4RERERL+JFPpFP5Bf5RUFRUCSIBFFEFBFGGEEijAEAERVRUVwUFyXwl7efcCJRJIqyoqwoJ8qJ8uJmUUHcIiqKSqKNqyKqiKqirasmbhfVRXVRQ9QUtURtUVvUEXVEXVFX1BP1RH1RXzQQ94n7RW/sjw+Ii5VpLIZgEzEUm4pmQv5yqlZiOLYWbURb8ZgYiSOwvWjlksSTooMYgx3F02IsPiM6i/HYRTwnuopuort4XvQQrV1P0UtMxt6ij5iGfUU/0V8MEDOxprhYsVriFZEihoih4lWxAF8Tw8XrYoQYKUaJN8Ro8aYYI8aKcWK8SBUTxETxlpgk3haTxRQxVUwTaWK6mCHeETPFLDFbvCvmiPfEXDFPzBcLRLp4XywUi0SG+EAsFh+KTLFELBXLxHKxQqwUq8RqsUasFevEerFBbBSbxGbxkdgitoptYrvYIXaKXeJjsVt8IvaIT8Ve8ZnYJz4X+8UX4oD4UmSJr8RB8bU4JL4Rh8W34oj4ThwVx8RxcUKcFN+LU+K0OCPOinPiB3Fe/CguCC9AohRSSiUDGSNzyViZW8bJK2QemX0hvVrGy2tkPnmtzC8LyIKykEyQhWURqaWRVpIMZVFZTEbldbK4vF6WkCVlKVlaOllGJsobZFl5oywnb5Ll5c2ygrxFVpSVZGVZRd4qq8rbZDV5u6wu75A1ZE1ZS9aWd8o68i5ZV94t68l7ZH15r2wgs6v8gGwkH5SN5UOyiXxYNpXNZHPZQraUj8hW8lHZWraRbeVjsp18XLaXT8gk+aTsIJ+SHeXTspN8RnaWz8ou8jnZVXaT3eWP8oL0sqfsJZNlb9lHvij7yn6yvxwgB8qX5CD5shwsX5EpcogcKl+Vw+Rrcrh8XY6QI+Uo+YYcLd+UY+RYOU6Ol6lygpwo35KT5Ntyspwip8ppMk1Ol/1/6Wm2lH+Y/9bv5A/+6eyb5Gb5kdwit8ptcrvcIXfKXXKX3C13yz1yj9wr98p9cp/cL/fLA/KAzJJZ8qA8KA/JQ/KwPCyPyCPyqDwmz8oT8qT8Xp6Sp+VpeVaek+fk+V/+DUChEkoqpQIVo3KpWJVbxakrVB51pcqrrlIRdbWKV9eofOpalV8VUAVVIZWgCqsiSiujrCIVqqKqmIqq67Lf+aqUKq2cKqMS1Q3/Sb4qrq5XJVTJX+X/0fhaqpaqlWqlWqvWqq1qq9qpdqq9aq+SVJLqoDqojqqj6qQ6qc6qs+qiuqiuqqvqrrqrHqqH6ql6qmSVrPqoF1Vf1U/1VwPUQPWSGqQGqcFqsEpRKWqoGqqGqWFquBquRqgRapQapUar0WqMGqPGqXEqVaWqiWqimqQmqclqspqqpqo0laZmqBlqppqpZqvZao6ao+aquWq+mq/SVbpaqBaqDJWhFqvFKlMtUUvUMrVMrVAr1Cq1Sq1Ra9Q6tU5tUBtUptqsNqstaovaprapHWqH2qV2qd1qt9qj9qi9aq/ap/ap/Wq/OqAOqCyVpQ6qg+qQOqQOq8PqiDqijqqj6rg6rk6qk+qUOqXOqDPqnDqnzqvz6oK6cHHZF4hABCpQQUwQE8QGsUFcEBfkCfIEeYO8QSSIBPFBfJAvuDbIHxQICgaFgoSgcFAk0IEJbCB+KXo0uC4oHlwflAhKBqWC0oELygSJwQ1B2eDGoFxwU1A+uDmoENwSVAwqBZWDKsGtQdXgtqBacHtQPbgjqBHUDGoFtYM7gzrBXUHd4O6gXnBPUD+4N2gQ3BfcH/wtaBg8EDQKHgwaBw8FTYKHg6ZBs6B50CJo+af27/2pAo+6nrqXTta9dR/9ou6r++n+eoAeqF/Sg/TLerB+RafoIXqoflUP06/p4fp1PUKP1KP0G3q0flOP0WP1OD1ep+oJeqJ+S0/Sb+vJeoqeqqfpND1dz9Dv6Jl6lp6t39Vz9Ht6rp6n5+sFOl2/rxfqRTpDf6AX6w91pl6il+plerleoVfqVXq1XqPX6nV6vd6gN+pNerP+SG/RW/U2vV3v0Dv1Lv2x3q0/0Xv0p3qv/kzv05/r/foLfUB/qbP0V/qg/lof0t/ow/pbfUR/p4/qY/q4PqFP6u/1KX1an9Fn9Tn9gz6vf9QXtL+4uL/48W6UUSbGxJhYE2viTJzJY/KYvCaviZiIiTfxJp/JZ/Kb/KagKWgSTIIpYoqYi8iQKWqKmqiJmuKmuClhSphSppRxxplEk2jKmrKmnClnypvypoKpYCqaiqayqWxuNbea28xt5nZzu7nD3GFqmpqmtqlt6pg6pq6pa+qZeqa+qW8amAbmfnO/aWgamkamkWlsGpsmpolpapqa5qa5aWlamlamlWltWpu2pq1pZ9qZ9qa9STJJpoPpYDqajqaT6WQ6m86mi+liupquprvpbnqYHqan6WmSTbLpY/qYvqav6W/6m4FmoBlkBpnBZrBJMSlmqBlqhplhZrgZbkaYkWaUecOMNm+aMWasGWfGm1STaiaaiWaSmWQmm8lmqplq0kyamWFmmJlmppltZps5Zo6Za+aa+Wa+STfpZqFZaDJMhllsFptMk2mWmqVmuVluVpqVZrVZbdaatWY9rDcbzUaz2Ww2W8wWs81sMzvMDrPL7DK7zW6zx+wxe81es8/sM/vNfnPAHDBZJsscNAfNIXPIHDaHzRFzxBw1R81xc9ycNCfNKXPKnDFnzDlT4JcPW29ibW4bZ6+weeyVNq+9yv5jXNAWsgm2sC1itc1vC/wqNtbaErakLWVLW2fL2ER7w2/iiraSrWyr2FttVXubrfabuI69y9a1d9t69h5b2975q7i+vdc2sA/Z+xEBbDPbyLawje1Dtol92Da1zWxz28K2s4/b9vYJm2SftB3sU7+JF9pFdrVdY9fadXa3/cSesWftIfuNPWd/sD1tLzvQvmQH2ZftYPuKTbFDfhOPsm/Y0fZNO8aOtePs+N/EU+00m2an2xn2HTvTzvpNnG7ft3Nshp1r59n5dsFP8cUxZdgP7GL7oc20S+xSu8wutyvsSrvq/491md1gN9pNdpf92G6xW+02u93usDt/ii/OY4/91O61n9mD9mu7335hD9jDNst+9VN8cX6H7bf2iP3OHrXH7HF7wp6039tT9vRP87849xP2R3vBeguEJEiSooBiKBfFUm6KoysoD11JeekqitDVFE/XUD66lvJTASpIhSiBClMR0mTIElFIRakYRek6yl7BlaLS5KgMJdINVJZupHJ0E5Wnm6kC3UIVqRJVpip0K1Wl26ga3U7V6Q6qQTWpFtWmO6kO3UV16W6qR/dQfbqXGtB9dD/9jRrSA9SIHqTG9BA1oYepKTWj5tSCWtIj1IoepdbUhtrSY9SOHqf29AQl0ZPUgZ6ijvQ0daJnqDM9S13oOepK3ag7PU896AXqSb0omXpTH3qR+lI/6k8DaCC9RIPoZRpMr1AKDaGh9CoNo9doOL1OI2gkjaI3aDS9SWNoLI2j8ZRKE2givUWT6G2aTFNoKk2jNJpOM+gdmkmzaDa9S3PoPZpL82g+LaB0ep8W0iLKoA9oMX1ImbSEltIyWk4raCWtotW0htbSOlpPG2gjbaLN9BFtoa20jbbTDtpJu+hj2k2f0B76lPbSZ7SPPqf99AUdoC8pi76ig/Q1HaJv6DB963vRd3SUjtFxOkEn6Xs6RafpDJ2lc/QDnacf6QJ5ghBDEcpQhUEYE+YKY8PcYVx4RZgnvDLMG14VRsKrw/jwmjBfeG2YPywQFgwLhQlh4bBIqAWENqQwDIuGxcJoeF1YPLw+LBGWDEuFpUMXlgkTwxvCsuGNYbnwprB8eHNYIbwlrBhWCh+6p0p4a1g1vC2sFt4eVg/vCGuENcNaYe3wzrBOeFdYN7w7rBfeE5YL7w0bhPeF94d/CxuGD4SNwgfDxuFDYZPw4bBp2CxsHrYIW4aPhK3CR8PWYZuwbfhY2C58PGwfPhEmhU+GHcKn/nB/ctg77BO+GL4Yen+3nB9dEE2Pvh9dGF0UzYh+EF0c/TCaGV0SXRpdFl0eXRFdGV0VXR1dE10bXRddH90Q3RjdFPW+di5w6ISTTrnAxbhcLtbldnHuCpfHXenyuqtcxF3t4t01Lp+71uV3BVxBV8gluMKuiNPOOOvIha6oK+ai7jpX3F3vSriSrpQr7Zwr4xJdC9fStXSt3KOutWvj2rrH3GPucfe4e8I94Z50HdxTrqN72nVyz7jO7ln3rHvOdXXdXHf3vOvhJuT9+T2Z7Pq4Pq6v6+v6u/5uoBvoBrlBbrAb7FJcihvqhrphbpgb7oa7EW6EG+VGudFutBvjxrhxbpxLdaluopvoJrlJbrKb7Ka6qS7NpbkZboab6Wa6qrN+PstcN9fNd/Ndukt3C93FNWOGW+wWu0yX6Za6pW65W+5WupVutVstwa116916t9FtdJvdZrfFbXHb3Da3w+1wu9wut9tf9XOnbq/b5/a5/W6/O+C+dFnuK3fQfe0OuW/cYfetO+K+c0fdMXfcnXAn3ffulDvtzriz7pz7wZ13P7oLzrvUyITIxMhbkUmRtyOTI1MiUyPTImmR6ZEZkXciMyOzIrMj70bmRN6LzI3Mi8yPLIikR96PLIwsimREPogsjnwYyYwsiSyNLIssj6yIeF94S+iL+mI+6q/zxf31voQv6Uv50t75Mj7R3+DL+ht9OX+TL+9v9hX8Lb6ir+Qr+4d9U9/MN/ctfEv/iG/lH/WtfRvf1j/m2/nHfXv/hE/yT/oO/inf0T/tO/lnfGf/rO/in/NdfTff3T/ve/gXfE/fyyf73r6Pf9H39f18fz/AD/Qv+UH+ZT/Yv+JT/BA/1L/qh/nX/HD/uh/hR/pRMW/40T776jzep/oJfqJ/y0/yb/vJfoqf6qf5ND/dz/Dv+Jl+lp/t3/Vz/Ht+rp/n5/sFPt2/7xf6RT7Df+AX+w99pl+SffPVr/Sr/Gq/xq/16/x6v8Fv9Jv8Zv+R3+K3+m1+u9/hd/pd/mO/23/i9/hP/V7/md/nP/f7/Rf+gP/SZ/mv/EH/tT/kv/GH/bf+iP/OH/XH/HF/wp/03/tT/rQ/48/6c/4Hf97/6C/8y/+zlvxfuC/OGGOMMfbXNOFSU/ze/t6/85z4u4P7AMCVWwtl/f3+iyvK9fl/bvcTCe0iAPBkry4PZG81aiQnZ6/IMiUExeYBQORSfgxcipdAW3gckqANlP3d8fcT3c7RH/QfvRkg7u9yYuGnOPev+//8n/T/yGOjFlYIz8T/i/7nAZQodiknN2wOsuMl0FZdfGwD5f5J/wVa/cH4c3+RCtD673LywKX40vgT4VF4CpJ+dSRjjDHGGGOMMfazfqJyp+zvn9m/+Py97+cJ6lJOLrgU/9H3c8YYY4wxxhhjjF1+z3Tr/sQjSUltOv3njWr/8pjsHwj8V3rmxuVoeA+Q/YwCgMs9nv+rjZRfXtn/uGv5WR/A/4kR/imNy3hRYowxxhhjjP2PuLTo//Xz6nINiDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYy4H+N/6c2OWeI2OMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMXa5/b8AAAD///XbCt4=")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)

10m57.020687794s ago: executing program 3 (id=1120):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x7000000, 0xe, 0x0, &(0x7f0000000440)="0000000000000060145b4ebeada5", 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

10m56.592772845s ago: executing program 3 (id=1125):
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0)
read$FUSE(r0, &(0x7f00000009c0)={0x2020}, 0x2020)

10m56.140110313s ago: executing program 32 (id=1125):
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0)
read$FUSE(r0, &(0x7f00000009c0)={0x2020}, 0x2020)

7m33.254780925s ago: executing program 4 (id=4219):
r0 = socket$tipc(0x1e, 0x4, 0x0)
poll(&(0x7f0000000000)=[{r0, 0x8024}], 0x1, 0x9)

7m33.048838204s ago: executing program 4 (id=4224):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$UI_DEV_CREATE(r0, 0x5501)

7m32.800626652s ago: executing program 4 (id=4228):
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000800)="3504000030000511d25a80648c63940d0324fc60040035400c0002000200002037153e373f04018006041000450055d64a12f76710989a119052acaa1100da3e813fa6ba1eb693d93f699e37af0d43f908fa7d995a8feb85d6a4e1b691276cd9561767309099f86f8e9e71fa51bde29f19b06fb9b3ba96da0e93d5a4024c1747fff68092705b44bb48dd2db4f3127aab13b4af0554957da6c0e03db227b65d459fa5c1232d7b62f12b65354b7e7fd32998da02ae0dc28942ec82d97191d0b68697bac278c34b2972ca8ed35b61ee6831c78af85ccd687694ce3835a98387fcdb8616524ea04449dbedb3250fb366740d6b96307e1d2f0d85dd592ca2d8c2730ad1d16eb4d87cbb48d2f7c4eb7a490aee048c9a8eb2ec9ed353d79ed29ffed1e48bf370bfb8af11085997d38210601155ec361cd6f3577da98c0a528a4d24ce75fbe297cb75f4b36719edd354ee6312c5527de7ea1a4233b96d27f7fb1e098954", 0x160}, {&(0x7f0000000a40)="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", 0x2d5}], 0x2}, 0x0)

7m32.538885391s ago: executing program 4 (id=4234):
syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000000)='./file1\x00', 0x4040, &(0x7f00000015c0)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000002,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000011,fileset=00000000000000000011,uid=', @ANYRES64=0x0, @ANYRES32=0x0, @ANYBLOB="cdf7c0c4ada580d5d36bd90806b670b73bb5112f75ca483652cf9b8a22555c3af34a84c5747ac51aa890ca205a0f27d7dde81ad3a01f21810b6de2d56be05416c54e1c6e8459e1643b129327581f7716b38db3d3f3bbeb6d1b846a2aad654e17ff850a1f82ac738387d9c3009d18eb2a78258fcc4ac4eb6a12a5650e10ebf077d9ab33f24de7cbffe0", @ANYRESHEX], 0x2, 0xc33, &(0x7f0000001780)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000200)={[{@metacopy_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})

7m32.116602467s ago: executing program 4 (id=4238):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x104, 0x4, 0x3d0, 0x100, 0x0, 0x0, 0x2e8, 0x2e8, 0x2e0, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'veth1_vlan\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@arp={@multicast2, @loopback, 0x0, 0x0, 0x0, 0x0, {@mac}, {@mac=@random="065dcf9efb68"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'vlan0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xe0}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x420)

7m31.594026242s ago: executing program 4 (id=4248):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0x80, 0x30, 0xb, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_ct={0x68, 0x1, 0x0, 0x0, {{0x7}, {0x40, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_LABELS={0x14, 0x7, "4614c334e344ae53204373dc0ddeb17f"}, @TCA_CT_ZONE={0x6, 0x8}, @TCA_CT_ZONE={0x6, 0x4, 0xd4c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}}, 0x0)

7m31.128325495s ago: executing program 33 (id=4248):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0x80, 0x30, 0xb, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_ct={0x68, 0x1, 0x0, 0x0, {{0x7}, {0x40, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_LABELS={0x14, 0x7, "4614c334e344ae53204373dc0ddeb17f"}, @TCA_CT_ZONE={0x6, 0x8}, @TCA_CT_ZONE={0x6, 0x4, 0xd4c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}}, 0x0)

2m24.324643856s ago: executing program 1 (id=8883):
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000006540)='./file1\x00', 0x2a08800, &(0x7f0000000140)=ANY=[], 0x4, 0x69f, &(0x7f0000000580)="$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")
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)

2m24.085282089s ago: executing program 1 (id=8887):
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0)

2m23.911353558s ago: executing program 1 (id=8889):
syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000140)='./bus\x00', 0x10, &(0x7f0000002080)=ANY=[@ANYBLOB="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", @ANYRESOCT=0x0, @ANYRES16, @ANYRES8, @ANYRESOCT, @ANYRESDEC, @ANYBLOB="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"], 0x21, 0x1f9, &(0x7f00000001c0)="$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")
mount$bpf(0x0, &(0x7f0000001080)='./file0\x00', 0x0, 0x1326020, 0x0)

2m23.564256082s ago: executing program 1 (id=8895):
syz_mount_image$erofs(&(0x7f0000000340), &(0x7f0000000180)='./file2\x00', 0x402, &(0x7f00000001c0)=ANY=[], 0x1, 0x242, &(0x7f0000000380)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})

2m23.184193059s ago: executing program 1 (id=8899):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f80)=@newtaction={0x90, 0x30, 0x9e54f29ff072a93b, 0x0, 0x0, {}, [{0x7c, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x2c, 0x2, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x90}}, 0x0)

2m22.480592478s ago: executing program 1 (id=8910):
setresuid(0x0, 0xee01, 0xee00)
socket$caif_seqpacket(0x25, 0x5, 0x4)

2m22.011362718s ago: executing program 34 (id=8910):
setresuid(0x0, 0xee01, 0xee00)
socket$caif_seqpacket(0x25, 0x5, 0x4)

5.256010567s ago: executing program 7 (id=11090):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000340)=@filter={'filter\x00', 0x42, 0x4, 0x358, 0xffffffff, 0xc8, 0x0, 0xc8, 0xffffffff, 0xffffffff, 0x2c0, 0x2c0, 0x2c0, 0xffffffff, 0x4, 0x0, {[{{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan0\x00', 'ip6gre0\x00', {}, {}, 0x73}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0x8}}]}, @REJECT={0x28}}, {{@ip={@remote, @multicast2, 0x0, 0x0, 'veth1_macvtap\x00', 'ip6_vti0\x00'}, 0x0, 0x70, 0xd0, 0x0, {0x60010000}}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@set={{0x40}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3b8)

5.058126773s ago: executing program 7 (id=11094):
r0 = socket(0x22, 0x2, 0x2)
bind$bt_hci(r0, &(0x7f0000000180)={0x1f, 0x4, 0x3}, 0x6)

4.891657367s ago: executing program 7 (id=11095):
ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, 0x0)
syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xc}, @hci_rp_read_local_version={{0x3}, {0x6, 0x9, 0x4, 0x3, 0xffe1, 0x6}}}}, 0xf)

4.586448909s ago: executing program 7 (id=11099):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="1700000070000100000000000000000007"], 0x24}}, 0x0)

4.485934759s ago: executing program 7 (id=11101):
syz_mount_image$bcachefs(&(0x7f00000000c0), &(0x7f0000000040)='./file1\x00', 0x200810, &(0x7f0000000080)=ANY=[@ANYRESDEC=0x0], 0xff, 0x5aa4, &(0x7f0000006b40)="$eJzs3X+QHNV9IPDXM7Pa2V39WAkcZDCrRUYJwbG14lf5RyqWc4mdAoeSyynH4mTDglZE9kqo9COATGKRA591YJedci7ByR/EhX1nW3FxZV+MQpmAOYnzLxUXH3VlU2ffYf/hO8KhMqCjXD72amf6zc70Tm/Pzs5KC3w+JW1Pv3nzfd/uftPT783sTgAAAOBV4fid+05dfe7vfvvPJl746O/9w67bw1C5Vl6NFYbT5S1nKkNOp/7K2toy2y9+7SNf+unoDb/9rfsHP//ise0X7Pjh75x1w4MfuvLoPX/9yPMrvvbSU0VxY3+6eGY9eSYJofqNk3/xsWPfOWe6LFk5/bN0KITVyZpHVieZEGO/CCFsn84xhLA2c+dXX7h0x/Ty9rv6W8pXZerl9fcG/f3lZ6DzqtP9cLpjHTx18xvCj96x9Y7vrfvK3/UdefrQTJWk2tSfQlh5XfPj+9LmYpOxt8X+GDvtlhDCYNPj3lyQ1+s7zH9jzvp56XJZuhwqiBPvX59ZL2XqZdejvsxysKC9hcrLo5t65Q7qLM+sZ09GC5WXZyxfnS6/ni4vnmf8croN5SSUklBppD+ZzPSR0HTckpDUjmW1sV5qHNuQbn9mPcmslzLr5b7MdtXaTTtaOUlay2O9THk8HVfS8guar03aeG9O+WvTZTV9or4Y10P2Rt3QrBuN7aqJeZ2cI5fTodR0DmpX3jjw6cEYSsuGkjWzHjPVRrzv2Na7N5S3ffP4cE4eyf1JGj/pKv7B765e/sEvHz6QfV1vxL+ulMYvdRX/x1edePaaw5/7bG78T8X45a7iX/LQ4DNXPXrn+tz9czLun0pX8cefeuwT686+/khu/vfG+NWu4m8+eqJ/xamHHs7Nfyzun4Gu4j/5tnf+5ItPPPB0bvwQ4w92FX/b0T2f7B85dVFu/Ifj/hnqrv88d+SKH4yM/Gw0L/7jMf6KruJ/4dA9b71v1V1X5h7fLXH/DHcV/90XPnjH8lMPnJ937kzu7fQVFoB2zkqvsT6ernc1zpzKzlrMX9N44a9GK/VrvuXp/xULjt4kc/E53c7KXsYHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgBDCa97wn9/1P983/EwlXe9PbzxZqi9j+bIQkoEQwr7943v379x94+iHbjqwd/f45Oj4/tGJ3fv33jp62W+M7p3YMzl+6/S9Y2+8tP64NSGpL5PzZ7U9EKamSsOtZbG9f3HhkR9tePP/+ucQxl7z/ZFKbv4b79l139ltfmYkm6fevuvA1d+//G/T7RpO8xpuk9fU1NRUyMnr/7z/l/f9+cmfXhTC2K/MlddjT/7WP7YkVCuYiZMq9Yd6Qv3JYNs8Glmn+cT9Vdmxc3JibO79O/34cs52/MuPPP2LHbd8+pf1/VvN3Y4O9+/A5qnJ0l9ufff/+8vb6gVFeZ2p4160v+NWxPzi/qum+3tlul0rc7arkrNdd37v4Se+ce7h/B1dsF19aQfoS17bUbtx6waT1S3l1bR+TCQ+buP+XXs27rv14Bt37hq/ceLGid1v2XTZpivGLr/i8o21Ld/Ym+1//lAYqzy3bjDE9n+1w+3vRX8ayD77ZrW76o8PfT3+7Kw/tea1bN77Yzqv4v3RnFHe82/wvR/7zFvuefTqekFRP4+1G+eTdDk4fZw3hab+NntftduuouMTQhhttx+eff7KcM5/23lH0Xmo+cg0/8xINk99Z/3P//bNf7P2N+sFp+U835xQl+f5RtYz+dT2V3XHztub6y61/dsfyul2DbXNa9N3Hu27+/g//0kjv2XLwi3j+/fv3VT/uTzNdHlyXtu8sqVxu9bVfpZDenhDo5u26a/T+kI9v+z5M1bP7tWh9L6hZE3b7cqK9x3beveG8rZvHs/b08n99RYHwor6MnldTs3JzAPLjYTbtb9Un39F/WPkXX/ztfd97e8vm9U/Lqn/LNquJGe7vvLEFz7z+U//67/v3Xa967dODP/8v//RhnrBkj+vlOuJNLJO80lmziuTE5eEUPT8Wxfab0fj+fdvyzFumlH77Sl6/mXbmanfPt5oZn0olLt6vl7y0OAzVz165/rc5+vJuZ6vzRt7W8vjygXP16XSf7LPr6TSmsfiPb9aOkqyeepbHz/r0CMf3XJuvaDo9bJRu12/vrSD8UfOdv3jNT8YuWn0X/3X3p03vvQbX732h+Ob/7Re0P1xj7n05rhX0/1bzdm/jazjuLN5/77phpsmt9fLi/bzmbv+TZcF4594Ktl368EPj09OTuzd19l2dfp6GtvJ7uVuX0/j2W1NwXaVZm3X4t3oZH91+nyL+W/ven+1Pt+GQtLV68LB765e/sEvHz4wPOtRaUPXldL4pa7i//iqE89ec/hzn82N/6kYv9JV/PGnHvvEurOvP5Ib/94kjV/tKv7moyf6V5x66OHc+GMx/4Gu4j/5tnf+5ItPPPB0bvwQ4w91FT/1s9z4jydpO9PXSCF89YVLd9TXk9CXPt9iHn0teYXsepJZL2XWy83rpTiLkDZQTpLW8lgvLb+gKZd2/jCnPF6FVdfWly/G9ZC9MXf5UlNqOve3Ky+6TgUAeKWL7//Ha9D4/v9EeqGUP9MAM7odh/34uSNX/GBk5Gdrc+LGcdjMfE7re6xr0/jx8XEecORNYWx6efto/UJ/vu8jxOdDdp4ztnPR61tjtJufWBaa5jmnau3Pmucsmn9fn1mPedXnyytN49DU7HFNJXQw/74+E6Zo/j2z+cXvZ41+fFZao03zVtnj15fOmLX7vENo3S+V6Qh5/SM7LxY/zzGyMmyptddh/8h+jiYeh+znaGI752ZOnN1+jiavfwzP3g8tecX+EevN0T9qKeccv6ajP/v4hTn278zxm9VeNu/a8ZvH8a6G8B8+F1cW6/3ZHswbtj2ldTJv2N+mhXhf5/OGi/t+mHnJnPjpE6yDecOXVrU87vTOG8byuB2VDucT35dT3qv5xHi6iHmdnCOX08F8IvBKFcf/8TVievw/fQH+fzP1isYp2av+GC/3c3rl9vkUjTtmf05vsKvX8W1H93yyf+TURbnXOQ93+jm9PS1rgwWf+ynajxsy64X7MWeCpmi8l22naL9nP5cxFFZ0td+/cOiet9636q4rc/f7lvoLafF+/0zL2oqC/b7Yn+d8+X/OwHihbfwl/jmGTufPztjnGNIPPi3WeOQPcsrnOx4ZnHWjsV01S3c8MvNC2t86gQcA0FYc/zfeP0vH//8jVkivI4rGrRdn1mO83HFrzvVJ3rj199PlLZn6Q+lvVMz3uvndFz54x/JTD5yfO265t9Nx6L9vWRsuHIcubNycO47Y0pvPi+eOIxrjrIWNE3Pzb4wTFzZOz3mbtmmcvrBxdO7+aYyjW+cBPnOis/hxHiA3fmMeoIfj3JdmKp2+cW7BfF2msbja6XzdGRlHr2zdzkUZR6e/PrtY4+j35pTPdxw9NOtGY7tqlu44urXcOBoAeKWK4/94GRfH/49m6i30ffbccUGPrtuzfw+kEf/xRRlXzsTv0fu/s8cdH/7foYfv/xaPW/PG9cmhdq3Eezsf1y/2vMTL/f3fxZ4XGq79Ac80/qaVHcbvdJ7sjL2/vFTGxWmjxsUAACxlcfw/kK7nj/8XNj6ZNX7rq19CzoxPXm7j88bfAUzjn6nxea/edzc+bxu/0/etc+Ivnfmvxf2czKt+/B/X09Up438AAJagOP6Pv/YY//7ff0rXs3+3fumN06fSS9JOPz89z3F6uj+M043Twxzj9Lfn/L5HvL/zcXqP59li/ObPAZgHOL2fjx+YqW8eAACAM6GvNlKa/Xv2H0iX2d+zz/u9/Gty6td08DdRK+nl8fX7905MXHtgz/bx/RPX7r5p+8S+a2/eu3P//ond9XoLHTfmjlvSJPtCJd0f7etlx22r0omBVTl/DyFbP4Y9r3Zj9t9DyDY7UPB3BGaOX2f55h2/0hz12/WPvOOdF/8Pc+pHjeN/wx9dcu2Ofdfu3L1z/87xyZ0HJ1qjT++IwXl8b2aS/p/X96U+9uS/OR5C/VbtWzMzSvP//s54eOaZR8uPWU+k0vQeSXKP/3QeSSaP1Wkmq/O+/yAn72//lz//4wunfvnFEMZeU37dfPNuDbl56j++f+L39x///p7p/Etz5t+omeZV9H2l2fpxeyqTN+3b/4YdNx3Ynf1Gye7E+YxSY32R5jPSp3+5w/mJbTnl8/39/fKsG0tTx/MT095x/elLDABgiYvv/8fr2fj+4afTC6hY3vk4vX7h2O37x7nj9LHOxunZ7yUrGqdn68ft7XScXl3gOD3bfv44fSC3frtxet64Oy/+H+TUn6/O+0kXv48Rh59fPnwgt59cl+0nA23rZb/PoKifZOvPt58kC+wn2faL5nPa1W/XT/KOe1789+TUz1PUHyqN/rCw35/J7Q+f6uy88euZ9aL+kK0/3/5QWmB/yLZf1B/a1W/XH/KOb178q3Pqd6q1f0x3jFq/mLj25pv2frip3mJ//0WY/ZGMTvJbNvPYxf3+j251vn8X93NfC88/hM21krz8F/dzZQvPv2j/z+P3v1aGWZ8ry83/8ZwTSM/zX9zvd8nIqz778adrvjY9ExR9/qxoHndrTvl853GXzbqxNM1rHhfoqTj+j2/3xPH/Xemy128Dvfy/J833mLWN36PvMSu6jnnVvZ5n33L3eg4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw8tcfQn9lbe3m8Tv3nbr63N/99p9NvPDR3/uHXbf/2ke+9NPRG377W/cPfv7FY9sv2PHD3znrhgc/dOXRe/76kedXfO2lpwpjD9d+Vi5OV6shJM8kIVS/cfIvPnbsO+dMlyUhhHIyfCiE1cmaR1YnmQhjvwghbI+pVlrv/OoLl+6YXt5+V39L+apMkOx2haFyzKc5zxBuKdwiXoaqaT87eOrmN4QfvWPrHd9b95W/6zvy9KGZKkm1qT+FsPK65sf3hRAG0v+h/pSpWRsfnC63hBAGmx735oK8Xt9h/htz1s9Ll8vS5VBBnHj/+sx6KVMvux71ZZaDBe0tVF4e3dYrsjyznj0ZLVRenrF8dbr8erq8eJ7xy/F/EkpJqDTSn0xm+khoOm5JSGrHstpYLzWObUi3P7OeZNZLmfVyX2a7au2mHa2cJK3lsV6mPJ6OK2n5Bc3n6jbem1P+2nRZTZ+oL8b1kL1RNzTrRmO7amJeJ+fIJfXviqt0r9R0DmpX3jjw6cEYSsuGkjWzHjPVRrzv2Na7N5S3ffP4cE4eyf1JGj/pKv7B765e/sEvHz6wNi/+daU0fqmr+D++6sSz1xz+3Gdz438qxi93Ff+ShwafuerRO9fn7p+Tcf9Uuoo//tRjn1h39vVHcvO/N8avdhV/89ET/StOPfRwbv5jcf8MdBX/ybe98ydffOKBp3Pjhxh/sKv4247u+WT/yKmLcuM/HPfPUHf957kjV/xgZORno3nxH4/xV3QV/wuH7nnrfavuujL3+G6J+2e4q/jvvvDBO5afeuD8vHNncm+vXjkBXp3OSq+xPp6udzvOXKim8cJfjVbq13zL0/8retlQxnQ7KxcxPgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAr0z/dNtlH3j/29+ztZKEkOTUmWoj3ldetnnzaBftjj/12CfWnX39keaytV3EAQAAAIrFcXipUVINa8PNyUA4r239OEdwXlxLWsuzyxgnO0fQaZyQiVNqE6fURZxyj/Kp9ChOX4/iLOtRnP4exakWxKmGzuIMzBGnMt0DOsxncM58Oo8z1KM4y3sUZ0WP4qzsUZxVPYozPGeczvvh6h7FWdOjOGf1KM7ZPYrzmh7F+ZUexTmnR3Gyc8rz7Ycr0prn5sWp3SgXxqkk5cYd7ebTz0nbOX+B7QzN2U51akXR63GH7QwUbE9s5/WZx5WK2znUXL/aYTu/Ov92Wre/w3Z+fYHtlAraif32lmx+sZ241mH/v7VHcQ72KM5HehTnth7F+ZP5xGnzHlmM86c9yuejC4wD0Kk4/p8Z7w2H/spvhsH0jJOdBYjj3XW1n7Nf7/JOSDHe6zLly4riZQfqmXjr5ptfdgIhE299JlpfS7xKYzwyR7xqc7wNmTvn2t63bW6fW3O8izPl/XPEq8lOLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAIvqn2y77wPvf/p6tIQnT/9qaaiPeV162efNoF+0e23r3hvK2bx5vLuuvdBEIAAAAKBTH4X2Nkmror2wK/cmylnrVdB6gmq6Xh+vLkZVhy/QyGS3V1geT1XM+rpI+buP+XXs27rv14Bt37hq/ceLGid1v2XTZpivGLr/i8o07dk5OjNV/htBfEC+EUJt+2HfrwQ+PT05O7N1XL8zmvzZ93NpasrV/tceNvCmMTS9vT/NfU9BeaVZ7i3ejowMIAAAAAAAA8P/ZtdtQScvyAeDXMzNnZjy6f+ePb+PiHod1FSsrtWNoieeBIMGXxYMQc6yTLLmSdHQX3RWzSRdSU4pAWVg2/NCGSZr0xZeUyBcWDLOEziahUn6oD4WWoeKHUCbOmXnmzMyZcU6DuOv2+314Xq77uu/ruZ8PB67nDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB8iBYb0/P1mdm5ySQiGZLTHCAbyxfTtDZG3a88sf0Hpal3Tu+OlQpjLAQAAACMlPXhE51IOUqFfOTjxOW7jdE1ECt9PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8L9nsTE9X5+ZnTsyiUiG5DQHyMbyxTStjVH31bce+uxLU1N/645Vx1gHAAAAGC3rw3OdSDmqcUpMJCcudf6daPZtYH3f/FbeimydDWvM6/92MCzvlDXmnbbGvI+NyNvcPt8UAAAA8NGX9f+FTqQSpcK6Vf1w1v+P6uuzvJP78vLt89p/K1BccyYAAADw/rL+v9SJVKNUqHb69bX2+xv78rL5o/5vn80/dcj8Uf/Pv7R99n96AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPjoWGxMz9dnZufySUQyJKc5QDaWL6ZpbYy6Zz85+Y+L99++sTtWKoyxEAAAADBS1oevtN7lKBUmYyKOXO77py6895EvPfLYdES02vxiMW7asmPH9We3jlneWc/vn/j+s69/e1XeWa3jQdsgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwgVlsTM/XZ2bnjkgikiE5zQGysXwxTWtj1H3l81/8ywMvPv5ad6w6xjoAAADAaFkfvtL7l6MaxSjG8ct33b3+klzf/GHfDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDDxw3fvPkbWxYWtl7v4uBcNPMRh8BjuHDRe3Gw/zIBAAAftJMjieZ/6YTLDvZTAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAh4LFxvR8fWZ2rpxEJENyms3mrqVDt2wsX0zT2hh10ydeKK1758mnu2PVMdYBAAAARsv68JXevxzVmIiJOG75btA3geX+v/IhPiQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwSFlsTM/XZ2bn1iURyZCc5gDZWL6YprUx6t6/a+/n7jv6exd1x0qFMRYCAAAARsr68GInUo5S4eNRipPa9wu9E5J8+zz4u8DKvO090ybXPK/RNasY+TXPu7NvZ4X2blrzyu1ovtI6d+bVVubl2vNqXfOq0Slf68xbflm7e6qtG/Gcg949AAAAfFiy/r/UiVSiVCh19f8/7cmv6HMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgCEWG9Pz9ZnZuSSJSIbkNAfIxvLFNK2NUffm3/7/UV/92V07u2PVMdYBAAAARsv68JXevxzV2BD/FxuW+/6o9OZnef+sv3vfPf/66+kRZx5/YKrQv+yPsotfv3LBU/2HiFxvdi7i6Ha9ZEi93/z+nhs3Nd99IOLM4/InraoX71+vd8m0+Wh966U7nj2wfcTLAQAAgMNE1v9PdCKVKBWuG9r/Z533iP6/Y7kBP/rGXb84tn1sd+R9M3KVdr3ckHpf2PTQn0899++vL/X/q+t9snP16b3X3ndsT8FWpE+SNmeu3bn5wDn7ctmuW/XzffWz9/Llb73276tvuvvdVv1ylNvx9X2P0qq2+thXPtLmQm7P3CXv7Wn01i8M2f/tv3v6xV+tv+vtpfpvnTzZqX9aDKrf2nlhaP04Im1OXn7H7vP27t/cWz8iapFfXf+Nty+KE/54zW39+5/sW7j7zXcf+19A2nx+45v7zr23en5v/WSpfpfs/f/8xft3/+Tu7z6W1c9+K3L6KWutn+ur/9ydx+x65tbL1vfWz/XVz/b/1BUvTW2rfecP/fu/qmfVwtCnWL3/B894+MqXt6S39A8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcXhYb0/P1mdm5XBKRDMlpDpCN5YtpWhuj7qsXv/DGFXf9+IfdseoY6wAAAACjZX34Su9fjmoUoxiTy33/o/Wtl+549sD2qLRGk/a5sLDthh2fuHrbzuuuOkhPDgAAAKzVqxcny/1/oROpRKmwKSba/f/MtTs3HzhnXy7r/3NL5yQirr5mYeuZ0cl77s5jdj1z62XrO98JIpZ/FlBeyvvMSt6FF7xQefNPXz91YN7ZK3nPb3xz37n3Vs/P8qI776zofJ948IyHr3x5S3pL5/m68z71tW0L7c8T2bqTl9+x+7y9+zfnsu8Y7fNke90sbyG3Z+6S9/Y0cpUoLY3n23nl9r4BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgNUWG9Pz9ZnZuchHJFmw1JvT7NYOZGP5YprWxqh7yaZf3nbUO49v6I6VCuPsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPgPO3AgAAAAAADk/9oIVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVdivvxCpqj8A4OfMzP4cd3bdXf1BW9G6WlHYg1IQUS8VFaERQk+GhKX5EAVBRGEPraGRWNFLkPUiUUG1hWCQmyRarNE/6aWHCgqsh0CkhdpFesjY2XPHmbtzG52tEPp8YDj7Pffe7/2ee869dy8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnNcW5cLKcL09uvORmTsvuvWzp+6ffvL2Dx7afsUTb/00uvnmT/f1vn5qcsuKrd/esmzzwQfWTux55chv/e/9cbzjeR6fa1alsBpCPBlDqH449eLTk59fMNsXQwjlODgWwlBcemQo5jKs+T2EsKVRZ+vG/dPXbJ1tt+9uHdBA6GmJ8+MKtXJWz5zB1nqbnR7oOErOc9W0zrbNPHZV+P6mDTu+XP7uOz3jJ8bO7BJn9ymn9RTCkk3Nx8+upsXpF5pun+Hs4NSuDyH0Nh13XYe6Lj3L+lcXxBen9n+prXXIk21fmYtLuf3ycaYn1/Z2ON9CFdXR7X6d9OXi/MNooRp1rm7fP5Ta91O76hzzl7NfDKUYKo3yH4xn1khomrcYYn0uq424lM1tJaTxNz9JYwgxF5dycbknN676edNCK8fY2p/tl+vPHseV1L+i+Vndxl0F/Remtppu1FNZHPJ/zKnN+6Mxrrqsrqm/qOXfUJr/Cm/pb0x8moxa6qvFpfOOOd1Gtm1yw7OXlzd+dHSwoI64L6b8sav8274Y6rvn7V2PDhfl31RK+Utd5f9h3bFf7t716suF+V/I8pe7yn/1od6T6z7eubLw+kxl16dyVvljirNt9x7/5Lnl/79vvN1c1/PvzfJXu6r/xolji/pnDh0urH9Ndn0Wd5X/uxtu+/HNrw+cKMwfsvy9XeXfOPHw84tGZq4szH947lao1VdoF+vn1/FrvxkZ+Xm0KP9X2fXvb5M/dsz/xtie618b2L22cH2uz67PYMq/+Jzqv+Oygzv6Zg5cUvTsjHv/rjcnwH/TsvQ/1jMp7vSduX+61PY7c6GavhdeGq3MvYH60q/Tt+FCzJ5nyT+YHwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP5kBw5IAAAAAAT9f92OQAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgKcCAAD//0gkGOY=")
quotactl$Q_GETNEXTQUOTA(0xffffffff80000902, &(0x7f0000000280)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)

4.430868335s ago: executing program 5 (id=11102):
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000004140), 0x40000, 0x0)
lseek(r0, 0x137f8b2a, 0x1)

4.295446358s ago: executing program 5 (id=11104):
r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="31010000dccd5e08cb060700000000952301090224000100007a000904340102d469e7000905", @ANYRES64], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)

3.494515597s ago: executing program 6 (id=11114):
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0)
write$P9_RSTATu(r0, &(0x7f00000007c0)={0x385, 0x7d, 0x2, {{0x500, 0x244, 0x0, 0x5000000, {0x96346fe8a85d2583, 0x0, 0x8}, 0x41400000, 0x0, 0x5, 0x5, 0x1b, '\x04nodev{evoo~\x05E\xc6\x00\x05\b\x007\xd9:\x8b\x92\x00\x00\x00', 0x33, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1', 0x37, '\xcf\xc3m\a\xc5\x00\xf0L\xd8_*p\xf5\xe9\x93\x0e^\x98\x9c\xd5\xefMQ\xf6\r\xa7X,J\x05\xc8\xf8(\xf6\x8d\xc1wM]\xe2\xe8 \x86#\x81\xf6hm\xd1\xbb\x8f\xd7\x00\x00\x00', 0x18c, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c<;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0w\xdct\x00\x00\x00\x00\x00\x00\x00\x00\a\xec!\xca\xbf\xf2\x0f\x9c\x00\x89\xf9\x06\x00\x00\x00\x00\x00\x1c\x98\x19\x88\t\xa0\x98\xe7\f\x83\xb6\xb7\xe2\x16)\xfb\ty\x8f\xdc\xda@\x86\b\x88\x8f\x06N\x10\x80\x97\xcf\xed\x83%\xfa\x9f\xe8\n|L\xb7\xe5\x9fE\xe8\xf2\xea\xbd\x7f\xb3B\xcaZ\xb8\xad\xb5,@7\x93\x1e\xa2\xab\xec\xac\x86\xe1u\xc5?\x04e\x15i\xb6\x1c\x04\x81\xe69\xd9\x94\xdf\xdf\x8eL\x9d\xf4\x8b\x0e\v\xe3\x8c\xb7J\x97<\xf7&<\xd5\b)\xf1,?at\x06KpF\xd5\xf5C:/\xa3\x94\xfcq,SF\xdb\x9d\xb9\xcc\xe9_\xca>62F\x84!\xf1:J\x0f\"J\xa55f,\x96\xa1\xe8U\x7f\xd0WH\xecAq\xaf\xda\xb4\xe7\xb1Ms9\xc6\xde\xc2\x06\xbdp{\xfaB>\x03\x13\x1c\xdb\xd3J\xdb\x98*R\x05\xd6}9q\xb9\xff\x86\xc2\xa3\xc7\x00\x0e\x98}\x98\xc2\x14\xd8\xd6;r\x1e\xad\xa92\xfb\xc1M\x90\"o\xf2(\xe1V\x14mh\xa3\x9b\x1d\xe1\xcc\xa2\x98[\xaa(\xe5xv]%\xa7\xba\xaf\x89\xe2\x9c\x05\x1e\xf8\xd5\xa8\xf4\x86M\x87\xe0p\x9d-\xbb{s\x0f=\xa9\xa8\xe5\x9fV\x821\x8a\x83\xaf\x8e6\xe67>\xcd\xe5c \x18\xf8\x94\ro\x14\f\xcf\xf7\xd5H\xd5\x18\x02`\x1d\x0fO\xd3\xf8W\xb2\xc8P\x9b\xd3\xff>\xd4\xaf\x977\xff\xdb\x9c_\xc7\xd0\xa8\xc2w\xa5\xca\xd2C\xf2\x8b\xaf\xfd6'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x13r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x385)

3.208685338s ago: executing program 6 (id=11117):
r0 = socket(0x2b, 0x80801, 0x1)
ioctl$sock_inet_sctp_SIOCINQ(r0, 0x8905, &(0x7f0000000140))

2.967402323s ago: executing program 6 (id=11120):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0xf, &(0x7f0000000100)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x8}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x6, 0x0, 0xb, 0xa}, {0xf}}, [], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2.785664827s ago: executing program 2 (id=11122):
syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000f40)='./file1\x00', 0xa00010, &(0x7f0000000080)=ANY=[@ANYBLOB='iocharset=iso8859-1,nostrict,iocharset=default,anchor=00000000000000000145,gid=', @ANYRESDEC=0x0, @ANYBLOB="2c706172746974696f6e3d30303030303030303030303030303030303030322c756e64656c6574652c706172746974696f6e3d30303030303030303030303030303030303030312c756e686964652c001e066340c987db28915dbe6892bc3dce41ae76eaf528dc889820692d753009e30e567403a6c30e933de68a0a923eec1dccf226b58adb7d968bafe76628bceade8672fb893f87dc88", @ANYRES8=0x0, @ANYRESOCT=0x0, @ANYRES8], 0x1, 0xc5a, &(0x7f0000001040)="$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")
lchown(&(0x7f00000001c0)='./file1\x00', 0x0, 0x0)

2.684609779s ago: executing program 6 (id=11124):
r0 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000000040)={[{@clear_cache}, {@metadata_ratio}, {@ssd_spread}]}, 0x0, 0x559e, &(0x7f0000005680)="$eJzs3X9sVeX9B/BzWwoN+C39jhUYfxAgBoMkyJYtjqB4MQa24eKlgsKcCEQlBivYRDcYqUWSZcaghU4EF5GQaDJjscM/FMywy7CMZfzY5hZjs4JSaZZsAzVrHDG69N77XO49l9tembNOXy/SnvPcz3me+9yT88d9X/qcGwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAURUcSc9+d0f3i0ZE1X77/Hz+e+OjGn4zfvX/roVvu23T/gjMjbto5a1nf+mlN8zdsbDjS/PS+ObdGUSLdL5Htf9u136q/88bbvlsdBly+MLOtrS31lJmuJzON4QUP9vcr/FkRRVFVbIDK7PbV7E5FwQC53cbiAQf0Tuui6O7J8ya1dT01bklyYU/xS6df9VBPYKhkr6ue89dSMv27InZErp136SUKLtFM//gF96m8CADgY5mZSm9yb0ezb3Fz7eZ4PdZOxtotsXZ4h9CS37gYmXGHl5rnpHh9iOaZzESFESXnGatnz3+unYr3j7VjUeNjzLPw0GykqS41z7Wx+lDNEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCzZOzxo2tWtD2y575fdtQceff9OVc+8KWOw22LT4y8eunKHWum/HTWsr7105rmb9jYcKT56X1zbo2i2nS/RKZ74kTL5b9NjZ3fvXfcG427n6vpq8yOG7bD8g6OXg87s0ZH0cq8Sk8Y9q81UZQqLKSb0Y7iwl3pnW+HAgAAAJ8nX0n/rsi1M3GwqqCdSKfJRPpfkAmL77Quiu6ePG9SW9dT45YkF/Zc/HipEuMlLzherl17/ieRF4xD/I2Pd74eDm0sGmdg8RHjef7SMWPefmty/eSvT5v7xA3PjOru+r8nZ2xJ/bGu5oUrru+tf/a6ovxfO3D+D2dO/gcAAOA/If/HxxnYYPn/jqVTt7z+i2Grft3a8MTB+h1/bv3OMzsXneq54Ud9L09N3v7o1UX5f1LBUxbl/zDjkP8roovL/wAAAPBZ9t/O/8micQY2WP5vONM3+wcHX6vr+PucxXt+9dAVi8+e/tv8U7t3DV9zR8v6uoeuLMr/M8vL/8Pypx0e/F2Y8OrRUTSz/JMKAAAAFAj/737+o4WQ1zOfHMTz+rX/vKp5380ffPMbD97zpzff/s2xA7MnrdteN/PgyzfVf1j5ve3dRfk/WV7+r/p0Xi4AAABQhuePrpw773jPucfPvtB18vDu3pMznjyzrqnvdOslLatXbTr2WlH+T5WX/0cMzcsBAAAALuDeO59bsfnVl/oe2H/X2Ck9FVc1XpK4ZduOqU0TPuq8tPfy7VuL8v/y8vL/yOw2u/Ih06kz/BVC6+goqu7fWZspHIparskVAAAAgE9IyOlbP1ixbOzOsb3jj59+rObQG4dn/2Vt55yN13RXdW/uXNZ4WdH9AkJiL3X//3Cng7D+v+D+f0Xr//MKmbv+zXZjAAAAAL6Iitfzh9vjZ765oNT375e7/n9J3cQTiba33lv11XMHzo1ZsP/7129aV9/be8+El37/wz9M/6i6KP83l5f/K/O3n+T3/wEAAMBF+F/7/r+lReMMbLD7/zdV9DWsWrd3+uota7csTCw7UH3qwdV731+w5l9Tb36+qea6A0X5v6W8/B+2o/JfXkc4P5tGR9H4/p3s3QR/Hqa7OlZor8orZE58rMeNoUe20D4ir5C2Ntbja6OjaHL/TnOs8P+h0BIrnK3JFnbFCsdCIXs95Ap7YoWOcKVtq8lON154MRSyCyzawwqKUbklEbEe75Xq0V+4YI+u3JMDAAB8oYTwnM2yVYXNKB5l2xODHTBysAMqBjugcrADhsUOiB9Y6vFoeWEhPH575yMbNjVMSb7y8NzHfvbms40T9j1+WV3v5g9f2XbvxJ3TW6YW5f9d5eX/cCqGZzal1v9HYf1/9nsNc+v/l4dCbazQHgqp+B0DUuE5MmH34fActalsj7PjcwUAAAD4XAufC1QO8TwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/s3evcdJVd0JAj/d9INumqaNE9GMk3TUgGakaWwNw+AoaoxGRZpZddxkNBBoEGmE8FgFURtQZxziZ3ztrJnoCAoiu+qHGFeDwUhcxIw6iWLiA/Cxjq7r+h6VGM2E/XTfOkXVrS67EFDa+X7/6DpVv/O89eg69946FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/xjuPfjlk4YunP0PHzace8nqqqmL/kfH6Mv+cNW3vvjUPy5b9G9h/i9GnLll3kEXHjd/wbR/6Vi++ogzQmjtKleWFC977oqvPtS613HP3jFw48wbb63fUpWpNxMP/Tr/lGfuXBxbfbF/CHeXhVCRDgypSwKVmft1sb5960LYI2wLZEu01SYl0g2HB2pCWBK2BbJVra4JoS4ncMqG+++7vDNxTU0IXwkhVKfbeKY6aaMmHRhUlQRq04HpFUngt1sT2cBPypMA7LD4Zsi+6Fe15mdo6L5ckddf5U7r2KcrPbw+MdFQPN/rR+3iTuWoSj/QukNPW0F17BIFb4+13m294N1WsJ2v8LTlfpHKfEPZui1UHcontk0aP6d9dnykPDQ19SlW0y56np9+e/6E7Un3mtdh7EDDTnkdXvrYiun9lo2+9OrNvxqz4ayaA3a0m0/lbNLc9K5WHTKvuV7zPEajfJ70grdfwbekRl+6Qghbzz17xtfnTDz7iD63PLnu1QcfrNty9pwFvzhz4nmLLj55w7/Pf6lg/t/w0fP/+HKOt+V5uWOrH9Ync/P4SF1MvFmfzM0BAACg1+gNe01Xnv/6X73+/bWtMxed/u23Dj73w71afz3i/gFVB7yxrqn1/I2ff6Vg/t9Y2vH/eMi/Lne0a0MY1ZVYNCCEvbseTwIrY3e+OyCEL3elWvMDR6UCa0PYpytxULaqVIm+sURjKvByfSYwKhVYHwOtqcDyGLgiFbg4BlalAhNiYG0qcHQMhCn54/hqfWYcJQdqYmBcshFXxbMQ3qmPraW21aZsVQAAADtJZnZYmX8351yHHc0Qp5eranrKEM/ALpqhOlVDegabnVYVraGipxrKe6ohO+6Ojx5+Qc1lPdVccBpGWX6GG9f85X2LXjzsC2P3mvj5xUMvmPKz8eGst++uerx5yYtv7XvEzesK5v/NHz3/r+6mI2UFx/9DGNv1N+Yuz0Tas/FxrXkZAAAAgB1w0R//xR61Lw85oGHT+2X3zl/7xKMrfrl5j1NOf3/c8a//8PCaxnsL5v+jSjv/P+4T6ZOTOTwSd0NMHRBCc34gqXZkYSA56t0vEwAAAIDeIHs8PnssfErmNjlFOz2fLszfup3544H/Ud3m//09/7P2jq3/+mLZBd89d0TNgKX/9GrHhBNOPvqW47/1zj4VB/yyvGD+31ra+f+1+bdJJ9bHXlw9IIS+OYEHYy87A10aY+D5I/MDmfGvjxtgcawqc2JCtqrFscS4GGhOBZYUK/FotsTe+YHMk5VtfFF2HFMyJXICAAAA8ImLuwPicfl4/n/LGSNO++vvzfrbha88eN7qCy75q+Ed80eedP/THzbMvXJp2PTmEQXz/3Hbd/5/1zy44PT+9n4hDK0IoU/6hwGP1CYLA8ZAXVkmcW9tUlefdFULa0MY2TmwdFUvZNb/r0ivMfh4TVJVDOy93y1vD+pMLKsJYWhu4IlvLz2sMzEnFcg2flpNCF/qHG268bv6Jo1Xphu/tm8IX8wJZKua0DeEzsaq0lX9r+rMdQzSVa2qDmHPnEC2quHVIcwNAPRW8X/pxNwHZ82dN3V8e3vbzF2YiDvxa8KkKe1tTROmt0+sLtKniak+561jtKBwTKVe+mZTZo2ixSsnV5aSzv5QsDm3rcyO/IIzBzP345ehyq5xHlKZd7clPeQD9y9sIuR8lSo25PJdPOTa3Eq2PYkF9cf8VaFf6DtnVtvMpvPGz549c1jyt9TshyR/43GmZFsNS2+r2u76VsLLo+hyWSkfd1sNyq1k6OxpM4bOmjtvyJRp4ye3TW47p+XQP2sZMXz410YM7RxUc/K3h5EO6q7m1Ei3Li1xWDtxpF+oyKnkk/jQkJCQ6G2J/f7L5odH77n+nOt/9tqPz+/3zdPu3fvImT889KqpD1Xve/ji24ccWDD/n/HR8//4qRM/+DPrMxQ7/t8QD/Mnj287zD8uBpaUevy/odjR/OyJAY2pQEcMdDjMDwAAwGdD3B0Z92bGndKbb1m/buOSlrk/aHin5dY17Utvuum+U39y58ATvjQ47LXhuhM+VzD/7yjt9/87af3/7NL1JxRb5v+gWKK52Pr/6WX+s+v/dxRb/z+9zH92/f8ln8L6/3OygdQmecf6/wAAwGfBJ7f+f4/L+6cvEFCQocfl/dMXCCjI0OMy/qVeIGC71/9f8+Bff6Wq35g7/qTlN/WXvPZ39xzWeuS6zTP/5Etb10+877qxt6wpmP9fUdr838L9AAAAsPv4z5ddU3H02Xff0bJu6sZxbw5+98m3lgzq80HF0Q+3j3xh4Bu3nlcw/19S2vz/k1//LxQ7/7+xWKC12MKA1v8DAACglyq2/t89Q1sa/zCm/x+eHvab5Q/ePPqnj/z898v3+/mJPyvfZ8Gxz8+8bFLB/H9VafP/eNpFeV7u2JsP65M17UJ6Tbs367M/GQAAAIDeoTw0NVWWmDdvYdSjPn6bT2eWAv2odK7vvXLt2ZtfmH7c46ev+7uaEwbvOWHaBasa/2b4gXd+ftQley7ddGrB/H9tafP/vN9lXPrYiun9lo2+9MOrN/9qzIazag7YdvwfAAAA2HVK3S8BAAAAAAAAAAAAAAB8+s7tWHzhI8uOfe+bt//F/kcseXXwbXcd+Lsh/V664qoHJq1648zJXy/4/X8Y21Wu2O//43X/4u8L/igvd2y15/X/MvdPOfH2uV1LFj5SH8L+uYGpC6fuETLX5h+cG7jvjIMGdiYWpkusefbolzoT30kHjh/yuS2dicNTgXFxkcR90oF4VcUt/VOBuLzi4+lA3B6r0oGqTOCy/sk4ytLb6pW6ZFuVpbfVxroQBuQEstvq7rqkjbL0AK9JBbID/F46EAd4ciZQnu7V7f2SXsVAXSx6Q7+kVwAA7Lbit8DKMGlKe1tz/Aofb79QkX8b5S1ZtqCw2rISm9+UWZps8crJlaWk+6S/i2671nhlqO4cwrCCr6u5Wcq6Rrlzaulh0/1RkSH3tNpbeZFyadu76aqKj6gmGVHThOntEyt7HHhLz1kOqegxy7CCyU5ulvKuTVpCLSX0pYQRlbhtSuhyvF8empr6pHL9eQw2hDw9vSJK/b1+7jp/xV4FuXluO/TKt758zE+f++CfP/9E/2+cVnP7rO+/e+KvX7//wEOOuG5C05otBfP/htLm/9W549qSuRhAR7yy3sgBIYwrcUQAAADw2XfbRbfecfr09a9MWlvx5GOPTS0fc3rl1vl3zp93ycZ7Fx9/2cErdjR+2Fm//f5vBu//b89e9dJPR+7zwA03/58nD3v8z3//8I8eeqduZZ+x7xXM/xtLm//HPViZQ8HJ3o618fr/iwaE0HVp/YYksDIO97sDQvhyV6o1lkguqH9CLNGcBFbGHSYHxRLjWvOr6hsDq1KBl+szgbWpwPoYyOyluCVkduVcWR/CYV2psfklZsQSDanAmBhoTAWaYqA5FegfA6NSgdf6ZwKtqcDDMRCm5G+rH/fPbCsAAIDtkZlnVebfDel53qqKnjKU9ZShtqcM5T1lqO4pQ7FRxPt3xAyVqZNXynIyVaZrrUnVUpAhXgx/u/tVkCE8mp8zXbCg6Xj+QfZ8g7L8DFf+4NlT1w+e/tDqzcd8beBt/zhkz4Obp9e9t+CGp3475pzrnv/TQQXz/+bS5v+1+bdJ6+vj/H/b9f+SwIOxe1fHU8cbY+D5I/MDmR0D6+Nkd3G2qtZMicykfXEsMSoGGlOBGTEwKhUYNzYTWDIwP5CZaWcbX5RtfEqmRE4AAAAAPnFxB0HcTRPn/zce9YOr3x8wccuyeTPvH9vyxMmjv3H1XT+6d/9ld767YvCAce99p2D+P6q0+X9sr19uYxfH3rzYP4S7y7b1JhsYUpcE4n6Muvjz+H3rQtgjZwdHtkRbbVKiKtVweKAm+YV6Vbqq1TXJGgPx/ikb7r/v8s7ENTUhfCVn70u2jWeqkzZq0oFBVUmgNh2YXpEE4p6fbOAn5UkAdlh2r2B8QWVOdclq6L5ckdffZ+WaoOnhFewD7SZfd7+52lWq0w9k9qlmbd/TVlAdu0TB22Otd1tvfLc1eLflfpHKfEPZui1UHcontk0aP6d9dnwk95esBXbR85z7K9VS0jvhddjx8Xvbs+p0B5pTHx/N3Zfr/nVYFqu79LEV0/stG33p1Zt/NWbDWTUHlNyNIuIPhX+05X9XPpWzeXe16pB5zfW6z5NWnye98d9Ao6cthHDZ9cfsu+TdX+/33A3Pnbqu7Maxr/7lrHs2Lf+bysNHrXv/yaGjLy+Y/7eWNv+vSN12+V3cmLMGhHBgzsZ9JG7+YwYkn4M5geRTcs/CQHLI/V/ri35yAgAAwM6W3d2R3V8wJXObnBCenicX5m/dzvxxf8WobvOX2u9j121cedLQN6474G8vOPGNv7/28Kceuv6ysnXL//vYD1avuXzxe08UzP/HffT8v2+qm47/O/7PLuL4f7d2913RfdMPdOzQruiC6tglHP/v1u7+bnP8v1uO/zv+3x3H/3vg+H+3dvenreBb0gxfujonwdff+fPfTbzpg7mN+x180lPPHDrxun+6quXuu0555b+de9601761uWD+P6O0+b/1/7pftC+7/t+4Yuv/zSi2/l+H9f8AAIBdqshCc+l5XsHqfQUZ0qv3FWTocYHAHpcYtP7fdq//t3Dkv1904Q+fb7n2nTvHXb5m07Fnvvr0utXPzFpx3Lnnv9V6112tBfP/jtLm//Hl0C+39d6y/l/j2CJVXREDMywMCAAAwO6o2A4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPl2HnvbO+5d8/R/aBv1ixc1/f+v/+7/P1q594JvfuGn4L6f86RllazZcM+LMLfMOuvC4+Qum/UvH8tVHnBHClK5yZUnxsueu+OpDrXsd9+wdAzfOvPHW+i3VmXorM7d/nJc7tvphfQhLch6pi4k36zvvbAuccuLtcys6E4/Uh7B/bmDqwql7dCaW14cwODdw3xkHDexMLEyXWPPs0S91Jr6TDhw/5HNbOhOHZwJl6e5e1z/pblm6u5f3D2FATiDb3bP751eVbeO4TKA83caKuqSNGKiLRa+tS9qIgfZYYkrfEIZWhNAnXdU/VydV9UlXdU91UlWfdFUXVYcwMoRQka7quaqkqor0yB+tSqqKgb33u+XtQZ2JpVUhDM0NPPHtpYd1JmamAtnG/1NVCF/qfMmkG/9xZdJ4Zbrx/1oZwhdDCFXpEu9VJCWq0iVeqAhhz5zAto1YEcLcwGdD/PSZmPvgrLnzpo5vb2+buQsTVZm2asKkKe1tTROmt0+sTvWpmLKc9NYFH3/sm96eP6HzdvHKyZWlpCsy5Sq7unxIZd7dlt2997FftbmVbHs+CuqP+atCv9B3zqy2mU3njZ89e+aw5G+p2Q9J/vbJRJNtNay3bKtBuZUMnT1txtBZc+cNmTJt/OS2yW3ntBz6Zy0jhg//2oihnYNqTv7ujJEu/eRH+oWKnEo+ife/hIREb0uU5326Ne/un+MFX/S3dbQyVHd9QBdMK3KzlHWNcmcM+qiPOeKP8zWlxxENK5g4FGQ5pOcsLQWTiW1ZapIsXV/rCiaHuTWVd23SeL88NDX1KbYdGvLv5m7e13dg8z6d2XSlpgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+P/swIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCwAAAAAIMzfOoyeDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4FAAA//8fSxmR")
ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f00000000c0)={0x4, 0xfffffffffffffffc})

2.50530229s ago: executing program 2 (id=11125):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
msgrcv(0x0, 0x0, 0x2000000, 0x0, 0x86b1b18158a7cb82)

2.337166685s ago: executing program 5 (id=11127):
syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa00010, &(0x7f0000000600)=ANY=[@ANYBLOB='iocharset=iso8859-1,noadinicb,uid=forget,anchor=00000000000000000145,iocharset=cp949,dmode=00000000000000000000001,undelete,partition=00000000000000000001,unhide,mode=00000000000004000000006,gid=', @ANYRESDEC=0x0, @ANYRES32=0x0, @ANYRESDEC=0x0, @ANYBLOB=',context=user_u,appraise,euid=', @ANYRESDEC=0x0, @ANYBLOB="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", @ANYRESDEC=0x0, @ANYBLOB="2c666f5f9f276ec9776e65723cf4f35fe4113026aea579cf39a0f0c29957f53b57c3b489eb054980f991fd7da326951341daebf88b7573ead7344e8185d60a1644469d91bcb8587f93f34db553c02bca476f5744f1aa69e5accfbfd06c024c0950225000dca631a828ab74affc80a0160784", @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x1, 0xc4f, &(0x7f00000026c0)="$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")
mkdir(&(0x7f0000002bc0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1)

2.22727901s ago: executing program 2 (id=11128):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000cc0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x32658aeb}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x12}]}}}]}]}], {0x14}}, 0xd4}}, 0x0)

2.00141545s ago: executing program 7 (id=11130):
r0 = socket$packet(0x11, 0x2, 0x300)
sendmmsg$sock(r0, &(0x7f0000000840)=[{{&(0x7f0000000640)=@tipc=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x80, 0x0, 0x0, &(0x7f0000000a80)=[@mark={{0x14, 0x1, 0x24, 0x4}}], 0x18}}], 0x1, 0x4)

1.952674079s ago: executing program 2 (id=11131):
r0 = socket$key(0xf, 0x3, 0x2)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000540)={'ip6gre0\x00', &(0x7f00000004c0)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @loopback, 0x0, 0x285fbe632089c8c9}})

1.846859796s ago: executing program 5 (id=11133):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x22d81, 0x0)
ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae09, &(0x7f0000000140)=""/1)

1.748606526s ago: executing program 2 (id=11134):
syz_mount_image$hfs(&(0x7f0000000140), &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x8b, 0x2c4, &(0x7f00000003c0)="$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")
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0)

1.748361882s ago: executing program 0 (id=11135):
r0 = syz_open_dev$video(&(0x7f0000000380), 0xbdff, 0x2242)
ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0)

1.619250921s ago: executing program 5 (id=11136):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
mkdir(&(0x7f0000000000)='./control\x00', 0x0)

1.419569893s ago: executing program 2 (id=11137):
getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, 0x0, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006325a640402000207265970000010902240001000000000904000002214c6a0009050702000000da000905890eca"], 0x0)

1.341540023s ago: executing program 5 (id=11138):
prlimit64(0x0, 0xe, 0x0, 0x0)
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000040)='./bus\x00', 0x18, &(0x7f0000000300), 0x1, 0x55ca, &(0x7f000000abc0)="$eJzs3X9sVeX9B/Bzbym//NLWyLdDDQioMxCdZbAlRpMVgY2tSu4sU5iG/nAYN8bWITg6jdS5jEUx1nURUarEwR9sTutGGW4mq7rSufHL6RI2sk0XyGgQU8ecc4lk6b3nXO49l7ZX5qzT14u05zz3c57nPOdw/rjvC+fcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIIg+MPxO6fffl/N+O3X19x/3rVnr32oc8nxi27bWrn54e2j9rU9/5WjlauajyxdcPMDqYZH1/d2tgdBIt0vEfavu3z+VTfU1l05Ohqw/rOZZUXFQLvMdH0p0xiZ92J/v/yfhiAISmMDlITLeeFKMm+A7OqKwgEHdd3Eruap4+bVb1vZsfG5ZVdsKTx0+o0e7gkMl/C6OnjiWqpO/07Gtsi2cy69RN4lmukfv+DelYMAAN6WqlR6kX07Gr7FzbZb4vVYuzrWbo21o3cIrbmNU5EZd+RA85wcrw/TPKszUWHUgPOM1cPzn22n4v1j7VjUeBvzzN80jDSjB5pnU6w+XPMEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeC+54IaZtXv3PPLKl5t/89tH3vjmax87sqr+1r7O2ovXLX6ibcd3/3q0clXzkaULbn4g1fDo+t7O9iCoSPdLZLonnq1MJmf21Wx7/N7uqroPLVxTEo4bLUfkbBzsj1YuKQ+CxpzKwWjY3rIgSOUX0s1gQ2Hhi+mVT0cFAAAA3k/OTP9OZtuZOFia106k02Qi/SeSCYvXTexqnjpuXv22lR0bn1t2xZZTHy81wHjVJx0v26448ZPICcZR/I2Pd6IebbqiYJzBxUeM5/nTj/VOa6y5cfRVuy9YOGN27ZbLgh9PP9y2fNH9418at2Rfa1VB/q8YPP9HZ07+BwAA4D8h/8fHGdxQ+b+xqnziwanfKXn8+srjh+c/+LP2nheeSj5c2tf5zMsjx9z+i9UF+X9y3i4L8n804yj/J4NTy/8AAADwXvbfzv/VBeMMbqj8//P9mz/3r5Vfn3J4xj93vPjM7y7ZOqVs/utjZ9z41pMLXq3b1fLHgvxfVVz+H5E77ejFXdGEl5UHQVXxJxUAAADIE/27+4mPFqK8nvnkIJ7XL7977FO73lx/U/Kspr+fsbh31qQv7F79tQ2bEn0b2tftWD53RUH+ry4u/5e+O4cLAAAAFOHX22+9Z9KXlmzdsufQnB13pTaPvHTua3t+0n51zyvHUiUv3NJTkP9TxeX/UcNzOAAAAMBJPD1mwvOHHjv01dm7147fu6plzhPT9q1e+OA/Zv/typf/dHzTRWUF+b++uPw/NlyGdz5kOu2M/hdCW3kQjO5facoUeoLWT2QLAAAAwDskyukNDeu6d64fMev1sw//YM2K5b/ce9m37t446ZYDv6q849xj+7tvKsj/TYM//z960kF0/3/e8/8K7v/PKWSe+nepBwMAAADwQVR4P3/0ePzMNxcM9P37xd7//5EzD4xqazy/YnJy26RZT/5/z9VrJ72xqO3ij2+/7c0PJ8r+8smC/N9SXP4vyV2+k9//BwAAAKfgf+37/xYXjDO4oZ7/3zPm2XPWfObe71d/Y+zT5751T+O3Ww9OP2/ztDMuLDm/c87M33+vIP+3Fpf/o+VpuYfXFZ2fO8qDYEL/Svg0wa3RdJfFCh2lOYXMiY/1qI16hIWOUTmFtKZYj4+WB8GU/pWWWOH0qNAaK/SVhYVNscLeqBBeD9nCY9nChT3hkWeutPvKwumGPbKFn0aF8AaLjugOitOyt0TEehwbqEd/4aQ9DmR3DgAA8IEShecwy5bmN4N4lO1IDLXB2KE2SA61QclQG4yIbRDfcKDXg/r8QvT6j+Z2Ln312odquq+pO3rW7D1L7mz5v65F3Ts//8Ouc/58zYsLP1WQ/zcVl/+jUzEysxjo/v8guv+/ujrIUx8Vwr+k7IMBOqJCKv7EgFS0j0zYvSvaR0Uq7NE3IVsAAACA97Xoc4GSYZ4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8m717j5OquhMEfqrpB900TUcMGGMCakR0l6ZpQoKII5G4axKXNAnZOGYIjdBohzaggCvGrPjIuEp0MWpMjOzgx1ETh1V8EHWiQnTEJKOS+JwVn4NOZNUl6ChxTJb9dN86RdWtLrsQUNr9fv/oOlW/87z16HvuvXUKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+P/DRcvubHx18P/65i+/u+Hl735i+m+mH7Ftr7/cVP/msDMf23bY0PobXhuyaPEr7VNOu7J15sorNq1eHkJrd7lMUjxz35CKirF/+NJtN11yf/OModPOqs7Wm42HAV1/KrJ3zoutvjgwhNszIVSmA6Pqk0BV9n59rG+/+hA+ErYHciXa65IS6YbD/bUhrAjbA7mq7qwNoT4vMO2Re9dc1JW4rDaEg0IINek2nqlJ2qhNB0ZUJ4G6dGBeZRLYui2RC9xRkQRgR1T39GB8M+Re9KtaCzM09lxZiddf1Xvt3B4mPbx+MdFYOt9rn9vNncpT9Fy27tTT1uNLg12u6O2x1rutD7zbirbzMk9b/o5Udg9l2/ZQTaiY3T5n5qLOhfGRitDU1K9UTbvped6w5cxZO5LuM6/D2IHGXfI6vKduSsNFr08+fPUJfzzloIXrp+9sN5/K26T56d2tJmRfc33meYwmfXCfJ9t2pvCutac/bUV7ScPtdIUQvvqnj2aemPfcvpvffvG4yTc/c/7lMxZfMW3yk0N+Mf4fr9zr9hkXF83/G999/h9fzvG2oiB3bPWdhmRuHh+pj4nNDcncHAAAAPqMvnDU9LNjX3zupPtuX/Lsyi9XfmfCr47fp6HyjO93fnXv1RM/fuGlHQ/vVTT/H17e+f94yr8+f7RrQ5jUnTh3UAj7dD+eBH4Wu3PCoBD27061FgY+lwqsDeFj3YlDclWlSvSPJYanAr9vyAYmpQLrYqA1Fbg2BpalAufFwKpUYFYMrE0FjoqB0FE4jkMbsuMoO1AbA23JRlwVr0J4oyG2ltpWG3JVAQAA7CLZ2WFV4d28ax12NkOcXq6q7S1DvAK7ZIaaVA3pGWxuWlWyhsreaqjorYbcuJe8+/CLas70VnPRZRiZwgzvDPt2xaDJB/zotmtHXdfy7OTvvDn+q5/+86tvrj3kn/77HWcuvOrQovl/87vP/2t66Eim6Px/CFO7/8bcFdlIZy7e1lqQAQAAANgJlz20/NFrDj3m/9z1/F23fuLKayrWXv6V//vC5nMPGPPlkZn+f/etVUXz/0nlXf8fj4n0y8scHoyHIeYOCqG5MJBUe3hxIDnrPSAbAAAAgL4gdz4+dy68I3ubXKKdnk8X52/dwfzxxP+kHvNfvOWvn/zUlY8et3jEgZsu+W+nvZ356Pjf7XXs+tEPv/bJEf/Q2L/4+v/W8q7/ryu8TTqxLvbi0kEh9M8LPBB72RXoNjwGnj+yMJAd/7q4AZbGqrIXJuSqWhpLtMVAcyqwolSJ3+ZK7FMYyD5ZucbPzY2jI1siLwAAAADvu3g4IJ6Xj9f/3zH10E8cMuS5cc9+8s7FL01a/vWT6n544A17vzyoc8q4z0w64vNPFM3/23bs+v/ueXDR5f2dA0IYXRlCv/QXAx6sSxYGjIH6TDZxd11SV790VWfXhTCxa2Dpql7Irv9fmV5j8JHapKoY2OeAn24Z0ZW4pjaE0fmBJ75x9biuxMJUINf412pDGNY12nTjq/snjVelG7+ifwifzAvkqjqhfwhdjVWnq7q3Jvs7BumqbqoJYXBeIFfVZ2pCWBwA6KPiv9LZ+Q8uWHzG3Jmdne2n7sZEPIZfG+Z0dLY3zZrXObumRJ9mp/pcsIzR2cVjKveXb57OLlE0fdjNI8tJ574n2JzfVvY4ftGFg9n7cV+oqnucLVUFd8emhzzywOImQt6eVKkhV+zmIdflV7L9SSyqP+avDgNC/0UL2k9tOn3mwoWnjkn+lpu9JfkbTzMl22pMelvV9dS3Ml4eJVfLSnmv2+rg/EpGLzx5/ugFi88Y1XHyzBPbT2z/dsv4MS0t4z47flzL6K5RNSd/exnqwT1VnRrqtqvLHNcuHOq+lXmVvB+fGhISEn0tMXNZ5pxJM3599zf3W3fy6cfv9/f7zR51/F9d/Jv5xzUdMfVXV//l+qL5//x3n//HT534yZ9dn6HU+f/GeJo/eXz7af62GFhR7vn/xlJn83MXBgxPBZbEwBKn+QEAAPhwiIcj49HMeFT6qvp/uv3o2bOO2PrLr0+7/G/HTzjp9I0HNZ5/+bHL/sPGN5at+fzrRfP/JeV9/38Xrf+fW7r+i6WW+T8klmgutf5/epn/3Pr/S0qt/59e5j+3/v+KD2D9/0W5QGqTvGH9fwAA4MPg/Vv/v9fl/dM/EFCUodfl/dM/EFCUoddl/Mv9gYAdXv9/Xudf1A25eN6EI0fN//EDaw5YNvimTzw9+dcHLj9s1J2rb3hrzI1F8/9l5c3/LdwPAAAAe477ftn/W+e/OeLuxx7YenTmwt9uvu6rf9V+6BF/GNxy4tQv1H7/un8rmv+vKG/+//6v/xdKXf8/vFSgtdTCgNb/AwAAoI8qtf7f9YOfH7524ahrH/r5qzc81/aL2RNf+nfLfvDpmSOar1+34TeNszYWzf9XlTf/35p/zUXR7/+/05CsaRfSa9ptbsh9ZQAAAAD6horQ1FRVZt6ClVE/997b3JBdCvTd0vkev2vImkUV912Wqdn8gwtmHNF01rGnzTv6exu/X/foT+qmN9WcWjT/X1ve/L/gexn31E1puOj1yYe/s/qEP55y0ML107ef/wcAAAB2n3KPSwAAAAAAAAAAAAAAAB+8x9qWH/b2mC+8Mnv/MX/62rHP/GDpx7/xwN9c+efTfn7UXft3bBsxrej7/2Fqd7lS3/+Pv/sXv1+wd0Hu2Grv6/9l70/70o2Lu5csfLAhhAPzA3PPmfuRkP1t/oPzA2umHzK0K3FOusRdzx71UldiRjpwzKi93upKTEwF2uIiiR9LB+KvKr41MBWIyys+mg7E7bEqHajOBi4YmIwjk95Wm+qTbZVJb6un6kMYlBfIbavb65M2MukBXpYK5AZ4SjoQBzglG6hI9+rGAUmvYqA+Fv2bAUmvAADYY8W9wKowp6OzvTnuwsfbfSsLb6OCJcvOLq42U2bzT2eXJps+7OaR5aT7pfdFt//WeFWo6RrCmKLd1fwsme5R7ppaetl0e5cYcm+rvVWUKJe2o5uuuvSIapMRNc2a1zm7qteBj+09S0tlr1nGFE128rNUdG/SMmopoy9ljKjMbVNGl+P9itDU1C+Va0IMNoYCme1t9ajc7+vnr/NX6lWQn+dva6+8sN/Qflv/beL37rt3UFXnSVPbv7fvQ/88eMzsH//w3rYrfp83/++pvyXn/zX5+d7allgSf1nv8EEhtJU5IgAAAPjw+59nrbzluHnrNs1ZW/nk7343t+LLx1VtO/O2M8/43lN3Lz3mgn9//c7FM2FV5rEtx72y5fS/fuUnn77q/tOfO2rW6bdN2XDExvaaa7/zFytPGlZ0/n94eef/4xGs7Kng5GjH2vj7/+cOCqH7p/Ubk8DP4nBPGBTC/t2p1lgi+UH9L8YSzUngZ/GAySGxRFtrrCppu38MrGotbOP3DdnA2lRgXQxkj1L8NGQP5VzSEMK47tTUwhLzY4nGVODLMTA8FWiKgeZUYGAMTEoFXh2YDbSmAv8YA6GjcFvdOjC7rQAAAHZEdp5VVXg3pOd5qyp7y5DpLUNdbxkqestQ01uGUqOI92+JGapSF69k8jJVpWutTdVSlGFr9vz3DverKEP4bWHOdMGipuP1B7nrDTKFGSb88Ja2w7644Mdbzv/Rw0d/5ryjl136+oVfGDD00if/d8dZAwZuqSua/zeXN/+vK7xNWl8X5//bf/8vCTwQu3dpvHR8eAw8f2RhIHtgYF2c7C7NVdWaLZGdtC+NJSbFwPBUYH4MTEoF2qZmAyuGFgayM+1c4+fmGu/IlsgLAAAAwPsuHiCIh2ni/H/1hPDGfkdvbdn30sHzJzz8wNmfn1m7d03tP09cv3zihTX3Hdy/aP4/qbz5f2xvQH5j58XevDgwhNsz23uTC4yqTwLxOEZ9/Hr8fvUhfCTvAEeuRHtdUqI61XC4vzb5hnp1uqo7a5M1BuL9aY/cu+airsRltSEclHf0JdfGMzVJG7XpwIjqJFCXDsyrTALxyE8ucEdFEoCdljsqGF9Q2Utdchp7Llfi9fdh+U3Q9PCKjoH2kK+nb+HtLjXpB7LHVHN27Gkrqo7doujtsda7rS++2xq92/J3pLJ7KNu2h2pCxez2OTMXdS6Mj+R/k7XIbnqe87+lWk56F7wOl7z33vauJt2B5tTHR3PP5Xp+HWZidffUTWm46PXJh68+4Y+nHLRw/fSyu1FC/KLw4TfOP/SpvM27u9WE7Guuz32etPo86Yv/BoZ72kIIK8+d8+gj/7L16cqNLf/lM+NX3vTqQyt/ctg9c0Z9bNMFn9r82pvHFM3/W8ub/1embru9HTfmgkEhjMzbuA/GzT95UPI5mBdIPiUHFweSU+4bG0p+cgIAAMCuljvckTte0JG9TS4IT8+Ti/O37mD+eLxiUo/5y+334HH/8N0jL3v5a1/ZuO/FDy5/bMN/evWFz8848p4tj69a/XLLsR99vGj+3/bu8//+qW46/+/8P7uJ8/892tMPRfdPP7Bkpw5FF1XHbuH8f4/29Heb8/89cv7f+f+eOP/fC+f/e7SnP21Fe0nz7XSFENoGXXPzL+pmjhxwyZnfnLX+54+/0TzhmfqzvnDr/zhqabji7DV/Lpr/zy9v/v9Brv+X2DPW/0sv2pdb/6+t1Pp/80ut/7fE+n8AAMBuVWKhufQ8r2j1vqIM6dX7ijL0ukBgr0sMWv9vh9f/qzv+jONfaHht/ysm3/yfb5153tPHH/fkQf2e/vrNX79u9OUjn/vUpqL5/5Ly5v/x5TAgv/W+sv7f8KklqloWA/MtDAgAAMCeqNQBAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD5Yq+5d+vFtSw887LonP3rdUf+6Yt2cA3516Lax405oGrl0cObSv/uX14YsWvxK+5TTrmydufKKTauXh9DRXS6TFM/cN6SiYuwfvnTbTZfc3zxj6LSzarL1VmVvP16QO7b6TkMIK/IeqY+JzQ1dd7YHpn3pxsWVXYkHG0I4MD8w95y5H+lKXNsQwsH5gTXTDxnalTgnXeKuZ496qSsxIx04ZtReb3UlJmYDmXR3rxqYdDeT7u5FA0MYlBfIdfdbAwuryrXxH7OBinQb19cnbcRAfSz6o/qkjRjojCU6+ocwujKEfumqfl2TVNUvXdXf1yRV9UtX9V9rQpgYQqhMV/VsdVJVZXrk66uTqmJgnwN+umVEV2JFdQij8wNPfOPqcV2JU1KBXONfqQ5hWNdLJt34LVVJ41Xpxi+rCuGTIYTqdIl/rUxKVKdLvFAZwuC8QK7xkypDWBz4UIgfPrPzH1yw+Iy5Mzs720/djYnqbFu1YU5HZ3vTrHmds2tSfSrHtrPf+9if3nLmrK7b6cNuHllOujJbrqq7yy1VBXfHltv7zAfU+9ivuvxKtj8fRfXH/NVhQOi/aEH7qU2nz1y48NQxyd9ys7ckf/tlo8m2GtNXttXB+ZWMXnjy/NELFp8xquPkmSe2n9j+7ZbxY1paxn12/LiW0V2jak7+7oqhXr17hlr7LkPdtzKvkvfjA0BCQqKvJSoKPt2a9/QP8qId/e0drQo13R/QRdOK/CyZ7lHuikF/7j2O+L3sp/Q6ojFFE4eiLC29ZxlbNJnYnqU2ydK9X1c0OcyvqaJ7k8b7FaGpqV+p7dBYeDd/8762E5t3Q3bTlZsGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP4fO3AgAAAAAADk/9oIVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVdiBAwEAAAAAIP/XRqiqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrCDhwLAAAAAAjztw6jZwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4FIAAAD//3qnxts=")

988.724646ms ago: executing program 0 (id=11139):
r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'})

829.188576ms ago: executing program 0 (id=11140):
r0 = add_key$fscrypt_provisioning(&(0x7f00000004c0), &(0x7f0000000500)={'syz', 0x3}, &(0x7f0000000540)={0x1, 0x0, @b}, 0x48, 0xfffffffffffffffe)
keyctl$KEYCTL_PKEY_QUERY(0x18, r0, 0x0, &(0x7f00000005c0)='\x00', 0x0)

772.125767ms ago: executing program 6 (id=11141):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, 0x0, 0x0)

702.543644ms ago: executing program 0 (id=11142):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000340)=0x9, 0x4)

476.717119ms ago: executing program 0 (id=11143):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000a00)={0x1c, 0x15, 0xa, 0x903, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24008819}, 0x0)

158.363148ms ago: executing program 6 (id=11144):
r0 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$inet(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@ip_pktinfo={{0x1c, 0x110, 0xd, {0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x20}, 0x20014804)

0s ago: executing program 0 (id=11145):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041)
write$sndseq(r0, &(0x7f0000001080)=[{0x41, 0x0, 0x3, 0xfd, @time={0x0, 0x3}, {0x46, 0x1}, {0xf}, @raw8={"80a9d4ba7408faaebe04c3c6"}}, {0x5, 0xf, 0xfd, 0xfe, @time={0x9, 0x9}, {0x3}, {0xfe, 0x1}, @quote={{0xf, 0x25}, 0x4}}], 0x38)

kernel console output (not intermixed with test programs):

n process `syz.5.9283'.
[  703.306108][ T7676] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  703.398937][ T5899] usb 1-1: USB disconnect, device number 37
[  703.476320][ T5899] nokiaca42v2 ttyUSB0: Nokia CA-42 V2 Adapter converter now disconnected from ttyUSB0
[  703.518959][ T5899] cypress_m8 1-1:0.35: device disconnected
[  703.605638][ T5738] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  704.093811][ T7763] ipip0: entered promiscuous mode
[  704.182577][ T5899] usb 6-1: new high-speed USB device number 33 using dummy_hcd
[  704.227522][ T7775] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9300'.
[  704.360550][ T5899] usb 6-1: Using ep0 maxpacket: 8
[  704.400280][ T5899] usb 6-1: config 8 has an invalid interface number: 125 but max is 0
[  704.408497][ T5899] usb 6-1: config 8 has no interface number 0
[  704.415902][ T7785] netlink: 9 bytes leftover after parsing attributes in process `syz.2.9305'.
[  704.434566][ T5899] usb 6-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=26.ec
[  704.450208][ T5899] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  704.461666][ T5899] usb 6-1: Product: syz
[  704.465870][ T5899] usb 6-1: Manufacturer: syz
[  704.494877][ T5899] usb 6-1: SerialNumber: syz
[  704.550216][ T5899] gspca_main: ALi m5602-2.14.0 probing 0402:5602
[  704.920135][ T7816] SET target dimension over the limit!
[  704.952093][ T5899] gspca_m5602: Failed to find a sensor
[  704.967359][ T5899] ALi m5602 6-1:8.125: ALi m5602 webcam failed
[  705.016869][ T5899] usb 6-1: USB disconnect, device number 33
[  705.649944][ T7862] loop6: detected capacity change from 0 to 512
[  705.820786][ T7862] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  705.923872][ T7862] ext4 filesystem being mounted at /973/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  706.006378][ T7817] loop7: detected capacity change from 0 to 32768
[  706.070693][T19254] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  706.102351][ T6993] usb 6-1: new full-speed USB device number 34 using dummy_hcd
[  706.114190][ T7891] loop2: detected capacity change from 0 to 8
[  706.121407][ T7891] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  706.151104][ T5971] udevd[5971]: incorrect cramfs checksum on /dev/loop2
[  706.163768][ T7891] cramfs: bad data blocksize 4294966936
[  706.181490][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  706.183772][ T7891] cramfs: Error -3 while decompressing!
[  706.199359][ T7891] cramfs: ffffffff99beda00(428)->ffff8880476e4000(4096)
[  706.206553][ T7891] cramfs: bad data blocksize 4294966936
[  706.214842][   T30] audit: type=1800 audit(1751536091.329:288): pid=7891 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.9335" name="file3" dev="loop2" ino=348 res=0 errno=0
[  706.303889][ T5971] udevd[5971]: incorrect cramfs checksum on /dev/loop2
[  706.325068][ T7817] bcachefs (loop7): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,str_hash=crc32c,noacl,usrquota,grpquota,nojournal_transaction_names,allocator_stuck_timeout=256
[  706.325096][ T7817]   allowing incompatible features above 0.0: (unknown version)
[  706.325106][ T7817]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  706.328977][ T6993] usb 6-1: config 0 has an invalid interface number: 11 but max is 0
[  706.329005][ T6993] usb 6-1: config 0 has no interface number 0
[  706.329044][ T6993] usb 6-1: config 0 interface 11 altsetting 253 endpoint 0x7 has invalid maxpacket 1024, setting to 64
[  706.329071][ T6993] usb 6-1: config 0 interface 11 has no altsetting 0
[  706.329105][ T6993] usb 6-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b
[  706.329126][ T6993] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  706.333750][ T6993] usb 6-1: config 0 descriptor??
[  706.334731][ T7877] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  706.334877][ T7877] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  706.338869][ T6993] keyspan 6-1:0.11: Keyspan 2 port adapter converter detected
[  706.347624][ T7911] mac80211_hwsim hwsim18 wlan1: entered allmulticast mode
[  706.400882][ T6993] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 81
[  706.400976][ T6993] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 82
[  706.401058][ T6993] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 1
[  706.401140][ T6993] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 2
[  706.401217][ T6993] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 85
[  706.401298][ T6993] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 5
[  706.426200][ T6993] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  706.439491][ T5971] udevd[5971]: incorrect cramfs checksum on /dev/loop2
[  706.439938][ T6993] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 83
[  706.440023][ T6993] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 84
[  706.440149][ T6993] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 3
[  706.440228][ T6993] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 4
[  706.440304][ T6993] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 86
[  706.440372][ T6993] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 6
[  706.461104][ T6993] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  706.557883][ T7923] binder: 7922:7923 ioctl c018620c 200000000380 returned -22
[  706.599226][ T6993] usb 6-1: USB disconnect, device number 34
[  706.607556][ T6993] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  706.634153][ T6993] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  706.635158][ T6993] keyspan 6-1:0.11: device disconnected
[  706.720925][ T7944] netlink: 'syz.2.9341': attribute type 3 has an invalid length.
[  706.720948][ T7944] netlink: 'syz.2.9341': attribute type 1 has an invalid length.
[  706.720961][ T7944] netlink: 216 bytes leftover after parsing attributes in process `syz.2.9341'.
[  707.463874][ T7817] bcachefs (loop7): initializing new filesystem
[  707.481818][ T7817] bcachefs (loop7): going read-write
[  707.528163][ T7817] bcachefs (loop7): marking superblocks
[  707.574413][ T7817] bcachefs (loop7): initializing freespace
[  707.609279][ T7817] bcachefs (loop7): done initializing freespace
[  707.665453][ T7817] bcachefs (loop7): reading snapshots table
[  707.671473][ T7817] bcachefs (loop7): reading snapshots done
[  707.802256][ T7817] bcachefs (loop7): done starting filesystem
[  708.002967][ T5738] bcachefs (loop7): shutting down
[  708.032245][ T5738] bcachefs (loop7): going read-only
[  708.062589][ T5899] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[  708.095028][ T5738] bcachefs (loop7): finished waiting for writes to stop
[  708.110271][ T8018] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  708.145229][ T5738] bcachefs (loop7): flushing journal and stopping allocators, journal seq 3
[  708.167573][ T8021] netlink: 'syz.5.9365': attribute type 17 has an invalid length.
[  708.259248][ T5899] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  708.297650][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  708.315664][ T5738] bcachefs (loop7): flushing journal and stopping allocators complete, journal seq 3
[  708.351303][ T5899] usb 3-1: Product: syz
[  708.355514][ T5899] usb 3-1: Manufacturer: syz
[  708.360151][ T5899] usb 3-1: SerialNumber: syz
[  708.405156][ T5738] bcachefs (loop7): clean shutdown complete, journal seq 4
[  708.417854][ T7969] loop6: detected capacity change from 0 to 32768
[  708.430167][ T5899] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  708.441929][ T5738] bcachefs (loop7): marking filesystem clean
[  708.460164][ T8032] x_tables: duplicate entry at hook 1
[  708.461296][ T5898] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  708.548990][ T7969] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  708.705705][ T5738] bcachefs (loop7): shutdown complete
[  708.857465][ T8061] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9371'.
[  709.026861][   T43] usb 3-1: USB disconnect, device number 32
[  709.056408][ T7969] XFS (loop6): Ending clean mount
[  709.138026][ T7969] XFS (loop6): Quotacheck needed: Please wait.
[  709.224048][ T7969] XFS (loop6): Quotacheck: Done.
[  709.326305][T19254] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  709.362037][ T8113] netlink: 140 bytes leftover after parsing attributes in process `syz.0.9377'.
[  709.521222][ T5898] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[  709.561039][ T5898] ath9k_htc: Failed to initialize the device
[  709.599716][   T43] usb 3-1: ath9k_htc: USB layer deinitialized
[  709.719924][   T30] audit: type=1326 audit(1751536094.846:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8129 comm="syz.0.9380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fb6f8e929 code=0x7ffc0000
[  709.770904][   T30] audit: type=1326 audit(1751536094.846:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8129 comm="syz.0.9380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fb6f8e929 code=0x7ffc0000
[  709.908353][   T30] audit: type=1326 audit(1751536094.856:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8129 comm="syz.0.9380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f7fb6f8e929 code=0x7ffc0000
[  710.004491][   T30] audit: type=1326 audit(1751536094.856:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8129 comm="syz.0.9380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fb6f8e929 code=0x7ffc0000
[  710.092523][   T30] audit: type=1326 audit(1751536094.856:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8129 comm="syz.0.9380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fb6f8e929 code=0x7ffc0000
[  710.730641][ T8187] tmpfs: Bad value for 'mpol'
[  711.127921][   T30] audit: type=1326 audit(1751536096.252:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8208 comm="syz.2.9403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808a18e929 code=0x7ffc0000
[  711.210727][   T30] audit: type=1326 audit(1751536096.252:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8208 comm="syz.2.9403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808a18e929 code=0x7ffc0000
[  711.380657][   T30] audit: type=1326 audit(1751536096.282:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8208 comm="syz.2.9403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=6 compat=0 ip=0x7f808a18e929 code=0x7ffc0000
[  711.503143][   T30] audit: type=1326 audit(1751536096.282:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8208 comm="syz.2.9403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808a18e929 code=0x7ffc0000
[  711.653578][ T8238] loop2: detected capacity change from 0 to 256
[  711.798773][ T8238] FAT-fs (loop2): error, corrupted directory (invalid entries)
[  711.854850][ T8238] FAT-fs (loop2): Filesystem has been set read-only
[  711.943969][ T8245] loop6: detected capacity change from 0 to 4096
[  711.995366][ T8245] ntfs3(loop6): Different NTFS sector size (1024) and media sector size (512).
[  712.142751][ T8245] ntfs3(loop6): Mark volume as dirty due to NTFS errors
[  712.159672][ T8264] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9417'.
[  712.552937][ T8276] tc_dump_action: action bad kind
[  713.089799][ T8302] loop2: detected capacity change from 0 to 256
[  713.180068][   T30] audit: type=1326 audit(1751536098.311:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8304 comm="syz.7.9426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99ccb8e929 code=0x7ffc0000
[  713.313620][   T30] audit: type=1326 audit(1751536098.311:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8304 comm="syz.7.9426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99ccb8e929 code=0x7ffc0000
[  713.326751][ T8255] loop5: detected capacity change from 0 to 32768
[  713.456586][ T8317] cgroup2: Unknown parameter 'obj_user'
[  713.463924][   T30] audit: type=1326 audit(1751536098.361:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8304 comm="syz.7.9426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f99ccb8e929 code=0x7ffc0000
[  713.610836][   T30] audit: type=1326 audit(1751536098.361:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8304 comm="syz.7.9426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99ccb8e929 code=0x7ffc0000
[  713.732448][   T30] audit: type=1326 audit(1751536098.361:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8304 comm="syz.7.9426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99ccb8e929 code=0x7ffc0000
[  714.032450][ T8342] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9434'.
[  716.067474][ T5898] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[  716.237232][ T5898] usb 3-1: Using ep0 maxpacket: 8
[  716.249109][ T5898] usb 3-1: config 0 has an invalid interface number: 31 but max is 0
[  716.284400][ T5898] usb 3-1: config 0 has no interface number 0
[  716.303369][ T5898] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  716.341671][ T5898] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  716.377883][ T5898] usb 3-1: Product: syz
[  716.398518][ T5898] usb 3-1: Manufacturer: syz
[  716.413485][ T5898] usb 3-1: SerialNumber: syz
[  716.444901][ T5898] usb 3-1: config 0 descriptor??
[  716.691260][ T5898] usb 3-1: Found UVC 0.04 device syz (046d:08c3)
[  716.718114][ T5898] usb 3-1: No valid video chain found.
[  716.738770][ T8444] loop5: detected capacity change from 0 to 32768
[  716.758877][ T5898] usb 3-1: USB disconnect, device number 33
[  716.958969][ T8537] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9488'.
[  717.543370][ T8576] tmpfs: Bad value for 'mpol'
[  717.710797][ T8584] openvswitch: netlink: IP tunnel dst address not specified
[  717.935757][ T8596] Timeout policy `syz1' can only be used by L3 protocol number 1
[  717.997176][ T8602] loop6: detected capacity change from 0 to 164
[  718.072486][ T8602] iso9660: Corrupted directory entry in block 0 of inode 1792
[  718.667179][ T8641] RDS: rds_bind could not find a transport for fe88::108, load rds_tcp or rds_rdma?
[  718.891003][ T8651] netlink: 12 bytes leftover after parsing attributes in process `syz.7.9521'.
[  718.927360][ T8651] netlink: 16 bytes leftover after parsing attributes in process `syz.7.9521'.
[  718.946274][ T8651] netlink: 12 bytes leftover after parsing attributes in process `syz.7.9521'.
[  719.005879][ T8651] netlink: 16 bytes leftover after parsing attributes in process `syz.7.9521'.
[  719.031481][ T8651] netlink: 5 bytes leftover after parsing attributes in process `syz.7.9521'.
[  719.164992][ T5898] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[  719.173876][ T8633] loop5: detected capacity change from 0 to 32768
[  719.191903][ T8633] (syz.5.9515,8633,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  719.243893][ T8633] (syz.5.9515,8633,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  719.350220][ T8633] JBD2: Ignoring recovery information on journal
[  719.382995][ T5898] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  719.405335][ T8633] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  719.452908][ T5898] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  719.475317][ T5898] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  719.500644][ T5898] usb 3-1: Product: syz
[  719.519250][ T5898] usb 3-1: Manufacturer: syz
[  719.540721][ T5898] usb 3-1: SerialNumber: syz
[  719.541417][ T8548] ocfs2: Unmounting device (7,5) on (node local)
[  719.576410][ T5898] usb 3-1: config 0 descriptor??
[  720.012519][ T8716] vim2m vim2m.0: Fourcc format (0x47524247) invalid.
[  720.085303][ T5946] usb 3-1: USB disconnect, device number 34
[  720.191907][ T8735] netlink: 'syz.7.9542': attribute type 64 has an invalid length.
[  720.552005][ T8766] loop6: detected capacity change from 0 to 2048
[  720.606360][ T8766] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  720.675921][ T8766] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  721.083108][ T8801] netlink: 'syz.5.9561': attribute type 11 has an invalid length.
[  721.106345][ T8801] netlink: 428 bytes leftover after parsing attributes in process `syz.5.9561'.
[  721.332594][ T8824] SET target dimension over the limit!
[  721.431912][ T8832] netlink: 666 bytes leftover after parsing attributes in process `syz.0.9572'.
[  721.466320][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  721.616000][ T5946] usb 6-1: new low-speed USB device number 35 using dummy_hcd
[  721.670180][   T30] audit: type=1326 audit(1751536106.835:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8844 comm="syz.0.9574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fb6f8e929 code=0x7ffc0000
[  721.755191][   T30] audit: type=1326 audit(1751536106.845:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8844 comm="syz.0.9574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fb6f8e929 code=0x7ffc0000
[  721.786984][ T5946] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  721.796636][ T5946] usb 6-1: config 0 has no interface number 0
[  721.803191][ T5946] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  721.808931][   T30] audit: type=1326 audit(1751536106.885:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8844 comm="syz.0.9574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f7fb6f8e929 code=0x7ffc0000
[  721.842659][   T30] audit: type=1326 audit(1751536106.885:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8844 comm="syz.0.9574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fb6f8e929 code=0x7ffc0000
[  721.872183][ T5946] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  721.893690][ T5946] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  721.926683][ T8849] loop6: detected capacity change from 0 to 4096
[  721.946215][ T5946] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  721.980179][ T5946] usb 6-1: config 0 descriptor??
[  722.064702][ T5946] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  722.226733][ T8825] iowarrior 6-1:0.1: Error -90 while submitting URB
[  722.261251][   T43] usb 6-1: USB disconnect, device number 35
[  722.383505][ T5946] usb 3-1: new high-speed USB device number 35 using dummy_hcd
[  722.473641][ T8900] loop6: detected capacity change from 0 to 8
[  722.532308][ T8900] SQUASHFS error: Failed to read block 0x738: -5
[  722.539393][ T8900] SQUASHFS error: Unable to read metadata cache entry [736]
[  722.580668][ T5946] usb 3-1: config 0 has an invalid interface number: 122 but max is 0
[  722.603504][ T5946] usb 3-1: config 0 has no interface number 0
[  722.609008][   T30] audit: type=1326 audit(1751536107.789:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8906 comm="syz.0.9591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fb6f8e929 code=0x7ffc0000
[  722.631953][ T5946] usb 3-1: config 0 interface 122 has no altsetting 0
[  722.636048][ T5946] usb 3-1: New USB device found, idVendor=13d3, idProduct=3219, bcdDevice=7a.67
[  722.662036][ T5946] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  722.671647][   T30] audit: type=1326 audit(1751536107.829:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8906 comm="syz.0.9591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fb6f8e929 code=0x7ffc0000
[  722.700406][ T5946] usb 3-1: Product: syz
[  722.707571][ T5946] usb 3-1: Manufacturer: syz
[  722.723199][ T8911] loop7: detected capacity change from 0 to 1764
[  722.731874][ T5946] usb 3-1: SerialNumber: syz
[  722.760972][ T5946] usb 3-1: config 0 descriptor??
[  722.774495][   T30] audit: type=1326 audit(1751536107.829:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8906 comm="syz.0.9591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7f7fb6f8e929 code=0x7ffc0000
[  722.858904][   T30] audit: type=1326 audit(1751536107.829:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8906 comm="syz.0.9591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fb6f8e929 code=0x7ffc0000
[  722.924788][ T8923] random: crng reseeded on system resumption
[  722.935463][   T30] audit: type=1326 audit(1751536107.829:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8906 comm="syz.0.9591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fb6f8e929 code=0x7ffc0000
[  723.082879][ T8923] Restarting kernel threads ...
[  723.103400][ T8923] Done restarting kernel threads.
[  723.271921][ T5898] usb 3-1: USB disconnect, device number 35
[  723.279374][ T5946] usb 1-1: new low-speed USB device number 38 using dummy_hcd
[  723.284664][ T5898] dvb-usb: generic DVB-USB module successfully deinitialized and disconnected.
[  723.462086][ T5946] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  723.474685][ T5946] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  723.511576][ T5946] usb 1-1: string descriptor 0 read error: -22
[  723.518070][ T5946] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  723.528246][   T43] usb 8-1: new full-speed USB device number 2 using dummy_hcd
[  723.545931][ T5946] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  723.573950][ T5946] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  723.591260][ T5946] usb 1-1: MIDIStreaming interface descriptor not found
[  723.725020][   T43] usb 8-1: config 0 has an invalid interface number: 29 but max is 0
[  723.759930][   T43] usb 8-1: config 0 has no interface number 0
[  723.766102][   T43] usb 8-1: config 0 interface 29 has no altsetting 0
[  723.800670][   T43] usb 8-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac
[  723.814718][   T43] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  723.824555][ T6993] usb 1-1: USB disconnect, device number 38
[  723.848509][   T43] usb 8-1: Product: syz
[  723.852717][   T43] usb 8-1: Manufacturer: syz
[  723.865915][   T43] usb 8-1: SerialNumber: syz
[  723.888742][   T43] usb 8-1: config 0 descriptor??
[  723.910857][ T8995] loop6: detected capacity change from 0 to 8
[  724.130920][   T43] peak_usb 8-1:0.29: PEAK-System PCAN-USB X6 v194 fw v188.0.0 (2 channels)
[  724.345087][   T43] peak_usb 8-1:0.29 can0: unable to request usb[type=2 value=5] err=-71
[  724.367184][   T43] peak_usb 8-1:0.29: unable to tell PCAN-USB X6 driver is loaded (err -71)
[  724.409478][ T8971] loop5: detected capacity change from 0 to 32768
[  724.465226][ T8971] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  724.547496][   T43] peak_usb 8-1:0.29: probe with driver peak_usb failed with error -71
[  724.601245][   T43] usb 8-1: USB disconnect, device number 2
[  724.655925][ T8971] XFS (loop5): Ending clean mount
[  724.858260][ T8548] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  724.887957][ T9026] loop2: detected capacity change from 0 to 32768
[  724.909987][ T9026] (syz.2.9612,9026,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  724.962373][ T9026] (syz.2.9612,9026,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  725.028502][ T9026] JBD2: Ignoring recovery information on journal
[  725.086999][ T5898] usb 7-1: new high-speed USB device number 20 using dummy_hcd
[  725.095755][ T9026] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  725.312386][ T5898] usb 7-1: Using ep0 maxpacket: 32
[  725.321769][ T5898] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  725.336215][ T5831] ocfs2: Unmounting device (7,2) on (node local)
[  725.365905][ T5898] usb 7-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[  725.392461][ T5898] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  725.431850][ T5898] usb 7-1: Product: syz
[  725.436064][ T5898] usb 7-1: Manufacturer: syz
[  725.465395][ T5898] usb 7-1: SerialNumber: syz
[  725.492459][ T5898] usb 7-1: config 0 descriptor??
[  725.516503][ T5898] usb 7-1: bad CDC descriptors
[  725.542288][ T5898] usb 7-1: unsupported MDLM descriptors
[  725.760809][   T43] usb 7-1: USB disconnect, device number 20
[  726.885894][ T9180] netlink: 'syz.6.9653': attribute type 5 has an invalid length.
[  727.349039][ T9201] loop2: detected capacity change from 0 to 4096
[  727.392565][ T9201] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[  727.404941][ T9210] netlink: 'syz.7.9663': attribute type 21 has an invalid length.
[  727.413411][ T9210] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9663'.
[  727.715022][   T43] usb 6-1: new high-speed USB device number 36 using dummy_hcd
[  727.903484][   T43] usb 6-1: Using ep0 maxpacket: 16
[  727.914333][   T43] usb 6-1: config 0 has an invalid interface number: 125 but max is 0
[  727.928733][   T43] usb 6-1: config 0 has no interface number 0
[  727.946032][   T43] usb 6-1: New USB device found, idVendor=27c6, idProduct=5395, bcdDevice=86.f0
[  727.951487][   T30] audit: type=1326 audit(1751536113.148:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9243 comm="syz.0.9673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fb6f8e929 code=0x7ffc0000
[  727.964750][   T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  727.988561][   T43] usb 6-1: Product: syz
[  728.002158][   T43] usb 6-1: Manufacturer: syz
[  728.006910][ T9244] netlink: 'syz.2.9672': attribute type 3 has an invalid length.
[  728.006956][ T9244] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.9672'.
[  728.044650][   T30] audit: type=1326 audit(1751536113.188:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9243 comm="syz.0.9673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f7fb6f8e929 code=0x7ffc0000
[  728.088276][   T43] usb 6-1: SerialNumber: syz
[  728.132421][   T30] audit: type=1326 audit(1751536113.188:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9243 comm="syz.0.9673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fb6f8e929 code=0x7ffc0000
[  728.137919][   T43] usb 6-1: config 0 descriptor??
[  728.186080][   T30] audit: type=1326 audit(1751536113.188:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9243 comm="syz.0.9673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fb6f8e929 code=0x7ffc0000
[  728.456949][ T5898] usb 6-1: USB disconnect, device number 36
[  728.615168][ T9287] loop7: detected capacity change from 0 to 512
[  728.696945][ T9287] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended
[  728.804569][ T9307] Zero length message leads to an empty skb
[  728.831936][ T9287] EXT4-fs error (device loop7): ext4_orphan_get:1393: inode #17: comm syz.7.9685: iget: bad i_size value: -6917529027641081756
[  728.868831][ T9287] EXT4-fs error (device loop7): ext4_orphan_get:1398: comm syz.7.9685: couldn't read orphan inode 17 (err -117)
[  728.919040][ T9315] loop6: detected capacity change from 0 to 256
[  728.952038][ T9287] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  728.956132][ T9315] FAT-fs (loop6): Directory bread(block 64) failed
[  728.994542][ T9315] FAT-fs (loop6): Directory bread(block 65) failed
[  729.011621][ T9315] FAT-fs (loop6): Directory bread(block 66) failed
[  729.038601][ T9315] FAT-fs (loop6): Directory bread(block 67) failed
[  729.072220][ T9315] FAT-fs (loop6): Directory bread(block 68) failed
[  729.099077][ T9315] FAT-fs (loop6): Directory bread(block 69) failed
[  729.105890][ T9315] FAT-fs (loop6): Directory bread(block 70) failed
[  729.143464][ T9315] FAT-fs (loop6): Directory bread(block 71) failed
[  729.161742][ T5738] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  729.182718][ T9315] FAT-fs (loop6): Directory bread(block 72) failed
[  729.203690][ T9315] FAT-fs (loop6): Directory bread(block 73) failed
[  729.358278][ T5946] usb 6-1: new high-speed USB device number 37 using dummy_hcd
[  729.429276][ T9315] syz.6.9693: attempt to access beyond end of device
[  729.429276][ T9315] loop6: rw=2051, sector=1192, nr_sectors = 32 limit=256
[  729.529094][ T5946] usb 6-1: Using ep0 maxpacket: 8
[  729.540603][ T5946] usb 6-1: New USB device found, idVendor=06f8, idProduct=0003, bcdDevice= e.dd
[  729.556646][ T5946] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  729.573018][ T5946] usb 6-1: config 0 descriptor??
[  729.787978][ T5946] usb 6-1: USB disconnect, device number 37
[  729.837049][ T5898] usb 3-1: new full-speed USB device number 36 using dummy_hcd
[  730.016959][ T5898] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  730.034502][ T5898] usb 3-1: config 0 interface 0 has no altsetting 0
[  730.058201][ T5898] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  730.096608][ T5898] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  730.104845][ T5898] usb 3-1: Product: syz
[  730.121325][ T5898] usb 3-1: Manufacturer: syz
[  730.134946][ T5898] usb 3-1: SerialNumber: syz
[  730.156659][ T5898] usb 3-1: config 0 descriptor??
[  730.172598][ T5898] usb 3-1: selecting invalid altsetting 0
[  730.264368][ T9406] loop7: detected capacity change from 0 to 256
[  730.423222][ T5946] usb 3-1: USB disconnect, device number 36
[  730.524014][ T9423] vcan0: entered promiscuous mode
[  730.691640][ T9443] loop5: detected capacity change from 0 to 8
[  731.247858][ T9483] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  731.464721][ T9504] Option 'TX��Ʈ�' to dns_resolver key: bad/missing value
[  731.590893][ T5898] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  731.740348][ T5898] usb 8-1: Using ep0 maxpacket: 32
[  731.752300][ T5898] usb 8-1: config 0 has an invalid interface number: 37 but max is 1
[  731.780149][ T5898] usb 8-1: config 0 has no interface number 1
[  731.789121][ T5898] usb 8-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=20.a3
[  731.802042][ T5898] usb 8-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3
[  731.835401][ T5898] usb 8-1: Product: syz
[  731.839624][ T5898] usb 8-1: Manufacturer: syz
[  731.872342][ T5898] usb 8-1: SerialNumber: syz
[  731.893819][ T5898] usb 8-1: config 0 descriptor??
[  732.139101][ T5898] qcserial 8-1:0.37: Qualcomm USB modem converter detected
[  732.335531][   T43] usb 8-1: USB disconnect, device number 3
[  732.353598][   T43] qcserial 8-1:0.37: device disconnected
[  732.506225][ T9607] netlink: 'syz.2.9756': attribute type 10 has an invalid length.
[  732.523883][ T9607] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9756'.
[  732.572270][ T9607] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  732.764484][ T9626] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9764'.
[  733.106048][ T9648] loop5: detected capacity change from 0 to 512
[  733.160329][ T9655] loop6: detected capacity change from 0 to 64
[  733.167387][ T9648] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended
[  733.240487][ T9658] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9774'.
[  733.253795][ T9648] EXT4-fs error (device loop5): ext4_orphan_get:1393: inode #17: comm syz.5.9770: iget: bad i_size value: -6917529027641081756
[  733.311245][ T9655] hfs: request for non-existent node 327680 in B*Tree
[  733.320850][ T9658] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9774'.
[  733.349977][ T9655] hfs: request for non-existent node 327680 in B*Tree
[  733.369253][ T9648] EXT4-fs error (device loop5): ext4_orphan_get:1398: comm syz.5.9770: couldn't read orphan inode 17 (err -117)
[  733.414526][ T9648] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  733.441851][ T1002] hfs: request for non-existent node 327680 in B*Tree
[  733.464943][ T1002] hfs: request for non-existent node 327680 in B*Tree
[  733.563818][ T8548] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  733.573007][ T9680] netlink: 732 bytes leftover after parsing attributes in process `syz.0.9779'.
[  733.852754][ T9685] loop7: detected capacity change from 0 to 4096
[  733.902770][ T9685] ntfs3(loop7): Different NTFS sector size (4096) and media sector size (512).
[  733.955996][ T9685] ntfs3(loop7): ino=19, mi_enum_attr
[  733.961411][ T9685] ntfs3(loop7): Mark volume as dirty due to NTFS errors
[  733.985676][ T9685] ntfs3(loop7): failed to convert "c46c" to cp857
[  733.992722][ T9685] ntfs3(loop7): ino=20, mi_enum_attr
[  734.087073][ T9710] netlink: 'syz.6.9789': attribute type 3 has an invalid length.
[  734.531701][   T43] usb 6-1: new high-speed USB device number 38 using dummy_hcd
[  734.539931][ T9743] loop7: detected capacity change from 0 to 512
[  734.617884][ T9743] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  734.671703][ T9743] ext4 filesystem being mounted at /128/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  734.711720][   T43] usb 6-1: Using ep0 maxpacket: 16
[  734.733106][   T43] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  734.770270][   T43] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  734.792065][   T43] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 1.40
[  734.809523][   T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  734.839145][   T43] usb 6-1: Product: syz
[  734.849880][   T43] usb 6-1: Manufacturer: syz
[  734.856820][ T5738] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  734.866938][   T43] usb 6-1: SerialNumber: syz
[  735.095933][   T43] usb 6-1: 0:2 : does not exist
[  735.133331][   T43] usb 6-1: 5:0: failed to get current value for ch 0 (-22)
[  735.150637][   T43] usb 6-1: 5:0: cannot get min/max values for control 3 (id 5)
[  735.177006][ T9787] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9808'.
[  735.238501][   T43] usb 6-1: 5:0: cannot get min/max values for control 4 (id 5)
[  735.287269][ T9795] overlayfs: failed to resolve './file0': -2
[  735.309432][   T43] usb 6-1: 5:0: cannot get min/max values for control 3 (id 5)
[  735.348494][   T43] usb 6-1: USB disconnect, device number 38
[  735.425787][ T5883] udevd[5883]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  735.507741][ T9817] loop7: detected capacity change from 0 to 64
[  735.537008][ T9817] MINIX-fs: mounting unchecked file system, running fsck is recommended
[  735.577724][ T9817] MINIX-fs warning: remounting unchecked fs, running fsck is recommended
[  736.038111][ T9852] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9823'.
[  736.059646][ T9852] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9823'.
[  736.915654][ T9900] loop2: detected capacity change from 0 to 1024
[  736.923730][ T9903] loop7: detected capacity change from 0 to 64
[  737.035675][ T9914] netlink: 'syz.6.9842': attribute type 10 has an invalid length.
[  737.087694][   T13] hfsplus: b-tree write err: -5, ino 4
[  737.133292][ T9914] 8021q: adding VLAN 0 to HW filter on device team0
[  737.193711][ T9914] team0: entered promiscuous mode
[  737.216581][ T9914] team_slave_0: entered promiscuous mode
[  737.240011][ T9914] team_slave_1: entered promiscuous mode
[  737.268028][ T9914] team0: entered allmulticast mode
[  737.280756][ T9914] team_slave_0: entered allmulticast mode
[  737.313247][ T9914] team_slave_1: entered allmulticast mode
[  737.330291][ T9914] bond0: (slave team0): Enslaving as an active interface with an up link
[  737.628130][ T9948] netlink: 40 bytes leftover after parsing attributes in process `syz.6.9854'.
[  737.713796][ T9949] ip6gretap1: entered promiscuous mode
[  737.719922][ T9952] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  737.737190][ T9959] ieee802154 phy0 wpan0: encryption failed: -22
[  738.231855][ T9986] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  738.557295][T10005] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[  738.755502][ T9973] loop5: detected capacity change from 0 to 32768
[  739.062917][ T9973] bcachefs (loop5): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names
[  739.062940][ T9973]   allowing incompatible features above 0.0: (unknown version)
[  739.062952][ T9973]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  739.122024][T10039] netlink: 'syz.2.9882': attribute type 2 has an invalid length.
[  739.132808][T10041] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9883'.
[  739.132850][T10041] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9883'.
[  739.139926][T10039] : entered promiscuous mode
[  739.184984][ T9973] bcachefs (loop5): initializing new filesystem
[  739.271917][ T9973] bcachefs (loop5): going read-write
[  739.284472][T10002] loop6: detected capacity change from 0 to 32768
[  739.355327][ T9973] bcachefs (loop5): marking superblocks
[  739.381815][T10002] ERROR: (device loop6): diAllocAG: error reading iag
[  739.381815][T10002] 
[  739.411165][ T9973] bcachefs (loop5): initializing freespace
[  739.420838][T10002] ialloc: diAlloc returned -5!
[  739.445314][ T9973] bcachefs (loop5): done initializing freespace
[  739.473004][ T9973] bcachefs (loop5): reading snapshots table
[  739.493072][ T9973] bcachefs (loop5): reading snapshots done
[  739.541085][ T9973] bcachefs (loop5): done starting filesystem
[  739.656218][ T8548] bcachefs (loop5): shutting down
[  739.662111][ T8548] bcachefs (loop5): going read-only
[  739.668791][ T8548] bcachefs (loop5): finished waiting for writes to stop
[  739.706226][T10074] netlink: 'syz.7.9890': attribute type 1 has an invalid length.
[  739.733958][ T8548] bcachefs (loop5): flushing journal and stopping allocators, journal seq 2
[  739.823472][T10079] netlink: 'syz.2.9893': attribute type 1 has an invalid length.
[  739.836484][ T6993] usb 1-1: new low-speed USB device number 39 using dummy_hcd
[  739.857061][T10079] netlink: 224 bytes leftover after parsing attributes in process `syz.2.9893'.
[  739.869241][T10079] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9893'.
[  739.960743][ T8548] bcachefs (loop5): flushing journal and stopping allocators complete, journal seq 3
[  740.006616][ T8548] bcachefs (loop5): clean shutdown complete, journal seq 4
[  740.039026][ T6993] usb 1-1: config index 0 descriptor too short (expected 1307, got 27)
[  740.044732][ T8548] bcachefs (loop5): marking filesystem clean
[  740.050431][ T6993] usb 1-1: config 0 has an invalid interface number: 0 but max is -1
[  740.062111][ T6993] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0
[  740.072567][ T6993] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30
[  740.083888][ T6993] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt
[  740.094256][ T6993] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  740.096309][T10087] loop2: detected capacity change from 0 to 1024
[  740.108115][ T6993] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246
[  740.174676][ T6993] usb 1-1: string descriptor 0 read error: -22
[  740.190818][ T6993] usb 1-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de
[  740.191189][ T8548] bcachefs (loop5): shutdown complete
[  740.220522][T10091] openvswitch: netlink: Tunnel attr 31 out of range max 16
[  740.242862][ T6993] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  740.259564][T10087] fuse: Bad value for 'fd'
[  740.288512][ T6993] usb 1-1: config 0 descriptor??
[  740.312715][ T6993] hub 1-1:0.0: bad descriptor, ignoring hub
[  740.347159][ T6993] hub 1-1:0.0: probe with driver hub failed with error -5
[  740.383097][ T6993] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input42
[  740.423480][   T36] hfsplus: b-tree write err: -5, ino 4
[  740.641540][ T5898] usb 1-1: USB disconnect, device number 39
[  740.693837][ T5946] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  740.883225][ T5946] usb 8-1: Using ep0 maxpacket: 8
[  740.899632][ T5946] usb 8-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  740.911852][ T5946] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  740.931901][ T5946] usb 8-1: Product: syz
[  740.936552][ T5946] usb 8-1: Manufacturer: syz
[  740.942310][ T5946] usb 8-1: SerialNumber: syz
[  740.950357][ T5946] usb 8-1: config 0 descriptor??
[  740.988559][ T5946] gspca_main: se401-2.14.0 probing 047d:5003
[  741.225948][   T30] audit: type=1326 audit(1751536126.469:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10163 comm="syz.6.9912" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbd2418e929 code=0x0
[  741.387061][ T5946] gspca_se401: write req failed req 0x57 val 0x00 error -71
[  741.400007][ T5946] se401 8-1:0.0: probe with driver se401 failed with error -71
[  741.420306][ T5946] usb 8-1: USB disconnect, device number 4
[  741.459529][T10184] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  741.724147][T10195] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9922'.
[  742.206413][T10219] netlink: 'syz.6.9930': attribute type 27 has an invalid length.
[  742.393296][T10233] rtc_cmos 00:00: Alarms can be up to one day in the future
[  742.658570][T10254] netlink: 32 bytes leftover after parsing attributes in process `syz.6.9940'.
[  742.681759][T10254] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9940'.
[  742.823292][T10265] netlink: 40 bytes leftover after parsing attributes in process `syz.7.9942'.
[  742.824509][T10263] loop5: detected capacity change from 0 to 8
[  743.090771][T10283] netlink: 'syz.6.9949': attribute type 1 has an invalid length.
[  743.101444][T10281] syz.2.9948 (10281): drop_caches: 0
[  743.131627][T10283] netlink: 216 bytes leftover after parsing attributes in process `syz.6.9949'.
[  743.181610][T10283] NCSI netlink: No device for ifindex 767
[  743.633611][T10319] loop6: detected capacity change from 0 to 2048
[  743.708580][T10319] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  744.532675][T10323] loop5: detected capacity change from 0 to 32768
[  744.581034][T10323] ocfs2: Slot 0 on device (7,5) was already allocated to this node!
[  744.660761][T10323] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  744.843684][   T30] audit: type=1326 audit(1751536130.088:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10389 comm="syz.0.9985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fb6f8e929 code=0x7ffc0000
[  744.906945][ T8548] ocfs2: Unmounting device (7,5) on (node local)
[  744.946024][   T30] audit: type=1326 audit(1751536130.098:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10389 comm="syz.0.9985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fb6f8e929 code=0x7ffc0000
[  745.059138][   T30] audit: type=1326 audit(1751536130.128:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10389 comm="syz.0.9985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=172 compat=0 ip=0x7f7fb6f8e929 code=0x7ffc0000
[  745.094881][T10402] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9991'.
[  745.095825][T10398] loop6: detected capacity change from 0 to 2048
[  745.123346][T10402] netlink: 56 bytes leftover after parsing attributes in process `syz.2.9991'.
[  745.161450][   T30] audit: type=1326 audit(1751536130.128:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10389 comm="syz.0.9985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fb6f8e929 code=0x7ffc0000
[  745.242454][T10414] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  745.269395][T10398] syz.6.9988: attempt to access beyond end of device
[  745.269395][T10398] loop6: rw=0, sector=281474976710722, nr_sectors = 2 limit=2048
[  745.295321][   T30] audit: type=1326 audit(1751536130.128:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10389 comm="syz.0.9985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fb6f8e929 code=0x7ffc0000
[  745.383764][T10398] NILFS (loop6): I/O error reading b-tree node block (ino=16, blocknr=15)
[  745.402466][    C1] sd 0:0:1:0: [sda] tag#6818 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[  745.413041][    C1] sd 0:0:1:0: [sda] tag#6818 CDB: Read(6) 08 0c 00 15 00 00
[  745.431148][T10398] syz.6.9988: attempt to access beyond end of device
[  745.431148][T10398] loop6: rw=0, sector=281474976710722, nr_sectors = 2 limit=2048
[  745.510643][T10398] NILFS (loop6): I/O error reading b-tree node block (ino=16, blocknr=15)
[  745.564843][T10398] NILFS (loop6): error -5 truncating bmap (ino=16)
[  746.064824][   T30] audit: type=1326 audit(1751536131.312:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10457 comm="syz.5.10007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56a498e929 code=0x7ffc0000
[  746.128964][   T30] audit: type=1326 audit(1751536131.342:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10457 comm="syz.5.10007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56a498e929 code=0x7ffc0000
[  746.181670][   T30] audit: type=1326 audit(1751536131.352:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10457 comm="syz.5.10007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=195 compat=0 ip=0x7f56a498e929 code=0x7ffc0000
[  746.276050][   T30] audit: type=1326 audit(1751536131.352:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10457 comm="syz.5.10007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56a498e929 code=0x7ffc0000
[  746.325804][T10473] netlink: 20 bytes leftover after parsing attributes in process `syz.7.10012'.
[  746.360954][   T30] audit: type=1326 audit(1751536131.352:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10457 comm="syz.5.10007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56a498e929 code=0x7ffc0000
[  746.421568][T10483] netlink: 'syz.5.10016': attribute type 1 has an invalid length.
[  746.445563][T10483] netlink: 'syz.5.10016': attribute type 1 has an invalid length.
[  746.993169][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  747.258229][T10533] netlink: 36 bytes leftover after parsing attributes in process `syz.7.10033'.
[  747.333518][T10539] netlink: 'syz.6.10035': attribute type 1 has an invalid length.
[  747.373096][T10539] netlink: 'syz.6.10035': attribute type 2 has an invalid length.
[  747.899605][T10579] netlink: 144 bytes leftover after parsing attributes in process `syz.2.10051'.
[  747.985824][T10588] netlink: 76 bytes leftover after parsing attributes in process `syz.7.10053'.
[  748.047152][T10588] netlink: 12 bytes leftover after parsing attributes in process `syz.7.10053'.
[  748.066224][T10588] netlink: 20 bytes leftover after parsing attributes in process `syz.7.10053'.
[  748.229922][T10601] loop6: detected capacity change from 0 to 256
[  748.486357][T10614] loop2: detected capacity change from 0 to 64
[  748.511354][T10617] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT
[  749.368820][T10620] loop6: detected capacity change from 0 to 32768
[  749.989578][T10694] netlink: 128 bytes leftover after parsing attributes in process `syz.7.10087'.
[  749.998748][T10694] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  750.485063][T10722] loop5: detected capacity change from 0 to 1024
[  750.496492][T10727] netdevsim netdevsim6 netdevsim0: left promiscuous mode
[  750.531842][T10727] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  750.602738][T10722] hfsplus: invalid btree flag
[  750.607684][T10722] hfsplus: failed to load attributes file
[  750.752128][T10743] loop2: detected capacity change from 0 to 512
[  750.834360][T10750] loop6: detected capacity change from 0 to 64
[  750.849764][T10747] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10106'.
[  750.871780][T10743] EXT4-fs error (device loop2): ext4_orphan_get:1419: comm syz.2.10104: bad orphan inode 13
[  750.899962][ T3357] Bluetooth: hci2: unexpected event for opcode 0x0c25
[  750.980186][T10743] ext4_test_bit(bit=12, block=4) = 1
[  751.004286][T10743] is_bad_inode(inode)=0
[  751.024871][   T30] audit: type=1800 audit(1751536136.274:327): pid=10750 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.10105" name="file1" dev="loop6" ino=18 res=0 errno=0
[  751.088654][T10743] NEXT_ORPHAN(inode)=0
[  751.092776][T10743] max_ino=32
[  751.095989][T10743] i_nlink=1
[  751.128843][T10743] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  751.243984][T10743] EXT4-fs warning (device loop2): dx_probe:801: inode #2: comm syz.2.10104: Unrecognised inode hash code 20
[  751.297443][T10775] netlink: 'syz.7.10113': attribute type 3 has an invalid length.
[  751.316168][T10743] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.10104: Corrupt directory, running e2fsck is recommended
[  751.338137][T10775] netlink: 'syz.7.10113': attribute type 3 has an invalid length.
[  751.346571][T10775] netlink: 12 bytes leftover after parsing attributes in process `syz.7.10113'.
[  751.473126][ T5831] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  751.731984][T10785] loop5: detected capacity change from 0 to 4096
[  751.782896][T10785] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512).
[  751.892124][T10785] ntfs3(loop5): ino=19, mi_enum_attr
[  751.912467][T10785] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  751.941713][T10803] loop6: detected capacity change from 0 to 4096
[  751.980463][T10803] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512).
[  752.037121][T10785] ntfs3(loop5): failed to convert "c46c" to cp864
[  752.062342][T10785] ntfs3(loop5): ino=20, mi_enum_attr
[  752.094584][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  752.107380][T10803] ntfs3(loop6): ino=1a, mi_enum_attr
[  752.119203][T10803] ntfs3(loop6): Mark volume as dirty due to NTFS errors
[  752.147448][T10803] ntfs3(loop6): Failed to initialize $Extend/$ObjId.
[  752.157228][T10822] loop2: detected capacity change from 0 to 512
[  752.241069][T10822] EXT4-fs error (device loop2): ext4_orphan_get:1419: comm syz.2.10128: bad orphan inode 13
[  752.354425][T10822] ext4_test_bit(bit=12, block=4) = 1
[  752.365861][T10822] is_bad_inode(inode)=0
[  752.374097][T10822] NEXT_ORPHAN(inode)=0
[  752.399293][T10822] max_ino=32
[  752.409609][T10822] i_nlink=1
[  752.441217][T10822] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  752.473570][ T5898] usb 1-1: new high-speed USB device number 40 using dummy_hcd
[  752.596197][ T5831] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  752.647563][ T5898] usb 1-1: Using ep0 maxpacket: 8
[  752.684864][ T5898] usb 1-1: config 1 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 249, changing to 11
[  752.704836][ T5898] usb 1-1: config 1 interface 0 has no altsetting 0
[  752.730649][ T5898] usb 1-1: New USB device found, idVendor=05ac, idProduct=0236, bcdDevice= 0.40
[  752.767707][ T5898] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  752.790622][ T5898] usb 1-1: Product: syz
[  752.795610][ T5898] usb 1-1: Manufacturer: syz
[  752.812665][ T5898] usb 1-1: SerialNumber: syz
[  752.839445][T10861] loop5: detected capacity change from 0 to 1024
[  752.978566][ T1347] hfsplus: b-tree write err: -5, ino 4
[  753.076863][ T5898] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input45
[  753.130601][ T5187] bcm5974 1-1:1.0: could not read from device
[  753.220946][ T5898] usb 1-1: USB disconnect, device number 40
[  753.235444][ T5187] bcm5974 1-1:1.0: could not read from device
[  753.255588][T10899] loop2: detected capacity change from 0 to 512
[  753.292819][T10899] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[  753.341864][T10899] EXT4-fs (loop2): orphan cleanup on readonly fs
[  753.354979][T10899] EXT4-fs error (device loop2): ext4_orphan_get:1419: comm syz.2.10146: bad orphan inode 15
[  753.380551][T10899] ext4_test_bit(bit=14, block=18) = 1
[  753.389477][T10899] is_bad_inode(inode)=0
[  753.394123][T10899] NEXT_ORPHAN(inode)=1023
[  753.398475][T10899] max_ino=32
[  753.404244][T10899] i_nlink=0
[  753.416253][T10899] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2962: inode #15: comm syz.2.10146: corrupted xattr block 19: e_value size too large
[  753.441887][T10899] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -117)
[  753.453628][T10899] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  753.586515][ T5831] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  753.607001][T10923] sctp: [Deprecated]: syz.5.10151 (pid 10923) Use of int in max_burst socket option deprecated.
[  753.607001][T10923] Use struct sctp_assoc_value instead
[  753.616622][T10926] netlink: 40 bytes leftover after parsing attributes in process `syz.6.10152'.
[  753.669078][T10928] loop7: detected capacity change from 0 to 8
[  753.689830][T10928] MTD: Attempt to mount non-MTD device "/dev/loop7"
[  753.771227][T10928] cramfs: Error -3 while decompressing!
[  753.776834][T10928] cramfs: ffffffff99be9b48(18)->ffff888075f64000(4096)
[  753.805834][T10928] cramfs: Error -3 while decompressing!
[  753.816683][T10928] cramfs: ffffffff99be9b48(18)->ffff888075f64000(4096)
[  753.874865][   T30] audit: type=1800 audit(1751536139.140:328): pid=10928 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.10154" name="file1" dev="loop7" ino=324 res=0 errno=0
[  753.975899][T10942] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10157'.
[  754.011653][T10942] netlink: 'syz.6.10157': attribute type 1 has an invalid length.
[  754.628801][ T5946] usb 1-1: new high-speed USB device number 41 using dummy_hcd
[  754.812741][ T5946] usb 1-1: Using ep0 maxpacket: 32
[  754.851944][ T5946] usb 1-1: config 0 has an invalid interface number: 145 but max is 1
[  754.887542][ T5946] usb 1-1: config 0 has an invalid interface number: 43 but max is 1
[  754.916694][ T5946] usb 1-1: config 0 has no interface number 0
[  754.946805][ T5946] usb 1-1: config 0 has no interface number 1
[  754.991400][ T5946] usb 1-1: config 0 interface 43 altsetting 250 bulk endpoint 0xF has invalid maxpacket 1023
[  755.031812][ T5946] usb 1-1: config 0 interface 43 altsetting 250 has a duplicate endpoint with address 0x2, skipping
[  755.067895][ T5946] usb 1-1: config 0 interface 43 altsetting 250 has an endpoint descriptor with address 0xCE, changing to 0x8E
[  755.086576][ T5946] usb 1-1: config 0 interface 43 altsetting 250 endpoint 0x8E has an invalid bInterval 180, changing to 11
[  755.122935][ T5946] usb 1-1: config 0 interface 43 altsetting 250 endpoint 0x8E has invalid maxpacket 16902, setting to 1024
[  755.172517][ T5946] usb 1-1: config 0 interface 43 altsetting 250 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  755.216679][ T5946] usb 1-1: config 0 interface 145 has no altsetting 0
[  755.249472][ T5946] usb 1-1: config 0 interface 43 has no altsetting 0
[  755.279907][ T5946] usb 1-1: New USB device found, idVendor=06cd, idProduct=0104, bcdDevice=c8.6a
[  755.307899][ T5946] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  755.327229][ T5946] usb 1-1: Product: syz
[  755.331529][ T5946] usb 1-1: Manufacturer: syz
[  755.336174][ T5946] usb 1-1: SerialNumber: syz
[  755.344159][ T5946] usb 1-1: config 0 descriptor??
[  755.490528][T11035] loop7: detected capacity change from 0 to 4096
[  755.522550][T11035] ntfs3(loop7): Different NTFS sector size (4096) and media sector size (512).
[  755.525088][T11051] binfmt_misc: register: failed to install interpreter file ./file0
[  755.588356][ T5946] keyspan_pda 1-1:0.145: required endpoints missing
[  755.634500][T11057] loop6: detected capacity change from 0 to 1024
[  755.637644][ T5946] keyspan_pda 1-1:0.43: Keyspan PDA converter detected
[  755.665734][T11035] ntfs3(loop7): Mark volume as dirty due to NTFS errors
[  755.680131][ T5946] usb 1-1: Keyspan PDA converter now attached to ttyUSB0
[  755.700837][T11035] ntfs3(loop7): ino=19, mi_enum_attr
[  755.713577][ T5946] usb 1-1: USB disconnect, device number 41
[  755.774857][T11035] ntfs3(loop7): failed to convert "c46c" to maciceland
[  755.816703][T11035] ntfs3(loop7): ino=20, mi_enum_attr
[  755.833133][ T5946] keyspan_pda ttyUSB0: Keyspan PDA converter now disconnected from ttyUSB0
[  755.872452][T11078] loop5: detected capacity change from 0 to 164
[  755.884240][ T5946] keyspan_pda 1-1:0.43: device disconnected
[  756.141600][T11094] netlink: 20 bytes leftover after parsing attributes in process `syz.6.10197'.
[  756.195293][T11094] netlink: 40 bytes leftover after parsing attributes in process `syz.6.10197'.
[  756.240778][T11103] rtc_cmos 00:00: Alarms can be up to one day in the future
[  756.272486][T11105] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10200'.
[  756.911468][T11096] loop7: detected capacity change from 0 to 32768
[  756.987221][T11147] loop2: detected capacity change from 0 to 256
[  757.028561][T11096] ialloc: diAlloc returned -5!
[  757.172248][T11154] loop6: detected capacity change from 0 to 1024
[  757.186624][T11154] EXT4-fs: Ignoring removed bh option
[  757.202662][T11154] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  757.265392][T11154] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  757.352309][T11154] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e018, mo2=0000]
[  757.454423][T11154] EXT4-fs error (device loop6): ext4_map_blocks:780: inode #3: block 2: comm syz.6.10216: lblock 2 mapped to illegal pblock 2 (length 1)
[  757.492699][T11154] Quota error (device loop6): qtree_write_dquot: dquota write failed
[  757.529977][T11154] EXT4-fs error (device loop6): ext4_map_blocks:780: inode #3: block 48: comm syz.6.10216: lblock 0 mapped to illegal pblock 48 (length 1)
[  757.605825][T11154] Quota error (device loop6): v2_write_file_info: Can't write info structure
[  757.642036][T11154] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.10216: Failed to acquire dquot type 0
[  757.716324][T11154] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6254: Corrupt filesystem
[  757.719516][T11180] netlink: 'syz.5.10224': attribute type 2 has an invalid length.
[  757.731994][T11182] netlink: 'syz.7.10223': attribute type 4 has an invalid length.
[  757.741388][T11182] netlink: 17 bytes leftover after parsing attributes in process `syz.7.10223'.
[  757.774098][T11154] EXT4-fs error (device loop6): ext4_evict_inode:254: inode #11: comm syz.6.10216: mark_inode_dirty error
[  757.830627][T11154] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  757.861644][T11154] EXT4-fs (loop6): 1 orphan inode deleted
[  757.920745][T11154] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  757.921546][   T75] EXT4-fs error (device loop6): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1)
[  758.033900][   T75] Quota error (device loop6): remove_tree: Can't read quota data block 1
[  758.076663][   T75] EXT4-fs error (device loop6): ext4_release_dquot:6969: comm kworker/u8:4: Failed to release dquot type 0
[  758.187523][T19254] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  758.246103][T11203] netlink: 'syz.5.10231': attribute type 1 has an invalid length.
[  758.270724][ T1002] EXT4-fs error (device loop6): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1)
[  758.332630][ T1002] Quota error (device loop6): remove_tree: Can't read quota data block 1
[  758.362268][ T1002] EXT4-fs error (device loop6): ext4_release_dquot:6969: comm kworker/u8:5: Failed to release dquot type 0
[  758.386167][T19254] EXT4-fs error (device loop6): __ext4_get_inode_loc:4791: comm syz-executor: Invalid inode table block 1 in block_group 0
[  758.433687][T19254] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6254: Corrupt filesystem
[  758.462323][T19254] EXT4-fs error (device loop6): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error
[  758.625948][T11227] netlink: 'syz.0.10241': attribute type 1 has an invalid length.
[  758.660294][T11227] netlink: 224 bytes leftover after parsing attributes in process `syz.0.10241'.
[  758.764367][T11240] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10243'.
[  759.462950][T11283] loop5: detected capacity change from 0 to 64
[  759.744774][T11299] loop5: detected capacity change from 0 to 512
[  759.758913][T11295] bridge6: entered promiscuous mode
[  759.775791][T11299] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  759.841977][T11299] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0042]
[  759.868941][T11299] EXT4-fs (loop5): orphan cleanup on readonly fs
[  759.875550][T11299] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz.5.10261: bad orphan inode 267
[  759.966185][T11299] EXT4-fs (loop5): Remounting filesystem read-only
[  759.987522][T11299] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[  760.098448][T11299] EXT4-fs warning (device loop5): dx_probe:861: inode #2: comm syz.5.10261: dx entry: limit 0 != root limit 125
[  760.134595][T11325] xt_hashlimit: overflow, try lower: 18446744073709551615/7
[  760.143809][T11299] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.10261: Corrupt directory, running e2fsck is recommended
[  760.174625][T11323] loop7: detected capacity change from 0 to 2048
[  760.190889][T11265] loop6: detected capacity change from 0 to 32768
[  760.240406][T11265] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.10253 (11265)
[  760.243202][T11323] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  760.288027][ T8548] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  760.376251][T11265] BTRFS info (device loop6): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  760.408704][T11265] BTRFS info (device loop6): using xxhash64 (xxhash64-generic) checksum algorithm
[  760.476144][T11265] BTRFS info (device loop6): disk space caching is enabled
[  760.524246][T11265] BTRFS warning (device loop6): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  760.836166][T11265] BTRFS info (device loop6): rebuilding free space tree
[  760.898788][T11321] loop2: detected capacity change from 0 to 32768
[  760.913186][T11265] BTRFS info (device loop6): disabling free space tree
[  760.926552][T11265] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  760.941837][T11265] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  760.971273][T11321] (syz.2.10265,11321,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  761.017884][T11321] (syz.2.10265,11321,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  761.161765][T11321] JBD2: Ignoring recovery information on journal
[  761.191776][T11380] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  761.286287][T11321] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  761.297782][T11376] loop5: detected capacity change from 0 to 4096
[  761.429410][T11387] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  761.442169][T19254] BTRFS info (device loop6): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  761.486278][T11376] NILFS error (device loop5): nilfs_find_entry: dir 2 size 34359742464 exceeds block count 1
[  761.572230][T11376] Remounting filesystem read-only
[  761.795219][ T5831] ocfs2: Unmounting device (7,2) on (node local)
[  762.003527][T11414] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10288'.
[  762.013062][ T5898] usb 7-1: new high-speed USB device number 21 using dummy_hcd
[  762.030385][T11414] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10288'.
[  762.212632][ T5898] usb 7-1: Using ep0 maxpacket: 8
[  762.248075][ T5898] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[  762.262539][ T5898] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 0
[  762.272245][ T5898] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 134, changing to 11
[  762.334311][ T5898] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 59360, setting to 1024
[  762.385705][ T5898] usb 7-1: New USB device found, idVendor=110a, idProduct=1110, bcdDevice=ab.5d
[  762.400754][T11428] ubi: mtd0 is already attached to ubi31
[  762.406571][ T5898] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  762.406599][ T5898] usb 7-1: Product: syz
[  762.406613][ T5898] usb 7-1: Manufacturer: syz
[  762.406627][ T5898] usb 7-1: SerialNumber: syz
[  762.440830][T11396] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  762.478212][ T5898] ti_usb_3410_5052 7-1:1.0: TI USB 3410 1 port adapter converter detected
[  762.630713][T11442] netlink: 'syz.2.10297': attribute type 1 has an invalid length.
[  762.666928][T11442] netlink: 224 bytes leftover after parsing attributes in process `syz.2.10297'.
[  762.715626][ T5899] usb 7-1: USB disconnect, device number 21
[  763.135166][T11479] loop2: detected capacity change from 0 to 256
[  763.176320][T11479] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x0ede1155, utbl_chksum : 0xe619d30d)
[  763.226236][T11487] netlink: 'syz.7.10308': attribute type 3 has an invalid length.
[  763.946719][T11537] (unnamed net_device) (uninitialized): peer notification delay (31) is not a multiple of miimon (100), value rounded to 0 ms
[  764.148099][T11537] 8021q: adding VLAN 0 to HW filter on device bond6
[  764.194028][T11543] loop7: detected capacity change from 0 to 1764
[  764.268413][T11543] iso9660: Corrupted directory entry in block 2 of inode 1920
[  764.681196][ T5898] IPVS: starting estimator thread 0...
[  764.748496][T11623] netlink: 'syz.0.10342': attribute type 1 has an invalid length.
[  764.778661][T11619] IPVS: using max 33 ests per chain, 79200 per kthread
[  765.132231][T11653] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10352'.
[  765.231428][T11659] loop2: detected capacity change from 0 to 128
[  765.795888][T11695] autofs: Bad value for 'fd'
[  766.297147][T11736] xt_TPROXY: Can be used only with -p tcp or -p udp
[  766.678456][T11761] loop5: detected capacity change from 0 to 256
[  766.751297][T11765] bond0: (slave bond0): Error: Device is in use and cannot be enslaved
[  767.029304][T11779] netlink: 32 bytes leftover after parsing attributes in process `syz.5.10394'.
[  767.166631][T11787] loop7: detected capacity change from 0 to 1024
[  767.237693][T11787] EXT4-fs: Ignoring removed nomblk_io_submit option
[  767.283606][T11787] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  767.349509][T11787] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  767.630464][ T5738] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  768.054208][T11842] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10413'.
[  768.247026][T11852] netlink: 248 bytes leftover after parsing attributes in process `syz.7.10418'.
[  768.690014][T11883] netlink: 'syz.6.10426': attribute type 10 has an invalid length.
[  768.736185][T11883] netlink: 40 bytes leftover after parsing attributes in process `syz.6.10426'.
[  768.792134][T11883] batman_adv: batadv0: Adding interface: wlan0
[  768.811795][T11883] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  768.898215][T11883] batman_adv: batadv0: Interface activated: wlan0
[  769.618425][T11944] Unknown options in mask 5
[  770.001243][T11965] loop6: detected capacity change from 0 to 256
[  770.092013][T11965] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d)
[  770.215681][T11978] netlink: 48 bytes leftover after parsing attributes in process `syz.2.10455'.
[  770.250764][T11978] netlink: 48 bytes leftover after parsing attributes in process `syz.2.10455'.
[  770.261269][T11978] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10455'.
[  770.467319][   T43] usb 1-1: new high-speed USB device number 42 using dummy_hcd
[  770.647031][   T43] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  770.678598][   T43] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  770.712949][   T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  770.754992][   T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  770.792411][   T43] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  770.869700][   T43] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  770.904204][   T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  770.951255][   T43] usb 1-1: Product: syz
[  770.955459][   T43] usb 1-1: Manufacturer: syz
[  770.980590][   T43] usb 1-1: SerialNumber: syz
[  771.008416][   T43] usb 1-1: config 0 descriptor??
[  771.037905][   T43] garmin_gps 1-1:0.0: Garmin GPS usb/tty converter detected
[  771.106948][   T43] garmin_gps ttyUSB0: failed to submit interrupt urb: -90
[  771.114160][   T43] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -90
[  771.148073][T11954] loop5: detected capacity change from 0 to 40427
[  771.177075][T11954] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  771.224376][T11954] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  771.226461][ T5946] usb 1-1: USB disconnect, device number 42
[  771.273095][ T5946] garmin_gps 1-1:0.0: device disconnected
[  771.285796][T11954] F2FS-fs (loop5): invalid crc value
[  771.670501][T12074] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (13)
[  771.800048][T11954] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  771.855147][T11954] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  771.952458][T12090] loop6: detected capacity change from 0 to 1024
[  772.001123][T12090] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[  772.062007][T12090] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  772.117929][T12090] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840e11d, mo2=0002]
[  772.151678][T12090] System zones: 0-1, 4-36, 102-102
[  772.206593][T12090] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  772.410898][T19254] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  772.833738][T12140] netlink: 'syz.7.10491': attribute type 8 has an invalid length.
[  773.423218][ T5899] usb 7-1: new full-speed USB device number 22 using dummy_hcd
[  773.606785][ T5899] usb 7-1: config 0 has an invalid interface number: 239 but max is 0
[  773.622898][ T5899] usb 7-1: config 0 has no interface number 0
[  773.629083][ T5899] usb 7-1: config 0 interface 239 altsetting 0 endpoint 0x1 has invalid maxpacket 1023, setting to 64
[  773.668391][ T5899] usb 7-1: config 0 interface 239 altsetting 0 endpoint 0x82 has invalid maxpacket 511, setting to 64
[  773.700935][ T5899] usb 7-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73
[  773.724940][ T5899] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  773.728045][T12200] dlm: no locking on control device
[  773.750653][ T5899] usb 7-1: Product: syz
[  773.759116][ T5899] usb 7-1: Manufacturer: syz
[  773.782509][ T5899] usb 7-1: SerialNumber: syz
[  773.800144][ T5899] usb 7-1: config 0 descriptor??
[  773.832463][T12162] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  773.839785][T12162] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  774.018886][T12221] loop5: detected capacity change from 0 to 1024
[  774.078539][T12162] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  774.092959][T12162] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  774.122361][ T5946] usb 1-1: new high-speed USB device number 43 using dummy_hcd
[  774.134472][T12228] netlink: 'syz.2.10519': attribute type 5 has an invalid length.
[  774.153566][T12221] hfsplus: inconsistency in B*Tree (0,1,255,1,0)
[  774.171006][T12221] hfsplus: xattr searching failed
[  774.291223][ T5946] usb 1-1: Using ep0 maxpacket: 16
[  774.300228][ T5946] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  774.314644][ T5899] asix 7-1:0.239 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  774.320874][ T5946] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  774.364918][ T5899] asix 7-1:0.239: probe with driver asix failed with error -71
[  774.383450][ T5946] usb 1-1: Product: syz
[  774.406522][ T5946] usb 1-1: Manufacturer: syz
[  774.420397][ T5899] usb 7-1: USB disconnect, device number 22
[  774.430564][ T5946] usb 1-1: SerialNumber: syz
[  774.488985][ T5946] r8152-cfgselector 1-1: Unknown version 0x0000
[  774.501096][ T5946] r8152-cfgselector 1-1: config 0 descriptor??
[  774.974532][ T5899] r8152-cfgselector 1-1: USB disconnect, device number 43
[  775.422705][T12304] loop7: detected capacity change from 0 to 512
[  775.452502][T12304] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  775.556580][T12304] EXT4-fs (loop7): 1 truncate cleaned up
[  775.584547][T12304] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  775.795117][ T5738] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  775.890220][T12303] loop6: detected capacity change from 0 to 32768
[  776.032279][T12336] netlink: 12 bytes leftover after parsing attributes in process `syz.7.10544'.
[  776.247983][T12355] netlink: 'syz.0.10553': attribute type 10 has an invalid length.
[  776.268588][T12355] netlink: 152 bytes leftover after parsing attributes in process `syz.0.10553'.
[  776.329915][T12303] bcachefs (loop6): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nocow
[  776.329939][T12303]   allowing incompatible features above 0.0: (unknown version)
[  776.329952][T12303]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  776.372277][T12355] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  776.549018][T12303] bcachefs (loop6): initializing new filesystem
[  776.645831][T12303] bcachefs (loop6): going read-write
[  776.695882][T12303] bcachefs (loop6): marking superblocks
[  776.760247][T12303] bcachefs (loop6): initializing freespace
[  776.822685][T12303] bcachefs (loop6): done initializing freespace
[  776.835142][T12387] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode balance-tlb(5)
[  776.923227][T12303] bcachefs (loop6): reading snapshots table
[  776.959474][T12303] bcachefs (loop6): reading snapshots done
[  777.026693][T12399] netlink: 52 bytes leftover after parsing attributes in process `syz.7.10565'.
[  777.051367][T12399] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  777.084196][T12403] netlink: 224 bytes leftover after parsing attributes in process `syz.0.10566'.
[  777.108635][T12303] bcachefs (loop6):  loop6: Superblock write was silently dropped! (seq 0 expected 42)
[  777.167580][T12303] bcachefs (loop6): done starting filesystem
[  777.421387][T12425] (unnamed net_device) (uninitialized): option lp_interval: invalid value (18446744071562067969)
[  777.486487][T12425] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647
[  777.506816][T19254] bcachefs (loop6): shutting down
[  777.533760][T19254] bcachefs (loop6): going read-only
[  777.575331][T19254] bcachefs (loop6): finished waiting for writes to stop
[  777.635263][T19254] bcachefs (loop6): flushing journal and stopping allocators, journal seq 3
[  777.721752][T12440] loop2: detected capacity change from 0 to 512
[  777.806289][T19254] bcachefs (loop6): flushing journal and stopping allocators complete, journal seq 3
[  777.820419][T19254] bcachefs (loop6): clean shutdown complete, journal seq 4
[  777.824539][T12440] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  777.829148][T19254] bcachefs (loop6): marking filesystem clean
[  777.841340][T12440] EXT4-fs (loop2): orphan cleanup on readonly fs
[  777.850189][T12440] Quota error (device loop2): v2_read_file_info: Block with free entry 4294967071 out of range (1, 6).
[  777.890686][T12440] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  777.971025][T12440] EXT4-fs (loop2): Cannot turn on quotas: error -117
[  778.030982][T12440] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.10582: bg 0: block 40: padding at end of block bitmap is not set
[  778.060865][T12440] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6548: Corrupt filesystem
[  778.076086][T19254] bcachefs (loop6): shutdown complete
[  778.131220][T12440] EXT4-fs (loop2): 1 truncate cleaned up
[  778.187031][T12440] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  778.320137][T12440] EXT4-fs error (device loop2): ext4_get_link:106: inode #16: comm syz.2.10582: bad symlink.
[  778.468478][ T5831] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  778.813865][T12496] sock: sock_timestamping_bind_phc: sock not bind to device
[  779.362922][T12525] IPVS: sync thread started: state = BACKUP, mcast_ifn = dummy0, syncid = 3, id = 0
[  779.566554][T12532] loop5: detected capacity change from 0 to 4096
[  779.609851][T12532] ntfs3(loop5): Different NTFS sector size (2048) and media sector size (512).
[  779.733931][T12532] ntfs3(loop5): Failed to initialize $Extend/$ObjId.
[  779.782217][ T6993] usb 1-1: new high-speed USB device number 44 using dummy_hcd
[  779.790957][T12547] kAFS: No cell specified
[  780.005469][ T6993] usb 1-1: Using ep0 maxpacket: 32
[  780.058980][ T6993] usb 1-1: unable to get BOS descriptor or descriptor too short
[  780.078436][ T6993] usb 1-1: config 7 has an invalid interface number: 187 but max is 0
[  780.093056][ T6993] usb 1-1: config 7 has no interface number 0
[  780.112878][ T6993] usb 1-1: config 7 interface 187 altsetting 6 bulk endpoint 0x4 has invalid maxpacket 947
[  780.157327][ T6993] usb 1-1: config 7 interface 187 has no altsetting 0
[  780.175191][ T6993] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb
[  780.192882][ T6993] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  780.231478][ T6993] usb 1-1: Product: syz
[  780.237958][ T6993] usb 1-1: Manufacturer: syz
[  780.248178][ T6993] usb 1-1: SerialNumber: syz
[  780.268940][T12536] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  780.456122][T12570] xfrm0: entered promiscuous mode
[  780.481357][T12570] xfrm0: entered allmulticast mode
[  780.543387][ T6993] usb 1-1: Limiting number of CPorts to U8_MAX
[  780.557789][ T6993] usb 1-1: Unknown endpoint type found, address 0x07
[  780.588497][ T6993] usb 1-1: Not enough endpoints found in device, aborting!
[  780.762618][ T5899] usb 1-1: USB disconnect, device number 44
[  780.862722][T12555] loop7: detected capacity change from 0 to 32768
[  780.876479][T12591] loop2: detected capacity change from 0 to 256
[  780.890030][T12555] XFS: attr2 mount option is deprecated.
[  780.966593][T12555] XFS (loop7): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  780.966796][T12591] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d)
[  781.051431][T12607] loop6: detected capacity change from 0 to 764
[  781.069741][T12607] rock: directory entry would overflow storage
[  781.074822][T12555] XFS (loop7): Ending clean mount
[  781.083033][T12607] rock: sig=0x4654, size=5, remaining=4
[  781.110741][T12591] exFAT-fs (loop2): error, data size is invalid(10)
[  781.141283][T12555] XFS (loop7): Quotacheck needed: Please wait.
[  781.181279][T12607] isofs: Unable to find the ".." directory for NFS.
[  781.307835][T12555] XFS (loop7): Quotacheck: Done.
[  781.370995][T12617] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  781.484746][ T5738] XFS (loop7): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  781.519784][T12629] loop5: detected capacity change from 0 to 64
[  781.581356][T12624] loop2: detected capacity change from 0 to 4096
[  781.623949][T12624] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[  781.722330][T12624] ntfs3(loop2): ino=19, mi_enum_attr
[  781.727789][T12624] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  782.158921][T12653] xt_TCPMSS: Only works on TCP SYN packets
[  782.684041][T12713] netlink: 'syz.7.10649': attribute type 2 has an invalid length.
[  782.733616][T12713] netlink: 12 bytes leftover after parsing attributes in process `syz.7.10649'.
[  783.017641][ T5898] usb 6-1: new full-speed USB device number 39 using dummy_hcd
[  783.082076][   T30] audit: type=1326 audit(1751536168.403:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12741 comm="syz.2.10658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808a18e929 code=0x7ffc0000
[  783.104528][    C0] vkms_vblank_simulate: vblank timer overrun
[  783.176202][   T30] audit: type=1326 audit(1751536168.403:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12741 comm="syz.2.10658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7f808a18e929 code=0x7ffc0000
[  783.231626][ T5898] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  783.247671][ T5898] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  783.277157][   T30] audit: type=1326 audit(1751536168.403:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12741 comm="syz.2.10658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808a18e929 code=0x7ffc0000
[  783.299611][    C0] vkms_vblank_simulate: vblank timer overrun
[  783.320700][ T5898] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  783.332092][ T5898] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  783.340658][ T5898] usb 6-1: Product: syz
[  783.345043][   T30] audit: type=1326 audit(1751536168.403:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12741 comm="syz.2.10658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808a18e929 code=0x7ffc0000
[  783.367500][    C0] vkms_vblank_simulate: vblank timer overrun
[  783.375512][ T5898] usb 6-1: Manufacturer: syz
[  783.376489][T12756] usb usb8: usbfs: process 12756 (syz.6.10663) did not claim interface 0 before use
[  783.381900][ T5898] usb 6-1: SerialNumber: syz
[  783.643301][ T5898] usb 6-1: 0:2 : does not exist
[  783.707592][ T5898] usb 6-1: USB disconnect, device number 39
[  783.758556][T12788] loop7: detected capacity change from 0 to 256
[  783.830756][ T5883] udevd[5883]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  783.850621][T12788] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  783.863627][T12798] netlink: 'syz.2.10670': attribute type 7 has an invalid length.
[  783.876914][   T43] usb 1-1: new high-speed USB device number 45 using dummy_hcd
[  783.888741][T12788] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  783.921134][T12798] : entered promiscuous mode
[  783.959469][T12788] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  784.032609][   T30] audit: type=1800 audit(1751536169.345:333): pid=12788 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.10669" name="file1" dev="loop7" ino=1048746 res=0 errno=0
[  784.079532][   T43] usb 1-1: Using ep0 maxpacket: 8
[  784.118016][   T43] usb 1-1: config index 0 descriptor too short (expected 63, got 34)
[  784.144542][   T43] usb 1-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5
[  784.180701][   T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  784.223243][   T43] usb 1-1: config 0 descriptor??
[  784.505339][   T43] usb 1-1: string descriptor 0 read error: -71
[  784.530385][   T43] usb 1-1: Found UVC 0.00 device <unnamed> (2833:0201)
[  784.547533][   T43] usb 1-1: No valid video chain found.
[  784.572850][   T43] usb 1-1: USB disconnect, device number 45
[  784.970965][ T3357] Bluetooth: hci1: unexpected event for opcode 0x0c23
[  785.173251][T12885] loop2: detected capacity change from 0 to 256
[  785.204090][T12885] exfat: Deprecated parameter 'namecase'
[  785.254305][T12885] exfat: Deprecated parameter 'namecase'
[  785.311753][T12885] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d)
[  785.621293][T12909] netlink: 'syz.7.10697': attribute type 3 has an invalid length.
[  785.650313][T12865] loop6: detected capacity change from 0 to 32768
[  785.722376][T12865] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  785.984069][T12865] XFS (loop6): Ending clean mount
[  786.070099][T12945] cgroup: Bad value for 'name'
[  786.158859][T19254] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  786.545319][T12972] loop5: detected capacity change from 0 to 128
[  786.617294][T12972] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535)
[  786.648688][T12980] loop7: detected capacity change from 0 to 512
[  786.700307][T12972] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none.
[  786.715335][T12980] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  786.778093][T12972] EXT4-fs error (device loop5): __ext4_find_entry:1626: inode #2: comm syz.5.10715: checksumming directory block 0
[  786.806328][T12980] EXT4-fs (loop7): 1 truncate cleaned up
[  786.819640][T12990] netlink: 'syz.6.10708': attribute type 3 has an invalid length.
[  786.827683][T12990] netlink: 3 bytes leftover after parsing attributes in process `syz.6.10708'.
[  786.848547][T12980] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  786.988150][T12980] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000.
[  787.012179][ T3357] Bluetooth: hci0: SCO packet too small
[  787.039123][ T8548] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  787.103895][T13000] __vm_enough_memory: pid: 13000, comm: syz.2.10720, bytes: 21200456028160 not enough memory for the allocation
[  787.166716][ T5738] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  788.328571][T13032] loop5: detected capacity change from 0 to 32768
[  788.849747][T13110] openvswitch: netlink: IP tunnel dst address not specified
[  789.200367][T13137] binder: 13133:13137 ioctl c018620b 0 returned -14
[  789.275288][T13139] tc_dump_action: action bad kind
[  789.515530][T13155] x_tables: unsorted underflow at hook 2
[  790.160809][T13201] xt_policy: too many policy elements
[  790.194686][T13202] cifs: Unknown parameter 'no'�a��N�[G�zob,er��;%j��
[  790.194686][T13202] ��z�,�@q�������J#�"��h/.�W1ȱ�nNC�"�C�׈�E)�8+����'
[  790.258811][T13206] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10793'.
[  790.593404][T13230] loop2: detected capacity change from 0 to 256
[  790.708943][T13230] FAT-fs (loop2): Directory bread(block 64) failed
[  790.728485][T13230] FAT-fs (loop2): Directory bread(block 65) failed
[  790.758287][T13230] FAT-fs (loop2): Directory bread(block 66) failed
[  790.796607][T13230] FAT-fs (loop2): Directory bread(block 67) failed
[  790.829649][T13245] loop7: detected capacity change from 0 to 64
[  790.835459][T13230] FAT-fs (loop2): Directory bread(block 68) failed
[  790.852738][T13230] FAT-fs (loop2): Directory bread(block 69) failed
[  790.874579][T13230] FAT-fs (loop2): Directory bread(block 70) failed
[  790.886675][T13230] FAT-fs (loop2): Directory bread(block 71) failed
[  790.918854][T13245] syz.7.10806: attempt to access beyond end of device
[  790.918854][T13245] loop7: rw=0, sector=1024, nr_sectors = 2 limit=64
[  790.921087][T13230] FAT-fs (loop2): Directory bread(block 72) failed
[  790.953396][T13230] FAT-fs (loop2): Directory bread(block 73) failed
[  790.979570][T13245] Buffer I/O error on dev loop7, logical block 512, async page read
[  790.988805][T13255] netlink: 20 bytes leftover after parsing attributes in process `syz.6.10809'.
[  791.008125][T13245] syz.7.10806: attempt to access beyond end of device
[  791.008125][T13245] loop7: rw=0, sector=113152, nr_sectors = 2 limit=64
[  791.046816][T13245] Buffer I/O error on dev loop7, logical block 56576, async page read
[  791.692083][T13293] netlink: 'syz.6.10821': attribute type 1 has an invalid length.
[  791.735172][T13293] netlink: 'syz.6.10821': attribute type 1 has an invalid length.
[  792.051564][T13312] netlink: 'syz.2.10828': attribute type 33 has an invalid length.
[  792.088744][T13312] netlink: 152 bytes leftover after parsing attributes in process `syz.2.10828'.
[  792.163042][T13272] loop7: detected capacity change from 0 to 32768
[  792.185493][T13272] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.10814 (13272)
[  792.233392][T13272] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  792.266930][T13272] BTRFS info (device loop7): using sha256 (sha256-x86_64) checksum algorithm
[  792.282618][T13326] (unnamed net_device) (uninitialized): peer notification delay (31) is not a multiple of miimon (100), value rounded to 0 ms
[  792.313372][T13272] BTRFS info (device loop7): using free-space-tree
[  792.340772][T13331] loop2: detected capacity change from 0 to 64
[  792.365199][T13335] netlink: 16 bytes leftover after parsing attributes in process `syz.6.10833'.
[  792.457854][T13326] 8021q: adding VLAN 0 to HW filter on device bond4
[  792.545086][T13272] BTRFS info (device loop7): rebuilding free space tree
[  792.655341][T13391] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  792.671923][T13272] BTRFS info (device loop7): setting incompat feature flag for SIMPLE_QUOTA (0x10000)
[  792.888093][ T5738] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  793.106501][T13410] netlink: 32 bytes leftover after parsing attributes in process `syz.6.10844'.
[  793.162615][T13416] loop5: detected capacity change from 0 to 64
[  793.248279][   T30] audit: type=1800 audit(1751536178.567:334): pid=13416 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.10845" name="file2" dev="loop5" ino=21 res=0 errno=0
[  793.449751][   T30] audit: type=1326 audit(1751536178.767:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13427 comm="syz.7.10849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99ccb8e929 code=0x7ffc0000
[  793.578389][   T30] audit: type=1326 audit(1751536178.767:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13427 comm="syz.7.10849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99ccb8e929 code=0x7ffc0000
[  793.649931][   T30] audit: type=1326 audit(1751536178.777:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13427 comm="syz.7.10849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7f99ccb8e929 code=0x7ffc0000
[  793.744259][T13443] loop7: detected capacity change from 0 to 256
[  793.774299][   T30] audit: type=1326 audit(1751536178.777:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13427 comm="syz.7.10849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99ccb8e929 code=0x7ffc0000
[  793.806080][T13449] netlink: 212 bytes leftover after parsing attributes in process `syz.2.10854'.
[  793.844020][   T30] audit: type=1326 audit(1751536178.777:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13427 comm="syz.7.10849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99ccb8e929 code=0x7ffc0000
[  793.863149][T13449] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10854'.
[  793.868777][T13443] exFAT-fs (loop7): failed to load upcase table (idx : 0x00011f41, chksum : 0x31e44978, utbl_chksum : 0xe619d30d)
[  793.939926][T13449] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10854'.
[  794.143159][T13459] tmpfs: Bad value for 'mpol'
[  794.760629][T13447] loop5: detected capacity change from 0 to 32768
[  794.796686][T13447] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.10853 (13447)
[  794.908015][T13447] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  794.958343][T13447] BTRFS info (device loop5): using sha256 (sha256-x86_64) checksum algorithm
[  795.021853][T13447] BTRFS info (device loop5): using free-space-tree
[  795.063270][ T5842] Bluetooth: hci4: command 0x0406 tx timeout
[  795.203898][T13512] loop7: detected capacity change from 0 to 1024
[  795.266953][T13447] BTRFS info (device loop5): rebuilding free space tree
[  795.510228][ T8548] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  795.547948][T13466] loop6: detected capacity change from 0 to 40427
[  795.616464][T13466] F2FS-fs (loop6): heap/no_heap options were deprecated
[  795.648631][T13466] F2FS-fs (loop6): invalid crc value
[  795.668575][T13466] F2FS-fs (loop6): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root
[  795.795744][T13544] loop2: detected capacity change from 0 to 16
[  795.842744][T13544] erofs (device loop2): mounted with root inode @ nid 36.
[  795.872133][T13548] openvswitch: netlink: IP tunnel dst address not specified
[  795.901505][T13544] erofs (device loop2): readahead error at folio 2 @ nid 89
[  795.970328][ T3357] erofs (device loop2): failed to decompress 6887 in[4096, 0] out[8192]
[  795.981224][T13544] erofs (device loop2): failed to decompress 6887 in[4096, 0] out[8192]
[  796.047141][T13544] erofs (device loop2): read error -117 @ 1 of nid 89
[  796.092901][   T30] audit: type=1800 audit(1751536181.430:340): pid=13544 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.10879" name="file2" dev="loop2" ino=89 res=0 errno=0
[  796.166148][T13466] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  796.753524][T13586] libceph: resolve '.' (ret=-3): failed
[  797.129665][T13607] netlink: 'syz.0.10899': attribute type 1 has an invalid length.
[  797.345034][T13617] loop2: detected capacity change from 0 to 512
[  797.360321][T13617] EXT4-fs: Ignoring removed bh option
[  797.379222][T13617] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[  797.430096][T13617] EXT4-fs (loop2): 1 truncate cleaned up
[  797.479136][T13580] loop7: detected capacity change from 0 to 32768
[  797.505041][T13617] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  797.610704][T13580] XFS (loop7): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  797.764113][T13647] ksmbd: Unknown IPC event: 4, ignore.
[  797.795665][T13580] XFS (loop7): Ending clean mount
[  797.835715][ T5831] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  797.838833][T13580] XFS (loop7): Quotacheck needed: Please wait.
[  798.060087][T13664] loop5: detected capacity change from 0 to 8
[  798.081225][T13580] XFS (loop7): Quotacheck: Done.
[  798.156453][T13669] loop2: detected capacity change from 0 to 256
[  798.283581][T13669] FAT-fs (loop2): Directory bread(block 64) failed
[  798.315321][T13669] FAT-fs (loop2): Directory bread(block 65) failed
[  798.342068][ T5738] XFS (loop7): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  798.358833][T13669] FAT-fs (loop2): Directory bread(block 66) failed
[  798.365401][T13669] FAT-fs (loop2): Directory bread(block 67) failed
[  798.405894][T13669] FAT-fs (loop2): Directory bread(block 68) failed
[  798.448222][T13669] FAT-fs (loop2): Directory bread(block 69) failed
[  798.465423][T13669] FAT-fs (loop2): Directory bread(block 70) failed
[  798.523794][T13669] FAT-fs (loop2): Directory bread(block 71) failed
[  798.534955][T13669] FAT-fs (loop2): Directory bread(block 72) failed
[  798.578317][T13669] FAT-fs (loop2): Directory bread(block 73) failed
[  798.834286][T13697] tmpfs: Bad value for 'mpol'
[  798.844595][T13694] loop6: detected capacity change from 0 to 4096
[  798.919046][T13707] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  799.278669][ T5946] usb 1-1: new high-speed USB device number 46 using dummy_hcd
[  799.429934][T13739] cgroup: none used incorrectly
[  799.478798][ T5946] usb 1-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33
[  799.505529][ T5946] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  799.519267][T13743] loop6: detected capacity change from 0 to 1024
[  799.550538][ T5946] usb 1-1: config 0 descriptor??
[  799.568056][ T5946] gspca_main: sunplus-2.14.0 probing 055f:c420
[  799.614061][T13743] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  799.670106][T13743] ext4 filesystem being mounted at /1272/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  799.775968][T13743] fscrypt (loop6, inode 15): Error -61 getting encryption context
[  799.911740][T19254] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  799.971462][ T5946] gspca_sunplus: reg_w_riv err -71
[  799.993694][ T5946] sunplus 1-1:0.0: probe with driver sunplus failed with error -71
[  800.096717][ T5946] usb 1-1: USB disconnect, device number 46
[  800.592039][T13810] loop2: detected capacity change from 0 to 4096
[  800.599791][T13817] netlink: 20 bytes leftover after parsing attributes in process `syz.6.10957'.
[  800.665559][T13810] ntfs3(loop2): Failed to initialize $Extend/$ObjId.
[  800.938397][T13835] x_tables: unsorted underflow at hook 3
[  801.365999][T13803] loop5: detected capacity change from 0 to 32768
[  801.917180][T13905] netlink: 10 bytes leftover after parsing attributes in process `syz.2.10982'.
[  802.025295][ T5898] usb 7-1: new high-speed USB device number 23 using dummy_hcd
[  802.204044][ T5898] usb 7-1: Using ep0 maxpacket: 8
[  802.230675][ T5898] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 15
[  802.263642][ T5898] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  802.300996][ T5898] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  802.341438][ T5898] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  802.364483][ T5898] usb 7-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8
[  802.374618][ T5898] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  802.394337][ T5898] usb 7-1: Product: syz
[  802.398559][ T5898] usb 7-1: Manufacturer: syz
[  802.403165][ T5898] usb 7-1: SerialNumber: syz
[  802.446027][ T5898] usb 7-1: config 0 descriptor??
[  802.454021][T13893] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  802.694444][ T5898] powermate: Expected payload of 3--6 bytes, found 1024 bytes!
[  802.749229][ T5898] input: Griffin SoundKnob as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input49
[  802.907934][    C0] powermate: config urb returned -71
[  802.920441][    C0] powermate: config urb returned -71
[  802.933071][    C0] powermate: config urb returned -71
[  802.938821][    C0] powermate: config urb returned -71
[  802.942686][T13956] loop5: detected capacity change from 0 to 4096
[  802.944616][ T5898] usb 7-1: USB disconnect, device number 23
[  802.956653][    C0] powermate 7-1:0.0: powermate_irq - usb_submit_urb failed with result: -19
[  803.018797][T13956] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512).
[  803.192715][T13956] ntfs3(loop5): ino=19, mi_enum_attr
[  803.198076][T13956] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  803.825970][T14023] loop6: detected capacity change from 0 to 256
[  803.892615][   T30] audit: type=1326 audit(1751536189.249:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14027 comm="syz.7.11020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99ccb8e929 code=0x7ffc0000
[  803.970493][   T30] audit: type=1326 audit(1751536189.279:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14027 comm="syz.7.11020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=109 compat=0 ip=0x7f99ccb8e929 code=0x7ffc0000
[  804.069358][   T30] audit: type=1326 audit(1751536189.279:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14027 comm="syz.7.11020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99ccb8e929 code=0x7ffc0000
[  804.091809][    C0] vkms_vblank_simulate: vblank timer overrun
[  804.098872][T14041] loop7: detected capacity change from 0 to 764
[  804.167105][   T30] audit: type=1326 audit(1751536189.279:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14027 comm="syz.7.11020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99ccb8e929 code=0x7ffc0000
[  804.189559][    C0] vkms_vblank_simulate: vblank timer overrun
[  804.197236][T14041] rock: directory entry would overflow storage
[  804.215321][T14041] rock: sig=0x4654, size=5, remaining=4
[  804.255708][T14041] isofs: Unable to find the ".." directory for NFS.
[  804.357546][T14057] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11028'.
[  804.408642][T14057] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11028'.
[  804.454003][T14057] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11028'.
[  804.974962][T14097] loop6: detected capacity change from 0 to 2048
[  805.051148][   T43] usb 3-1: new high-speed USB device number 37 using dummy_hcd
[  805.060550][T14097] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  805.251173][   T43] usb 3-1: Using ep0 maxpacket: 32
[  805.269589][   T43] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  805.306829][   T43] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2
[  805.356633][   T43] usb 3-1: config 0 interface 0 altsetting 245 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  805.391683][   T43] usb 3-1: config 0 interface 0 has no altsetting 1
[  805.422667][   T43] usb 3-1: New USB device found, idVendor=0582, idProduct=0016, bcdDevice=8e.57
[  805.440550][   T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  805.464237][   T43] usb 3-1: Product: syz
[  805.468500][   T43] usb 3-1: Manufacturer: syz
[  805.484906][   T43] usb 3-1: SerialNumber: syz
[  805.522557][   T43] usb 3-1: config 0 descriptor??
[  805.612380][T14143] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11054'.
[  805.662866][   T30] audit: type=1326 audit(1751536191.011:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14144 comm="syz.0.11057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fb6f8e929 code=0x7ffc0000
[  805.685307][    C0] vkms_vblank_simulate: vblank timer overrun
[  805.757729][   T30] audit: type=1326 audit(1751536191.051:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14144 comm="syz.0.11057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7f7fb6f8e929 code=0x7ffc0000
[  805.795015][T14151] netlink: 'syz.5.11059': attribute type 10 has an invalid length.
[  805.827302][T14151] mac80211_hwsim hwsim13 wlan1: left allmulticast mode
[  805.835107][   T30] audit: type=1326 audit(1751536191.051:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14144 comm="syz.0.11057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fb6f8e929 code=0x7ffc0000
[  805.862019][T14151] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  805.896425][   T30] audit: type=1326 audit(1751536191.051:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14144 comm="syz.0.11057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fb6f8e929 code=0x7ffc0000
[  805.918940][    C0] vkms_vblank_simulate: vblank timer overrun
[  805.940853][T14160] netlink: 'syz.6.11060': attribute type 21 has an invalid length.
[  805.971749][   T43] usb 3-1: USB disconnect, device number 37
[  806.558963][T14213] loop5: detected capacity change from 0 to 64
[  806.613606][T14213] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended.  mounting read-only.
[  806.642269][T14213] hfs: filesystem is marked locked, mounting read-only.
[  806.978901][    T9] usb 1-1: new full-speed USB device number 47 using dummy_hcd
[  807.037192][T14252] loop6: detected capacity change from 0 to 8
[  807.129000][T14252] SQUASHFS error: Failed to read block 0x63a: -5
[  807.141588][    T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  807.162322][T14252] SQUASHFS error: Unable to read metadata cache entry [638]
[  807.171794][    T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  807.197141][T14252] SQUASHFS error: Unable to read directory block [26067d:0]
[  807.215541][    T9] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  807.238577][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  807.271262][T14266] xt_l2tp: v2 doesn't support IP mode
[  807.282071][    T9] usb 1-1: Product: syz
[  807.286297][    T9] usb 1-1: Manufacturer: syz
[  807.320277][    T9] usb 1-1: SerialNumber: syz
[  807.443272][T14279] syz.5.11093 uses old SIOCAX25GETINFO
[  807.590248][    T9] usb 1-1: 0:2 : does not exist
[  807.624393][ T3357] Bluetooth: hci4: unexpected event for opcode 0x1001
[  807.690762][    T9] usb 1-1: USB disconnect, device number 47
[  807.913329][T14315] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11100'.
[  808.067101][T14273] loop2: detected capacity change from 0 to 32768
[  808.117104][T14273] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.11091 (14273)
[  808.172638][T14273] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  808.248061][T14273] BTRFS info (device loop2): using sha256 (sha256-x86_64) checksum algorithm
[  808.267273][T14273] BTRFS info (device loop2): using free-space-tree
[  808.414485][ T5920] usb 6-1: new full-speed USB device number 40 using dummy_hcd
[  808.437013][T14273] BTRFS info (device loop2): rebuilding free space tree
[  808.586229][T14273] BTRFS info (device loop2): setting incompat feature flag for SIMPLE_QUOTA (0x10000)
[  808.647682][ T5920] usb 6-1: config 0 has an invalid interface number: 52 but max is 0
[  808.655863][ T5920] usb 6-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config
[  808.692084][ T5920] usb 6-1: config 0 has no interface number 0
[  808.737167][ T5920] usb 6-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  808.768112][ T5920] usb 6-1: config 0 interface 52 altsetting 1 endpoint 0x8F has invalid maxpacket 65535, setting to 64
[  808.789474][ T5920] usb 6-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  808.817160][ T5920] usb 6-1: config 0 interface 52 has no altsetting 0
[  808.819604][ T5831] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  808.853296][ T5920] usb 6-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00
[  808.887162][ T5920] usb 6-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35
[  808.895609][ T5920] usb 6-1: Product: syz
[  808.972115][ T5920] usb 6-1: SerialNumber: syz
[  808.978684][T14322] loop7: detected capacity change from 0 to 32768
[  808.997450][ T5920] usb 6-1: config 0 descriptor??
[  809.246863][ T5920] input: syz (Stick) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.52/input/input50
[  809.321436][T14322] bcachefs (loop7): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nocow
[  809.321451][T14322]   allowing incompatible features above 0.0: (unknown version)
[  809.321458][T14322]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  809.441264][ T5920] usb 6-1: USB disconnect, device number 40
[  809.441408][    C0] synaptics_usb 6-1:0.52: synusb_irq - usb_submit_urb failed with result: -19
[  809.470508][ T5187] synaptics_usb 6-1:0.52: synusb_open - usb_submit_urb failed, error: -19
[  809.472231][ T5187] synaptics_usb 6-1:0.52: synusb_open - usb_submit_urb failed, error: -19
[  809.644764][T14322] bcachefs (loop7): initializing new filesystem
[  809.699218][T14322] bcachefs (loop7): going read-write
[  809.808851][T14424] loop2: detected capacity change from 0 to 2048
[  809.847315][T14424] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  809.857583][T14322] bcachefs (loop7): marking superblocks
[  809.890293][T14322] bcachefs (loop7): initializing freespace
[  809.957836][T14322] bcachefs (loop7): done initializing freespace
[  809.967694][T14322] bcachefs (loop7): reading snapshots table
[  809.973685][T14322] bcachefs (loop7): reading snapshots done
[  810.019087][T14322] bcachefs (loop7):  loop7: Superblock write was silently dropped! (seq 0 expected 42)
[  810.046410][T14439] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11126'.
[  810.055493][T14439] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11126'.
[  810.080723][T14322] bcachefs (loop7): done starting filesystem
[  810.118267][T14439] netlink: 4612 bytes leftover after parsing attributes in process `syz.0.11126'.
[  810.312074][T14449] loop5: detected capacity change from 0 to 2048
[  810.383160][T14449] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  810.430895][ T5738] bcachefs (loop7): shutting down
[  810.447402][ T5738] bcachefs (loop7): going read-only
[  810.452667][ T5738] bcachefs (loop7): finished waiting for writes to stop
[  810.531771][ T5738] bcachefs (loop7): flushing journal and stopping allocators, journal seq 3
[  810.771820][ T5738] bcachefs (loop7): flushing journal and stopping allocators complete, journal seq 3
[  810.782798][T14431] loop6: detected capacity change from 0 to 32768
[  810.802122][T14468] loop2: detected capacity change from 0 to 64
[  810.815673][T14470] vivid-000: =================  START STATUS  =================
[  810.817099][T14431] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.11124 (14431)
[  810.838994][T14470] vivid-000: Generate PTS: true
[  810.863246][   T30] audit: type=1326 audit(1751536196.216:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14472 comm="syz.5.11136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56a498e929 code=0x7ffc0000
[  810.867938][ T5738] bcachefs (loop7): clean shutdown complete, journal seq 4
[  810.898453][ T5738] bcachefs (loop7): marking filesystem clean
[  810.904345][T14470] vivid-000: Generate SCR: true
[  810.918888][T14431] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  810.962351][T14470] tpg source WxH: 320x180 (Y'CbCr)
[  810.988124][T14431] BTRFS info (device loop6): using sha256 (sha256-x86_64) checksum algorithm
[  810.992389][ T5738] bcachefs (loop7): shutdown complete
[  811.004354][T14470] tpg field: 1
[  811.010354][T14470] tpg crop: (0,0)/320x180
[  811.014839][   T30] audit: type=1326 audit(1751536196.286:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14472 comm="syz.5.11136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f56a498e929 code=0x7ffc0000
[  811.042621][T14470] tpg compose: (0,0)/320x180
[  811.047582][T14431] BTRFS info (device loop6): using free-space-tree
[  811.059687][T14470] tpg colorspace: 9
[  811.070716][T14470] tpg transfer function: 7/0
[  811.090718][T14470] tpg Y'CbCr encoding: 2/0
[  811.132303][T14470] tpg quantization: 1/0
[  811.175703][T14470] tpg RGB range: 0/2
[  811.184481][   T30] audit: type=1326 audit(1751536196.286:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14472 comm="syz.5.11136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56a498e929 code=0x7ffc0000
[  811.218672][T14470] vivid-000: ==================  END STATUS  ==================
[  811.222894][   T30] audit: type=1326 audit(1751536196.286:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14472 comm="syz.5.11136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56a498e929 code=0x7ffc0000
[  811.352423][T14431] BTRFS info (device loop6): rebuilding free space tree
[  811.514770][ T5946] usb 3-1: new high-speed USB device number 38 using dummy_hcd
[  811.532451][T14431] BTRFS info (device loop6): setting incompat feature flag for SIMPLE_QUOTA (0x10000)
[  811.636470][T19254] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  811.688854][T14489] loop5: detected capacity change from 0 to 32768
[  811.733668][ T5946] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  811.748348][T14489] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.11138 (14489)
[  811.763058][ T5946] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[  811.822160][ T5946] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 202
[  811.843922][T14489] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  811.863846][ T5946] usb 3-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72
[  811.891316][ T5946] usb 3-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0
[  811.900317][T14489] BTRFS info (device loop5): using sha256 (sha256-x86_64) checksum algorithm
[  811.912111][ T5946] usb 3-1: Manufacturer: syz
[  811.941217][T14489] BTRFS info (device loop5): using free-space-tree
[  811.942137][ T5946] usb 3-1: config 0 descriptor??
[  811.978969][T14494] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  812.021385][ T5946] smsusb:smsusb_probe: board id=9, interface number 0
[  812.046946][ T5946] smsusb:siano_media_device_register: media controller created
[  812.062668][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  812.070027][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  812.077306][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  812.084578][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  812.091863][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  812.103019][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  812.110663][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  812.117982][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  812.125272][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  812.132571][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  812.139863][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  812.149853][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  812.157153][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  812.164394][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  812.172093][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  812.179390][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  812.186685][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  812.193973][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  812.201250][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  812.208967][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  812.216265][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  812.223567][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  812.230857][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  812.238158][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  812.246791][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  812.254089][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  812.261343][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  812.268595][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  812.275839][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  812.294080][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  812.301421][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  812.308708][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  812.315959][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  812.323199][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  812.331000][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  812.338316][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  812.345623][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  812.352932][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  812.360241][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  812.367957][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  812.375266][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  812.382556][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  812.389838][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  812.397120][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  812.405086][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  812.412380][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  812.419648][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  812.426901][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  812.434135][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  812.442366][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  812.449713][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  812.457014][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  812.464317][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  812.471621][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  812.479396][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  812.486744][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  812.494033][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  812.501330][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  812.508634][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  812.516388][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  812.523744][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  812.531090][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  812.538431][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  812.545776][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  812.553581][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  812.560924][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  812.568257][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  812.575572][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  812.582885][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  812.586111][   T36] BTRFS error (device loop5): bad tree block start, mirror 1 want 5312512 have 0
[  812.590328][ T5946] smsmdtv:smscore_sendrequest_and_wait: sendrequest returned error -22
[  812.612070][ T5946] smsmdtv:smscore_set_device_mode: mode detect failed -22
[  812.619386][ T5946] smsmdtv:smscore_start_device: set device mode failed , rc -22
[  812.627266][ T5946] smsusb:smsusb_init_device: smscore_start_device(...) failed
[  812.635059][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  812.642350][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  812.649610][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  812.656857][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  812.664101][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  812.671344][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  812.678585][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  812.685828][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  812.693458][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  812.700768][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  812.708063][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  812.715366][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  812.722669][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  812.729973][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  812.737707][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  812.745014][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  812.752289][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  812.759564][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  812.766847][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  812.773553][T14489] BTRFS error (device loop5 state C): failed to load root csum
[  812.774114][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  812.789292][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  812.796597][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  812.805350][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  812.812657][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  812.820194][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  812.827543][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  812.834877][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  812.842210][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  812.849534][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  812.856863][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  812.864195][    C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  812.871712][ T5946] ------------[ cut here ]------------
[  812.877198][ T5946] workqueue: work disable count underflowed
[  812.883173][ T5946] WARNING: kernel/workqueue.c:4329 at enable_work+0x2b1/0x2c0, CPU#1: kworker/1:4/5946
[  812.892847][ T5946] Modules linked in:
[  812.897396][ T5946] CPU: 1 UID: 0 PID: 5946 Comm: kworker/1:4 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) 
[  812.908976][ T5946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  812.919054][ T5946] Workqueue: usb_hub_wq hub_event
[  812.924118][ T5946] RIP: 0010:enable_work+0x2b1/0x2c0
[  812.929346][ T5946] Code: 41 5e 41 5f 5d c3 cc cc cc cc cc e8 b9 c4 e4 09 e8 94 3a 35 00 c6 05 41 e2 00 0e 01 90 48 c7 c7 40 d6 89 8b e8 c0 d5 f8 ff 90 <0f> 0b 90 90 e9 69 ff ff ff 66 0f 1f 44 00 00 90 90 90 90 90 90 90
[  812.948973][ T5946] RSP: 0018:ffffc9000452ea80 EFLAGS: 00010046
[  812.955063][ T5946] RAX: cfcb65dccc2e8400 RBX: ffff888054d1b118 RCX: 0000000000100000
[  812.963050][ T5946] RDX: ffffc90019942000 RSI: 00000000000b5622 RDI: 00000000000b5623
[  812.971039][ T5946] RBP: ffffc9000452eb30 R08: ffff8880b8724293 R09: 1ffff110170e4852
[  812.979030][ T5946] R10: dffffc0000000000 R11: ffffed10170e4853 R12: 1ffff920008a5d54
[  812.987021][ T5946] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000001800001
[  812.995010][ T5946] FS:  0000000000000000(0000) GS:ffff888125d1d000(0000) knlGS:0000000000000000
[  813.003938][ T5946] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  813.010519][ T5946] CR2: 0000001b3051aff8 CR3: 0000000033536000 CR4: 00000000003526f0
[  813.018489][ T5946] Call Trace:
[  813.021768][ T5946]  <TASK>
[  813.024698][ T5946]  ? __pfx_enable_work+0x10/0x10
[  813.029646][ T5946]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  813.035543][ T5946]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  813.041880][ T5946]  __cancel_work_sync+0xf7/0x110
[  813.046824][ T5946]  smsusb_term_device+0xe2/0x3b0
[  813.051764][ T5946]  smsusb_probe+0x1a04/0x2060
[  813.056451][ T5946]  ? __pfx_smsusb_probe+0x10/0x10
[  813.061480][ T5946]  ? __pfx_smsusb_sendrequest+0x10/0x10
[  813.067022][ T5946]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  813.072919][ T5946]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  813.079255][ T5946]  ? __pm_runtime_set_status+0x785/0xa50
[  813.084895][ T5946]  usb_probe_interface+0x637/0xbf0
[  813.090010][ T5946]  ? __pfx_usb_probe_interface+0x10/0x10
[  813.095633][ T5946]  really_probe+0x26a/0x9a0
[  813.100132][ T5946]  __driver_probe_device+0x18c/0x2f0
[  813.105416][ T5946]  driver_probe_device+0x4f/0x430
[  813.110435][ T5946]  __device_attach_driver+0x2ce/0x530
[  813.115803][ T5946]  bus_for_each_drv+0x251/0x2e0
[  813.120650][ T5946]  ? __pfx___device_attach_driver+0x10/0x10
[  813.126533][ T5946]  ? __pfx_bus_for_each_drv+0x10/0x10
[  813.131909][ T5946]  __device_attach+0x2b8/0x400
[  813.136671][ T5946]  ? __pfx___device_attach+0x10/0x10
[  813.141961][ T5946]  ? do_raw_spin_unlock+0x122/0x240
[  813.147154][ T5946]  bus_probe_device+0x185/0x260
[  813.152001][ T5946]  device_add+0x7b6/0xb50
[  813.156330][ T5946]  usb_set_configuration+0x1a87/0x20e0
[  813.161807][ T5946]  usb_generic_driver_probe+0x8d/0x150
[  813.167265][ T5946]  usb_probe_device+0x1c1/0x390
[  813.172112][ T5946]  ? __pfx_usb_probe_device+0x10/0x10
[  813.177473][ T5946]  really_probe+0x26a/0x9a0
[  813.181972][ T5946]  __driver_probe_device+0x18c/0x2f0
[  813.187257][ T5946]  driver_probe_device+0x4f/0x430
[  813.192275][ T5946]  __device_attach_driver+0x2ce/0x530
[  813.197640][ T5946]  bus_for_each_drv+0x251/0x2e0
[  813.202487][ T5946]  ? __pfx___device_attach_driver+0x10/0x10
[  813.208371][ T5946]  ? __pfx_bus_for_each_drv+0x10/0x10
[  813.213749][ T5946]  __device_attach+0x2b8/0x400
[  813.218513][ T5946]  ? __pfx___device_attach+0x10/0x10
[  813.223803][ T5946]  ? do_raw_spin_unlock+0x122/0x240
[  813.228999][ T5946]  bus_probe_device+0x185/0x260
[  813.233849][ T5946]  device_add+0x7b6/0xb50
[  813.238177][ T5946]  usb_new_device+0xa39/0x16f0
[  813.242951][ T5946]  ? __pfx_usb_new_device+0x10/0x10
[  813.248155][ T5946]  ? _raw_spin_unlock_irq+0x23/0x50
[  813.253357][ T5946]  ? lockdep_hardirqs_on+0x9c/0x150
[  813.258557][ T5946]  hub_event+0x2941/0x4a00
[  813.262970][ T5946]  ? do_raw_spin_unlock+0x122/0x240
[  813.268205][ T5946]  ? __pfx_hub_event+0x10/0x10
[  813.272965][ T5946]  ? process_scheduled_works+0x9ef/0x17b0
[  813.278694][ T5946]  ? _raw_spin_unlock_irq+0x23/0x50
[  813.283892][ T5946]  ? process_scheduled_works+0x9ef/0x17b0
[  813.289607][ T5946]  ? process_scheduled_works+0x9ef/0x17b0
[  813.295326][ T5946]  process_scheduled_works+0xae1/0x17b0
[  813.300890][ T5946]  ? __pfx_process_scheduled_works+0x10/0x10
[  813.306878][ T5946]  worker_thread+0x8a0/0xda0
[  813.311467][ T5946]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  813.317799][ T5946]  ? __kthread_parkme+0x7b/0x200
[  813.322743][ T5946]  kthread+0x70e/0x8a0
[  813.326805][ T5946]  ? __pfx_worker_thread+0x10/0x10
[  813.331914][ T5946]  ? __pfx_kthread+0x10/0x10
[  813.336496][ T5946]  ? _raw_spin_unlock_irq+0x23/0x50
[  813.341695][ T5946]  ? lockdep_hardirqs_on+0x9c/0x150
[  813.346889][ T5946]  ? __pfx_kthread+0x10/0x10
[  813.351470][ T5946]  ret_from_fork+0x3fc/0x770
[  813.356059][ T5946]  ? __pfx_ret_from_fork+0x10/0x10
[  813.361168][ T5946]  ? __switch_to_asm+0x39/0x70
[  813.365926][ T5946]  ? __switch_to_asm+0x33/0x70
[  813.370691][ T5946]  ? __pfx_kthread+0x10/0x10
[  813.375286][ T5946]  ret_from_fork_asm+0x1a/0x30
[  813.380063][ T5946]  </TASK>
[  813.383080][ T5946] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  813.390360][ T5946] CPU: 1 UID: 0 PID: 5946 Comm: kworker/1:4 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) 
[  813.401900][ T5946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  813.411961][ T5946] Workqueue: usb_hub_wq hub_event
[  813.417008][ T5946] Call Trace:
[  813.420286][ T5946]  <TASK>
[  813.423206][ T5946]  dump_stack_lvl+0x99/0x250
[  813.427794][ T5946]  ? __asan_memcpy+0x40/0x70
[  813.432380][ T5946]  ? __pfx_dump_stack_lvl+0x10/0x10
[  813.437573][ T5946]  ? __pfx__printk+0x10/0x10
[  813.442169][ T5946]  panic+0x2db/0x790
[  813.446068][ T5946]  ? __pfx_panic+0x10/0x10
[  813.450498][ T5946]  ? ret_from_fork_asm+0x1a/0x30
[  813.455440][ T5946]  __warn+0x334/0x4c0
[  813.459420][ T5946]  ? enable_work+0x2b1/0x2c0
[  813.464024][ T5946]  ? enable_work+0x2b1/0x2c0
[  813.468634][ T5946]  report_bug+0x2be/0x4f0
[  813.472975][ T5946]  ? enable_work+0x2b1/0x2c0
[  813.477566][ T5946]  ? enable_work+0x2b1/0x2c0
[  813.482148][ T5946]  ? enable_work+0x2b3/0x2c0
[  813.486734][ T5946]  handle_bug+0x84/0x160
[  813.490971][ T5946]  exc_invalid_op+0x1a/0x50
[  813.495471][ T5946]  asm_exc_invalid_op+0x1a/0x20
[  813.500311][ T5946] RIP: 0010:enable_work+0x2b1/0x2c0
[  813.505506][ T5946] Code: 41 5e 41 5f 5d c3 cc cc cc cc cc e8 b9 c4 e4 09 e8 94 3a 35 00 c6 05 41 e2 00 0e 01 90 48 c7 c7 40 d6 89 8b e8 c0 d5 f8 ff 90 <0f> 0b 90 90 e9 69 ff ff ff 66 0f 1f 44 00 00 90 90 90 90 90 90 90
[  813.525105][ T5946] RSP: 0018:ffffc9000452ea80 EFLAGS: 00010046
[  813.531170][ T5946] RAX: cfcb65dccc2e8400 RBX: ffff888054d1b118 RCX: 0000000000100000
[  813.539130][ T5946] RDX: ffffc90019942000 RSI: 00000000000b5622 RDI: 00000000000b5623
[  813.547094][ T5946] RBP: ffffc9000452eb30 R08: ffff8880b8724293 R09: 1ffff110170e4852
[  813.555057][ T5946] R10: dffffc0000000000 R11: ffffed10170e4853 R12: 1ffff920008a5d54
[  813.563030][ T5946] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000001800001
[  813.571030][ T5946]  ? __pfx_enable_work+0x10/0x10
[  813.575971][ T5946]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  813.581865][ T5946]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  813.588193][ T5946]  __cancel_work_sync+0xf7/0x110
[  813.593135][ T5946]  smsusb_term_device+0xe2/0x3b0
[  813.598071][ T5946]  smsusb_probe+0x1a04/0x2060
[  813.602753][ T5946]  ? __pfx_smsusb_probe+0x10/0x10
[  813.607775][ T5946]  ? __pfx_smsusb_sendrequest+0x10/0x10
[  813.613313][ T5946]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  813.619201][ T5946]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  813.625542][ T5946]  ? __pm_runtime_set_status+0x785/0xa50
[  813.631198][ T5946]  usb_probe_interface+0x637/0xbf0
[  813.636325][ T5946]  ? __pfx_usb_probe_interface+0x10/0x10
[  813.641950][ T5946]  really_probe+0x26a/0x9a0
[  813.646447][ T5946]  __driver_probe_device+0x18c/0x2f0
[  813.651731][ T5946]  driver_probe_device+0x4f/0x430
[  813.656746][ T5946]  __device_attach_driver+0x2ce/0x530
[  813.662111][ T5946]  bus_for_each_drv+0x251/0x2e0
[  813.666969][ T5946]  ? __pfx___device_attach_driver+0x10/0x10
[  813.672868][ T5946]  ? __pfx_bus_for_each_drv+0x10/0x10
[  813.678253][ T5946]  __device_attach+0x2b8/0x400
[  813.683018][ T5946]  ? __pfx___device_attach+0x10/0x10
[  813.688298][ T5946]  ? do_raw_spin_unlock+0x122/0x240
[  813.693491][ T5946]  bus_probe_device+0x185/0x260
[  813.698342][ T5946]  device_add+0x7b6/0xb50
[  813.702677][ T5946]  usb_set_configuration+0x1a87/0x20e0
[  813.708157][ T5946]  usb_generic_driver_probe+0x8d/0x150
[  813.713616][ T5946]  usb_probe_device+0x1c1/0x390
[  813.718466][ T5946]  ? __pfx_usb_probe_device+0x10/0x10
[  813.723828][ T5946]  really_probe+0x26a/0x9a0
[  813.728328][ T5946]  __driver_probe_device+0x18c/0x2f0
[  813.733619][ T5946]  driver_probe_device+0x4f/0x430
[  813.738640][ T5946]  __device_attach_driver+0x2ce/0x530
[  813.744010][ T5946]  bus_for_each_drv+0x251/0x2e0
[  813.748855][ T5946]  ? __pfx___device_attach_driver+0x10/0x10
[  813.754739][ T5946]  ? __pfx_bus_for_each_drv+0x10/0x10
[  813.760111][ T5946]  __device_attach+0x2b8/0x400
[  813.764873][ T5946]  ? __pfx___device_attach+0x10/0x10
[  813.770160][ T5946]  ? do_raw_spin_unlock+0x122/0x240
[  813.775354][ T5946]  bus_probe_device+0x185/0x260
[  813.780208][ T5946]  device_add+0x7b6/0xb50
[  813.784543][ T5946]  usb_new_device+0xa39/0x16f0
[  813.789316][ T5946]  ? __pfx_usb_new_device+0x10/0x10
[  813.794513][ T5946]  ? _raw_spin_unlock_irq+0x23/0x50
[  813.799710][ T5946]  ? lockdep_hardirqs_on+0x9c/0x150
[  813.804908][ T5946]  hub_event+0x2941/0x4a00
[  813.809321][ T5946]  ? do_raw_spin_unlock+0x122/0x240
[  813.814552][ T5946]  ? __pfx_hub_event+0x10/0x10
[  813.819312][ T5946]  ? process_scheduled_works+0x9ef/0x17b0
[  813.825051][ T5946]  ? _raw_spin_unlock_irq+0x23/0x50
[  813.830247][ T5946]  ? process_scheduled_works+0x9ef/0x17b0
[  813.835958][ T5946]  ? process_scheduled_works+0x9ef/0x17b0
[  813.841673][ T5946]  process_scheduled_works+0xae1/0x17b0
[  813.847239][ T5946]  ? __pfx_process_scheduled_works+0x10/0x10
[  813.853230][ T5946]  worker_thread+0x8a0/0xda0
[  813.857820][ T5946]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  813.864151][ T5946]  ? __kthread_parkme+0x7b/0x200
[  813.869094][ T5946]  kthread+0x70e/0x8a0
[  813.873153][ T5946]  ? __pfx_worker_thread+0x10/0x10
[  813.878256][ T5946]  ? __pfx_kthread+0x10/0x10
[  813.882838][ T5946]  ? _raw_spin_unlock_irq+0x23/0x50
[  813.888033][ T5946]  ? lockdep_hardirqs_on+0x9c/0x150
[  813.893225][ T5946]  ? __pfx_kthread+0x10/0x10
[  813.897806][ T5946]  ret_from_fork+0x3fc/0x770
[  813.902390][ T5946]  ? __pfx_ret_from_fork+0x10/0x10
[  813.907501][ T5946]  ? __switch_to_asm+0x39/0x70
[  813.912259][ T5946]  ? __switch_to_asm+0x33/0x70
[  813.917014][ T5946]  ? __pfx_kthread+0x10/0x10
[  813.921597][ T5946]  ret_from_fork_asm+0x1a/0x30
[  813.926371][ T5946]  </TASK>
[  813.929647][ T5946] Kernel Offset: disabled
[  813.933958][ T5946] Rebooting in 86400 seconds..