last executing test programs:

56.703357886s ago: executing program 0 (id=133):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)='V@', 0x2}], 0x1, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
recvmsg(r1, &(0x7f000000b680)={0x0, 0x0, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x5}], 0x1}, 0x0)

56.182246383s ago: executing program 0 (id=136):
capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7})
r0 = socket(0x10, 0x3, 0x0)
r1 = syz_io_uring_setup(0x837, &(0x7f0000000180)={0x0, 0x679a, 0x80, 0x4, 0x3ce}, &(0x7f0000000040)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r0, 0x80, &(0x7f00000000c0)=@nl=@proc={0x10, 0x0, 0x25dfdbfb}})
io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0)

55.252178771s ago: executing program 0 (id=139):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x42, &(0x7f00000023c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0xfd, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x6, 0x5}]}}}}}}}, 0x0)

54.904786812s ago: executing program 0 (id=142):
syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x8000, &(0x7f0000000480), 0x1, 0x3e0, &(0x7f00000008c0)="$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")
creat(&(0x7f0000000100)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x0, 0x0, 0x0, 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94)
r0 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0)
preadv2(r0, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0)

54.325573227s ago: executing program 0 (id=145):
openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r1 = dup(r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x880}, 0x890)
fallocate(r1, 0x11, 0x0, 0x7c000)

53.448245065s ago: executing program 0 (id=150):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
r1 = eventfd2(0x4, 0x1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1})
r2 = eventfd(0x2)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000180)={0x0, r2})

53.088537136s ago: executing program 32 (id=150):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
r1 = eventfd2(0x4, 0x1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1})
r2 = eventfd(0x2)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000180)={0x0, r2})

46.252320093s ago: executing program 2 (id=178):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched_retired(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000002640)=@delchain={0xc90, 0x65, 0x100, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x9, 0x5}, {0x2, 0xffe0}, {0xc, 0x5}}, [@f_tcindex={{0xc}, {0xc60, 0x2, [@TCA_TCINDEX_FALL_THROUGH={0x8, 0x4, 0x1}, @TCA_TCINDEX_MASK={0x6, 0x2, 0x7}, @TCA_TCINDEX_SHIFT={0x8, 0x3, 0x7}, @TCA_TCINDEX_ACT={0x4}, @TCA_TCINDEX_ACT={0xc40, 0x7, [@m_police={0xc3c, 0x16, 0x0, 0x0, {{0xb}, {0xc10, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0xd2a6, 0x0, 0x6, 0x8, 0x0, 0x8, 0xd4, 0x3, 0x4, 0xa, 0x9, 0x0, 0x8, 0x3ff, 0x1, 0x4, 0x5, 0x100, 0x2, 0x0, 0x169, 0x8, 0x9, 0x2, 0x1, 0xb69, 0x7, 0x0, 0x0, 0x5, 0x400, 0xfffffffc, 0x1, 0x10, 0x1742, 0x6, 0x1, 0x1, 0x3d5, 0x10000, 0x7ff, 0x4, 0x2, 0x4, 0x40, 0xc34d, 0x0, 0xcd2f, 0xd0a, 0x3, 0x0, 0x4, 0x5, 0x7, 0x8, 0xb8, 0x0, 0x7, 0xffffffff, 0x80, 0x40, 0x9, 0x8, 0x1, 0x4, 0x1000, 0x9, 0x200, 0x7, 0x3dc, 0xfff, 0x4, 0x9, 0x9, 0x7, 0x8001, 0xf, 0x8, 0x2, 0xffff7fff, 0x0, 0x10001, 0x6, 0x10000, 0x0, 0x5, 0x0, 0x81c2, 0xd, 0x91c6, 0xffff5317, 0x7, 0x0, 0x650, 0xf4, 0x9, 0x9, 0x8, 0x81, 0x2, 0x100, 0xa15b, 0xfffffff2, 0x0, 0x9, 0x4, 0xffcb, 0x2e6, 0xc6, 0x7, 0x4, 0x7, 0xffff, 0x8, 0x0, 0xf, 0xffffffff, 0x4e38, 0x4, 0x1ff, 0x2, 0x164e, 0xd0, 0x4, 0x0, 0x3ff, 0x100, 0xff, 0x1, 0x0, 0xe4, 0x6, 0x400, 0x67c147ec, 0x10000000, 0x2, 0x9, 0xd, 0x6, 0x6, 0x5, 0x3408, 0x4, 0x2, 0x6, 0x80000001, 0x0, 0x3, 0x4, 0x2, 0xfffffffe, 0x2, 0x3, 0x4, 0x5, 0x2, 0x2, 0x4, 0xa0, 0x8, 0x7f, 0x100, 0x0, 0x8, 0x800, 0x3, 0x599, 0x7fffffff, 0xb7e0, 0x9, 0x101, 0x3ff, 0x9, 0x7066f890, 0x0, 0xfffffffd, 0xc, 0x7, 0x66, 0x7, 0x0, 0xfffffffc, 0x1ff, 0xfffffe01, 0x4, 0x0, 0x3, 0x1, 0x80000001, 0x0, 0x5, 0x1, 0x8, 0x0, 0x2, 0xfff, 0x4, 0x2, 0xbf4, 0x4, 0x753, 0x4, 0xe, 0x5, 0x7fffffff, 0x4, 0x1ff, 0x8, 0x0, 0x3, 0x6, 0x5, 0x6, 0x7, 0x1ff, 0x2, 0x2, 0x5, 0x5, 0x80, 0x6398, 0x6, 0x8001, 0x2, 0x1, 0x0, 0xf, 0x10, 0x4, 0xfffffffc, 0x0, 0x6, 0x6, 0x2a, 0x10001, 0xdc, 0x7, 0x10, 0x4, 0x3, 0xe1, 0x401, 0x0, 0x6, 0x6, 0x6, 0xe, 0x5, 0xa3e4, 0x8, 0xb, 0x7, 0x80000001, 0x1000, 0x3, 0x1]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x9, 0xe389, 0x9, 0x2, 0x9, 0x6, 0x7fff, 0x7, 0x2, 0x5, 0xe362, 0x3, 0x6, 0xcb48, 0x5, 0x8, 0x1, 0x3, 0x7, 0x6, 0x8001, 0x8, 0xeda, 0x6, 0x3, 0x9, 0x3, 0x40000, 0x800, 0x9, 0x45, 0x8000, 0x7, 0x1000, 0xdcc, 0x6, 0x0, 0x3, 0x0, 0x3, 0x8, 0x8, 0x4, 0xc2e, 0xea0b, 0x7, 0x6134, 0x7, 0x3, 0x8, 0xff, 0x0, 0x7f, 0x9, 0x8, 0x0, 0x7, 0x2, 0x1, 0xfffffffa, 0xfffffff8, 0xa4c0, 0x1, 0xe, 0x101, 0x300c38ab, 0xffffff80, 0x70b5, 0x7, 0x6, 0x7fffffff, 0x98, 0x1, 0x5, 0xffffffff, 0x73, 0x2296, 0x3, 0xfffffff8, 0x9, 0x8, 0x1f1, 0x1, 0x40, 0x80000000, 0xa, 0x3, 0x7, 0x9, 0xffffffff, 0x3, 0x5, 0x6, 0x228, 0x490, 0xfffffb8f, 0x3, 0x10000, 0x8, 0xfffffffc, 0x80000001, 0xc6c, 0x8, 0x3ff, 0x1, 0x5, 0x1, 0xffff, 0x6d1f, 0x5, 0x8, 0x4, 0x6, 0x1, 0x9, 0x1ff, 0x2, 0xb1df, 0x0, 0x4730, 0x2, 0x3, 0x8001, 0xc, 0xf, 0x10, 0xfffffffd, 0x0, 0x80000001, 0x80000001, 0xdff, 0x5, 0x51b8, 0x7f, 0x200000, 0x100, 0x8, 0x9, 0x3, 0x8, 0x2, 0x3, 0x0, 0x8, 0x762a, 0x3, 0x5, 0x3, 0x5, 0x9, 0x3, 0x5, 0x8, 0x8, 0x101, 0x80000000, 0xffffff66, 0x4, 0x5, 0x0, 0x200, 0x7ff, 0x8, 0x9, 0x1, 0xffffff88, 0x5, 0x5, 0x2, 0x7ff, 0x6, 0x4, 0x3, 0xffffff4f, 0xd, 0x1, 0x9, 0x0, 0x1, 0x871, 0x9, 0x9, 0x584, 0x0, 0x10001, 0x7fff, 0x8, 0x54db, 0x200, 0x80000001, 0xe4f, 0x6, 0xfffffff7, 0xdc2f, 0xeb4f, 0x3, 0x4, 0x7, 0x0, 0x3, 0x8001, 0x6, 0x7fff, 0x1, 0x6, 0x9, 0x2c, 0x4, 0x21, 0x7fff, 0x24, 0x40000, 0x10, 0x4, 0x1, 0x10001, 0x80, 0x757, 0x6, 0xf3df, 0x7, 0x4, 0x8, 0x1, 0x7, 0x8, 0xcc, 0x3, 0x1, 0xb, 0xfffffffb, 0xb, 0x6, 0x800, 0x7, 0x7ff, 0x5, 0x6, 0xdea, 0x8, 0xdbc1, 0x1e1, 0x10001, 0x8, 0x80000000, 0x8, 0x7f, 0x7f, 0x400, 0xfff, 0x1, 0x6, 0x1000, 0x878, 0x7, 0x70dd]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x0, 0xfffffffc, 0x8001, 0x2f6, 0x2, 0x4, 0x80000000, 0x100, 0x9, 0x8be6, 0x61a3, 0xc10d, 0x81, 0xfffffffa, 0x0, 0x5, 0x7f, 0x9, 0x93, 0x919, 0xfe0, 0x9, 0x1, 0x5, 0x8, 0x1, 0x9, 0x8a, 0xfffffff9, 0x7fff, 0x6, 0x3, 0x9, 0x4, 0xb4d, 0x2, 0x1, 0xe346, 0x1, 0x9b6c, 0x8, 0x8, 0x5, 0x1, 0x80000000, 0x80, 0x1c, 0x1, 0x7, 0x8, 0x8000, 0x6, 0x5, 0xffff, 0x8, 0x5, 0xd2, 0x0, 0x4, 0x9, 0x9, 0x7fffffff, 0xf9, 0x1, 0x7fffffff, 0x8, 0x2, 0xfffffffb, 0x10000, 0x4, 0xfffffe98, 0xab6, 0x6, 0x2, 0x8, 0x2, 0x2, 0x7, 0x6, 0x6ca8, 0x4, 0x9, 0x400, 0xe, 0x9, 0x8001, 0x3, 0x2, 0x4, 0x0, 0x40, 0x5, 0x5, 0xff, 0x0, 0x3, 0xfff, 0x4, 0x3, 0x6, 0x6, 0x1, 0x3ff, 0x9, 0x4d26, 0x0, 0x7ff, 0x3, 0x6b, 0xffff, 0x100, 0x80, 0x1, 0x5, 0xffffff12, 0x80000000, 0x38bec763, 0x8, 0x6, 0x3, 0x7, 0x8, 0xfff, 0x7, 0xff, 0xfffffff5, 0x1, 0x0, 0x0, 0x8001, 0x3d, 0x2, 0xf0, 0xa9, 0x1, 0xc, 0x0, 0x3, 0xa37, 0x0, 0x8, 0x81, 0x1014, 0x5, 0x6, 0x400, 0x2, 0x2, 0x8, 0x3, 0x9, 0x4, 0x1, 0x1, 0x6e07, 0x2, 0x1, 0x5, 0x4, 0x5, 0x1000, 0x2d23, 0x9, 0xbd6, 0x3, 0x4, 0x1, 0x4, 0x1, 0x5, 0x0, 0x1, 0x7, 0xa, 0xb543, 0x100, 0x3, 0x30, 0x3af, 0x3, 0x0, 0xe122, 0xfffffffa, 0x9bf8, 0x8, 0x2f, 0x8, 0x5, 0x100, 0x3, 0x8, 0x400, 0x9, 0x0, 0x9, 0x7, 0x7, 0x9b6, 0x6, 0x7, 0x1d8, 0x6, 0xdd6, 0x5, 0x1, 0x7, 0xd88, 0x1, 0x3, 0x1, 0x49e, 0x6, 0x8, 0x7838, 0xa, 0x0, 0x9, 0x6, 0x0, 0x2, 0x4, 0x1, 0x5, 0x0, 0x7, 0x7, 0x6, 0xffff, 0x0, 0x5, 0xc4e0, 0x5, 0x200, 0x2, 0xfffffff8, 0x6, 0x4, 0x6, 0x3, 0x0, 0x8, 0x5, 0xfffffffd, 0x5, 0xecb, 0x3, 0x7, 0x9, 0xffffffff, 0x7f, 0x9, 0x5, 0x2, 0x3, 0xfffffffa]}]]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0xc90}, 0x1, 0x0, 0x0, 0x4044000}, 0x1)
recvmsg$unix(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001600)=""/4120, 0x1018}], 0x1}, 0x12060)

45.79388149s ago: executing program 2 (id=182):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]})
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r0, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast]}, 0x48)
r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
bind$netrom(r1, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48)
listen(r1, 0x80)

44.997203884s ago: executing program 2 (id=187):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000080), &(0x7f0000000180)='%ps    \x00'}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x18)
openat$uhid(0xffffffffffffff9c, &(0x7f0000002e40), 0x802, 0x0)

44.68449254s ago: executing program 2 (id=188):
syz_mount_image$udf(&(0x7f0000000c40), &(0x7f0000000c80)='./file0\x00', 0x2810489, &(0x7f0000000580)={[{@lastblock={'lastblock', 0x3d, 0xe2}}, {@unhide}, {@gid_forget}, {@nostrict}, {@unhide}, {@undelete}, {@shortad}, {@uid_ignore}, {@shortad}, {@uid}, {@adinicb}, {@uid_ignore}, {@fileset}, {@uid_forget}]}, 0x4, 0xc24, &(0x7f0000000d00)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0)
mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0)
mount$bind(&(0x7f0000000940)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x887008, 0x0)

43.781586223s ago: executing program 2 (id=192):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x200000000)
write$vhost_msg(r0, &(0x7f0000000540)={0x1, {&(0x7f0000000040)=""/62, 0x3e, 0x0, 0x2, 0x2}}, 0x48)
write$vhost_msg_v2(r0, &(0x7f0000000280)={0x2, 0x0, {&(0x7f0000000780)=""/267, 0x10b, 0x0, 0x2, 0x2}}, 0x48)
write$vhost_msg_v2(r0, &(0x7f00000039c0)={0x2, 0x0, {&(0x7f0000000680)=""/184, 0xfffffefd, 0x0, 0x3, 0x2}}, 0x48)
write$vhost_msg_v2(r0, &(0x7f0000000200)={0x2, 0x0, {&(0x7f0000000080)=""/183, 0xb7, 0x0, 0x2, 0x3}}, 0x48)

43.231958588s ago: executing program 2 (id=193):
r0 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000280)='team0\x00', 0x10)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10)

42.505720548s ago: executing program 33 (id=193):
r0 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000280)='team0\x00', 0x10)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10)

41.362550625s ago: executing program 4 (id=200):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f00000021c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x880}], 0x1, 0x80001)
read$alg(r1, &(0x7f0000002300)=""/4128, 0x1020)

41.135977049s ago: executing program 4 (id=202):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8)
r1 = accept(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf1767f157", 0xfcdc}], 0x1, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
recvmsg(r1, &(0x7f000000b680)={0x0, 0x0, &(0x7f000000b600)=[{&(0x7f000000b500)=""/153, 0x99}], 0x1}, 0x0)

40.960834259s ago: executing program 4 (id=204):
sched_setscheduler(0x0, 0x2, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x4)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x8a2e, @loopback, 0x8}, 0x1c)
sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0xffd8)

39.987276552s ago: executing program 4 (id=207):
syz_mount_image$hfsplus(&(0x7f0000000180), &(0x7f0000001480)='./file1\x00', 0xc00a, &(0x7f0000000040)=ANY=[], 0x11, 0x6ae, &(0x7f0000000400)="$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")
r0 = open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]})
write$uinput_user_dev(r0, &(0x7f0000000640)={'syz0\x00', {0x3, 0x6, 0x7}, 0x49, [0x3, 0x0, 0x4, 0x1, 0x1, 0x2, 0xf3, 0x0, 0x8, 0xf, 0x7, 0x3, 0xfffffffe, 0x101, 0x400, 0x3, 0x4, 0x3, 0xa, 0x4, 0xfc, 0xfffffffe, 0x400, 0x100, 0x8000, 0xfff, 0x400, 0x0, 0x3, 0x401, 0x9, 0xfffffffe, 0x10, 0x3, 0x4, 0x0, 0x27, 0x7, 0x0, 0x8, 0x1195, 0x8, 0x5, 0x8, 0x3, 0x2, 0x10001, 0x3, 0x2b2, 0x4, 0x1ad0, 0x9, 0x6, 0x4, 0xedbe, 0x4, 0x2, 0x7, 0xa3, 0xfffffff8, 0x6, 0x80, 0x10000022, 0x81], [0x1, 0x8001, 0x563, 0x80000001, 0x0, 0x0, 0x4, 0x854f002, 0x2, 0x8, 0x8001, 0xd2, 0x8b, 0x8ab, 0x3, 0x2a6d2895, 0x5, 0x3, 0x100, 0x201, 0x6, 0x0, 0x5, 0x7, 0x4a63, 0x1, 0x9, 0x8, 0x1000, 0x9, 0x4, 0xf, 0x7, 0x401, 0x7, 0x8, 0x8000, 0xff, 0x4, 0xb0f, 0x8001, 0xdfcf, 0xc1f40800, 0x9, 0x2, 0x2, 0x6, 0x0, 0x9, 0x1000f, 0x0, 0x2, 0xfffff2a1, 0x2000009, 0x3cb, 0x5bda, 0x1, 0x40defe, 0x7, 0x7, 0x4, 0x524, 0x8001, 0x41], [0x6, 0x4, 0x7, 0xe000, 0x7, 0x3, 0x123, 0xc, 0x1, 0x4, 0x6, 0xfffffff8, 0x9, 0x300000, 0x80000001, 0x4, 0x8008, 0x4, 0xd, 0x9, 0x8001, 0x2, 0x2, 0x4, 0x6, 0x1, 0x6, 0x2, 0x400, 0x20400, 0xff, 0x166, 0x7, 0xc8f, 0x3, 0x8, 0x3, 0x1, 0x1000, 0x7fffffff, 0x9, 0x8, 0x1000, 0x10, 0x6, 0xfeb, 0x100, 0x8, 0x3ff, 0x3a, 0xa18858f, 0x9, 0x1, 0x9, 0xffc00000, 0x4841, 0x4, 0x10, 0x4, 0x3, 0xf, 0x40, 0x5ff, 0x3a], [0xaeaf, 0x6, 0x2, 0x7ff, 0x3ff, 0x800, 0x8, 0x6, 0x1, 0x5, 0x9, 0x2, 0x8a4, 0xd5, 0xdd, 0xb5, 0x2, 0x1, 0x2, 0xcb32, 0x3, 0xf018, 0x9, 0x0, 0xda19, 0x80000001, 0x10001, 0x0, 0x4, 0x0, 0x5, 0xcc1, 0x8, 0x1, 0x2, 0xb, 0x3, 0x1, 0x0, 0xb7b, 0xffffff4a, 0x4, 0x7886, 0xbf8d, 0x9, 0x46dc, 0x1, 0x40, 0x9, 0x8, 0x10000, 0x1, 0x8, 0x10, 0x770, 0x0, 0x10001, 0x3ff, 0x5, 0x7, 0x8, 0x7d1, 0x1, 0x8]}, 0x45c)

39.268634384s ago: executing program 4 (id=210):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000001400)=0x7)
syz_mount_image$xfs(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@gqnoenforce}, {@noquota}, {@discard}, {@inode64}, {@gqnoenforce}]}, 0x1, 0xb8e6, &(0x7f0000017140)="$eJzs3Xts3WX9wPGnXdutkMH4hY7LT2RMBgxkW7dBKQTXdqyjXCqXgR0wobICk47LKLhxLSEkoGIA44WYRYl4jRLFQSQKDiPKxWGMAeIfRALGgMmif4EaQ82355zSHkqzPuV5mrHXK1nP+X5PP08v7/N8T1jITk/nuR0h1IWSwVDtpbe2PvHFdZ1P/vxL929/+K4XHimdbZtVfritfNtevu0Iw4sNn64tnar7+rZHa4uD2tHr7tXYWLNPCJdWrdNSurmpufJ5Q1XKp+dVHq8dOaz5fOnPiL2LD79vW9cbQpgzar4mhLDkPT/oHqqnfXVn+XcSRnWbUX645t3Hhm/rSn9WPBfCiu3hfZ8f06r4Pud0zv74wdP9jewOetpXd1X1byt3rinvx7bqPbgnqn6ev/7QojvLv8Lh59s0JpySnvbOM8IE+/i4/160YKh03awPITSEEGaGEGZNdw8+GO0dy4rX7NrKcTl7Zf/PGe95ceTS1/8dQphbvIyXrhel1wJg99LesWzlOPu/YaL933rHtjftf9j9dbV3LCv2etX+nzXR/t/QuvbF0r5vaylNvTO9PwQAAAAAMK7rttx4ZW9/f98md9xxx52RO9N9ZQJSe3fTT/d3AgAAAAAAAAAAAOyqHP878XT/jAAAAAAAAAAAAADwYdHV3b5zRs2YUzNGHxyyo2/4dvnbPVd8756h9ZXb8sOnj7PkmPf5HxoaGmrduaLyXuwzq94ve1b1cLH+YN3bz5QP26rff7B++Gx9uOSyDf19S4ovtbI+bC4Omot1O+vDvcXB0uJgdX34fnGwbPigMWwvDhZdenX/+uLEqZG/sQ+Xru7BMGNMsTDm2TC6/2D9/O2V2wmWrKxWF8r999//vE1Vj1WM3//d9dvf733J+WBMrv+izZXbCZZ8z/4/6I01vxzvsffvP7J+h/5pjXP9H9Oo+rpfdf2fN86SI/NzX3rmiqL/Y0/etaZ8qm5Xrv+j1l9Z3X948ZHrf7HUKZXrf/HasmpKv4w9UFf37Tsn2v8T96+rvK7XjpodWe2Mk15oLfrvs3Dbn8qn6ifZ/5SJ9n/NvPdcT5ikru4Hh6r2/yT6hyPGWXKkyddePu25ov9PnlnTNOqxyfRfVd1/8cDGaxZft+XGYzds7L287/K+q1qWLD/h+OaW5c2Lh68IpY9T+53sSaa2/4ff/3/0TE0IC0bmFxz/zgVF/7nf7uwpn5o1yf6dE+7/S8Z+r4wyvzY0NITNvQMDm5pLHyuHS0sfS582Tv9JvP5/7KjypzWWb2tCOHBkvuWApgOL/k0zVn2kfKphkv1XT9h/cOTrEmmK+3991cyY/oPPP/izov/8H55f+TuFyb7+nzpR/9pv2f9T1dVd9Rc+H7Ci/1/rFp4YOd7lv//SytH/V/svODdy/DT908rR/4b/P2wgcvx0/dOK61/71K5+ZtG/cfnJt0/6S5ScoX9aOfb/9pNavxs5fqb+aeXo/41jjvtD5Hi3/mnl6H/O4c1vRI5/Uv+0cvT/2/9tuTBy/Cz908rRf/Eht9wcOX62/mnl6D8w+9qmyPFz9E8rR/8naq9fGjl+rv5p5ej/62M3/C5yfI3+aeXov/f8ja9Gjp+nf1o5+p+1tPfuyPHz9U8rR/8HTu57OHL8U/qnlaP/xQc/elnkeI/+aeXo/9Wmn7ZHjq/VP60c/XfUP3FU5PgF+qeVo3/dXo/vGzl+of5p5eh/04Lv/Cdy/CL908rR/5GjH3wlcnyd/mnl6P/miT/eFjn+af3TytF/3nE/+HLk+MX6p5Wj/zWH/fHlyPFL9E8rR//HF734z8jxXv3TytH/tU/8+YHI8c/on1aO/sc0v/Jk5Pil+qeVo/+ajz413r8TtCvW659Wov4NlTtF/637Pd0fuU6f/mnl2P+/rXm2PnL8Mv3TytF/3312zI8cv1z/tHL0f3bhIX+PHL9C/7Ry9A9HHLQjcnyD/mnl6H/h8U0PRY5/Vv+0cvS/v3W/OyLHr9Q/rRz9d86dfUPkeL/+aeXof/hBjWdHjm/UP60c/W9rrD8hcvwq/dPK0f+xhppDI8ev1j+tHP1rl3T9KHL8Gv3TytH/+RVnfiFy/Fr900raf+9S/3sXt78WucIm/dPKsf/Xzlv1dOT4dfqnlaP/Efuujf0X2Qf0TytH/3+EdQdEjl+vf1o5+m+bc/atkeM36J9Wjv63HHre2sjxz7301taZQf9kcvT/xQl33hc5vtn+TytH/00ttz8WOb5F/7Ry9F945D1/iRy/Uf+0cvR/9ai7/xU5fpP+aeXo/82ZX5kdOX6z/mnl6H/+rPuOjhy/Rf+0cvSffeDWlZHjt+qfVo7+vznggfWR47fpDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwP/YgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwg4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRV24EAAAAAAAMj/tRGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsHcn4JrOhf/Hz2x2krIWyV6yy5LCoEFpsSbZd1lDWQtRIVtSSLJHlGQpCWm3ZKkslZQilX3fl/81Zo4Yn/FTl39qPq/Xdc082z33uZ/v+/4+53Hu89wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHjlrT1q9eUGBoaPvbX3ix6//uFjLzpovVEXn3/I4Zecuf9VZ4+5d9lJxj687DPjGHh2ZcuOfmzomEWGH3XuKUNH3xj6/PVONumkQ6YaGLJJ3qo91v8/NnvWwStDn7s55MAxf54z+bNffeqNzhoYGJj6/1hfrbVHrjhq9OCN+fNct2FjHx57/3PXh4/5s9QGAwNLrTsw3v3j1ffUmqNWfbW34X/B2iNXXHmc/gNjOz/bfdz53Wrc/XzYfusOeVXDvULWHjlqldGtxzePd93lkGf3gYGB4ccPDAw/YWBg+IkDA8NPerV78MoYudwiy41+zR+8Pab63oNvCNLr+5DH33fu6O8ZI8Z8nxh+8uD3AuB/y8jlFlk+zP+JBh9P8//WJ29Zy/yH/30rj1xukYHnvc8fc+/eg/99H+f/0jNfeNOrt8UAAADAv+rpuy64eOyxvqEDA7MMjHO891ljfy4w5KxLrrnmVdvQ/w7hONmLf2fif8zozpOcPuvAwHZrvtqbwqtggjiOzb9N/276d9O/m/7d9O+mfzf9u+nfTf9u+nfTv5v+3fQvNp7j/1MPXu457LwVxi4657VHbL3GuP9+9H2T/Me3+lUzoR7/H9hqyJiWo5tvNTAw8P6Rq60xz8DAwBpbH3HtbAPPPbbE6MeWmmbY2BMEzPPs3+8ez4oHP03+7MkaJntuHWc9u/6Vnzlh2JBxNuJ5Nn3m4FO3XPuRRce9nGv8z+O580tc/p4bjhz8LMvQcRYa3746uP7B5zJu57HbPs/obV9g5213WGCn3Xafb6ttN9pisy02227xBRddYrGFFl90oQU232qbzRYc8/f4xmzMqSuWfzljNtG4Y3bXyOeP2bjPbXxjNutLj9mza9zy0uunGxyz4f/imC3/0mM261aD27rsiIENnx2b0V9yhREDu46+sdDEo3ehscvOMHrZd04zdGDgsH8+0dHXJn5uHxyy91avwHlLxl6OHHu5XDxvyXnjO2/JwCbjrGfJMRc7XzS43Lifsx5798s+b8nSo/ade/RcHOff///wb33/f1GvJYY8N1CDJw0Zu8yYXv88z8TgsC37vPNMLJ7OJfNKetH2zjr0uf06be/Yz8UNGWf8X+pzcQPz3LrhGWOe17KLj/lXT//bUfJrxyr/HL3gBa8dAy/92jHsn1f/ee9mV8487mvHe8e/iS+YF4NjNPE4C43vtePSR4bvPXr9g9s8nteOVbYa+0Hjf752jP6yyw++doze9lEjBg4bfWPh0TdWHDFw2ugbizx7Y9KBS0bfmH+T7bfZdPQdK714v51nyAt+4THst6PG2W9fxvlxlrl8YGCZS9LzGv9wZmm/negltjd/nnvgJT/PPfcBT64+MDAw3Zjv0qOf5Jht/3ek7R3+0tsbzj8x8FLnnxhYcokzln+Ft/e5efbsvjb2dFErjeffvGCeTf2iebbPsOfNjJf7vmbTsPyY6zM8t7ZzTrhi78ExGjHOeid58duBF3y9weeS+g++53u+occPDHmpsVnx5YzNVC89Ni/3/cs8s495fNKXGJsZpp1+8cGxmejFYxMNrn/F8YzN898PP9+QvQcmfeHYDH/2PfAcY8dm1MsZmylemf1msrD8mOtzPnfXOk8vNufg2ISxiN//B9c/6l8dmw2f22/mePax2YYOTDTRwK4b7bzzjguN+Xvw5sJj/n7pObjCyxnLSV6ZsZxp7KvO0BcPznN3LXnVUqu8xByMBte/wr86lrMODB38b+6t4ux+Rfj5Tzf9u+nfTf9u+nfTv5v+3fQvNp7j/7MO/lxw3ivnuWbsD2NGXHbGWpu+2tv7Kpugj/+P7fuC4/+brnXGZUMHnnvsJY/Pjlnmv/L47OJjLvZYaHC5cY8Pjr37ZR+fvfDQ89f9Dx2f/bcMztWX8XNDr//d9O+mfzf9u+nfTf9u+nfTv5v+3fTvpn83/bvp303/YuM5/r/g4O8BPH3nzjePPRA6YuORM/7bn7OaQEzQx//H9n3B8f9LZhy58dCB5x57yeP/Y5bpOP6/44237fvffPx/cK46/s//Qf9u+nfTv5v+3fTvpn83/bvp303/bvp307+b/t30Lzae4//LDv4ewDZPX3fP4O8DXH3Mctu/2tv7KptQj//7///38vrfTf9u+nfTv5v+3fTvpn83/bvp303/bvp307+b/t30Lzb2+P/AOP/bww/aL6Jw/P9/23j6r6p/1NJ/Nf2jlv6r6x+19F9D/6il/5r6Ry3919I/aun/If2jlv5r6x+19P+w/lFL/3X0j1r6f0T/qKX/uvpHLf3X0z9q6b++/lFL/w30j1r6b6h/1NJ/I/2jlv4b6x+19N9E/6il/6b6Ry39N9M/emH/CWCExtN/c/2jlvm/hf5RS/8t9Y9a+m+lf9TS/6P6Ry39t9Y/aum/jf5RS/9t9Y9a+m+nf9TSf3v9o5b+O+gftfT/mP5RS/8d9Y9a+u+kf9TSf2f9o5b+H9c/aun/Cf2jlv676B+19N9V/6il/276Ry39d9c/aum/h/5RS/899Y9a+n9S/6il/6f0j1r676V/1NJ/b/2jlv776B+19P+0/lFL/331j1r676d/1NL/M/pHLf0/q3/U0v9z+kct/ffXP5oA+w+k/gfoH02A/eP8P1D/qKX/5/WPWvofpH/U0v9g/aOW/ofoH7X0P1T/qKX/YS/qP+l/dLP+W7X0/4L5H7X0P1z/qKX/F/WPWvofoX/U0v9L+kct/b+sf9TS/0j9o5b+R+kftfQ/Wv+opf9X9I9a+h+jf9TS/6v6Ry39j9U/aun/Nf2jlv7H6R+19D9e/6il/wn6Ry39T9Q/aul/kv5RS/+T9Y9a+p+if9TS/+v6Ry39T9U/aul/mv5RS/9v6B+19D9d/6il/xn6Ry39v6l/1NL/W/pHLf3P1D9q6f9t/aOW/mfpH7X0/47+UUv/s/WPWvqfo3/U0v9c/aOW/ufpH7X0/67+UUv/7+kftfQ/X/+opf/39Y9a+l+gf9TS/wf6Ry39L9Q/aul/kf5RS/+L9Y9a+v9Q/6il/yX6Ry39f6R/1NL/x/pHLf1/on/U0v+n+kct/X+mf9TS/+f6Ry39f6F/1NL/Uv2jlv6X6R+19L9c/6il/xX6Ry39f6l/1NL/Sv2jlv5X6R+19L9a/6il/zX6Ry39f6V/1NL/1/pHLf1/o3/U0v9a/aOW/tfpH7X0v17/qKX/DfpHLf1/q3/U0v93+kct/X+vf9TS/0b9o5b+f9A/aul/k/5RS/8/6h+19P+T/lFL/5v1j1r6/1n/qKX/X/SPWvrfon/U0v9W/aOW/n/VP2rpf5v+UUv/v+kftfT/u/5RS/9/6B+19L9d/6il/x36Ry3979Q/aul/l/5RS/+79Y9a+t+jf9TS/179o5b+9+kftfS/X/+opf8D+kct/R/UP2rp/5D+UUv/h/WPWvo/on/U0v9R/aOW/o/pH7X0f1z/qKX/E/pHLf2f1D9q6f+U/lFL/6f1j1r6P6N/VNJ/yID+UUv/IfpHLf2H6h+19B+mf9TSf7j+UUv/EfpHLf0n0j9q6T+x/lFL/0n0j1r6Tzqe/iP+U9v1X6ql/2Tmf9TSf3L9o5b+U+gftfSfUv+opf9U+kct/V+jf9TSf2r9o5b+r9U/auk/jf5RS//X6R+19H+9/lFL/2n1j1r6T6d/1NJ/ev2jlv4z6B+19J9R/6il/0z6Ry3936B/1NL/jfpHLf1n1j9q6T+L/lFL/zfpH7X0n1X/qKX/m/WPWvrPpn/U0n92/aOW/nPoH7X0n1P/qKX/XPpHLf3n1j9q6T+P/lFL/7foH7X0f6v+UUv/efWPWvq/Tf+opf98+kct/efXP2rpv4D+UUv/BfWPWvovpH/U0n9h/aOW/ovoH7X0X1T/qKX/2/WPWvovpn/U0n9x/aOW/kvoH7X0X1L/qKX/O/SPWvovpX/U0v+d+kct/d+lf9TSf2n9o5b+y+gftfRfVv+opf9I/aOW/svpH7X0X17/qKX/CvpHLf3frX/U0n+U/lFL/xX1j1r6r6R/1NJ/Zf2jlv7v0T9q6f9e/aOW/qvoH7X0f5/+UUv/9+sftfT/gP5RS/8P6h+19F9V/6il/2r6Ry39V9c/aum/hv5RS/819Y9a+q+lf9TS/0P6Ry3919Y/aun/Yf2jlv7r6B+19P+I/lFL/3X1j1r6r6d/1NJ/ff2jlv4b6B+19N9Q/6il/0b6Ry39N9Y/aum/if5RS/9N9Y9a+m+mf9TSf3P9o5b+W+gftfTfUv+opf9W+kct/T+qf9TSf2v9o5b+2+gftfTfVv+opf92+kct/bfXP2rpv4P+UUv/j+kftfTfUf+opf9O+kct/XfWP2rp/3H9o5b+n9A/aum/i/5RS/9d9Y9a+u+mf9TSf3f9o5b+e+gftfTfU/+opf8n9Y9a+n9K/6il/176Ry3999Y/aum/j/5RS/9P6x+19N9X/6il/341/Z8ZY6+Xt3RL/8/U9P/XtPT/rP5RS//P6R+19N9f/6il/wH6Ry39D9Q/aun/ef2jlv4H6R+19D9Y/6il/yH6Ry39D9U/aul/mP5RS/8v6B+19D9c/6il/xf1j1r6H6F/1NL/S/pHLf2/rH/U0v9I/aMJt//Q59875Cj9owm3/wvn/9H6Ry39v6J/1NL/GP2jlv5f1T9q6X+s/lFL/6/pH7X0P07/qKX/8fpHLf1P0D9q6X+i/lFL/5P0j1r6n6x/1NL/FP2jlv5f1z9q6X+q/lFL/9P0j1r6f0P/qKX/6fpHLf3P0D9q6f9N/aOW/t/SP2rpf6b+UUv/b+sftfQ/S/+opf939I9a+p+tf9TS/xz9o5b+5+oftfQ/T/+opf939Y9a+n9P/6il//n6Ry39v69/1NL/Av2jlv4/0D9q6X+h/lFL/4v0j1r6X6x/1NL/h/pHLf0v0T9q6f8j/aOW/j/WP2rp/xP9o5b+P9U/aun/M/2jlv4/1z9q6f8L/aOW/pfqH7X0v0z/qKX/5fpHLf2v0D9q6f9L/aOW/lfqH7X0v0r/qKX/1fpHLf2v0T9q6f8r/aOW/r/WP2rp/xv9o5b+1+oftfS/Tv+opf/1+kct/W/QP2rp/1v9o5b+v9M/aun/e/2jlv436h+19P+D/lFL/5v0j1r6/1H/qKX/n/SPWvrfrH/U0v/P+kct/f+if9TS/xb9o5b+t+oftfT/q/5RS//b9I9a+v9N/6il/9/1j1r6/0P/qKX/7fpHLf3v0D9q6X+n/lFL/7v0j1r6361/1NL/Hv2jlv736h+19L9P/6il//36Ry39H9A/aun/oP5RS/+H9I9a+j+sf9TS/xH9o5b+j+oftfR/TP+opf/j+kct/Z/QP2rp/6T+UUv/p/SPWvo/rX/U0v8Z/aOS/s9e1f/FWvoP0T+aEPs/M2zM1ef3H6p/NCH2T/N/mP5RS//h+kct/UfoH7X0n0j/qKX/xPpHLf0n0T9q6T+p/lFL/8n0j1r6T65/1NJ/Cv2jlv5T6h+19J9K/6il/2v0j1r6T61/1NL/tfpHLf2n0T9q6f86/aOW/q/XP2rpP63+UUv/6fSPWvpPr3/U0n8G/aOW/jPqH7X0n0n/qKX/G/SPWvq/Uf+opf/M+kct/WfRP2rp/yb9o5b+s+oftfR/s/5RS//Z9I9a+s+uf9TSfw79o5b+c+oftfSfS/+opf/c+kct/efRP2rp/xb9o5b+b9U/auk/r/5RS/+36R+19J9P/6il//z6Ry39F9A/aum/oP5RS/+F9I9a+i+sf9TSfxH9o5b+i+oftfR/u/5RS//F9I9a+i+uf9TSfwn9o5b+S7b3H5rvbun/jvb+49HSfyn9o5b+79Q/aun/Lv2jlv5L6x+19F9G/6il/7L6Ry39R+oftfRfTv+opf/y+kct/VfQP2rp/279o5b+o/SPWvqvqH/U0n8l/aOW/ivrH7X0f4/+UUv/9+oftfRfRf+opf/79I9a+r9f/6il/wf0j1r6f1D/qKX/qvpHLf1X0z9q6b+6/lFL/zX0j1r6r6l/1NJ/Lf2jlv4f0j9q6b+2/lFL/w/rH7X0X0f/5zt6yrFXWvp/RP+opf+6+kct/dfTP2rpv77+UUv/DfSPWvpvqH/U0n8j/aOW/hvrH7X030T/qKX/pvpHLf030z9q6b+5/lFL/y30j1r6b6l/1NJ/K/2jlv4f1T9q6b+1/lFL/230j1r6b6t/1NJ/O/2jlv7b6x+19N9B/6il/8f0j1r676h/1NJ/J/2jlv476x+19P+4/lFL/0/oH7X030X/qKX/rvpHLf130z9q6b+7/lFL/z30j1r676l/1NL/k/pHLf0/pX/U0n8v/aOW/nvrH7X030f/qKX/p/WPWvrvq3/U0n8//aOW/p/RP2rp/1n9o5b+n9M/aum/v/5RS/8D9I9a+h+of9TS//P6Ry39D9I/aul/sP5RS/9D9I9a+h+qf9TS/zD9o5b+X9A/aul/uP5RS/8v6h+19D9C/6il/5f0j1r6f1n/qKX/kfpHLf2P0j9q6X+0/lFL/6/oH7X0P0b/qKX/V/WPWvofq3/U0v9r+kct/Y/TP2rpf7z+UUv/E/SPWvqfqH/U0v8k/aOW/ifrH7X0P0X/qKX/1/WPWvqfqn/U0v80/aOW/t/QP2rpf7r+UUv/M/SPWvp/U/+opf+39I9a+p+pf9TS/9v6Ry39z9I/aun/Hf2jlv5n6x+19D9H/6il/7n6Ry39z9M/aun/Xf2jlv7f0z9q6X++/lFL/+/rH7X0v0D/qKX/D/SPWvpfqH/U0v8i/aOW/hfrH7X0/6H+UUv/S/SPWvr/SP+opf+P9Y9a+v9E/6il/0/1j1r6/0z/qKX/z/WPWvr/Qv+opf+l+kct/S/TP2rpf7n+UUv/K/SPWvr/Uv+opf+V+kct/a/SP2rpf7X+UUv/a/SPWvr/Sv+opf+v9Y9a+v9G/6il/7X6Ry39r9M/aul/vf5RS/8b9I9a+v9W/6il/+/0j1r6/17/qKX/jfpHLf3/oH/U0v8m/aOW/n/UP2rp/yf9o5b+N+sftfT/s/5RS/+/6B+19L9F/6il/636Ry39/6p/1NL/Nv2jlv5/0z9q6f93/aOW/v/QP2rpf7v+UUv/O/SPWvrfqX/U0v8u/aOW/nfrH7X0v0f/qKX/vfpHLf3v0z9q6X+//lFL/wf0j1r6P6h/1NL/If2jlv4P6x+19H9E/6il/6P6Ry39H9M/aun/uP5RS/8n9I9a+j+pf9TS/yn9o5b+T+sftfR/Rv+opP+wAf2jlv5D9I9a+g/VP2rpP0z/qKX/cP2jlv4j9I9a+k+kf9TSf2L9o5b+k+gftfSfVP+opf9k+kct/SfXP2rpP4X+UUv/KfWPWvpPpX/U0v81+kct/afWP2rp/1r9o5b+0+gftfR/nf5RS//X6x+19J9W/6il/3T6Ry39p9c/auk/g/5RS/8Z9Y9a+s+kf9TS/w36Ry3936h/1NJ/Zv2jlv6z6B+19H+T/lFL/1n1j1r6v1n/qKX/bPpHLf1n1z9q6T+H/lFL/zn1j1r6z6V/1NJ/bv2jlv7z6B+19H+L/lFL/7fqH7X0n1f/qKX/2/SPWvrPp3/U0n9+/aOW/gvoH7X0X1D/ZK+W/guN6T/xq7VZ/61a+i9s/kct/RfRP2rpv6j+UUv/t+sftfRfTP+opf/i+kct/ZfQP2rpv6T+UUv/d+gftfRfSv+opf879Y9a+r9L/6il/9L6Ry39l9E/aum/rP5RS/+R+kct/ZfTP2rpv7z+UUv/FfSPWvq/W/+opf8o/aOW/ivqH7X0X0n/qKX/yvpHLf3fo3/U0v+9+kct/VfRP2rp/z79o5b+79c/aun/Af2jlv4f1D9q6b+q/lFL/9X0j1r6r65/1NJ/Df2jlv5r6h+19F9L/6il/4f0j1r6r61/1NL/w/pHLf3X0T9q6f8R/aOW/uvqH7X0X0//qKX/+vpHLf030D9q6b+h/lFL/430j1r6b6x/1NJ/E/2jlv6b6h+19N9M/6il/+b6Ry39t9A/aum/pf5RS/+t9I9a+n9U/6il/9b6Ry39t9E/aum/rf5RS//t9I9a+m+vf9TSfwf9o5b+H9M/aum/o/5RS/+d9I9a+u+sf9TS/+P6Ry39P6F/1NJ/F/2jlv676h+19N9N/6il/+76Ry3999A/aum/p/5RS/9P6h+19P+U/lFL/730j1r6761/1NJ/H/2jlv6f1j9q6b+v/lFL//30j1r6f0b/qKX/Z/WPWvp/Tv+opf/++kct/Q/QP2rpf6D+UUv/z+sftfQ/SP+opf/B+kct/Q/RP2rpf6j+UUv/w/SPWvp/Qf+opf/h+kct/b+of9TS/wj9o5b+X9I/aun/Zf2jlv5H6h+19D9K/6il/9H6Ry39v6J/1NL/GP2jlv5f1T9q6X+s/lFL/6/pH7X0P07/qKX/8fpHLf1P0D9q6X+i/lFL/5P0j1r6n6x/1NL/FP2jlv5f1z9q6X+q/lFL/9P0j1r6f0P/qKX/6fpHLf3P0D9q6f9N/aOW/t/SP2rpf6b+UUv/b+sftfQ/S/+opf939I9a+p+tf9TS/xz9o5b+5+r/AnNNOeaypf95+kct/b+rf9TS/3v6Ry39z9c/aun/ff2jlv4X6B+19P+B/lFL/wv1j1r6X6R/1NL/Yv2jlv4/1D9q6X+J/lFL/x/pH7X0/7H+UUv/n+gftfT/qf5RS/+f6R+19P+5/lFL/1/oH7X0v1T/qKX/ZfpHLf0v1/9FJirqf4X+UUv/X+oftfS/Uv+opf9V+kct/a/WP2rpf43+UUv/X+kftfT/tf5RS//f6B+19L9W/6il/3X6Ry39r9c/aul/g/5RS//f6h+19P+d/lFL/9/rH7X0v1H/qKX/H/SPWvrfpH/U0v+P+kct/f+kf9TS/2b9o5b+f9Y/aun/F/2jlv636B+19L9V/6il/1/1j1r636Z/1NL/b/pHLf3/rn/U0v8f+kct/W/XP2rpf4f+UUv/O/WPWvrfpX/U0v9u/aOW/vfoH7X0v1f/qKX/ffpHLf3v1z9q6f+A/lFL/wf1j1r6P6R/1NL/Yf2jlv6P6B+19H9U/6il/2P6Ry39H9c/aun/hP5RS/8n9Y9a+j+lf9TS/2n9o5b+z+gflfQfPqB/1NJ/iP5RS/+h+kct/YfpH7X0H65/1NJ/hP5RS/+J9I9a+k+sf9TSfxL9o5b+k+oftfSfTP+opf/k+kct/afQP2rpP6X+UUv/qfSPWvq/Rv+opf/U+kct/V+rf9TSfxr9o5b+r9M/aun/ev2jlv7T6h+19J9O/6il//T6Ry39Z9A/auk/o/5RS/+Z9I9a+r9B/6il/xv1j1r6z6x/1NJ/Fv2jlv5v0j9q6T+r/lFL/zfrH7X0n03/qKX/7PpHLf3n0D9q6T+n/lFL/7n0j1r6z61/1NJ/Hv2jlv5v0T9q6f9W/aOW/vPqH7X0f5v+UUv/+fSPWvrPr3/U0n8B/aOW/gvqH7X0X0j/qKX/wvpHLf0X0T9q6b+o/lFL/7frH7X0X0z/qKX/4vpHLf2X0D9q6b+k/lFL/3foH7X0X0r/qKX/O/WPnt9/4ld7Y14J4+n/Lv2jlvm/tP5RS/9l9I9a+i+rf9TSf6T+UUv/5fSPWvovr3/U0n8F/aOW/u/WP2rpP0r/qKX/ivpHLf1X0j9q6b+y/lFL//foH7X0f6/+UUv/VfSPWvq/T/+opf/79Y9a+n9A/6il/wf1j1r6r6p/1NJ/Nf2jlv6r6x+19F9D/6il/5r6Ry3919I/aun/If2jlv5r6x+19P+w/lFL/3X0j1r6f0T/qKX/uvpHLf3X0z9q6b++/lFL/w30j1r6b6h/1NJ/I/2jlv4b6x+19N9E/6il/6b6Ry39N9M/aum/uf5RS/8t9I9a+m+pf9TSfyv9o5b+H9U/aum/tf5RS/9t9I9a+m+rf9TSfzv9o5b+2+sftfTfQf+opf/H9I9a+u+of9TSfyf9o5b+O+sftfT/uP5RS/9P6B+19N9F/6il/676Ry39d6vvf85i6d6W/rvX989a+u+hf9TSf0/9o5b+n9Q/aun/Kf2jlv576R+19N9b/6il/z76Ry39P61/1NJ/X/2jlv776R+19P+M/lFL/8/qH7X0/5z+UUv//fWPWvofoH/U0v9A/aOW/p/XP2rpf5D+UUv/g/WPWvofon/U0v9Q/aOW/ofpH7X0/4L+UUv/w/WPWvp/Uf+opf8R+kct/b+kf9TS/8v6Ry39j9Q/aul/lP5RS/+j9Y9a+n9F/6il/zH6Ry39v6p/1NL/WP2jlv5f0z9q6X+c/lFL/+P1j1r6n6B/1NL/RP2jlv4n6R+19D9Z/6il/yn6Ry39v65/1NL/VP2jlv6n6R+19P+G/lFL/9P1j1r6n6F/1NL/m/pHLf2/pX/U0v9M/aOW/t/WP2rpf5b+UUv/7+gftfQ/W/+opf85+kct/c/VP2rpf57+UUv/7+oftfT/nv5RS//z9Y9a+n9f/6il/wX6Ry39f6B/1NL/Qv2jlv4X6R+19L9Y/6il/w/1j1r6X6J/1NL/R/pHLf1/rH/U0v8n+kct/X+qf9TS/2f6Ry39f65/1NL/F/pHLf0v1T9q6X+Z/lFL/8v1j1r6X6F/1NL/l/pHLf2v1D9q6X+V/lFL/6v1j1r6X6N/1NL/V/pHLf1/rX/U0v83+kct/a/VP2rpf53+UUv/6/WPWvrfoH/U0v+3+kct/X+nf9TS//f6Ry39b9Q/aun/B/2jlv436R+19P+j/lFL/z/pH7X0v1n/qKX/n/WPWvr/Rf+opf8t+kct/W/VP2rp/1f9o5b+t+kftfT/m/5RS/+/6x+19P+H/lFL/9v1j1r636F/1NL/Tv2jlv536R+19L9b/6il/z36Ry3979U/aul/n/5RS//79Y9a+j+gf9TS/0H9o5b+D+kftfR/WP+opf8j+kct/R/VP2rp/5j+UUv/x/WPWvo/oX/U0v9J/aOW/k/pH7X0f1r/qKX/M/pHJf1HDOgftfQfon/U0n+o/lFL/2H6Ry39h+sftfQfoX/U0n8i/aOW/hPrH7X0n0T/qKX/pPpHLf0n0z9q6T+5/lFL/yn0j1r6T6l/1NJ/Kv2jlv6v0T9q6T+1/lFL/9fqH7X0n0b/qKX/6/SPWvq/Xv+opf+0+kct/afTP2rpP73+UUv/GfSPWvrPqH/U0n8m/aOW/m/QP2rp/0b9o5b+M+sftfSfRf+opf+b9I9a+s+qf9TS/836Ry39Z9M/auk/u/5RS/859I9a+s+pf9TSfy79o5b+c+sftfSfR/+opf9b9I9a+r9V/6il/7z6Ry3936Z/1NJ/Pv2jlv7z6x+19F9A/6il/4L6Ry39F9I/aum/sP5RS/9F9I9a+i+qf9TS/+36Ry39F9M/aum/uP5RS/8l9I9a+i+pf9TS/x36Ry39l9I/aun/Tv2jlv7v0j9q6b+0/lFL/2X0j1r6L6t/1NJ/pP5RS//l9I9a+i+vf9TSfwX9o5b+79Y/auk/Sv+opf+K+kct/VfSP2rpv7L+UUv/9+gftfR/r/5RS/9V9I9a+r9P/6il//v1j1r6f0D/qKX/B/WPWvqvqn/U0n81/aOW/qvrH7X0X0P/qKX/mvpHLf3X0j9q6f8h/aOW/mvrH7X0/7D+UUv/dfSPWvp/RP+opf+6+kct/dfTP2rpv77+UUv/DfSPWvpvqH/U0n8j/aOW/hvrH7X030T/qKX/pvpHLf030z9q6b+5/lFL/y30j1r6b6l/1NJ/K/2jlv4f1T9q6b+1/lFL/230j1r6b6t/1NJ/O/2jlv7b6x+19N9B/6il/8f0j1r676h/1NJ/J/2jlv476x+19P+4/lFL/0/oH7X030X/qKX/rvpHLf130z9q6b+7/lFL/z30j1r676l/1NL/k/pHLf0/pX/U0n8v/aOW/nvrH7X030f/qKX/p/WPWvrvq3/U0n8//aOW/p/RP2rp/1n9o5b+n9M/aum/v/5RS/8D9I9a+h+of9TS//P6Ry39D9I/aul/sP5RS/9D9I9a+h+qf9TS/zD9o5b+X9A/aul/uP5RS/8v6h+19D9C/6il/5f0j1r6f1n/qKX/kfpHLf2P0j9q6X+0/lFL/6/oH7X0P0b/qKX/V/WPWvofq3/U0v9r+kct/Y/TP2rpf7z+UUv/E/SPWvqfqH/U0v8k/aOW/ifrH7X0P0X/qKX/1/WPWvqfqn/U0v80/aOW/t/QP2rpf7r+UUv/M/SPWvp/U/+opf+39I9a+p+pf9TS/9v6Ry39z9I/aun/Hf2jlv5n6x+19D9H/6il/7n6Ry39z9M/aun/Xf2jlv7f0z9q6X++/lFL/+/rH7X0v0D/qKX/D/SPWvpfqH/U0v8i/aOW/hfrH7X0/6H+UUv/S/SPWvr/SP+opf+P9Y9a+v9E/6il/0/1j1r6/0z/qKX/z/WPWvr/Qv+opf+l+kct/S/TP2rpf7n+UUv/K/SPWvr/Uv+opf+V+kct/a/SP2rpf7X+UUv/a/SPWvr/Sv+opf+v9Y9a+v9G/+gF/V/tjXkljKf/tfpHLfP/Ov2jlv7X6x+19L9B/6il/2/1j1r6/07/qKX/7/WPWvrfqH/U0v8P+kct/W/SP2rp/0f9o5b+f9I/aul/s/5RS/8/6x+19P+L/lFL/1v0j1r636p/1NL/r/pHLf1v0z9q6f83/aOW/n/XP2rp/w/9o5b+t+sftfS/Q/+opf+d+kct/e/SP2rpf7f+UUv/e/SPWvrfq3/U0v8+/aOW/vfrH7X0f0D/qKX/g/pHLf0f0j9q6f+w/lFL/0f0j1r6P6p/1NL/Mf2jlv6P6x+19H9C/6il/5P6Ry39n9I/aun/tP5RS/9n9I9K+k80oH/U0n+I/lFL/6H6Ry39h+kftfQfrn/U0n+E/lFL/4n0j1r6T6x/1NJ/Ev2jlv6T6h+19J9M/6il/+T6Ry39p9A/auk/pf5RS/+p9I9a+r9G/6il/9T6Ry39X6t/1NJ/Gv2jlv6v0z9q6f96/aOW/tPqH7X0n07/qKX/9PpHLf1n0D9q6T+j/lFL/5n0j1r6v0H/qKX/G/WPWvrPrH/U0n8W/aOW/m/SP2rpP6v+UUv/N+sftfSfTf+opf/s+kct/efQP2rpP6f+UUv/ufSPWvrPrX/U0n8e/aOW/m/RP2rp/1b9o5b+8+oftfR/m/5RS//59I9a+s+vf/Rs/4EhE3z/BfSPWub/gvpHLf0X0j9q6b+w/lFL/0X0j1r6L6p/1NL/7fpHLf0X0z9q6b+4/lFL/yX0j1r6L6l/1NL/HfpHLf2X0j9q6f9O/aOW/u/SP2rpv7T+UUv/ZfSPWvovq3/U0n+k/lFL/+X0j1r6L69/1NJ/Bf2jlv7v1j9q6T9K/6il/4r6Ry39V9I/aum/sv5RS//36B+19H+v/lFL/1X0j1r6v0//qKX/+/WPWvp/QP+opf8H9Y9a+q+qf9TSfzX9o5b+q+sftfRfQ/+opf+a+kct/dfSP2rp/yH9o5b+a+sftfT/sP5RS/919I9a+n9E/6il/7r6Ry3919M/aum/vv5RS/8N9I9a+m+of9TSfyP9o5b+G+sftfTfRP+opf+m+kct/TfTP2rpv7n+UUv/LfSPWvpvqX/U0n8r/aOW/h/VP2rpv7X+UUv/bfSPWvpvq3/U0n87/aOW/tvrH7X030H/qKX/x/SPWvrvqH/U0n8n/aOW/jvrH7X0/7j+UUv/T+gftfTfRf+opf+u+kct/XfTP2rpv7v+UUv/PfSPWvrvqX/U0v+T+kct/T+lf9TSfy/9o5b+e+sftfTfR/+opf+n9Y9a+u+rf9TSfz/9o5b+n9E/aun/Wf2jlv6f0z9q6b+//lFL/wP0j1r6H6h/1NL/8/pHLf0P0j9q6X+w/lFL/0P0j1r6H6p/1NL/MP2jlv5f0D9q6X+4/lFL/y/qH7X0P0L/qKX/l/SPWvp/Wf+opf+R+kct/Y/SP2rpf7T+UUv/r+gftfQ/Rv+opf9X9Y9a+h+rfzRB9j9uzNXn9/+a/tEE2X/s1ef3P07/qKX/8fpHLf1P0D9q6X+i/lFL/5P0j1r6n6x/1NL/FP2jlv5f1z9q6X+q/lFL/9P0j1r6f0P/qKX/6fpHLf3P0D9q6f9N/aOW/t/SP2rpf6b+wcRjLyf8/t/WP2qZ/2fpH7X0/47+UUv/s/WPWvqfo3/U0v9c/aOW/ufpH7X0/67+UUv/7+kftfQ/X/+opf/39Y9a+l+gf9TS/wf6Ry39L9Q/aul/kf5RS/+L9Y9a+v9Q/6il/yX6Ry39f6R/1NL/x/pHLf1/on/U0v+n+kct/X+mf9TS/+f6Ry39f6F/1NL/Uv2jlv6X6R+19L9c/6il/xX6Ry39f6l/1NL/Sv2jlv5X6R+19L9a/6il/zX6Ry39f6V/1NL/1/pHLf1/o3/U0v9a/aOW/tfpH7X0v17/qKX/DfpHLf1/q3/U0v93+kct/X+vf9TS/0b9o5b+f9A/aul/k/5RS/8/6h+19P+T/lFL/5v1j1r6/1n/qKX/X/SPWvrfon/U0v9W/aOW/n/VP2rpf5v+UUv/v+kftfT/u/5RS/9/6B+19L9d/6il/x36Ry3979Q/aul/l/5RS/+79Y9a+t+jf9TS/179o5b+9+kftfS/X/+opf8D+kct/R/UP2rp/5D+UUv/h/WPWvo/on/U0v9R/aOW/o/pH7X0f1z/qKX/E/pHLf2f1D9q6f+U/lFL/6f1j1r6P6N/VNJ/4gH9o5b+Q/SPWvoP1T9q6T9M/6il/3D9o5b+I/SPWvpPpH/U0n9i/aOW/pPoH7X0n1T/qKX/ZPpHLf0n1z9q6T+F/lFL/yn1j1r6T6V/1NL/NfpHLf2n1j9q6f9a/aOW/tPoH7X0f53+UUv/1+sftfSfVv+opf90+kct/afXP2rpP4P+UUv/GfWPWvrPpH/U0v8N+kct/d+of9TSf2b9o5b+s+gftfR/k/5RS/9Z9Y9a+r9Z/6il/2z6Ry39Z9c/auk/h/5RS/859Y9a+s+lf9TSf279o5b+8+gftfR/i/5RS/+36h+19J9X/6il/9v0j1r6z6d/1NJ/fv2jlv4L6B+19F9Q/6il/0L6Ry39F9Y/aum/iP5RS/9F9Y9a+r9d/6il/2L6Ry39F9c/aum/hP5RS/8l9Y9a+r9D/2hC7v+83hMvpX80Ifd//vx/p/5RS/936R+19F9a/6il/zL6Ry39l9U/auk/Uv+opf9y+kct/ZfXP2rpv4L+UUv/d+sftfQfpX/U0n9F/aOW/ivpH7X0X1n/qKX/e/SPWvq/V/+opf8q+kct/d+nf9TS//36Ry39P6B/1NL/g/pHLf1X1T9q6b+a/lFL/9X1j1r6r6F/1NJ/Tf2jlv5r6R+19P+Q/lFL/7X1j1r6f1j/qKX/OvpHLf0/on/U0n9d/aOW/uvpH7X0X1//qKX/BvpHLf031D9q6b+R/lFL/431j1r6b6J/1NJ/U/2jlv6b6R+19N9c/6il/xb6Ry39t9Q/aum/lf5RS/+P6h+19N9a/6il/zb6Ry39t9U/aum/nf5RS//t9Y9a+u+gf9TS/2P6Ry39d9Q/aum/k/5RS/+d9Y9a+n9c/6il/yf0j1r676J/1NJ/V/2jlv67vbD/M2P9xzfvv01L/93N/6il/x76Ry3999Q/aun/Sf2jlv6f0j9q6b+X/lFL/731j1r676N/1NL/0/pHLf331T9q6b+f/lFL/8/oH7X0/6z+UUv/z+kftfTfX/+opf8B+kct/Q/UP2rp/3n9o5b+B+kftfQ/WP+opf8h+kct/Q/VP2rpf5j+UUv/L+gftfQ/XP+opf8X9Y9a+h+hf9TS/0v6Ry39v6x/1NL/SP2jlv5H6R+19D9a/6il/1f0j1r6H6N/1NL/q/pHLf2P1T9q6f81/aOW/sfpH7X0P17/qKX/CfpHLf1P1D9q6X+S/lFL/5P1j1r6n6J/1NL/6/pHLf1P1T9q6X+a/lFL/2/oH7X0P13/qKX/GfpHLf2/qX/U0v9b+kct/c/UP2rp/239o5b+Z+kftfT/jv5RS/+z9Y9a+p+jf9TS/1z9o5b+5+kftfT/rv5RS//v6R+19D9f/6il//f1j1r6X6B/1NL/B/pHLf0v1D9q6X+R/lFL/4v1j1r6/1D/qKX/JfpHLf1/pH/U0v/H+kct/X+if9TS/6f6Ry39f6Z/1NL/5/pHLf1/oX/U0v9S/aOW/pfpH7X0v1z/qKX/FfpHLf1/qX/U0v9K/aOW/lfpH7X0v1r/qKX/NfpHLf1/pX/U0v/X+kct/X+jf9TS/1r9o5b+1+kftfS/Xv+opf8N+kct/X+rf9TS/3f6Ry39f69/1NL/Rv2jlv5/0D9q6X+T/lFL/z/qH7X0/5P+UUv/m/WPWvr/Wf+opf9f9I9a+t+if9TS/1b9o5b+f9U/aul/m/5RS/+/6R+19P+7/lFL/3/oH7X0v13/qKX/HfpHLf3v1D9q6X+X/lFL/7v1j1r636N/1NL/Xv2jlv736R+19L9f/6il/wP6Ry39H9Q/aun/kP5RS/+H9Y9a+j+if9TS/1H9o5b+j+kftfR/XP+opf8T+kct/Z/UP2rp/5T+UUv/p/WPWvo/o39U0n+SAf2jlv5D9I9a+g/VP2rpP0z/qKX/cP2jlv4j9I9a+k+kf9TSf2L9o5b+k+gftfSfVP+opf9k+kct/SfXP2rpP4X+UUv/KfWPWvpPpX/U0v81+kct/afWP2rp/1r9o5b+0+gftfR/nf5RS//X6x+19J9W/6il/3T6Ry39p9c/auk/g/5RS/8Z9Y9a+s+kf9TS/w36Ry3936h/1NJ/Zv2jlv6z6B+19H+T/lFL/1n1j1r6v1n/qKX/bPpHLf1n1z9q6T+H/lFL/zn1j1r6z6V/1NJ/bv2jlv7z6B+19H+L/lFL/7fqH7X0n1f/qKX/2/SPWvrPp3/U0n9+/aOW/gvoH7X0X1D/qKX/QvpHLf0X1j9q6b+I/lFL/0X1j1r6v13/qKX/YvpHLf0X1z9q6b+E/lFL/yX1j1r6v0P/qKX/UvpHLf3fqX/U0v9d+kct/ZfWP2rpv4z+UUv/ZfWPWvqP1D9q6b+c/lFL/+X1j1r6r6B/1NL/3fpHLf1H6R+19F9R/6il/0r6Ry39V9Y/aun/Hv2jlv7v1T9q6b+K/lFL//fpH7X0f7/+UUv/D+gftfT/oP5RS/9V9Y9a+q+mf9TSf3X9o5b+a+gftfRfU/+opf9a+kct/T+kf9TSf239o5b+H9Y/aum/jv5RS/+P6B+19F9X/6il/3r6Ry3919c/aum/gf5RS/8N9Y9a+m+kf9TSf2P9o5b+m+gftfTfVP+opf9m+kct/TfXP2rpv4X+UUv/LfWPWvpvpX/U0v+j+kct/bfWP2rpv43+UUv/bfWPWvpvp3/U0n97/aOW/jvoH7X0/5j+UUv/HfWPWvrvpH/U0n9n/aOW/h/XP2rp/wn9o5b+u+gftfTfVf+opf9u+kct/XfXP2rpv4f+UUv/PfWPWvp/Uv+opf+n9I9a+u+lf9TSf2/9o5b+++gftfT/tP5RS/999Y9a+u+nf9TS/zP6Ry39P6t/1NL/c/pHLf331z9q6X+A/lFL/wP1j1r6f17/qKX/QfpHLf0P1j9q6X+I/lFL/0P1j1r6H6Z/1NL/C/pHLf0P1z9q6f9F/aOW/kfoH7X0/5L+UUv/L+sftfQ/Uv+opf9R+kct/Y/WP2rp/xX9o5b+x+gftfT/qv5RS/9j9Y9a+n9N/6il/3H6Ry39j9c/aul/gv5RS/8T9Y9a+p+kf9TS/2T9o5b+p+gftfT/uv5RS/9T9Y9a+p+mf9TS/xv6Ry39T9c/aul/hv5RS/9v6v8iS47o6f8t/aOW/mfqH7X0/7b+UUv/s/SPWvp/R/+opf/Z+kct/c/RP2rpf67+UUv/8/SPWvp/V/+opf/39I9a+p+vf9TS//v6Ry39L9A/aun/A/2jlv4X6h+19L9I/6il/8X6Ry39f6h/1NL/Ev2jlv4/0j9q6f9j/aOW/j/RP2rp/1P9o5b+P9M/aun/c/2jlv6/0D9q6X+p/lFL/8v0j1r6X65/1NL/Cv2jlv6/1D9q6X+l/lFL/6v0j1r6X61/1NL/Gv2jlv6/0j9q6f9r/aOW/r/RP2rpf63+UUv/6/SPWvpfr3/U0v8G/aOW/r/VP2rp/zv9o5b+v9c/aul/o/5RS/8/6B+19L9J/6il/x/1j1r6/0n/qKX/zfpHLf3/rH/U0v8v+kct/W/RP2rpf6v+UUv/v+oftfS/Tf+opf/f9I9a+v9d/6il/z/0j1r6365/1NL/Dv2jlv536h+19L+rqP/N+778ZVv6313U/1/R0v8e/aOW/vfqH7X0v0//qKX//fpHLf0f0D9q6f+g/lFL/4f0j1r6P6x/1NL/Ef2jlv6P6h+19H9M/6il/+P6Ry39n9A/aun/pP5RS/+n9I9a+j+tf9TS/xn9o5L+kw7oH7X0H6J/1NJ/qP5RS/9h+kct/YfrH7X0H6F/1NJ/Iv2jlv4T6x+19J9E/6il/6T6Ry39J9M/auk/uf5RS/8p9I9a+k+pf9TSfyr9o5b+r9E/auk/tf5RS//X6h+19J9G/6il/+v0j1r6v17/qKX/tPpHLf2n0z9q6T+9/lFL/xn0j1r6z6h/1NJ/Jv2jlv5v0D9q6f9G/aOW/jPrH7X0n0X/qKX/m/SPWvrPqn/U0v/N+kct/WfTP2rpP7v+UUv/OfSPWvrPqX/U0n8u/aOW/nPrH7X0n0f/qKX/W/SPWvq/Vf+opf+8+kct/d+mf9TSfz79o5b+8+sftfRfQP9ogusPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPD/2IEDAQAAAAAg/9dGqKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsIOHAgAAAAAAPm/NkJVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVUVduBAAAAAAADI/7URqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrADByQAAAAAgv6/bkegAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3BQAA///VlCwg")
syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000000))
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
mkdirat(r0, &(0x7f0000000000)='./bus/file0\x00', 0x0)

35.743676024s ago: executing program 4 (id=219):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f00000007c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\f\n5', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)
syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x4}}}}}}, 0x0)
syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x10, 0x6, 0x0, @remote, @local}, {{0x4e21, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0xc2, 0x0, 0x0, 0x100, {[@timestamp={0x8, 0xa, 0x40, 0xfffffacf}]}}}}}}}, 0x0)

35.174096473s ago: executing program 34 (id=219):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f00000007c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\f\n5', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)
syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x4}}}}}}, 0x0)
syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x10, 0x6, 0x0, @remote, @local}, {{0x4e21, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0xc2, 0x0, 0x0, 0x100, {[@timestamp={0x8, 0xa, 0x40, 0xfffffacf}]}}}}}}}, 0x0)

15.784985982s ago: executing program 5 (id=313):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='rxrpc_recvmsg\x00', r0}, 0x10)
r1 = socket(0x21, 0x2, 0x10000000000002)
connect$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x100, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x24)
sendmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

14.807173246s ago: executing program 5 (id=314):
r0 = syz_usb_connect$uac1(0x0, 0xad, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029b0003010000000904000000010100000a2401000000020102092408000000004c58062404000052072405000053f10b24050000133b9bda531c092405fc0596efc359090401000001020000090401010101020000090501090000000000072501000600000904020000010200000904020101010200000b2402017f0200018b7e8e07240100000000090582091000000000072501f5"], 0x0)
syz_usb_control_io$uac1(r0, &(0x7f0000001100)={0x14, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0)
syz_usb_control_io(r0, &(0x7f00000021c0)={0x2c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0003040000000003"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

9.233218888s ago: executing program 5 (id=316):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x325, 0x0, 0x0, {0x8}}, 0x14}}, 0x0)

7.520877828s ago: executing program 5 (id=324):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$nl_generic(0x10, 0x3, 0x10)
openat$vimc2(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
syz_usb_connect$uac1(0x2, 0xdc, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r0, @ANYRES16=r1], 0x0)

6.498433233s ago: executing program 6 (id=326):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}}, 0x0)
sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000010401010000000000000000000004000500010001"], 0x1c}}, 0x0)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x20048805}, 0x0)
close(0x3)

6.061699337s ago: executing program 6 (id=327):
syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
r0 = openat$audio(0xffffffffffffff9c, 0x0, 0x81, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000140))
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x20000)
read$char_usb(r1, 0x0, 0x0)

5.486585966s ago: executing program 5 (id=332):
syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file4\x00', 0x0, &(0x7f0000000340)={[{@disable_ext_identify}, {@four_active_logs}, {@discard}, {@fault_injection={'fault_injection', 0x3d, 0xa0c8}}, {@fault_type={'fault_type', 0x3d, 0x6}}, {@noextent_cache}, {@inline_data}, {@fastboot}, {@fsync_mode_strict}, {@discard_unit_section}]}, 0x21, 0x5548, &(0x7f00000058c0)="$eJzs3E1vG1UXAOBjp2nffrwlQizYdVCFlEi1Vacfgl2BVny2qgosWIFju5Zb2xPFrhu66oIlYsE/QSCxYslvYMGaHWIBYocE8txJoS2VKsWOSfM80vjMvXPnzL2jJNKZiRzAgbWS/f5rJU7G0YhYiogTEcV+pdwKl1J4MSJORUT1H1ul7H/QcTgijkXEyWnylLNSHvryzOT0hV/e+e27H44cOv7Vtz8ubtXAor0cEYPNtH93kGLeTfFW2d+c9Io4OD8pYzowuF228xTvdjaKDHebO+OaRTzXTePzzTujabzZb7amsdu7WfRvDtMFR5PuTp7ihFvNraLd7mwUsTfKi9i9l+a1fS/9bbs3Gqc87TLfp0X6GI93YurvbHfSejZvF7E1HJf9KW/e7mxP46SM5eWilffbxTw2dnOn/9Neeq83vLOdTTpbo14+zC7UG6/UGxdrja283Rl3zteag/bF89lqtz8dVht3moNL3Tzv9jv1Vj5Yy1a7rVat0chWL3c2es3h/Uajfq5+tnZhLUt7Z7I3r32Y9dvZ6jS+3hveGff6o+xmvpWlM9ay9fq5V9ey043s/avXs+s3rly5ev2Djy9/dO21q2+/UQ56bFrZ6vrZ9fVa42xtvbG2uxsw0/Vnc17/Z+WkZ7h+2JXKoicAsP+o/4FFmF/9v3Uj4vH6vzrj+j/U/zOxr+rfg17/z2H9sCvqfwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAA+un5a/fKnZWUvt42f//suv5sl2JiGpE/PkvluLwQzmXyjzLTxi//Mgcvq9EkWF6jSPldiwiLpXbH8/N+y4AAADAs+ub+6e+SNV6+lh5qrOOznlW7JH00KZ64pMZ5atExPLKzzPKVp1+vDCjZMXP96HYnlG24gHW/2aULD1yOzSrbE+l+HV/N4UHKylCJYXqo2fMbLUAAMDCLD0U9rYKAQAAYC99/sQjt/d0HuyxSuy8ytx5F1z85/3fL/uOprZXfwAAALB/VRY9AQAAAGDuivrf9/8BAADAsy19/x8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBf7NxNbtpAGAbgz8Yu9E9FVfe9SndwjB6hyy4rDtBLcAR6hV6AM5BdjhBBhMdBISIJxGNQoueR7MGWeT3mZzEz0gcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAECfrurF9N+f73+75qw33eR5GgAAAOCQVb2YNi/G6fhje/5ze+pre1xERBkRh8bug3i3lzloc+pHrq8f9OF/RJOwvcew3T5ExI+0beJL358CAAAAvEnVdreczSdptJ5240v3is5O+A7TpE356WemWxcRUY+vM6WV27xvmcKa33cVvzOlNRNYo0xhacqtypV2lObvvpu1G91ritSUT78/27MDAABnNNhrzjsKAQAA4Jx+XboD9OH9s1cUcbeUuVsKHKZmtBdhsQ8AAABer+LSHQAAAAB614z/T6n/F8fU/6uy1/+LG/X/AAAA4MVS/T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD6tKoX0+VsPumas950k+dpAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALhlf95RIATCIAz2ru9M5v6HlQZNTU2qQPj4G4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN787i//J6bGmWTutbH0PJKsnRpbp8beuXH0h/H1awAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIv9eUmBEAiCKJgz/nfS9z+sJOgZRIiAhkcVtWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAL/rdL/8npsaZZO60sXQ8kqxdNbauGnsPGkcPxtu/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIud+3mNo4oDAP5mZmf7Q8U1yh4iouBBL3a7ra29iQclePBPEEK6rbFbf7Q52FKEXLxJzr2IHkUEJd76D3jqTWihl3rrYQ8VRPCyMrMz2UkTcGPIzJp8PvDmfXcymfd9MxDynTcJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACURu9M4yTbdCZxXOy79/jWStbff6LP3Nl4sJi1LI7qTPr/4aXqh6jbXCIAAAAcHUlZ34cQHqabS1kfd/L6Py2PyWr+b5+ZxGU9/2TdX/Zl7Z+1X35+9MLWQJ3JONlJL60OB6d3ptI6uFnOt2f/9YhWfuXzZy9JfkPi99efH6X59Yy+vnv33XYeHqsjWwDgvzhV9kVQ/j6U9f0mEwPgyGhVCu+i/v8r6TScFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEANRuvhqTKOQgiLrWmcuf/41spu/Z2NB4tlO3/79kb1nNkp0hDCpdXh4HSNc5l312/cvLI8HA6u1R+8HEJoavS3i+lf+XCGg0No5PocVPD3eDze03cdbz7nfQVxcbNnOLg9Lzk3HzT4QwkAgEMpLVpW1z9MN5eyfdFCCOPvttf/r1XiMGP9/+ij8/eqY1Xr/35tM5x/vbWrn/Wu37j5xurV5cuDy4NP3jzTf6t/9sK5cxd6+bOSnicmAAAA7E+7aNX6P17Yuf5/shKHGev/z7/pfzkd6bd8q/7fabro13QmAAAAR9tzr/z5R7TL/qjdDl8sr61d60+2W5/PTLYNpLpnx4pWrf+ThaazAgAAAOowWo+2rf9frMRhxvX/p79/8cfqOZMQwoli/f/UyqfDi/VNZ67V8efETc8RAACAZp0oWnX9P83f/4+3XnmIQwivvzqJi38DOFP9n7z31Q/VsZLK+/9n65viXIq7k+uR990QWt1tX/61scQAAAA4lI4XLSv2f083lz7+6eQHbe//AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANTtnwAAAP//gQBD5A==")
openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff)
openat$nullb(0xffffffffffffff9c, 0x0, 0x44800, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0), 0x1, 0x553, &(0x7f0000000800)="$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")
symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
renameat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x2)

4.870010528s ago: executing program 1 (id=333):
r0 = socket$netlink(0x10, 0x3, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r2 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', <r3=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)={0x58, r2, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffbfff9}}}]}}]}, 0x58}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840)

4.34364981s ago: executing program 1 (id=335):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8)
connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10)
sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="82", 0x1}, {&(0x7f0000000140)="84", 0x1}], 0x2}}], 0x1, 0x4400c800)
sendto$inet6(r0, &(0x7f0000000300), 0x18, 0x3b00, 0x0, 0xfffffffffffffdfd)

3.939298114s ago: executing program 1 (id=336):
syz_io_uring_setup(0x3b, &(0x7f0000000080)={0x0, 0x20, 0x10100}, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10)
r1 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2000)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$SG_IO(r2, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x300, 0x0, 0x0, 0x0})

3.852284215s ago: executing program 3 (id=337):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000240)={@hyper})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000000)={{@my=0x1}, @my=0x1, 0x0, 0x0, 0x421})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000080)={{@hyper, 0x2}, @any, 0x0, 0x0, 0x2, 0x6, 0x9a6, 0x10001, 0x8})
ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f00000003c0)={{@my=0x1}, 0xfff, 0xffffffffffffffff, 0x0, 0x0, 0x80000, 0x2, 0x1000000000ff6, 0x58df})

3.516884503s ago: executing program 1 (id=338):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
sigaltstack(&(0x7f0000000480)={&(0x7f0000004000)=""/4126, 0x80000001, 0x101e}, 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0)

3.417275071s ago: executing program 3 (id=339):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x401, 0x0)
ioctl$TCSBRKP(r0, 0x5425, 0x0)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xe)
ioctl$TCSETSW2(r1, 0x5408, &(0x7f0000000040)={0x4300, 0x10002, 0x0, 0xffffeffe, 0x4b, "2cf174f1d8b4d04b1faa82dc1ecf00", 0x5})
ioctl$TIOCGPGRP(r1, 0x5437, 0x0)

3.359881721s ago: executing program 6 (id=340):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000000580)=[{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000080)="c16a22213bc73b5c37696b90ad0f0000004193fc04574d3ca94f95bdef8a6701633b8bd1cfecb4c0bbc0c62d3e3b7d4578bd360ea718afacbfd6c7559a0363ec0d3e901cf5eb094e044c36a7e312576131d3c2de4c159d29ab0c76798f3c75cf5d68d137fe86e1d0b8baa2f8d1b3c6f655cc668f8e164b1d89f4fe898cad99f500a0eedd85d90fb3afcbcc4468ce6684df82010000000000000075d0f7bedf3104a2dd27723e23aa1627b6e1dbfdeb89d42bcaddb41d301768f9f3a3dd3e8f9e199dfbaf050d98cec2903f478cb38eb1a7fbdc2d28d3ebb00609f68e2fe5ba9f341ea7e8f5d921c1a4", 0xe9}, {&(0x7f0000000a80)="9f1ac09f155c1291fc8baa01adb9b575263c1a877ef8644bccc1143c6da61222f05eacf50665f3905cc2fd3e4e81e2a13e7fcca4b10085ea82589f9511a2f87ee914c9e0894139310b5457cfe7ca3ae3dade5d7a11f014f2bbdec62e2df3daf9875c79c6763fdcb8830f378346bd7c5c71ab8fffc299f6aea8ae05a727e64cbf8c3de5c36604fa3a7f43c2d51832aa29a52a9dd46c823bc89a7cc268e91fff716052173384c4e76c9921c2accb039cbf2cfb99a47371db803c3dce71aa0555a2c0fdb6c8e812ac6974d7b3d749bbc7f90a6a79dd2d20ff1637187bf9b58377bd5ae528ea9724f5517071", 0xea}, {&(0x7f0000000d80)="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", 0x2ce}], 0x3, 0x0, 0x0, 0x44801}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}, 0xffffff0b}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000028c0)=""/4096, 0x1000}], 0x1}, 0xf}], 0x2, 0x2101, 0x0)

3.018158112s ago: executing program 6 (id=342):
r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000000c0)={[{@noinit_itable}, {@dax_inode}, {@nolazytime}, {@abort}, {@dax_inode}, {@lazytime}, {@noload}, {}, {@noauto_da_alloc}]}, 0xfe, 0x558, &(0x7f0000000c00)="$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")
mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}], [], 0x2c})
syz_mount_image$msdos(&(0x7f0000000400), &(0x7f0000001cc0)='.\x00', 0x1aca4b8, &(0x7f0000000a80)=ANY=[@ANYRES16=r0, @ANYRESHEX=r0, @ANYBLOB="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", @ANYRESHEX=r0, @ANYRESHEX, @ANYRES32=r0], 0xb, 0x0, &(0x7f0000000000))
chdir(&(0x7f0000000440)='./file0\x00')
r1 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50)
ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000040)={0x8, 0xd800000, 0x80, 0x1, 0xff13})

2.891895894s ago: executing program 3 (id=344):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
syz_emit_ethernet(0x42, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x9, 0x34, 0x68, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x8, 0x4, 0x2, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0xffff, 0x7}]}}}}}}}, 0x0)

2.541135186s ago: executing program 3 (id=346):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10)
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[<r2=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000300)={0x0, 0x0, r2, <r3=>0x0})
ioctl$DRM_IOCTL_MODE_RMFB(r1, 0xc00464af, &(0x7f0000000580)=r3)

2.487388409s ago: executing program 1 (id=347):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000002c0)={0x0, 0x6, 0x1, '%'}, 0x9)
sendto$inet6(r0, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000040)={0x0, 0x6}, 0x8)

2.396474735s ago: executing program 5 (id=348):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00000000c0), 0x1)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @empty}], 0x1c)
sendto$inet6(r0, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c)
write$UHID_SET_REPORT_REPLY(r0, &(0x7f00000007c0)=ANY=[], 0xffe0)

2.263826313s ago: executing program 1 (id=349):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff}, 0x6)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r1, 0x400455c8, 0x0)

2.171249401s ago: executing program 7 (id=350):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1)
sendmmsg(0xffffffffffffffff, &(0x7f0000007f80)=[{{0x0, 0x0, &(0x7f0000003140)=[{&(0x7f0000000140)='=', 0x1}], 0x1}}], 0x1, 0x20040000)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x0)

1.910629439s ago: executing program 8 (id=351):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4000, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in6={{0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, '\x00', 0x2d}}}, 0x0, 0x0, 0x38, 0x0, "0f424a2bc651a9f11381328af8daf6f4bd2827984afeb6b627cea1ba22d1af57aa193c5024c9e8b22a8796a538ed893952a1aa555418ba1b4d0bc0712c028ec32a9bc2fb29b52d39e8626bc90abcc02a"}, 0xd8)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='tunl0\x00', 0x10)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4)

1.406012615s ago: executing program 6 (id=352):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c)
listen(r0, 0x0)

1.384581642s ago: executing program 3 (id=353):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'xfrm0\x00', <r2=>0x0})
sendto$packet(r1, &(0x7f0000000400)="205ae946", 0x4, 0x20008801, &(0x7f00000002c0)={0x11, 0x88a8, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14)

1.306829325s ago: executing program 7 (id=354):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}}, @NFT_MSG_DELSET={0x20, 0xb, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x5c}}, 0x0)
r0 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r0, &(0x7f0000000040), 0xc)
r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2)
write$binfmt_aout(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="03010000b5"], 0xc8)
writev(r0, &(0x7f0000000180)=[{&(0x7f0000002680)="1e", 0xfdef}], 0x1)

1.21253656s ago: executing program 8 (id=355):
r0 = syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0)
io_uring_setup(0xb54, &(0x7f0000000080)={0x0, 0x28ba1, 0x1000, 0x3, 0x1ad})
ptrace(0x10, r0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, 0x0}, 0x94)
ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000080)={0x0})

1.063975508s ago: executing program 7 (id=356):
r0 = socket$igmp(0x2, 0x3, 0x2)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x100, 0x6}, 0x4)
setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x50}, {0x6}]}, 0x10)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000002140)='veth0_to_hsr\x00', 0x10)
sendto$inet(r0, 0x0, 0x0, 0x804, &(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10)

1.062317589s ago: executing program 3 (id=357):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4f8}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x4}}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect$uac1(0x5, 0x71, &(0x7f0000000280)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x81, 0x20, 0xbc, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xd, 0xa0}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0xfc, 0x7d, 0x80, {0x7, 0x25, 0x1, 0x1, 0x7, 0xfff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x7, 0x28, 0x98, {0x7, 0x25, 0x1, 0x83, 0x1, 0x3}}}}}}}]}}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2)

879.883196ms ago: executing program 8 (id=358):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d4", 0x5)
r1 = accept4(r0, 0x0, 0x0, 0x0)
readv(r1, &(0x7f0000000ac0)=[{&(0x7f00000007c0)=""/58, 0x3a}, {&(0x7f0000000400)=""/175, 0xaf}], 0x2)
sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001d40)=@deltclass={0x434, 0x29, 0x100, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xf, 0xffe0}, {0x3, 0xe}, {0xd, 0x10}}, [@c_cbq={{0x8}, {0x408, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0x6, 0x0, 0xfff, 0x9, 0x3, 0x6, 0xffffffbb, 0x97, 0x80000001, 0x5, 0x5, 0x2, 0x2, 0x80000001, 0x9, 0x1, 0x0, 0x3, 0x6, 0x7c, 0xd8, 0x140, 0x4, 0x5, 0x7fffffff, 0x2, 0x7, 0x7, 0x7ff, 0x6, 0xd, 0x6, 0x1, 0x8f, 0x8, 0x9, 0x400, 0x7, 0x9, 0x5, 0x7ff, 0x4, 0x3, 0x100, 0x6, 0xfffffc01, 0x1573, 0x6, 0x10000, 0x5, 0x0, 0x101, 0x1, 0x7, 0x6, 0x80005, 0x6, 0x5, 0x8, 0xa, 0x7, 0xaa9c, 0x8, 0x940e, 0x0, 0x6, 0x465c, 0x1, 0x100, 0x4, 0x1, 0x5, 0x3, 0xff, 0x14000, 0x3, 0x800, 0x0, 0x3, 0x3, 0x6, 0x6046, 0x79, 0x0, 0xcef, 0x7, 0x7, 0x2, 0x73fc, 0x1000, 0x2, 0x20000800, 0x3, 0xc1d, 0x9, 0x7f, 0x2, 0x12, 0x10000, 0x1, 0x4, 0x404, 0x1000, 0x7, 0x1fffe00, 0x7fffffff, 0x2, 0x5, 0x0, 0x6, 0x7, 0x40000, 0x5, 0x7fffffff, 0x4, 0x3, 0x80000001, 0x4, 0x0, 0xfffffffe, 0x7, 0x2, 0xffffff7f, 0x3, 0x2, 0x2, 0x10000, 0x7fff, 0x5, 0x5, 0x9, 0x3ff, 0x401, 0x2, 0x1, 0x6, 0x80000000, 0x4, 0xfffff60a, 0x401, 0x1, 0x0, 0x80000001, 0x8, 0x83, 0x100, 0x6, 0x4, 0xa, 0x800, 0xa, 0x5, 0x3, 0x5a6d, 0x9b31, 0x3, 0x6, 0x5, 0x2, 0x1000, 0x2, 0x2, 0x4, 0x9, 0x5, 0x6, 0x0, 0x3, 0x10000, 0x2, 0xd, 0x0, 0x2, 0x8001, 0x2, 0x4, 0xfffffffa, 0x4, 0x9, 0x1, 0x81, 0x6, 0x1fbe, 0xffffff81, 0x4, 0x2, 0xff38, 0x7, 0xd, 0x10001, 0x0, 0x6, 0x8, 0x80, 0x1, 0x6, 0x1, 0xffff, 0x996, 0x3, 0x6, 0x6, 0x9, 0xfffffff6, 0x5, 0x7f, 0x0, 0x7e, 0x6, 0x9, 0x5, 0x7fffffff, 0x80000001, 0x5, 0x50ed, 0xffffffff, 0x4, 0x95, 0xff, 0x2, 0xf6, 0x9, 0x2, 0xfff, 0x4b, 0x80, 0x9, 0x4, 0x9, 0x4, 0x5, 0x80000, 0x80000001, 0x1ff, 0x3, 0x3, 0xfffffff8, 0x7, 0x4, 0xfffffffa, 0xffffffff, 0xa2c, 0x4, 0x2, 0xee, 0xf, 0x4, 0x8, 0x8, 0x3, 0x5, 0xe6a, 0x9, 0x0, 0x5, 0xb2d7]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x4}, 0x80)

738.082422ms ago: executing program 7 (id=359):
r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
fchdir(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
lseek(r2, 0x2, 0x0)

649.942474ms ago: executing program 8 (id=360):
unshare(0x22020600)
r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x4)
r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cgroup.controllers\x00', 0x5000000, 0x0)
readv(r2, &(0x7f00000012c0)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1)

572.360473ms ago: executing program 6 (id=361):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040))
ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0})
read(r0, &(0x7f0000000000)=""/23, 0x17)
read(r0, 0x0, 0x0)
write$ppp(r0, &(0x7f0000000200)="bc72", 0x2)

455.93378ms ago: executing program 7 (id=362):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x2c, r0, 0x1, 0x80, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x99}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="26003300b0910300ffffffffffff08021100000050505050505457f99eb3c401010003005c0200000600cd000000000004008e"], 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x0)

273.388435ms ago: executing program 8 (id=363):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000200)={0xc, r1})
ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, 0x0)
ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000340)={0xc})
ioctl$IOMMU_VFIO_SET_IOMMU(r0, 0x3b66, 0x1)

242.215091ms ago: executing program 7 (id=364):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r1 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev, @in=@empty, 0x0, 0x0, 0x1, 0x4, 0xa}, {0xbd1, 0x0, 0x3}, {0x81, 0x2}, 0x2000000, 0x0, 0x1}, {{@in=@local, 0x8000, 0x33}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10000}}, 0xe8)
sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0xffe0)

0s ago: executing program 8 (id=365):
syz_open_dev$loop(0x0, 0x2, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
prlimit64(0x0, 0xe, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x403, 0xfffffffc, 0x3f, {0x0, 0x0, 0x0, 0x0, 0x88adfda5, 0xa90}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x40}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.32' (ED25519) to the list of known hosts.
[   84.860770][ T5827] cgroup: Unknown subsys name 'net'
[   84.964436][ T5827] cgroup: Unknown subsys name 'cpuset'
[   84.973988][ T5827] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   86.600516][ T5827] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   89.518520][ T5844] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   89.554450][ T5848] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   89.562834][ T5848] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   89.569807][ T5863] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   89.570292][ T5848] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   89.585186][ T5848] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   89.593178][ T5848] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   89.601497][ T5863] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   89.608801][ T5848] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   89.616758][ T5863] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   89.625045][ T5848] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   89.632757][ T5863] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   89.640660][ T5848] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   89.642874][ T5864] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   89.671688][   T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   89.679241][ T5864] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   89.690489][   T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   89.700722][ T5864] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   89.711430][   T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   89.719365][ T5864] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   89.730208][   T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   89.732423][ T5866] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   89.745995][ T5866] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   89.747934][   T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   89.754297][ T5866] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   89.760418][   T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   89.768204][ T5860] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   89.783005][ T5864] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   89.793421][ T5860] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   89.801354][ T5860] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   90.478757][ T5853] chnl_net:caif_netlink_parms(): no params data found
[   90.778953][ T5839] chnl_net:caif_netlink_parms(): no params data found
[   90.791686][ T5838] chnl_net:caif_netlink_parms(): no params data found
[   90.821468][ T5845] chnl_net:caif_netlink_parms(): no params data found
[   90.847358][ T5842] chnl_net:caif_netlink_parms(): no params data found
[   90.918826][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.926677][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.934288][ T5853] bridge_slave_0: entered allmulticast mode
[   90.942069][ T5853] bridge_slave_0: entered promiscuous mode
[   91.014379][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.021836][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state
[   91.030473][ T5853] bridge_slave_1: entered allmulticast mode
[   91.040631][ T5853] bridge_slave_1: entered promiscuous mode
[   91.142088][ T5846] chnl_net:caif_netlink_parms(): no params data found
[   91.182575][  T920] cfg80211: failed to load regulatory.db
[   91.197101][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   91.281175][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   91.441111][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.448345][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state
[   91.456012][ T5839] bridge_slave_0: entered allmulticast mode
[   91.465000][ T5839] bridge_slave_0: entered promiscuous mode
[   91.473043][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.480556][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state
[   91.487675][ T5842] bridge_slave_0: entered allmulticast mode
[   91.496341][ T5842] bridge_slave_0: entered promiscuous mode
[   91.503877][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.511311][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state
[   91.518445][ T5838] bridge_slave_0: entered allmulticast mode
[   91.526166][ T5838] bridge_slave_0: entered promiscuous mode
[   91.533543][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.541223][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state
[   91.548345][ T5845] bridge_slave_0: entered allmulticast mode
[   91.556125][ T5845] bridge_slave_0: entered promiscuous mode
[   91.586654][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.593973][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state
[   91.601531][ T5839] bridge_slave_1: entered allmulticast mode
[   91.608953][ T5839] bridge_slave_1: entered promiscuous mode
[   91.616777][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.627533][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state
[   91.634758][ T5842] bridge_slave_1: entered allmulticast mode
[   91.642894][ T5842] bridge_slave_1: entered promiscuous mode
[   91.649779][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.656987][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state
[   91.664351][ T5838] bridge_slave_1: entered allmulticast mode
[   91.671816][ T5838] bridge_slave_1: entered promiscuous mode
[   91.678650][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.686114][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state
[   91.693302][ T5845] bridge_slave_1: entered allmulticast mode
[   91.706091][ T5845] bridge_slave_1: entered promiscuous mode
[   91.734934][ T5853] team0: Port device team_slave_0 added
[   91.740579][ T5844] Bluetooth: hci1: command tx timeout
[   91.810071][ T5844] Bluetooth: hci4: command tx timeout
[   91.823148][ T5844] Bluetooth: hci2: command tx timeout
[   91.823218][ T5860] Bluetooth: hci0: command tx timeout
[   91.869243][ T5853] team0: Port device team_slave_1 added
[   91.890731][ T5860] Bluetooth: hci3: command tx timeout
[   91.894307][ T5844] Bluetooth: hci5: command tx timeout
[   91.927535][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   91.942782][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   91.955144][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   91.966948][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   92.007891][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   92.020891][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   92.033289][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   92.088638][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   92.099001][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0
[   92.106096][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   92.132008][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   92.144363][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.151793][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state
[   92.158928][ T5846] bridge_slave_0: entered allmulticast mode
[   92.167588][ T5846] bridge_slave_0: entered promiscuous mode
[   92.207643][ T5838] team0: Port device team_slave_0 added
[   92.228688][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1
[   92.235913][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   92.261896][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   92.273511][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.280925][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state
[   92.288156][ T5846] bridge_slave_1: entered allmulticast mode
[   92.296352][ T5846] bridge_slave_1: entered promiscuous mode
[   92.321212][ T5839] team0: Port device team_slave_0 added
[   92.329100][ T5838] team0: Port device team_slave_1 added
[   92.361630][ T5845] team0: Port device team_slave_0 added
[   92.385771][ T5842] team0: Port device team_slave_0 added
[   92.396763][ T5839] team0: Port device team_slave_1 added
[   92.436519][ T5845] team0: Port device team_slave_1 added
[   92.464083][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   92.475401][ T5842] team0: Port device team_slave_1 added
[   92.527838][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0
[   92.535229][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   92.561688][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   92.621570][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   92.665660][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0
[   92.672957][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   92.699067][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   92.712189][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1
[   92.719136][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   92.745118][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   92.757785][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1
[   92.764794][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   92.791018][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   92.816731][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0
[   92.823886][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   92.850209][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   92.862963][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1
[   92.869899][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   92.896395][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   92.923585][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0
[   92.931012][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   92.956967][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   93.012810][ T5853] hsr_slave_0: entered promiscuous mode
[   93.019685][ T5853] hsr_slave_1: entered promiscuous mode
[   93.029275][ T5846] team0: Port device team_slave_0 added
[   93.038983][ T5846] team0: Port device team_slave_1 added
[   93.045814][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1
[   93.053194][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   93.079783][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   93.248885][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0
[   93.255988][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   93.282033][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   93.312872][ T5842] hsr_slave_0: entered promiscuous mode
[   93.319188][ T5842] hsr_slave_1: entered promiscuous mode
[   93.325810][ T5842] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   93.333693][ T5842] Cannot create hsr debugfs directory
[   93.368889][ T5839] hsr_slave_0: entered promiscuous mode
[   93.375412][ T5839] hsr_slave_1: entered promiscuous mode
[   93.382511][ T5839] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   93.390312][ T5839] Cannot create hsr debugfs directory
[   93.396562][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1
[   93.403999][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   93.430070][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   93.446890][ T5838] hsr_slave_0: entered promiscuous mode
[   93.453489][ T5838] hsr_slave_1: entered promiscuous mode
[   93.459634][ T5838] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   93.467240][ T5838] Cannot create hsr debugfs directory
[   93.519641][ T5845] hsr_slave_0: entered promiscuous mode
[   93.526130][ T5845] hsr_slave_1: entered promiscuous mode
[   93.533276][ T5845] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   93.540885][ T5845] Cannot create hsr debugfs directory
[   93.810721][ T5844] Bluetooth: hci1: command tx timeout
[   93.841156][ T5846] hsr_slave_0: entered promiscuous mode
[   93.847682][ T5846] hsr_slave_1: entered promiscuous mode
[   93.854227][ T5846] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   93.861911][ T5846] Cannot create hsr debugfs directory
[   93.890257][ T5844] Bluetooth: hci2: command tx timeout
[   93.890451][ T5860] Bluetooth: hci0: command tx timeout
[   93.895652][ T5844] Bluetooth: hci4: command tx timeout
[   93.970167][ T5844] Bluetooth: hci5: command tx timeout
[   93.970384][ T5860] Bluetooth: hci3: command tx timeout
[   94.384881][ T5838] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   94.397109][ T5838] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   94.426072][ T5838] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   94.436749][ T5838] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   94.495418][ T5845] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   94.509113][ T5845] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   94.522099][ T5845] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   94.534572][ T5845] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   94.653527][ T5839] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   94.665913][ T5839] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   94.685913][ T5839] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   94.701743][ T5839] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   94.798707][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0
[   94.842899][ T5842] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   94.856063][ T5842] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   94.866483][ T5842] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   94.879766][ T5842] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   94.902560][ T5838] 8021q: adding VLAN 0 to HW filter on device team0
[   94.974861][ T4550] bridge0: port 1(bridge_slave_0) entered blocking state
[   94.982086][ T4550] bridge0: port 1(bridge_slave_0) entered forwarding state
[   95.045956][ T4550] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.053142][ T4550] bridge0: port 2(bridge_slave_1) entered forwarding state
[   95.074298][ T5853] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   95.095798][ T5853] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   95.107775][ T5853] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   95.137645][ T5853] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   95.196978][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0
[   95.265555][ T5846] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   95.305948][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0
[   95.322550][ T5846] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   95.358883][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0
[   95.371655][ T5845] 8021q: adding VLAN 0 to HW filter on device team0
[   95.384170][ T5846] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   95.394965][ T5846] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   95.426332][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.433483][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[   95.463979][ T5842] 8021q: adding VLAN 0 to HW filter on device team0
[   95.502030][ T1143] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.509239][ T1143] bridge0: port 1(bridge_slave_0) entered forwarding state
[   95.528245][ T5839] 8021q: adding VLAN 0 to HW filter on device team0
[   95.555088][ T1143] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.562293][ T1143] bridge0: port 2(bridge_slave_1) entered forwarding state
[   95.613843][ T1143] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.621030][ T1143] bridge0: port 1(bridge_slave_0) entered forwarding state
[   95.630760][ T1143] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.637910][ T1143] bridge0: port 2(bridge_slave_1) entered forwarding state
[   95.682892][ T1143] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.690093][ T1143] bridge0: port 2(bridge_slave_1) entered forwarding state
[   95.866053][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0
[   95.891445][ T5860] Bluetooth: hci1: command tx timeout
[   95.970172][ T5860] Bluetooth: hci4: command tx timeout
[   95.975999][ T5860] Bluetooth: hci0: command tx timeout
[   95.976090][ T5844] Bluetooth: hci2: command tx timeout
[   96.011479][ T5853] 8021q: adding VLAN 0 to HW filter on device team0
[   96.035693][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0
[   96.051762][ T5844] Bluetooth: hci5: command tx timeout
[   96.057188][ T5844] Bluetooth: hci3: command tx timeout
[   96.108843][ T4550] bridge0: port 1(bridge_slave_0) entered blocking state
[   96.116028][ T4550] bridge0: port 1(bridge_slave_0) entered forwarding state
[   96.201623][ T4062] bridge0: port 2(bridge_slave_1) entered blocking state
[   96.208790][ T4062] bridge0: port 2(bridge_slave_1) entered forwarding state
[   96.375200][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0
[   96.482694][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0
[   96.549726][ T5846] 8021q: adding VLAN 0 to HW filter on device team0
[   96.577339][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0
[   96.598398][   T61] bridge0: port 1(bridge_slave_0) entered blocking state
[   96.605573][   T61] bridge0: port 1(bridge_slave_0) entered forwarding state
[   96.665211][   T61] bridge0: port 2(bridge_slave_1) entered blocking state
[   96.672453][   T61] bridge0: port 2(bridge_slave_1) entered forwarding state
[   96.696952][ T5838] veth0_vlan: entered promiscuous mode
[   96.709870][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0
[   96.817640][ T5838] veth1_vlan: entered promiscuous mode
[   96.956339][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0
[   96.977053][ T5842] veth0_vlan: entered promiscuous mode
[   97.032972][ T5842] veth1_vlan: entered promiscuous mode
[   97.099485][ T5839] veth0_vlan: entered promiscuous mode
[   97.134216][ T5838] veth0_macvtap: entered promiscuous mode
[   97.189925][ T5838] veth1_macvtap: entered promiscuous mode
[   97.238051][ T5839] veth1_vlan: entered promiscuous mode
[   97.263094][ T5842] veth0_macvtap: entered promiscuous mode
[   97.288626][ T5842] veth1_macvtap: entered promiscuous mode
[   97.319931][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0
[   97.378968][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1
[   97.449060][ T5838] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   97.462390][ T5838] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   97.471893][ T5838] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   97.480918][ T5838] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   97.506637][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0
[   97.547974][ T5845] veth0_vlan: entered promiscuous mode
[   97.571906][ T5839] veth0_macvtap: entered promiscuous mode
[   97.614396][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0
[   97.626253][ T5845] veth1_vlan: entered promiscuous mode
[   97.636077][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1
[   97.660868][ T5839] veth1_macvtap: entered promiscuous mode
[   97.719834][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0
[   97.737459][ T5842] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   97.746263][ T5842] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   97.755378][ T5842] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   97.764144][ T5842] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   97.839461][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   97.848829][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   97.863957][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1
[   97.928694][ T5839] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   97.938716][ T5839] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   97.947701][ T5839] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   97.957824][ T5839] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   97.970758][ T5860] Bluetooth: hci1: command tx timeout
[   98.022123][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.024524][ T5845] veth0_macvtap: entered promiscuous mode
[   98.029935][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.047383][ T5846] veth0_vlan: entered promiscuous mode
[   98.053085][ T5860] Bluetooth: hci2: command tx timeout
[   98.060289][ T5860] Bluetooth: hci0: command tx timeout
[   98.060344][ T5844] Bluetooth: hci4: command tx timeout
[   98.086537][ T5853] veth0_vlan: entered promiscuous mode
[   98.095682][ T5845] veth1_macvtap: entered promiscuous mode
[   98.131492][ T5844] Bluetooth: hci5: command tx timeout
[   98.132889][ T5860] Bluetooth: hci3: command tx timeout
[   98.186363][ T5838] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   98.202440][ T5853] veth1_vlan: entered promiscuous mode
[   98.217986][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0
[   98.229857][ T5846] veth1_vlan: entered promiscuous mode
[   98.240603][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.248770][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.296127][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1
[   98.365967][ T5845] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   98.377056][ T5845] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   98.393561][ T5845] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   98.398457][ T5988] sctp: [Deprecated]: syz.2.3 (pid 5988) Use of int in max_burst socket option deprecated.
[   98.398457][ T5988] Use struct sctp_assoc_value instead
[   98.402961][ T5845] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   98.478147][ T5853] veth0_macvtap: entered promiscuous mode
[   98.489313][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.532130][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.569579][ T5853] veth1_macvtap: entered promiscuous mode
[   98.584357][ T5846] veth0_macvtap: entered promiscuous mode
[   98.608707][ T5846] veth1_macvtap: entered promiscuous mode
[   98.631291][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.643845][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.735060][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0
[   98.775604][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.784424][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.796325][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1
[   98.809505][ T5853] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   98.818384][ T5853] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   98.828218][ T5853] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   98.836961][ T5853] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   98.877667][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0
[   98.915308][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1
[   98.972050][ T5949] usb 4-1: new full-speed USB device number 2 using dummy_hcd
[   98.972993][ T5846] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   99.004122][ T5846] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   99.020704][ T5846] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   99.041355][ T5846] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   99.053291][ T4062] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.062189][ T4062] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   99.139560][ T5949] usb 4-1: config 5 has an invalid interface number: 244 but max is 0
[   99.156153][ T5949] usb 4-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config
[   99.177997][ T5949] usb 4-1: config 5 has no interface number 0
[   99.188085][ T5949] usb 4-1: config 5 interface 244 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10
[   99.236978][ T5949] usb 4-1: config 5 interface 244 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[   99.270699][ T5949] usb 4-1: config 5 interface 244 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[   99.289345][   T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.300466][   T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   99.312377][ T5949] usb 4-1: New USB device found, idVendor=16d6, idProduct=0001, bcdDevice=b2.cd
[   99.322589][ T5949] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   99.332460][ T5949] usb 4-1: Product: syz
[   99.336824][ T5949] usb 4-1: Manufacturer: syz
[   99.342946][ T5949] usb 4-1: SerialNumber: syz
[   99.406070][   T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.427783][   T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   99.534638][   T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.574183][   T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   99.816853][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.844448][ T5949] cp210x 4-1:5.244: cp210x converter detected
[   99.857132][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   99.867239][ T5949] cp210x 4-1:5.244: failed to get vendor val 0x370b size 1: -71
[   99.879004][ T4062] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.926467][ T5949] cp210x 4-1:5.244: querying part number failed
[   99.954060][ T4062] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.017790][ T5949] usb 4-1: cp210x converter now attached to ttyUSB0
[  100.096949][ T5949] usb 4-1: USB disconnect, device number 2
[  100.172353][ T5949] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  100.259808][ T5949] cp210x 4-1:5.244: device disconnected
[  100.417115][ T6007] loop5: detected capacity change from 0 to 32768
[  100.425290][ T6007] =======================================================
[  100.425290][ T6007] WARNING: The mand mount option has been deprecated and
[  100.425290][ T6007]          and is ignored by this kernel. Remove the mand
[  100.425290][ T6007]          option from the mount to silence this warning.
[  100.425290][ T6007] =======================================================
[  100.544492][ T6007] JBD2: Ignoring recovery information on journal
[  100.614522][ T6007] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  100.772745][ T6014] loop0: detected capacity change from 0 to 128
[  100.781555][ T6007] OCFS2: ERROR (device loop5): int ocfs2_reserve_suballoc_bits(struct ocfs2_super *, struct ocfs2_alloc_context *, int, u32, u64 *, int): Invalid chain allocator 71
[  100.798251][ T6007] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  100.809868][ T6007] OCFS2: File system is now read-only.
[  100.816376][ T6007] (syz.5.11,6007,1):ocfs2_reserve_suballoc_bits:856 ERROR: status = -30
[  100.824877][ T6007] (syz.5.11,6007,1):ocfs2_reserve_cluster_bitmap_bits:1139 ERROR: status = -30
[  100.833906][ T6007] (syz.5.11,6007,1):ocfs2_local_alloc_reserve_for_window:1119 ERROR: status = -30
[  100.843268][ T6007] (syz.5.11,6007,1):ocfs2_local_alloc_reserve_for_window:1135 ERROR: status = -30
[  100.853142][ T6007] (syz.5.11,6007,1):ocfs2_local_alloc_slide_window:1250 ERROR: status = -30
[  100.861877][ T6007] (syz.5.11,6007,1):ocfs2_local_alloc_slide_window:1317 ERROR: status = -30
[  100.870648][ T6007] (syz.5.11,6007,1):ocfs2_reserve_local_alloc_bits:672 ERROR: status = -30
[  100.879274][ T6007] (syz.5.11,6007,1):ocfs2_reserve_local_alloc_bits:710 ERROR: status = -30
[  100.888180][ T6007] (syz.5.11,6007,1):ocfs2_reserve_clusters_with_limit:1172 ERROR: status = -30
[  100.897243][ T6007] (syz.5.11,6007,1):ocfs2_reserve_clusters_with_limit:1221 ERROR: status = -30
[  100.906238][ T6007] (syz.5.11,6007,1):ocfs2_lock_allocators:2775 ERROR: status = -30
[  100.915758][ T6007] (syz.5.11,6007,1):ocfs2_write_begin_nolock:1722 ERROR: status = -30
[  100.924030][ T6007] (syz.5.11,6007,1):ocfs2_write_begin:1885 ERROR: status = -30
[  101.076984][ T6021] syz.0.12: attempt to access beyond end of device
[  101.076984][ T6021] loop0: rw=2049, sector=145, nr_sectors = 16 limit=128
[  101.168948][ T6021] syz.0.12: attempt to access beyond end of device
[  101.168948][ T6021] loop0: rw=2049, sector=169, nr_sectors = 8 limit=128
[  101.250602][ T6021] syz.0.12: attempt to access beyond end of device
[  101.250602][ T6021] loop0: rw=2049, sector=185, nr_sectors = 8 limit=128
[  101.313994][ T5845] ocfs2: Unmounting device (7,5) on (node local)
[  101.331587][ T5964] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  101.460628][ T6021] syz.0.12: attempt to access beyond end of device
[  101.460628][ T6021] loop0: rw=2049, sector=201, nr_sectors = 8 limit=128
[  101.506212][ T6021] syz.0.12: attempt to access beyond end of device
[  101.506212][ T6021] loop0: rw=2049, sector=217, nr_sectors = 8 limit=128
[  101.559027][ T6025] netlink: 'syz.1.17': attribute type 10 has an invalid length.
[  101.579253][ T5964] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  101.605713][ T5964] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  101.617188][ T6005] loop2: detected capacity change from 0 to 32768
[  101.665819][ T5964] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  101.683026][ T6025] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  101.683632][ T6005] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.10 (6005)
[  101.715175][ T5964] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  101.766601][ T5964] usb 4-1: config 0 descriptor??
[  101.869242][ T6005] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  101.923220][ T6005] BTRFS info (device loop2): using sha256 (sha256-x86_64) checksum algorithm
[  102.020134][ T6005] BTRFS info (device loop2): using free-space-tree
[  102.096418][   T49] kworker/u8:3: attempt to access beyond end of device
[  102.096418][   T49] loop0: rw=1, sector=233, nr_sectors = 8 limit=128
[  102.172327][   T49] kworker/u8:3: attempt to access beyond end of device
[  102.172327][   T49] loop0: rw=1, sector=249, nr_sectors = 8 limit=128
[  102.258825][ T6044] 9pnet: p9_errstr2errno: server reported unknown error �@�΂X�e���>�)߮�	���o�N	��
P��*Q��?�A1�3����l��f\���;�t��;lM��
[  102.298877][   T49] kworker/u8:3: attempt to access beyond end of device
[  102.298877][   T49] loop0: rw=1, sector=265, nr_sectors = 8 limit=128
[  102.360604][   T49] kworker/u8:3: attempt to access beyond end of device
[  102.360604][   T49] loop0: rw=1, sector=281, nr_sectors = 8 limit=128
[  102.449689][ T5964] usb 4-1: string descriptor 0 read error: -22
[  102.449771][   T49] kworker/u8:3: attempt to access beyond end of device
[  102.449771][   T49] loop0: rw=1, sector=297, nr_sectors = 8 limit=128
[  102.656623][ T5964] input: HID 256c:006d as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0001/input/input5
[  102.812837][ T5838] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  102.856026][ T5964] uclogic 0003:256C:006D.0001: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.3-1/input0
[  103.004402][ T5964] usb 4-1: USB disconnect, device number 3
[  103.134359][ T6063] team_slave_0: entered promiscuous mode
[  103.140174][ T6063] team_slave_1: entered promiscuous mode
[  103.234935][ T6063] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  103.512307][ T6074] loop0: detected capacity change from 0 to 1024
[  103.638108][ T6069] fido_id[6069]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  103.951971][ T6077] capability: warning: `syz.3.30' uses 32-bit capabilities (legacy support in use)
[  104.017253][ T6050] loop4: detected capacity change from 0 to 32768
[  104.280450][ T6050] metapage_write_end_io: I/O error
[  104.286055][ T6050] ERROR: (device loop4): release_metapage: metapage_write_one() failed
[  104.286055][ T6050] 
[  104.405597][ T6050] ERROR: (device loop4): remounting filesystem as read-only
[  104.415432][ T6090] macvlan0: entered promiscuous mode
[  104.419530][ T6086] loop2: detected capacity change from 0 to 4096
[  104.425031][ T6050] ERROR: (device loop4): diWrite: ixpxd invalid
[  104.425031][ T6050] 
[  104.465152][ T6050] ERROR: (device loop4): txCommit: 
[  104.465152][ T6050] 
[  104.490141][ T6086] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512).
[  104.519022][ T6090] macvlan0 (unregistering): left promiscuous mode
[  104.552759][ T6050] blkno = 8f7c0, nblocks = 1
[  104.557494][ T6050] ERROR: (device loop4): dbUpdatePMap: blocks are outside the map
[  104.557494][ T6050] 
[  104.628956][ T6050] ERROR: (device loop4): dbAllocNext: Corrupt dmap page
[  104.628956][ T6050] 
[  104.669768][ T6050] ialloc: diAlloc returned -5!
[  104.814756][   T30] audit: type=1800 audit(1753250059.683:2): pid=6086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.33" name="file1" dev="loop2" ino=30 res=0 errno=0
[  105.001425][ T5853] metapage_write_end_io: I/O error
[  105.135558][ T6078] loop1: detected capacity change from 0 to 32768
[  105.192114][ T6078] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.29 (6078)
[  105.307224][ T6078] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  105.354488][ T6078] BTRFS info (device loop1): using sha256 (sha256-x86_64) checksum algorithm
[  105.407503][ T6078] BTRFS info (device loop1): using free-space-tree
[  105.427080][ T6103] loop0: detected capacity change from 0 to 512
[  105.520554][ T6103] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  105.624689][ T6103] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  105.822155][ T6103] EXT4-fs (loop0): 1 truncate cleaned up
[  105.875357][ T6103] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  106.184862][ T5846] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  106.341431][ T6129] loop6: detected capacity change from 0 to 7
[  106.394030][ T5839] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  106.440193][ T5850] Dev loop6: unable to read RDB block 7
[  106.445849][ T5850]  loop6: unable to read partition table
[  106.502271][ T5850] loop6: partition table beyond EOD, truncated
[  106.580415][ T6129] Dev loop6: unable to read RDB block 7
[  106.658777][ T6129]  loop6: unable to read partition table
[  106.696884][ T6133] loop1: detected capacity change from 0 to 128
[  106.761940][ T6129] loop6: partition table beyond EOD, truncated
[  106.790043][ T6129] loop_reread_partitions: partition scan of loop6 (�被x������ ) failed (rc=-5)
[  106.833239][ T6139] loop5: detected capacity change from 0 to 256
[  106.883547][ T6133] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  106.944966][ T6139] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  106.973835][ T6133] ext4 filesystem being mounted at /8/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  107.019258][ T6139] exFAT-fs (loop5): Medium has reported failures. Some data may be lost.
[  107.140077][ T6139] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  107.438107][ T5846] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  107.441125][ T6154] IPv6: NLM_F_REPLACE set, but no existing node found!
[  107.735578][ T6161] loop1: detected capacity change from 0 to 64
[  107.756338][ T6161] hfs: creator requires a 4 character value
[  108.744523][ T6175] loop2: detected capacity change from 0 to 4096
[  109.289299][ T6175] ntfs3(loop2): ino=1a, mi_enum_attr
[  109.380414][ T6175] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  109.453566][ T5964] libceph: connect (1)[c::]:6789 error -101
[  109.467869][ T5964] libceph: mon0 (1)[c::]:6789 connect error
[  109.741705][ T5964] libceph: connect (1)[c::]:6789 error -101
[  109.809495][ T5964] libceph: mon0 (1)[c::]:6789 connect error
[  109.961359][   T49] ntfs3(loop2): ino=5, mi_enum_attr
[  109.970637][ T6182] ceph: No mds server is up or the cluster is laggy
[  110.418734][ T6164] loop4: detected capacity change from 0 to 32768
[  110.503750][ T6164] XFS: ikeep mount option is deprecated.
[  110.524452][ T6172] loop1: detected capacity change from 0 to 262144
[  110.583432][ T6172] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.62 (6172)
[  110.608340][ T6172] BTRFS info (device loop1): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53
[  110.618637][ T6172] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm
[  110.627961][ T6172] BTRFS info (device loop1): using free-space-tree
[  110.786089][ T6164] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  110.973478][ T6172] BTRFS info (device loop1): balance: start -d -m
[  110.983730][ T6172] BTRFS info (device loop1): relocating block group 13631488 flags data
[  111.079118][ T6172] BTRFS info (device loop1): found 1 extents, stage: move data extents
[  111.126023][ T6172] BTRFS info (device loop1): found 1 extents, stage: update data pointers
[  111.203617][ T6172] BTRFS info (device loop1): balance: ended with status: 0
[  111.235893][ T6164] XFS (loop4): Ending clean mount
[  111.300785][ T5846] BTRFS info (device loop1): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53
[  111.316992][ T6164] XFS (loop4): Quotacheck needed: Please wait.
[  111.481282][ T6164] XFS (loop4): Quotacheck: Done.
[  111.674966][ T5853] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  112.097429][ T6195] loop5: detected capacity change from 0 to 32768
[  112.472344][ T6247] loop2: detected capacity change from 0 to 128
[  112.536988][ T6247] EXT4-fs: Ignoring removed nobh option
[  112.664665][ T6247] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  112.741948][ T6247] ext4 filesystem being mounted at /15/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  112.773654][ T6257] loop3: detected capacity change from 0 to 256
[  112.825768][ T6195] bcachefs (loop5): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  112.825800][ T6195]   allowing incompatible features above 0.0: (unknown version)
[  112.825814][ T6195]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  113.185644][ T6195] bcachefs (loop5): Using encoding defined by superblock: utf8-12.1.0
[  113.202794][ T5838] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  113.236819][ T6195] bcachefs (loop5): initializing new filesystem
[  113.325425][ T6195] syz.5.70: vmalloc error: size 8388608, failed to allocated page array size 16384, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1
[  113.351082][ T6257] FAT-fs (loop3): Directory bread(block 64) failed
[  113.385339][ T6195] CPU: 0 UID: 0 PID: 6195 Comm: syz.5.70 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) 
[  113.385373][ T6195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  113.385387][ T6195] Call Trace:
[  113.385396][ T6195]  <TASK>
[  113.385406][ T6195]  dump_stack_lvl+0x189/0x250
[  113.385442][ T6195]  ? __pfx_rcu_read_unlock_special+0x10/0x10
[  113.385482][ T6195]  ? __pfx_dump_stack_lvl+0x10/0x10
[  113.385512][ T6195]  ? __pfx__printk+0x10/0x10
[  113.385547][ T6195]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  113.385580][ T6195]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  113.385615][ T6195]  ? srso_alias_return_thunk+0x5/0xfbef5
[  113.385649][ T6195]  warn_alloc+0x214/0x310
[  113.385680][ T6195]  ? __pfx_warn_alloc+0x10/0x10
[  113.385712][ T6195]  ? srso_alias_return_thunk+0x5/0xfbef5
[  113.385740][ T6195]  ? srso_alias_return_thunk+0x5/0xfbef5
[  113.385767][ T6195]  ? __get_vm_area_node+0x28f/0x300
[  113.385805][ T6195]  ? bch2_fs_journal_start+0x2b4/0x12b0
[  113.385839][ T6195]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  113.385905][ T6195]  ? srso_alias_return_thunk+0x5/0xfbef5
[  113.385947][ T6195]  ? six_unlock_ip+0x302/0x430
[  113.385986][ T6195]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  113.386029][ T6195]  ? srso_alias_return_thunk+0x5/0xfbef5
[  113.386056][ T6195]  ? rcu_is_watching+0x15/0xb0
[  113.386086][ T6195]  ? bch2_fs_journal_start+0x2b4/0x12b0
[  113.386113][ T6195]  ? bch2_fs_journal_start+0x2b4/0x12b0
[  113.386138][ T6195]  __kvmalloc_node_noprof+0x3b8/0x5f0
[  113.386175][ T6195]  ? bch2_fs_journal_start+0x2b4/0x12b0
[  113.386212][ T6195]  bch2_fs_journal_start+0x2b4/0x12b0
[  113.386273][ T6195]  ? __pfx_bch2_fs_journal_start+0x10/0x10
[  113.386302][ T6195]  ? bch2_fs_journal_alloc+0x69/0x4e0
[  113.386333][ T6195]  ? srso_alias_return_thunk+0x5/0xfbef5
[  113.386365][ T6195]  ? bch2_fs_journal_alloc+0x4ac/0x4e0
[  113.386393][ T6195]  ? bch2_fs_journal_alloc+0x69/0x4e0
[  113.386426][ T6195]  bch2_fs_initialize+0xac7/0x1550
[  113.386472][ T6195]  ? __pfx_stack_trace_save+0x10/0x10
[  113.386507][ T6195]  ? __pfx_bch2_fs_initialize+0x10/0x10
[  113.386542][ T6195]  ? check_path+0x21/0x40
[  113.386570][ T6195]  ? srso_alias_return_thunk+0x5/0xfbef5
[  113.386707][ T6195]  ? srso_alias_return_thunk+0x5/0xfbef5
[  113.386739][ T6195]  ? bch2_fs_start+0xa0f/0xda0
[  113.386780][ T6195]  ? up_write+0x1c4/0x420
[  113.386810][ T6195]  ? bch2_fs_start+0x5e7/0xda0
[  113.386851][ T6195]  bch2_fs_start+0xaa0/0xda0
[  113.386892][ T6195]  ? bch2_fs_start+0x5e7/0xda0
[  113.386938][ T6195]  ? __pfx_bch2_fs_start+0x10/0x10
[  113.387001][ T6195]  ? srso_alias_return_thunk+0x5/0xfbef5
[  113.387028][ T6195]  ? sget+0x267/0x620
[  113.387066][ T6195]  bch2_fs_get_tree+0xb39/0x1520
[  113.387135][ T6195]  ? __pfx_bch2_fs_get_tree+0x10/0x10
[  113.387193][ T6195]  ? srso_alias_return_thunk+0x5/0xfbef5
[  113.387220][ T6195]  ? aa_get_newest_label+0xf7/0x5d0
[  113.387247][ T6195]  ? srso_alias_return_thunk+0x5/0xfbef5
[  113.387274][ T6195]  ? vfs_parse_monolithic_sep+0x2df/0x310
[  113.387328][ T6195]  ? srso_alias_return_thunk+0x5/0xfbef5
[  113.387355][ T6195]  ? apparmor_capable+0x137/0x1b0
[  113.387391][ T6195]  ? srso_alias_return_thunk+0x5/0xfbef5
[  113.387424][ T6195]  vfs_get_tree+0x92/0x2b0
[  113.387463][ T6195]  do_new_mount+0x24a/0xa40
[  113.387511][ T6195]  __se_sys_mount+0x317/0x410
[  113.387542][ T6195]  ? __pfx___se_sys_mount+0x10/0x10
[  113.387562][ T6195]  ? srso_alias_return_thunk+0x5/0xfbef5
[  113.387598][ T6195]  ? srso_alias_return_thunk+0x5/0xfbef5
[  113.387625][ T6195]  ? __x64_sys_mount+0x20/0xc0
[  113.387666][ T6195]  do_syscall_64+0xfa/0x3b0
[  113.387694][ T6195]  ? lockdep_hardirqs_on+0x9c/0x150
[  113.387720][ T6195]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  113.387743][ T6195]  ? srso_alias_return_thunk+0x5/0xfbef5
[  113.387770][ T6195]  ? exc_page_fault+0x9f/0xf0
[  113.387798][ T6195]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  113.387821][ T6195] RIP: 0033:0x7f5ef279014a
[  113.387842][ T6195] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  113.387862][ T6195] RSP: 002b:00007f5ef35b1e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  113.387887][ T6195] RAX: ffffffffffffffda RBX: 00007f5ef35b1ef0 RCX: 00007f5ef279014a
[  113.387905][ T6195] RDX: 0000200000000140 RSI: 0000200000000100 RDI: 00007f5ef35b1eb0
[  113.387922][ T6195] RBP: 0000200000000140 R08: 00007f5ef35b1ef0 R09: 0000000002800000
[  113.387950][ T6195] R10: 0000000002800000 R11: 0000000000000246 R12: 0000200000000100
[  113.387966][ T6195] R13: 00007f5ef35b1eb0 R14: 0000000000005a7a R15: 0000200000000340
[  113.388003][ T6195]  </TASK>
[  113.860045][ T6257] FAT-fs (loop3): Directory bread(block 65) failed
[  113.904988][ T6257] FAT-fs (loop3): Directory bread(block 66) failed
[  113.937591][ T6257] FAT-fs (loop3): Directory bread(block 67) failed
[  113.964716][ T6257] FAT-fs (loop3): Directory bread(block 68) failed
[  114.003010][ T6257] FAT-fs (loop3): Directory bread(block 69) failed
[  114.009648][ T6257] FAT-fs (loop3): Directory bread(block 70) failed
[  114.098752][ T6195] Mem-Info:
[  114.110159][ T6257] FAT-fs (loop3): Directory bread(block 71) failed
[  114.116788][ T6257] FAT-fs (loop3): Directory bread(block 72) failed
[  114.166882][ T6195] active_anon:34154 inactive_anon:0 isolated_anon:0
[  114.166882][ T6195]  active_file:10474 inactive_file:39983 isolated_file:0
[  114.166882][ T6195]  unevictable:768 dirty:341 writeback:0
[  114.166882][ T6195]  slab_reclaimable:10396 slab_unreclaimable:101524
[  114.166882][ T6195]  mapped:44036 shmem:29091 pagetables:1303
[  114.166882][ T6195]  sec_pagetables:0 bounce:0
[  114.166882][ T6195]  kernel_misc_reclaimable:0
[  114.166882][ T6195]  free:1251245 free_pcp:37433 free_cma:0
[  114.287980][ T6257] FAT-fs (loop3): Directory bread(block 73) failed
[  114.376604][ T6195] Node 0 active_anon:115732kB inactive_anon:0kB active_file:41896kB inactive_file:160032kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:176144kB dirty:1344kB writeback:0kB shmem:93812kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12772kB pagetables:5252kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  114.520292][ T6195] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  114.673575][ T6195] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  114.814082][ T6195] lowmem_reserve[]: 0 2498 2500 2500 2500
[  114.860074][ T6195] Node 0 DMA32 free:1116180kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:110920kB inactive_anon:0kB active_file:41896kB inactive_file:158272kB unevictable:1736kB writepending:1344kB present:3129332kB managed:2558496kB mlocked:300kB bounce:0kB free_pcp:129808kB local_pcp:91868kB free_cma:0kB
[  115.032351][ T6195] lowmem_reserve[]: 0 0 1 1 1
[  115.070098][ T6195] Node 0 Normal free:24kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:52kB inactive_anon:0kB active_file:0kB inactive_file:1560kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB
[  115.176447][ T6195] lowmem_reserve[]: 0 0 0 0 0
[  115.200102][ T6195] Node 1 Normal free:3897444kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:20320kB local_pcp:13280kB free_cma:0kB
[  115.340373][ T6195] lowmem_reserve[]: 0 0 0 0 0
[  115.386588][ T6195] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  115.409813][ T6268] loop1: detected capacity change from 0 to 32768
[  115.423126][ T6195] Node 0 DMA32: 307*4kB (M) 195*8kB (UME) 111*16kB (UME) 77*32kB (M) 57*64kB (UM) 22*128kB (UM) 9*256kB (UME) 10*512kB (M) 2*1024kB (ME) 1*2048kB (E) 265*4096kB (M) = 1110452kB
[  115.450700][ T6268] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.84 (6268)
[  115.540163][ T6195] Node 0 Normal: 0*4kB 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB
[  115.569180][ T6268] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  115.607430][ T6268] BTRFS info (device loop1): using sha256 (sha256-x86_64) checksum algorithm
[  115.619024][ T6268] BTRFS info (device loop1): using free-space-tree
[  115.622842][ T6195] Node 1 Normal: 191*4kB (UE) 41*8kB (UME) 46*16kB (UME) 62*32kB (UME) 32*64kB (UME) 7*128kB (UME) 4*256kB (UME) 3*512kB (ME) 1*1024kB (M) 2*2048kB (UE) 948*4096kB (M) = 3897444kB
[  115.658037][ T5964] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  115.850643][ T5964] usb 1-1: Using ep0 maxpacket: 16
[  115.874015][ T5964] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  115.894184][ T6195] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  115.930131][ T5964] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  115.954186][ T6195] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  116.019087][ T6195] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  116.042784][ T5964] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  116.060545][ T6195] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  116.094768][ T5964] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  116.125105][ T6195] 70667 total pagecache pages
[  116.131559][ T6195] 0 pages in swap cache
[  116.138815][ T5964] usb 1-1: Product: syz
[  116.151711][ T6195] Free swap  = 124996kB
[  116.164228][ T5964] usb 1-1: Manufacturer: syz
[  116.174337][ T5964] usb 1-1: SerialNumber: syz
[  116.179448][ T6195] Total swap = 124996kB
[  116.195725][ T5964] usb 1-1: config 0 descriptor??
[  116.200437][ T6195] 2097051 pages RAM
[  116.214774][ T6195] 0 pages HighMem/MovableOnly
[  116.223645][ T5964] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  116.231946][ T6195] 425385 pages reserved
[  116.257433][ T6195] 0 pages cma reserved
[  116.265615][ T5964] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class)
[  116.304621][ T6195] bcachefs (loop5): error reallocating journal fifo (32768 open entries)
[  116.336160][ T6195] bcachefs (loop5): bch2_fs_initialize(): error ENOMEM_journal_pin_fifo
[  116.361222][ T6195] bcachefs (loop5): bch2_fs_start(): error starting filesystem ENOMEM_journal_pin_fifo
[  116.410295][ T6195] bcachefs (loop5): shutting down
[  116.440081][ T5947] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  116.528153][ T6195] bcachefs (loop5): shutdown complete
[  116.560680][ T6315] loop4: detected capacity change from 0 to 4096
[  116.589671][ T6315] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512).
[  116.623212][ T5947] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  116.645377][ T5947] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  116.699862][ T5947] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  116.729888][ T5947] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  116.789774][ T6315] ntfs3(loop4): ino=1a, mi_enum_attr
[  116.798990][ T5846] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  116.822993][ T6315] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  116.831865][ T5964] em28xx 1-1:0.0: unknown em28xx chip ID (0)
[  116.836999][ T5947] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  116.838955][ T5964] em28xx 1-1:0.0: Config register raw data: 0x3c
[  116.887592][ T5964] em28xx 1-1:0.0: I2S Audio (3 sample rate(s))
[  116.908491][ T5947] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  116.909681][ T5964] em28xx 1-1:0.0: No AC97 audio processor
[  116.972281][ T5947] usb 3-1: config 0 descriptor??
[  117.257002][ T5964] usb 1-1: USB disconnect, device number 2
[  117.417581][ T5947] plantronics 0003:047F:FFFF.0002: ignoring exceeding usage max
[  117.508273][ T5947] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  118.698568][ T6195] bcachefs: bch2_fs_get_tree() error: ENOMEM_journal_pin_fifo
[  118.796969][ T5915] usb 3-1: USB disconnect, device number 2
[  118.822562][ T6345] process 'syz.4.104' launched './file0' with NULL argv: empty string added
[  119.155322][ T6353] loop4: detected capacity change from 0 to 4096
[  119.551432][ T1143] ntfs3(loop4): ino=5, mi_enum_attr
[  119.690552][ T6365] netlink: 'syz.1.113': attribute type 10 has an invalid length.
[  119.730071][ T6365] bridge0: port 2(bridge_slave_1) entered disabled state
[  119.738262][ T6365] bridge0: port 1(bridge_slave_0) entered disabled state
[  119.753303][ T6367] Bluetooth: MGMT ver 1.23
[  119.792078][ T6367] Bluetooth: hci0: invalid length 4, exp 2 for type 16
[  119.840478][ T6365] bridge0: port 2(bridge_slave_1) entered blocking state
[  119.847686][ T6365] bridge0: port 2(bridge_slave_1) entered forwarding state
[  119.855609][ T6365] bridge0: port 1(bridge_slave_0) entered blocking state
[  119.862883][ T6365] bridge0: port 1(bridge_slave_0) entered forwarding state
[  119.909140][ T6365] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  120.660236][ T6391] loop4: detected capacity change from 0 to 16
[  120.713724][ T6391] erofs (device loop4): mounted with root inode @ nid 36.
[  120.759319][ T6363] loop2: detected capacity change from 0 to 32768
[  120.792275][ T6363] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.111 (6363)
[  120.887671][ T6363] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  120.924578][ T6363] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  120.959462][ T6393] loop0: detected capacity change from 0 to 4096
[  120.967131][ T6363] BTRFS info (device loop2): using free-space-tree
[  121.017993][ T6393] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512).
[  121.333314][ T6393] ntfs3(loop0): ino=1e, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" ni_find_attr
[  121.430029][ T5964] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  121.484322][ T6393] ntfs3(loop0): ino=1e, "file1" ni_find_attr
[  121.530831][ T6393] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  121.630369][ T5964] usb 5-1: Using ep0 maxpacket: 8
[  121.700490][ T5964] usb 5-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77
[  121.709567][ T5964] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  121.800079][ T5964] usb 5-1: Product: syz
[  121.804288][ T5964] usb 5-1: Manufacturer: syz
[  121.808891][ T5964] usb 5-1: SerialNumber: syz
[  121.867098][ T6387] loop3: detected capacity change from 0 to 32768
[  121.931203][ T5964] usb 5-1: config 0 descriptor??
[  121.931931][ T6387] BTRFS: device /dev/loop3 (7:3) using temp-fsid c506a4a5-2846-4ce1-817f-c9c69c3fd84c
[  121.981719][ T5964] gspca_main: sq905-2.14.0 probing 2770:9120
[  122.017415][ T6387] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.122 (6387)
[  122.250021][ T6387] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  122.354723][ T6387] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[  122.417699][ T6387] BTRFS info (device loop3): using free-space-tree
[  122.539436][ T5838] BTRFS info (device loop2): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  122.969011][   T30] audit: type=1800 audit(1753250077.823:3): pid=6387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.122" name="file1" dev="loop3" ino=260 res=0 errno=0
[  122.985644][ T5964] gspca_sq905: bulk read fail (-22) len 0/4
[  123.042449][ T5964] sq905 5-1:0.0: probe with driver sq905 failed with error -5
[  123.238038][ T5947] usb 5-1: USB disconnect, device number 2
[  123.444383][ T5842] BTRFS info (device loop3): last unmount of filesystem c506a4a5-2846-4ce1-817f-c9c69c3fd84c
[  124.079706][ T6425] loop1: detected capacity change from 0 to 32768
[  124.130395][   T10] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  124.211898][ T6474] loop0: detected capacity change from 0 to 512
[  124.278886][ T6425] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  124.361687][   T10] usb 3-1: Using ep0 maxpacket: 32
[  124.368533][ T6474] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  124.425482][   T10] usb 3-1: config index 0 descriptor too short (expected 29220, got 36)
[  124.500054][   T10] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  124.560207][   T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81
[  124.605219][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  124.638698][ T6431] loop5: detected capacity change from 0 to 40427
[  124.651260][ T5839] EXT4-fs error (device loop0): ext4_lookup:1787: inode #11: comm syz-executor: iget: bad extra_isize 148 (inode size 256)
[  124.659383][   T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  124.691270][ T5839] EXT4-fs error (device loop0): ext4_lookup:1787: inode #11: comm syz-executor: iget: bad extra_isize 148 (inode size 256)
[  124.707475][ T6431] F2FS-fs (loop5): heap/no_heap options were deprecated
[  124.726856][ T6431] F2FS-fs (loop5): build fault injection rate: 19
[  124.760724][   T10] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  124.800207][ T6431] F2FS-fs (loop5): build fault injection type: 0x3bfe8c
[  124.804045][ T6425] XFS (loop1): Ending clean mount
[  124.840120][   T10] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  124.861219][ T6425] XFS (loop1): Quotacheck needed: Please wait.
[  124.867567][ T6431] F2FS-fs (loop5): invalid crc value
[  124.882014][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  124.928531][   T10] usb 3-1: config 0 descriptor??
[  124.975678][ T6431] F2FS-fs (loop5): inject page alloc in f2fs_grab_cache_folio of f2fs_ra_meta_pages+0x615/0x970
[  125.027662][ T6425] XFS (loop1): Quotacheck: Done.
[  125.218841][   T10] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  125.310852][ T6431] F2FS-fs (loop5): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x20a/0x3f0
[  125.348322][ T5839] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  125.373662][ T5846] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  125.389945][ T6431] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  125.418083][   T49] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  125.440983][ T5947] usb 3-1: USB disconnect, device number 3
[  125.455778][ T5947] usblp0: removed
[  125.476755][ T6501] loop3: detected capacity change from 0 to 512
[  125.619846][ T6501] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  125.742474][   T49] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  125.746315][ T6501] ext4 filesystem being mounted at /23/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  125.912842][   T49] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  126.142081][   T49] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  126.277957][ T5842] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  126.400267][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  127.065090][   T49] bridge_slave_1: left allmulticast mode
[  127.078736][   T49] bridge_slave_1: left promiscuous mode
[  127.121988][   T49] bridge0: port 2(bridge_slave_1) entered disabled state
[  127.248104][ T5844] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  127.281724][   T49] bridge_slave_0: left allmulticast mode
[  127.300396][   T49] bridge_slave_0: left promiscuous mode
[  127.305926][ T5844] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  127.316813][ T5844] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  127.319410][   T49] bridge0: port 1(bridge_slave_0) entered disabled state
[  127.340613][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  127.363600][ T5844] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  127.372077][ T5844] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  127.790643][    T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!!
[  127.800117][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  127.840105][    T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!!
[  127.848399][    T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!!
[  128.090576][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  128.090698][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  128.122711][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  128.190261][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  128.511997][ T6529] loop1: detected capacity change from 0 to 1024
[  128.604800][ T6529] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  128.691265][ T6529] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  128.842890][ T6529] EXT4-fs error (device loop1): ext4_map_blocks:816: inode #15: block 1: comm syz.1.159: lblock 1 mapped to illegal pblock 1 (length 1)
[  128.876264][   T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  128.913534][ T6529] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 1 with error 117
[  128.953072][   T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  128.984858][ T6529] EXT4-fs (loop1): This should not happen!! Data will be lost
[  128.984858][ T6529] 
[  128.997989][   T49] bond0 (unregistering): Released all slaves
[  129.018715][ T6539] EXT4-fs error (device loop1): ext4_map_blocks:816: inode #15: block 3: comm syz.1.159: lblock 3 mapped to illegal pblock 3 (length 5)
[  129.077569][ T6539] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 5 with error 117
[  129.150375][ T6539] EXT4-fs (loop1): This should not happen!! Data will be lost
[  129.150375][ T6539] 
[  129.410778][ T5860] Bluetooth: hci1: command tx timeout
[  129.422594][ T5846] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  129.465179][ T6525] mmap: syz.4.157 (6525) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  130.861992][   T49] hsr_slave_0: left promiscuous mode
[  130.920323][   T49] hsr_slave_1: left promiscuous mode
[  130.926419][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  130.965589][ T6587] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  130.972700][   T49] batman_adv: batadv0: Removing interface: batadv_slave_0
[  131.033696][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  131.052027][   T49] batman_adv: batadv0: Removing interface: batadv_slave_1
[  131.114045][   T49] team_slave_0: left promiscuous mode
[  131.120300][   T49] team_slave_1: left promiscuous mode
[  131.145294][   T49] veth1_macvtap: left promiscuous mode
[  131.164362][   T49] veth0_macvtap: left promiscuous mode
[  131.185316][   T49] veth1_vlan: left promiscuous mode
[  131.201792][   T49] veth0_vlan: left promiscuous mode
[  131.492602][ T5860] Bluetooth: hci1: command tx timeout
[  131.584445][ T6591] capability: warning: `syz.5.168' uses deprecated v2 capabilities in a way that may be insecure
[  131.959550][   T49] team0 (unregistering): Port device team_slave_1 removed
[  132.027349][   T49] team0 (unregistering): Port device team_slave_0 removed
[  132.136361][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  132.150097][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  132.405279][ T6595] loop5: detected capacity change from 0 to 64
[  132.464947][ T6595] bio_check_eod: 97 callbacks suppressed
[  132.464967][ T6595] syz.5.176: attempt to access beyond end of device
[  132.464967][ T6595] loop5: rw=0, sector=268435468, nr_sectors = 2 limit=64
[  132.489468][ T6595] Buffer I/O error on dev loop5, logical block 134217734, async page read
[  132.583634][ T6583] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  132.925444][ T6605] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  132.932727][ T6512] chnl_net:caif_netlink_parms(): no params data found
[  133.571381][ T5860] Bluetooth: hci1: command tx timeout
[  133.870130][ T5986] usb 4-1: new full-speed USB device number 4 using dummy_hcd
[  133.985035][ T6601] loop4: detected capacity change from 0 to 131072
[  134.012006][ T6601] F2FS-fs (loop4): Wrong CP boundary, start(512) end(1536) blocks(0)
[  134.020205][ T6601] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  134.036297][ T6601] F2FS-fs (loop4): invalid crc value
[  134.093157][ T5986] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  134.139249][ T5986] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  134.201344][ T6601] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  134.208421][ T6601] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[  134.269631][ T5986] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64
[  134.345561][ T5986] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64
[  134.378112][ T6634] loop2: detected capacity change from 0 to 2048
[  134.399784][ T5986] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  134.454146][ T5986] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  134.463859][ T6512] bridge0: port 1(bridge_slave_0) entered blocking state
[  134.485930][ T6512] bridge0: port 1(bridge_slave_0) entered disabled state
[  134.489801][ T5947] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  134.499462][ T5986] usb 4-1: Product: syz
[  134.510996][ T6634] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  134.520240][ T5986] usb 4-1: Manufacturer: syz
[  134.527068][ T6512] bridge_slave_0: entered allmulticast mode
[  134.533201][ T5986] usb 4-1: SerialNumber: syz
[  134.551398][ T6634] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
[  134.559075][ T6634] UDF-fs: Scanning with blocksize 512 failed
[  134.586277][ T6616] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  134.594959][ T6512] bridge_slave_0: entered promiscuous mode
[  134.618250][ T5947] hid-generic 0000:0000:0000.0003: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  134.702312][ T6512] bridge0: port 2(bridge_slave_1) entered blocking state
[  134.727666][ T6512] bridge0: port 2(bridge_slave_1) entered disabled state
[  134.740335][ T6512] bridge_slave_1: entered allmulticast mode
[  134.765169][ T6512] bridge_slave_1: entered promiscuous mode
[  134.783098][ T6634] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  134.921030][ T6616] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  134.960261][ T6616] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  135.269547][ T6512] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  135.585658][ T6616] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  135.587135][ T6512] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  135.600354][ T6616] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  135.650246][ T5860] Bluetooth: hci1: command tx timeout
[  135.848239][ T5986] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42
[  135.857051][ T6512] team0: Port device team_slave_0 added
[  135.866369][ T5986] cdc_ncm 4-1:1.0: dwNtbInMaxSize=6 is too small. Using 2048
[  135.901832][ T5986] cdc_ncm 4-1:1.0: setting rx_max = 2048
[  135.922162][ T6512] team0: Port device team_slave_1 added
[  136.052381][ T5986] cdc_ncm 4-1:1.0: setting tx_max = 184
[  136.251230][ T6641] loop1: detected capacity change from 0 to 40427
[  136.263722][ T5986] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42
[  136.287665][ T6641] F2FS-fs (loop1): Fix alignment : internally, start(4096) end(16896) block(12288)
[  136.318998][ T6641] F2FS-fs (loop1): Image doesn't support compression
[  136.339893][ T5986] usb 4-1: USB disconnect, device number 4
[  136.341752][ T6641] F2FS-fs (loop1): invalid crc value
[  136.387293][ T5986] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP)
[  136.443634][ T6512] batman_adv: batadv0: Adding interface: batadv_slave_0
[  136.475355][ T6512] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  136.547705][ T6512] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  136.576364][ T6653] loop5: detected capacity change from 0 to 1024
[  136.601873][ T6653] EXT4-fs: Ignoring removed orlov option
[  136.630540][ T6512] batman_adv: batadv0: Adding interface: batadv_slave_1
[  136.637500][ T6512] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  136.654659][ T6641] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  136.691323][ T6653] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  136.769180][ T6653] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  136.790037][ T6512] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  136.864415][ T6658] loop3: detected capacity change from 0 to 128
[  136.886246][   T30] audit: type=1804 audit(1753250091.743:4): pid=6653 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.195" name="/newroot/34/file1/file1" dev="loop5" ino=15 res=1 errno=0
[  136.901486][ T6641] F2FS-fs (loop1): Unrecognized mount option "��������������18446744073709551615�����@�LqE�:��� �艞�t}�0��$�" or missing value
[  136.960791][   T30] audit: type=1804 audit(1753250091.833:5): pid=6653 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.195" name="/newroot/34/file1/file1" dev="loop5" ino=15 res=1 errno=0
[  137.029507][ T5845] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  137.113615][ T6659] syz.3.196: attempt to access beyond end of device
[  137.113615][ T6659] loop3: rw=2049, sector=145, nr_sectors = 16 limit=128
[  137.220446][ T6659] syz.3.196: attempt to access beyond end of device
[  137.220446][ T6659] loop3: rw=2049, sector=169, nr_sectors = 8 limit=128
[  137.264937][ T6659] syz.3.196: attempt to access beyond end of device
[  137.264937][ T6659] loop3: rw=2049, sector=185, nr_sectors = 8 limit=128
[  137.306221][   T49] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  137.329439][ T6659] syz.3.196: attempt to access beyond end of device
[  137.329439][ T6659] loop3: rw=2049, sector=201, nr_sectors = 8 limit=128
[  137.350585][ T6659] syz.3.196: attempt to access beyond end of device
[  137.350585][ T6659] loop3: rw=2049, sector=217, nr_sectors = 8 limit=128
[  137.434616][ T6659] syz.3.196: attempt to access beyond end of device
[  137.434616][ T6659] loop3: rw=2049, sector=233, nr_sectors = 8 limit=128
[  137.540895][ T6659] syz.3.196: attempt to access beyond end of device
[  137.540895][ T6659] loop3: rw=2049, sector=249, nr_sectors = 8 limit=128
[  137.566279][ T6659] syz.3.196: attempt to access beyond end of device
[  137.566279][ T6659] loop3: rw=2049, sector=265, nr_sectors = 8 limit=128
[  137.608529][ T6659] syz.3.196: attempt to access beyond end of device
[  137.608529][ T6659] loop3: rw=2049, sector=281, nr_sectors = 8 limit=128
[  137.668890][ T5844] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  137.681416][ T5844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  137.701544][ T5844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  137.718166][ T5844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  137.749707][ T5844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  137.853728][ T6659] syz.3.196: attempt to access beyond end of device
[  137.853728][ T6659] loop3: rw=2049, sector=297, nr_sectors = 8 limit=128
[  137.936701][ T6659] syz.3.196: attempt to access beyond end of device
[  137.936701][ T6659] loop3: rw=2049, sector=313, nr_sectors = 8 limit=128
[  138.011958][ T6659] syz.3.196: attempt to access beyond end of device
[  138.011958][ T6659] loop3: rw=2049, sector=329, nr_sectors = 8 limit=128
[  138.026023][   T49] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  138.066730][ T6659] syz.3.196: attempt to access beyond end of device
[  138.066730][ T6659] loop3: rw=2049, sector=345, nr_sectors = 8 limit=128
[  138.089570][ T6677] loop5: detected capacity change from 0 to 128
[  138.127523][ T6659] syz.3.196: attempt to access beyond end of device
[  138.127523][ T6659] loop3: rw=2049, sector=361, nr_sectors = 8 limit=128
[  138.129067][ T6512] hsr_slave_0: entered promiscuous mode
[  138.165905][ T6677] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  138.204387][ T6512] hsr_slave_1: entered promiscuous mode
[  138.232903][ T6512] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  138.267960][ T6512] Cannot create hsr debugfs directory
[  138.377108][  T140] kworker/u8:5: attempt to access beyond end of device
[  138.377108][  T140] loop3: rw=1, sector=377, nr_sectors = 8 limit=128
[  138.412786][  T140] kworker/u8:5: attempt to access beyond end of device
[  138.412786][  T140] loop3: rw=1, sector=393, nr_sectors = 8 limit=128
[  138.437765][   T49] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  138.492405][ T6686] UDF-fs: error (device loop5): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  138.942690][   T49] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  139.186220][ T6697] loop4: detected capacity change from 0 to 1024
[  139.481605][ T6697] loop4: detected capacity change from 1024 to 64
[  139.894480][ T5844] Bluetooth: hci0: command tx timeout
[  139.937837][ T6689] loop1: detected capacity change from 0 to 32768
[  139.975272][   T49] bridge_slave_1: left allmulticast mode
[  139.990517][   T49] bridge_slave_1: left promiscuous mode
[  139.996499][   T49] bridge0: port 2(bridge_slave_1) entered disabled state
[  140.079533][   T49] bridge_slave_0: left allmulticast mode
[  140.100737][ T6689] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  140.134836][   T49] bridge_slave_0: left promiscuous mode
[  140.183471][   T49] bridge0: port 1(bridge_slave_0) entered disabled state
[  140.221987][ T6704] loop3: detected capacity change from 0 to 32768
[  140.240049][   T30] audit: type=1800 audit(1753250095.103:6): pid=6689 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.206" name="file1" dev="loop1" ino=17059 res=0 errno=0
[  140.310894][ T6704] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  140.475829][ T5846] ocfs2: Unmounting device (7,1) on (node local)
[  140.590377][ T6704] XFS (loop3): Ending clean mount
[  140.626945][ T6704] XFS (loop3): Quotacheck needed: Please wait.
[  140.703482][ T6704] XFS (loop3): Quotacheck: Done.
[  141.014365][ T5842] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  141.078509][ T6720] loop1: detected capacity change from 0 to 4096
[  141.104899][   T30] audit: type=1800 audit(1753250095.973:7): pid=6677 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.203" name="file1" dev="loop5" ino=94 res=0 errno=0
[  141.320199][ T6721] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  141.699480][   T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  141.716766][   T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  141.990142][ T5844] Bluetooth: hci0: command tx timeout
[  142.551059][   T49] bond0 (unregistering): Released all slaves
[  142.915250][   T13] bio_check_eod: 58 callbacks suppressed
[  142.915270][   T13] kworker/u8:1: attempt to access beyond end of device
[  142.915270][   T13] loop4: rw=1, sector=206, nr_sectors = 8 limit=64
[  143.039501][   T13] kworker/u8:1: attempt to access beyond end of device
[  143.039501][   T13] loop4: rw=2049, sector=198, nr_sectors = 16 limit=64
[  143.116904][ T6740] loop3: detected capacity change from 0 to 4096
[  143.271329][ T6740] ntfs3(loop3): ino=1a, mi_enum_attr
[  143.276676][ T6740] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  143.841677][ T6512] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  143.922037][ T6512] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  144.011144][ T6667] chnl_net:caif_netlink_parms(): no params data found
[  144.054777][ T5844] Bluetooth: hci0: command tx timeout
[  144.350359][   T49] hsr_slave_0: left promiscuous mode
[  144.390577][   T49] hsr_slave_1: left promiscuous mode
[  144.396713][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  144.493537][   T49] batman_adv: batadv0: Removing interface: batadv_slave_0
[  144.523680][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  144.550302][   T49] batman_adv: batadv0: Removing interface: batadv_slave_1
[  144.677940][   T49] veth1_macvtap: left promiscuous mode
[  144.722719][   T49] veth0_macvtap: left promiscuous mode
[  144.728418][   T49] veth1_vlan: left promiscuous mode
[  144.757703][   T49] veth0_vlan: left promiscuous mode
[  144.963689][ T5860] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  144.973842][ T5860] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  144.988086][ T5860] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  145.000234][ T5860] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  145.011115][ T5860] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  145.422985][   T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  145.505845][ T6778] loop1: detected capacity change from 0 to 32768
[  145.545875][ T6778] 
[  145.545875][ T6778]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  145.545875][ T6778] 
[  145.593525][   T10] usb 4-1: Using ep0 maxpacket: 32
[  145.622406][   T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  145.634071][ T6778] 
[  145.634071][ T6778]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  145.634071][ T6778] 
[  145.647119][   T10] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  145.666845][ T6778] 
[  145.666845][ T6778]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  145.666845][ T6778] 
[  145.688140][   T10] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  145.702313][ T6778] 
[  145.702313][ T6778]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  145.702313][ T6778] 
[  145.722082][   T10] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  145.738897][ T6778] 
[  145.738897][ T6778]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  145.738897][ T6778] 
[  145.749446][   T10] usb 4-1: config 0 interface 0 has no altsetting 0
[  145.757340][ T6778] 
[  145.757340][ T6778]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  145.757340][ T6778] 
[  145.798491][   T10] usb 4-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00
[  145.820297][ T6778] 
[  145.820297][ T6778]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  145.820297][ T6778] 
[  145.832748][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  145.866797][  T109] 
[  145.866797][  T109]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  145.866797][  T109] 
[  145.901830][ T6778] 
[  145.901830][ T6778]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  145.901830][ T6778] 
[  145.930935][   T10] usb 4-1: config 0 descriptor??
[  145.945070][ T6778] 
[  145.945070][ T6778]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  145.945070][ T6778] 
[  145.970935][ T6778] 
[  145.970935][ T6778]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  145.970935][ T6778] 
[  145.983751][ T6778] 
[  145.983751][ T6778]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  145.983751][ T6778] 
[  146.058660][  T110] 
[  146.058660][  T110]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  146.058660][  T110] 
[  146.076282][   T49] team0 (unregistering): Port device team_slave_1 removed
[  146.084393][ T6778] 
[  146.084393][ T6778]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  146.084393][ T6778] 
[  146.117077][ T6778] 
[  146.117077][ T6778]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  146.117077][ T6778] 
[  146.134637][ T5860] Bluetooth: hci0: command tx timeout
[  146.199445][ T6798] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  146.218363][   T49] team0 (unregistering): Port device team_slave_0 removed
[  146.372940][   T10] hid-thrustmaster 0003:044F:B65D.0004: unknown main item tag 0x0
[  146.396261][   T10] hid-thrustmaster 0003:044F:B65D.0004: unknown main item tag 0x0
[  146.411581][   T10] hid-thrustmaster 0003:044F:B65D.0004: item fetching failed at offset 2/5
[  146.434596][   T10] hid-thrustmaster 0003:044F:B65D.0004: parse failed with error -22
[  146.481717][   T10] hid-thrustmaster 0003:044F:B65D.0004: probe with driver hid-thrustmaster failed with error -22
[  146.568315][   T10] usb 4-1: USB disconnect, device number 5
[  146.969073][ T6512] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  147.117353][ T5860] Bluetooth: hci5: command tx timeout
[  147.173875][ T6800] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  147.225750][ T6512] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  147.442715][ T6667] bridge0: port 1(bridge_slave_0) entered blocking state
[  147.451803][ T6667] bridge0: port 1(bridge_slave_0) entered disabled state
[  147.459041][ T6667] bridge_slave_0: entered allmulticast mode
[  147.503279][ T6667] bridge_slave_0: entered promiscuous mode
[  147.615231][ T6667] bridge0: port 2(bridge_slave_1) entered blocking state
[  147.625515][ T6821] loop5: detected capacity change from 0 to 256
[  147.630159][ T6667] bridge0: port 2(bridge_slave_1) entered disabled state
[  147.638937][ T6667] bridge_slave_1: entered allmulticast mode
[  147.674684][ T6821] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d)
[  147.686866][ T6667] bridge_slave_1: entered promiscuous mode
[  147.720417][ T6821] exFAT-fs (loop5): bogus allocation bitmap size(need : 2, cur : 17179869186)
[  147.934418][ T6667] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  148.092248][ T6826] evm: overlay not supported
[  148.283826][ T6830] netlink: 64 bytes leftover after parsing attributes in process `syz.3.247'.
[  148.286559][ T6667] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  148.411344][ T6806] loop1: detected capacity change from 0 to 32768
[  148.427320][ T6833] loop5: detected capacity change from 0 to 512
[  148.455037][ T6833] ext4: Unknown parameter 'euid<00000000000000000000'
[  148.478112][ T6806] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  148.675592][ T6806] XFS (loop1): Ending clean mount
[  148.807127][ T6667] team0: Port device team_slave_0 added
[  148.864612][ T5846] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  148.886733][ T6667] team0: Port device team_slave_1 added
[  149.088259][ T6851] loop3: detected capacity change from 0 to 64
[  149.170964][ T5844] Bluetooth: hci5: command tx timeout
[  149.172560][ T6667] batman_adv: batadv0: Adding interface: batadv_slave_0
[  149.227161][ T6667] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  149.299519][ T6667] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  149.314256][ T6667] batman_adv: batadv0: Adding interface: batadv_slave_1
[  149.321781][ T6667] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  149.348918][ T6667] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  149.681773][ T6866] loop3: detected capacity change from 0 to 128
[  149.750398][ T6866] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  149.780974][ T6866] ext4 filesystem being mounted at /49/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  149.802580][ T6667] hsr_slave_0: entered promiscuous mode
[  149.844526][ T6667] hsr_slave_1: entered promiscuous mode
[  149.888230][ T6667] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  149.907460][   T30] audit: type=1804 audit(1753250104.773:8): pid=6866 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.255" name="/newroot/49/mnt/bus" dev="loop3" ino=12 res=1 errno=0
[  149.946424][ T6667] Cannot create hsr debugfs directory
[  149.973001][ T6512] 8021q: adding VLAN 0 to HW filter on device bond0
[  150.585282][   T49] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.618113][ T5842] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  150.791941][   T49] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.854382][ T6783] chnl_net:caif_netlink_parms(): no params data found
[  150.940706][ T5860] Bluetooth: hci6: Opcode 0x1003 failed: -110
[  150.947185][ T5844] Bluetooth: hci6: command 0x1003 tx timeout
[  151.250105][ T5860] Bluetooth: hci5: command tx timeout
[  151.264744][   T49] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.390445][ T6512] 8021q: adding VLAN 0 to HW filter on device team0
[  151.657950][ T6893] kernel read not supported for file /ٓ㎀Dg@]���e��h (pid: 6893 comm: syz.1.262)
[  151.751140][   T30] audit: type=1800 audit(1753250106.623:9): pid=6893 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.262" name=D99310E38E804467405DA6A29A65F1CE1868 dev="mqueue" ino=11508 res=0 errno=0
[  151.773311][    C1] vkms_vblank_simulate: vblank timer overrun
[  151.843064][ T5854] kernel read not supported for file /ٓ㎀Dg@]���e��h (pid: 5854 comm: kworker/1:4)
[  151.886404][   T49] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.957670][ T4550] bridge0: port 1(bridge_slave_0) entered blocking state
[  151.964889][ T4550] bridge0: port 1(bridge_slave_0) entered forwarding state
[  152.232322][ T4550] bridge0: port 2(bridge_slave_1) entered blocking state
[  152.241218][ T4550] bridge0: port 2(bridge_slave_1) entered forwarding state
[  152.339751][ T6891] loop5: detected capacity change from 0 to 32768
[  152.577441][ T6907] loop3: detected capacity change from 0 to 512
[  152.603711][ T6907] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #15: comm syz.3.266: casefold flag without casefold feature
[  152.671908][ T6907] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.266: couldn't read orphan inode 15 (err -117)
[  152.772167][ T6907] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  152.903257][ T6783] bridge0: port 1(bridge_slave_0) entered blocking state
[  152.934441][ T6783] bridge0: port 1(bridge_slave_0) entered disabled state
[  152.961057][ T6783] bridge_slave_0: entered allmulticast mode
[  152.968881][ T6783] bridge_slave_0: entered promiscuous mode
[  152.987263][ T5842] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  153.011571][ T6783] bridge0: port 2(bridge_slave_1) entered blocking state
[  153.018717][ T6783] bridge0: port 2(bridge_slave_1) entered disabled state
[  153.052024][ T6783] bridge_slave_1: entered allmulticast mode
[  153.072326][ T6783] bridge_slave_1: entered promiscuous mode
[  153.176765][ T6919] loop3: detected capacity change from 0 to 512
[  153.195096][ T6919] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  153.266809][ T6919] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  153.306605][ T6783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  153.322773][ T6919] EXT4-fs (loop3): 1 truncate cleaned up
[  153.330877][ T5860] Bluetooth: hci5: command tx timeout
[  153.353429][ T6919] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  153.385966][   T30] audit: type=1800 audit(1753250108.253:10): pid=6919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.269" name="file1" dev="loop3" ino=15 res=0 errno=0
[  153.472699][ T6783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  153.836687][ T6783] team0: Port device team_slave_0 added
[  153.908125][ T6783] team0: Port device team_slave_1 added
[  153.947711][ T5842] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  154.156663][ T6937] input: syz0 as /devices/virtual/input/input6
[  154.227515][ T6667] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  154.236509][ T6935] loop5: detected capacity change from 0 to 4096
[  154.272008][ T6935] ntfs3(loop5): Different NTFS sector size (1024) and media sector size (512).
[  154.294408][   T49] bridge_slave_1: left allmulticast mode
[  154.302416][   T49] bridge_slave_1: left promiscuous mode
[  154.308193][   T49] bridge0: port 2(bridge_slave_1) entered disabled state
[  154.355696][   T49] bridge_slave_0: left allmulticast mode
[  154.368518][   T49] bridge_slave_0: left promiscuous mode
[  154.392551][   T49] bridge0: port 1(bridge_slave_0) entered disabled state
[  154.571095][   T36] ntfs3(loop5): ino=1e, ni_find_attr
[  154.923382][ T6940] ptrace attach of "./syz-executor exec"[5846] was attempted by "./syz-executor exec"[6940]
[  155.410289][   T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  155.481439][   T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  155.506794][   T49] bond0 (unregistering): Released all slaves
[  155.650887][ T6783] batman_adv: batadv0: Adding interface: batadv_slave_0
[  155.657881][ T6783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  155.702912][ T6783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  155.718464][ T6953] loop1: detected capacity change from 0 to 2048
[  155.727728][ T6783] batman_adv: batadv0: Adding interface: batadv_slave_1
[  155.736169][ T6783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  155.762579][ T6783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  155.794942][ T6953] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  155.839923][ T6667] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  155.889144][ T6667] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  155.920222][ T6953] UDF-fs: error (device loop1): udf_read_inode: (ino 1345) failed !bh
[  156.235427][ T6667] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  156.368741][ T6783] hsr_slave_0: entered promiscuous mode
[  156.381370][ T6783] hsr_slave_1: entered promiscuous mode
[  156.409649][ T6783] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  156.438267][ T6783] Cannot create hsr debugfs directory
[  156.558689][ T6512] 8021q: adding VLAN 0 to HW filter on device batadv0
[  157.083778][ T6981] loop3: detected capacity change from 0 to 512
[  157.122445][ T6981] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  157.222422][ T6981] EXT4-fs (loop3): 1 truncate cleaned up
[  157.275827][ T6981] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  157.409610][ T6667] 8021q: adding VLAN 0 to HW filter on device bond0
[  157.544295][ T6783] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  157.576327][ T6783] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  157.608725][ T6783] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  157.656345][ T6783] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  157.764200][ T6667] 8021q: adding VLAN 0 to HW filter on device team0
[  157.874042][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  157.881261][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  157.961662][ T7007] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  157.991977][ T5842] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  157.995220][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  158.008079][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  158.094245][ T6512] veth0_vlan: entered promiscuous mode
[  158.291988][ T5860] Bluetooth: hci2: command 0x0c1a tx timeout
[  158.299735][ T5915] Bluetooth: hci2: Opcode 0x0c1a failed: -110
[  158.321889][ T6512] veth1_vlan: entered promiscuous mode
[  158.378257][ T5915] Bluetooth: hci2: Error when powering off device on rfkill (-110)
[  158.399034][ T6783] 8021q: adding VLAN 0 to HW filter on device bond0
[  158.410539][ T7017] netlink: 104 bytes leftover after parsing attributes in process `syz.5.292'.
[  158.584747][ T6783] 8021q: adding VLAN 0 to HW filter on device team0
[  158.705856][ T4550] bridge0: port 1(bridge_slave_0) entered blocking state
[  158.713060][ T4550] bridge0: port 1(bridge_slave_0) entered forwarding state
[  159.023188][ T4550] bridge0: port 2(bridge_slave_1) entered blocking state
[  159.030447][ T4550] bridge0: port 2(bridge_slave_1) entered forwarding state
[  159.151293][  T920] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  159.164979][ T6512] veth0_macvtap: entered promiscuous mode
[  159.193334][ T6512] veth1_macvtap: entered promiscuous mode
[  159.333324][  T920] usb 6-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73
[  159.343073][ T6512] batman_adv: batadv0: Interface activated: batadv_slave_0
[  159.362917][  T920] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  159.374951][  T920] usb 6-1: Product: syz
[  159.380692][  T920] usb 6-1: Manufacturer: syz
[  159.385619][  T920] usb 6-1: SerialNumber: syz
[  159.405272][ T7032] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.296'.
[  159.425585][ T6512] batman_adv: batadv0: Interface activated: batadv_slave_1
[  159.442326][  T920] usb 6-1: config 0 descriptor??
[  159.473006][ T6512] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  159.505866][ T6512] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  159.535431][ T6512] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  159.560117][ T6512] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  159.742586][ T6667] 8021q: adding VLAN 0 to HW filter on device batadv0
[  160.431243][ T6783] 8021q: adding VLAN 0 to HW filter on device batadv0
[  160.517749][  T920] asix 6-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random
[  160.530178][ T5860] Bluetooth: hci3: command 0x0c1a tx timeout
[  160.531449][ T5915] Bluetooth: hci3: Opcode 0x0c1a failed: -110
[  160.568167][ T5915] Bluetooth: hci3: Error when powering off device on rfkill (-110)
[  160.719383][  T920] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  160.766128][  T920] asix 6-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9
[  160.791621][  T920] asix 6-1:0.0: probe with driver asix failed with error -71
[  160.821247][ T6667] veth0_vlan: entered promiscuous mode
[  160.829038][  T920] usb 6-1: USB disconnect, device number 2
[  160.875436][ T6667] veth1_vlan: entered promiscuous mode
[  160.956036][ T6667] veth0_macvtap: entered promiscuous mode
[  160.986263][ T6667] veth1_macvtap: entered promiscuous mode
[  161.049084][ T6667] batman_adv: batadv0: Interface activated: batadv_slave_0
[  161.084342][ T6667] batman_adv: batadv0: Interface activated: batadv_slave_1
[  161.137010][ T6667] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  161.170008][ T6667] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  161.209522][ T6667] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  161.229690][ T6667] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  161.456744][ T6783] veth0_vlan: entered promiscuous mode
[  161.547361][ T6783] veth1_vlan: entered promiscuous mode
[  161.666888][ T6783] veth0_macvtap: entered promiscuous mode
[  161.697870][ T6783] veth1_macvtap: entered promiscuous mode
[  161.754729][ T6783] batman_adv: batadv0: Interface activated: batadv_slave_0
[  161.786207][ T6783] batman_adv: batadv0: Interface activated: batadv_slave_1
[  161.816462][ T7086] loop5: detected capacity change from 0 to 4096
[  161.822860][ T6783] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  161.822900][ T6783] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  161.822934][ T6783] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  161.822968][ T6783] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  161.921228][ T7086] NILFS (loop5): invalid segment: Checksum error in segment payload
[  161.929387][ T7086] NILFS (loop5): trying rollback from an earlier position
[  162.024670][ T7086] NILFS (loop5): recovery complete
[  162.045152][ T7094] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  162.561421][ T7105] loop3: detected capacity change from 0 to 1024
[  162.597814][ T7105] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  162.626073][   T30] audit: type=1800 audit(1753250117.493:11): pid=7105 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.310" name="file1" dev="loop3" ino=15 res=0 errno=0
[  162.690506][ T5860] Bluetooth: hci4: command 0x0c1a tx timeout
[  162.704463][ T5915] Bluetooth: hci4: Opcode 0x0c1a failed: -110
[  162.736468][ T5915] Bluetooth: hci4: Error when powering off device on rfkill (-110)
[  162.763966][ T5842] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  163.105320][ T7112] ALSA: seq fatal error: cannot create timer (-16)
[  165.330498][ T5860] Bluetooth: hci1: command 0x0c1a tx timeout
[  165.335393][ T5915] Bluetooth: hci1: Opcode 0x0c1a failed: -110
[  165.353510][ T5915] Bluetooth: hci1: Error when powering off device on rfkill (-110)
[  167.418037][ T5860] Bluetooth: hci0: command 0x0c1a tx timeout
[  167.424657][ T5915] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  167.438823][ T5915] Bluetooth: hci0: Error when powering off device on rfkill (-110)
[  169.496456][ T5915] Bluetooth: hci5: Opcode 0x0c1a failed: -110
[  169.500059][ T5860] Bluetooth: hci5: command 0x0c1a tx timeout
[  169.516257][ T5915] Bluetooth: hci5: Error when powering off device on rfkill (-110)
[  169.878136][  T140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  169.917733][  T140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  169.986623][ T7288] netlink: 12 bytes leftover after parsing attributes in process `syz.1.318'.
[  170.007056][   T49] hsr_slave_0: left promiscuous mode
[  170.017859][   T49] hsr_slave_1: left promiscuous mode
[  170.028015][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  170.052933][   T49] batman_adv: batadv0: Removing interface: batadv_slave_0
[  170.077572][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  170.095685][   T49] batman_adv: batadv0: Removing interface: batadv_slave_1
[  170.138271][   T49] veth1_macvtap: left promiscuous mode
[  170.151444][   T49] veth0_macvtap: left promiscuous mode
[  170.164929][   T49] veth1_vlan: left promiscuous mode
[  170.171002][   T49] veth0_vlan: left promiscuous mode
[  170.779066][   T49] team0 (unregistering): Port device team_slave_1 removed
[  170.824638][   T49] team0 (unregistering): Port device team_slave_0 removed
[  171.204353][   T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  171.225934][   T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  171.392388][   T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  171.412655][   T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  171.493519][   T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  171.525134][   T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  171.612334][  T140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  171.626352][  T140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  171.835413][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  171.862852][ T5949] usb 6-1: new full-speed USB device number 3 using dummy_hcd
[  171.909197][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  172.095609][ T5949] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  172.197134][ T5949] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  172.310182][ T5949] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  172.387304][ T5949] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  172.436281][ T5949] usb 6-1: Product: syz
[  172.492873][ T5949] usb 6-1: Manufacturer: syz
[  172.497510][ T5949] usb 6-1: SerialNumber: syz
[  172.815175][ T5949] usb 6-1: 0:2 : does not exist
[  172.821592][ T7308] loop3: detected capacity change from 0 to 131072
[  172.831144][ T7308] F2FS-fs (loop3): Invalid segment/section count (31, 24 x 150994945)
[  172.839503][ T7308] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  172.881774][ T7308] F2FS-fs (loop3): invalid crc value
[  172.888817][ T5949] usb 6-1: 5:0: failed to get current value for ch 0 (-22)
[  173.058002][ T7308] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  173.066756][ T7308] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[  173.140266][ T5949] usb 6-1: USB disconnect, device number 3
[  173.192436][   T30] audit: type=1800 audit(1753250128.063:12): pid=7308 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.325" name="file1" dev="loop3" ino=7 res=0 errno=0
[  173.309230][ T7304] loop1: detected capacity change from 0 to 32768
[  173.380218][ T5986] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  173.382013][ T5850] udevd[5850]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  173.522872][ T7304] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  173.593887][ T5986] usb 7-1: Using ep0 maxpacket: 8
[  173.645838][ T5986] usb 7-1: config 168 descriptor has 1 excess byte, ignoring
[  173.661954][ T5915] usb 8-1: new full-speed USB device number 2 using dummy_hcd
[  173.693138][ T5986] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  173.774938][ T5986] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  173.807445][ T5986] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  173.845345][  T920] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  173.865558][ T5986] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  173.865767][ T7304] syz.1.323 (7304) used greatest stack depth: 18952 bytes left
[  173.889686][ T5986] usb 7-1: config 168 descriptor has 1 excess byte, ignoring
[  173.899097][ T5986] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  173.946046][ T5915] usb 8-1: config 0 has an invalid interface number: 251 but max is 0
[  173.968755][ T5986] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  173.970214][ T5915] usb 8-1: config 0 has no interface number 0
[  174.012127][ T5986] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  174.045908][  T920] usb 9-1: config 0 has an invalid interface number: 1 but max is 0
[  174.073530][ T5915] usb 8-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[  174.073675][ T5986] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  174.095925][  T920] usb 9-1: config 0 has no interface number 0
[  174.100158][ T5915] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  174.120089][  T920] usb 9-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  174.155713][  T920] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  174.170125][ T5915] usb 8-1: Product: syz
[  174.174371][ T5915] usb 8-1: Manufacturer: syz
[  174.178981][ T5915] usb 8-1: SerialNumber: syz
[  174.183238][ T5846] ocfs2: Unmounting device (7,1) on (node local)
[  174.196579][ T5986] usb 7-1: config 168 descriptor has 1 excess byte, ignoring
[  174.233960][ T5986] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  174.262209][  T920] usb 9-1: config 0 descriptor??
[  174.293369][  T920] cp210x 9-1:0.1: cp210x converter detected
[  174.300857][ T5915] usb 8-1: config 0 descriptor??
[  174.319778][ T5986] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  174.375763][ T5986] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  174.419558][ T5986] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  174.487636][ T5986] usb 7-1: string descriptor 0 read error: -22
[  174.504379][ T5986] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  174.550259][ T5986] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  174.652002][ T5986] adutux 7-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  174.721646][  T920] cp210x 9-1:0.1: failed to get vendor val 0x000e size 3: -32
[  174.768798][ T7353] binder: 7351:7353 ioctl c0306201 200000000080 returned -14
[  174.928155][ T5986] usb 7-1: USB disconnect, device number 2
[  175.018068][  T920] usb 9-1: cp210x converter now attached to ttyUSB0
[  175.164222][ T5915] asix 8-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  175.193133][ T5915] asix 8-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9
[  175.224446][ T5949] usb 9-1: USB disconnect, device number 2
[  175.253426][ T5915] asix 8-1:0.251: probe with driver asix failed with error -71
[  175.278168][ T5949] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  175.330336][ T5915] usb 8-1: USB disconnect, device number 2
[  175.391619][ T5949] cp210x 9-1:0.1: device disconnected
[  175.457697][ T7338] loop5: detected capacity change from 0 to 40427
[  175.525706][ T7338] F2FS-fs (loop5): Insane cp_payload (553648128 >= 504)
[  175.560698][ T7338] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  175.597067][ T7338] F2FS-fs (loop5): build fault injection rate: 17008
[  175.631234][ T7338] F2FS-fs (loop5): build fault injection type: 0x6
[  175.673583][ T7338] F2FS-fs (loop5): invalid crc value
[  176.150360][ T7338] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  176.157455][ T7338] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  176.239336][ T7383] loop6: detected capacity change from 0 to 1024
[  176.250278][   T30] audit: type=1800 audit(1753250131.103:13): pid=7338 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.332" name="file1" dev="loop5" ino=10 res=0 errno=0
[  176.418872][ T7383] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  176.575517][ T5845] syz-executor: attempt to access beyond end of device
[  176.575517][ T5845] loop5: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  176.617285][ T7398] EXT4-fs error (device loop6): __ext4_remount:6736: comm syz.6.342: Abort forced by user
[  176.665803][ T7398] EXT4-fs (loop6): Remounting filesystem read-only
[  176.669469][ T5845] CPU: 1 UID: 0 PID: 5845 Comm: syz-executor Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) 
[  176.669498][ T5845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  176.669512][ T5845] Call Trace:
[  176.669521][ T5845]  <TASK>
[  176.669531][ T5845]  dump_stack_lvl+0x189/0x250
[  176.669570][ T5845]  ? __pfx_dump_stack_lvl+0x10/0x10
[  176.669599][ T5845]  ? __pfx_queue_work_on+0x10/0x10
[  176.669630][ T5845]  ? srso_alias_return_thunk+0x5/0xfbef5
[  176.669657][ T5845]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  176.669682][ T5845]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  176.669707][ T5845]  ? srso_alias_return_thunk+0x5/0xfbef5
[  176.669733][ T5845]  ? f2fs_hw_is_readonly+0x39b/0x470
[  176.669764][ T5845]  f2fs_handle_critical_error+0x37c/0x540
[  176.669797][ T5845]  f2fs_write_end_io+0x495/0x810
[  176.669825][ T5845]  ? blkg_put+0x22/0x240
[  176.669879][ T5845]  __submit_merged_bio+0x27a/0x6a0
[  176.669912][ T5845]  __submit_merged_write_cond+0x255/0x530
[  176.669963][ T5845]  f2fs_write_data_pages+0x261d/0x3000
[  176.669997][ T5845]  ? srso_alias_return_thunk+0x5/0xfbef5
[  176.670064][ T5845]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  176.670144][ T5845]  ? __mod_zone_page_state+0xd7/0x140
[  176.670188][ T5845]  ? srso_alias_return_thunk+0x5/0xfbef5
[  176.670214][ T5845]  ? folios_put_refs+0x560/0x640
[  176.670253][ T5845]  ? __pfx_folios_put_refs+0x10/0x10
[  176.670276][ T5845]  ? rcu_is_watching+0x15/0xb0
[  176.670315][ T5845]  ? srso_alias_return_thunk+0x5/0xfbef5
[  176.670341][ T5845]  ? __lock_acquire+0xab9/0xd20
[  176.670386][ T5845]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  176.670415][ T5845]  do_writepages+0x32e/0x550
[  176.670453][ T5845]  ? srso_alias_return_thunk+0x5/0xfbef5
[  176.670484][ T5845]  ? srso_alias_return_thunk+0x5/0xfbef5
[  176.670510][ T5845]  ? do_raw_spin_unlock+0x122/0x240
[  176.670550][ T5845]  filemap_fdatawrite+0x191/0x230
[  176.670584][ T5845]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  176.670667][ T5845]  ? srso_alias_return_thunk+0x5/0xfbef5
[  176.670700][ T5845]  ? do_raw_spin_unlock+0x122/0x240
[  176.670739][ T5845]  f2fs_sync_dirty_inodes+0x31f/0x830
[  176.670788][ T5845]  f2fs_write_checkpoint+0x94a/0x1de0
[  176.670848][ T5845]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  176.670935][ T5845]  ? kill_f2fs_super+0x298/0x6c0
[  176.670977][ T5845]  kill_f2fs_super+0x2c3/0x6c0
[  176.671016][ T5845]  ? __pfx_kill_f2fs_super+0x10/0x10
[  176.671042][ T5845]  ? radix_tree_delete_item+0x2b6/0x400
[  176.671076][ T5845]  ? srso_alias_return_thunk+0x5/0xfbef5
[  176.671102][ T5845]  ? shrinker_free+0x2ce/0x3e0
[  176.671131][ T5845]  deactivate_locked_super+0xbc/0x130
[  176.671163][ T5845]  cleanup_mnt+0x425/0x4c0
[  176.671189][ T5845]  ? srso_alias_return_thunk+0x5/0xfbef5
[  176.671215][ T5845]  ? lockdep_hardirqs_on+0x9c/0x150
[  176.671245][ T5845]  task_work_run+0x1d4/0x260
[  176.671285][ T5845]  ? __pfx_task_work_run+0x10/0x10
[  176.671318][ T5845]  ? __x64_sys_umount+0x122/0x160
[  176.671357][ T5845]  ? exit_to_user_mode_loop+0x40/0x110
[  176.671388][ T5845]  exit_to_user_mode_loop+0xec/0x110
[  176.671414][ T5845]  do_syscall_64+0x2bd/0x3b0
[  176.671440][ T5845]  ? lockdep_hardirqs_on+0x9c/0x150
[  176.671465][ T5845]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  176.671487][ T5845]  ? srso_alias_return_thunk+0x5/0xfbef5
[  176.671513][ T5845]  ? exc_page_fault+0x9f/0xf0
[  176.671541][ T5845]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  176.671564][ T5845] RIP: 0033:0x7f5ef278fcd7
[  176.671584][ T5845] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  176.671603][ T5845] RSP: 002b:00007fff0316c6a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  176.671626][ T5845] RAX: 0000000000000000 RBX: 00007f5ef2810b55 RCX: 00007f5ef278fcd7
[  176.671642][ T5845] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff0316c760
[  176.671657][ T5845] RBP: 00007fff0316c760 R08: 0000000000000000 R09: 0000000000000000
[  176.671671][ T5845] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff0316d7f0
[  176.671687][ T5845] R13: 00007f5ef2810b55 R14: 000000000002b0e6 R15: 00007fff0316d830
[  176.671725][ T5845]  </TASK>
[  176.690253][ T5845] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  176.819361][ T7398] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000.
[  177.055805][ T7405] netlink: 4 bytes leftover after parsing attributes in process `syz.7.350'.
[  177.085785][ T5845] CPU: 0 UID: 0 PID: 5845 Comm: syz-executor Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) 
[  177.085815][ T5845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  177.085829][ T5845] Call Trace:
[  177.085838][ T5845]  <TASK>
[  177.085847][ T5845]  dump_stack_lvl+0x189/0x250
[  177.085886][ T5845]  ? __pfx_dump_stack_lvl+0x10/0x10
[  177.085911][ T5845]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  177.085936][ T5845]  ? __pfx_queue_work_on+0x10/0x10
[  177.085964][ T5845]  ? srso_alias_return_thunk+0x5/0xfbef5
[  177.085999][ T5845]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  177.086023][ T5845]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  177.086048][ T5845]  ? srso_alias_return_thunk+0x5/0xfbef5
[  177.086074][ T5845]  ? f2fs_hw_is_readonly+0x39b/0x470
[  177.086105][ T5845]  f2fs_handle_critical_error+0x37c/0x540
[  177.086138][ T5845]  f2fs_write_end_io+0x495/0x810
[  177.086166][ T5845]  ? blkg_put+0x22/0x240
[  177.086220][ T5845]  __submit_merged_bio+0x27a/0x6a0
[  177.086252][ T5845]  __submit_merged_write_cond+0x255/0x530
[  177.086300][ T5845]  f2fs_write_data_pages+0x261d/0x3000
[  177.086328][ T5845]  ? srso_alias_return_thunk+0x5/0xfbef5
[  177.086394][ T5845]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  177.086474][ T5845]  ? __mod_zone_page_state+0xd7/0x140
[  177.086517][ T5845]  ? srso_alias_return_thunk+0x5/0xfbef5
[  177.086543][ T5845]  ? folios_put_refs+0x560/0x640
[  177.086581][ T5845]  ? __pfx_folios_put_refs+0x10/0x10
[  177.086605][ T5845]  ? rcu_is_watching+0x15/0xb0
[  177.086643][ T5845]  ? srso_alias_return_thunk+0x5/0xfbef5
[  177.086669][ T5845]  ? __lock_acquire+0xab9/0xd20
[  177.086714][ T5845]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  177.086743][ T5845]  do_writepages+0x32e/0x550
[  177.086781][ T5845]  ? srso_alias_return_thunk+0x5/0xfbef5
[  177.086813][ T5845]  ? srso_alias_return_thunk+0x5/0xfbef5
[  177.086839][ T5845]  ? do_raw_spin_unlock+0x122/0x240
[  177.086878][ T5845]  filemap_fdatawrite+0x191/0x230
[  177.086912][ T5845]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  177.087096][ T5845]  ? srso_alias_return_thunk+0x5/0xfbef5
[  177.087137][ T5845]  ? do_raw_spin_unlock+0x122/0x240
[  177.087182][ T5845]  f2fs_sync_dirty_inodes+0x31f/0x830
[  177.087256][ T5845]  f2fs_write_checkpoint+0x94a/0x1de0
[  177.087322][ T5845]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  177.087421][ T5845]  ? kill_f2fs_super+0x298/0x6c0
[  177.087461][ T5845]  kill_f2fs_super+0x2c3/0x6c0
[  177.087504][ T5845]  ? __pfx_kill_f2fs_super+0x10/0x10
[  177.087534][ T5845]  ? radix_tree_delete_item+0x2b6/0x400
[  177.087571][ T5845]  ? srso_alias_return_thunk+0x5/0xfbef5
[  177.087599][ T5845]  ? shrinker_free+0x2ce/0x3e0
[  177.087631][ T5845]  deactivate_locked_super+0xbc/0x130
[  177.087666][ T5845]  cleanup_mnt+0x425/0x4c0
[  177.087695][ T5845]  ? srso_alias_return_thunk+0x5/0xfbef5
[  177.087724][ T5845]  ? lockdep_hardirqs_on+0x9c/0x150
[  177.087756][ T5845]  task_work_run+0x1d4/0x260
[  177.087800][ T5845]  ? __pfx_task_work_run+0x10/0x10
[  177.087837][ T5845]  ? __x64_sys_umount+0x122/0x160
[  177.087881][ T5845]  ? exit_to_user_mode_loop+0x40/0x110
[  177.087914][ T5845]  exit_to_user_mode_loop+0xec/0x110
[  177.087942][ T5845]  do_syscall_64+0x2bd/0x3b0
[  177.087971][ T5845]  ? lockdep_hardirqs_on+0x9c/0x150
[  177.087992][ T5845]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  177.088011][ T5845]  ? srso_alias_return_thunk+0x5/0xfbef5
[  177.088040][ T5845]  ? exc_page_fault+0x9f/0xf0
[  177.088071][ T5845]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  177.088095][ T5845] RIP: 0033:0x7f5ef278fcd7
[  177.088118][ T5845] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  177.088137][ T5845] RSP: 002b:00007fff0316c6a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  177.088160][ T5845] RAX: 0000000000000000 RBX: 00007f5ef2810b55 RCX: 00007f5ef278fcd7
[  177.088176][ T5845] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff0316c760
[  177.088191][ T5845] RBP: 00007fff0316c760 R08: 0000000000000000 R09: 0000000000000000
[  177.088205][ T5845] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff0316d7f0
[  177.088228][ T5845] R13: 00007f5ef2810b55 R14: 000000000002b0e6 R15: 00007fff0316d830
[  177.088267][ T5845]  </TASK>
[  177.088276][ T5845] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  177.637341][ T7415] af_packet: tpacket_rcv: packet too big, clamped from 4 to 4294967272. macoff=96
[  177.948039][ T6512] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  178.235342][   T10] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  178.430122][   T10] usb 4-1: Using ep0 maxpacket: 16
[  178.442685][   T10] usb 4-1: config 0 interface 0 has no altsetting 0
[  178.469361][   T10] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  178.498608][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  178.533210][   T10] usb 4-1: config 0 descriptor??
[  178.650153][   T36] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  178.780556][ T4062] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  178.798809][ T4062] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  178.872455][ T4550] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  178.900006][ T4550] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  178.969095][ T7426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  179.009392][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  179.020544][ T7426] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  179.042617][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  179.126687][   T36] ------------[ cut here ]------------
[  179.133091][   T36] WARNING: CPU: 1 PID: 36 at net/wireless/ibss.c:37 __cfg80211_ibss_joined+0x3ca/0x440
[  179.144152][   T36] Modules linked in:
[  179.148496][   T36] CPU: 1 UID: 0 PID: 36 Comm: kworker/u8:2 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) 
[  179.160460][   T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  179.171612][   T36] Workqueue: cfg80211 cfg80211_event_work
[  179.177381][   T36] RIP: 0010:__cfg80211_ibss_joined+0x3ca/0x440
[  179.184152][   T36] Code: 00 00 00 75 69 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 f3 a4 42 f6 cc e8 b2 8a f2 f6 90 0f 0b 90 eb bd e8 a7 8a f2 f6 90 <0f> 0b 90 4c 8b 6c 24 18 eb ad e8 97 8a f2 f6 90 0f 0b 90 e9 de fd
[  179.204540][   T36] RSP: 0018:ffffc90000ac78e0 EFLAGS: 00010293
[  179.211193][   T36] RAX: ffffffff8acd9c29 RBX: dffffc0000000000 RCX: ffff888140a99e00
[  179.219705][   T36] RDX: 0000000000000000 RSI: ffffffff8d996411 RDI: ffffffff8be28d00
[  179.228234][   T36] RBP: ffffc90000ac79b8 R08: ffffffff8fa1dcf7 R09: 1ffffffff1f43b9e
[  179.236878][   T36] R10: dffffc0000000000 R11: fffffbfff1f43b9f R12: ffff8880321b4d90
[  179.245453][   T36] R13: 1ffff92000158f24 R14: ffff88807ec73338 R15: 0000000000000006
[  179.254852][   T36] FS:  0000000000000000(0000) GS:ffff888125d23000(0000) knlGS:0000000000000000
[  179.264981][   T36] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  179.271758][   T36] CR2: 00007ffe8b2b5148 CR3: 0000000065dc2000 CR4: 0000000000350ef0
[  179.279762][   T36] Call Trace:
[  179.283106][   T36]  <TASK>
[  179.286051][   T36]  ? srso_alias_return_thunk+0x5/0xfbef5
[  179.292063][   T36]  ? lockdep_hardirqs_on+0x9c/0x150
[  179.297285][   T36]  ? srso_alias_return_thunk+0x5/0xfbef5
[  179.303356][   T36]  ? __pfx___cfg80211_ibss_joined+0x10/0x10
[  179.309567][   T36]  ? cfg80211_event_work+0x24/0x60
[  179.315013][   T36]  ? __pfx___mutex_lock+0x10/0x10
[  179.320349][   T36]  cfg80211_process_wdev_events+0x38a/0x4f0
[  179.326550][   T36]  cfg80211_process_rdev_events+0xa1/0x110
[  179.332913][   T36]  cfg80211_event_work+0x2c/0x60
[  179.338178][   T36]  ? process_scheduled_works+0x9ef/0x17b0
[  179.344306][   T36]  process_scheduled_works+0xae1/0x17b0
[  179.351094][   T36]  ? __pfx_process_scheduled_works+0x10/0x10
[  179.358585][   T36]  ? srso_alias_return_thunk+0x5/0xfbef5
[  179.364659][   T36]  worker_thread+0x8a0/0xda0
[  179.366856][ T5844] Bluetooth: hci6: command 0x1003 tx timeout
[  179.369262][   T36]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  179.369322][   T36]  ? __kthread_parkme+0x7b/0x200
[  179.376326][ T5860] Bluetooth: hci6: Opcode 0x1003 failed: -110
[  179.382527][   T36]  kthread+0x711/0x8a0
[  179.397799][   T36]  ? __pfx_worker_thread+0x10/0x10
[  179.403034][   T36]  ? __pfx_kthread+0x10/0x10
[  179.407682][   T36]  ? srso_alias_return_thunk+0x5/0xfbef5
[  179.413409][   T36]  ? _raw_spin_unlock_irq+0x23/0x50
[  179.418624][   T36]  ? srso_alias_return_thunk+0x5/0xfbef5
[  179.424335][   T36]  ? lockdep_hardirqs_on+0x9c/0x150
[  179.429550][   T36]  ? __pfx_kthread+0x10/0x10
[  179.434238][   T36]  ret_from_fork+0x3fc/0x770
[  179.438870][   T36]  ? __pfx_ret_from_fork+0x10/0x10
[  179.444037][   T36]  ? __switch_to_asm+0x39/0x70
[  179.449552][   T36]  ? __switch_to_asm+0x33/0x70
[  179.455298][   T36]  ? __pfx_kthread+0x10/0x10
[  179.459940][   T36]  ret_from_fork_asm+0x1a/0x30
[  179.464835][   T36]  </TASK>
[  179.467866][   T36] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  179.475153][   T36] CPU: 1 UID: 0 PID: 36 Comm: kworker/u8:2 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) 
[  179.485409][   T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  179.495478][   T36] Workqueue: cfg80211 cfg80211_event_work
[  179.501233][   T36] Call Trace:
[  179.504523][   T36]  <TASK>
[  179.507453][   T36]  dump_stack_lvl+0x99/0x250
[  179.512051][   T36]  ? __asan_memcpy+0x40/0x70
[  179.516650][   T36]  ? __pfx_dump_stack_lvl+0x10/0x10
[  179.521858][   T36]  ? __pfx__printk+0x10/0x10
[  179.526466][   T36]  ? srso_alias_return_thunk+0x5/0xfbef5
[  179.532107][   T36]  panic+0x2db/0x790
[  179.536014][   T36]  ? __pfx_panic+0x10/0x10
[  179.540432][   T36]  ? show_trace_log_lvl+0x4fb/0x550
[  179.545643][   T36]  ? ret_from_fork_asm+0x1a/0x30
[  179.550594][   T36]  __warn+0x31b/0x4b0
[  179.554583][   T36]  ? __cfg80211_ibss_joined+0x3ca/0x440
[  179.560140][   T36]  ? __cfg80211_ibss_joined+0x3ca/0x440
[  179.565692][   T36]  report_bug+0x2be/0x4f0
[  179.570025][   T36]  ? __cfg80211_ibss_joined+0x3ca/0x440
[  179.575581][   T36]  ? __cfg80211_ibss_joined+0x3ca/0x440
[  179.581128][   T36]  ? __cfg80211_ibss_joined+0x3cc/0x440
[  179.586764][   T36]  handle_bug+0x84/0x160
[  179.591015][   T36]  exc_invalid_op+0x1a/0x50
[  179.595522][   T36]  asm_exc_invalid_op+0x1a/0x20
[  179.600369][   T36] RIP: 0010:__cfg80211_ibss_joined+0x3ca/0x440
[  179.606812][   T36] Code: 00 00 00 75 69 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 f3 a4 42 f6 cc e8 b2 8a f2 f6 90 0f 0b 90 eb bd e8 a7 8a f2 f6 90 <0f> 0b 90 4c 8b 6c 24 18 eb ad e8 97 8a f2 f6 90 0f 0b 90 e9 de fd
[  179.626442][   T36] RSP: 0018:ffffc90000ac78e0 EFLAGS: 00010293
[  179.632523][   T36] RAX: ffffffff8acd9c29 RBX: dffffc0000000000 RCX: ffff888140a99e00
[  179.640500][   T36] RDX: 0000000000000000 RSI: ffffffff8d996411 RDI: ffffffff8be28d00
[  179.648753][   T36] RBP: ffffc90000ac79b8 R08: ffffffff8fa1dcf7 R09: 1ffffffff1f43b9e
[  179.656725][   T36] R10: dffffc0000000000 R11: fffffbfff1f43b9f R12: ffff8880321b4d90
[  179.664698][   T36] R13: 1ffff92000158f24 R14: ffff88807ec73338 R15: 0000000000000006
[  179.672678][   T36]  ? __cfg80211_ibss_joined+0x3c9/0x440
[  179.678240][   T36]  ? srso_alias_return_thunk+0x5/0xfbef5
[  179.683882][   T36]  ? lockdep_hardirqs_on+0x9c/0x150
[  179.689085][   T36]  ? srso_alias_return_thunk+0x5/0xfbef5
[  179.694722][   T36]  ? __pfx___cfg80211_ibss_joined+0x10/0x10
[  179.700617][   T36]  ? cfg80211_event_work+0x24/0x60
[  179.705738][   T36]  ? __pfx___mutex_lock+0x10/0x10
[  179.710772][   T36]  cfg80211_process_wdev_events+0x38a/0x4f0
[  179.716676][   T36]  cfg80211_process_rdev_events+0xa1/0x110
[  179.722485][   T36]  cfg80211_event_work+0x2c/0x60
[  179.727429][   T36]  ? process_scheduled_works+0x9ef/0x17b0
[  179.733152][   T36]  process_scheduled_works+0xae1/0x17b0
[  179.738730][   T36]  ? __pfx_process_scheduled_works+0x10/0x10
[  179.744719][   T36]  ? srso_alias_return_thunk+0x5/0xfbef5
[  179.750362][   T36]  worker_thread+0x8a0/0xda0
[  179.754960][   T36]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  179.761298][   T36]  ? __kthread_parkme+0x7b/0x200
[  179.766262][   T36]  kthread+0x711/0x8a0
[  179.770344][   T36]  ? __pfx_worker_thread+0x10/0x10
[  179.775489][   T36]  ? __pfx_kthread+0x10/0x10
[  179.780090][   T36]  ? srso_alias_return_thunk+0x5/0xfbef5
[  179.785731][   T36]  ? _raw_spin_unlock_irq+0x23/0x50
[  179.790931][   T36]  ? srso_alias_return_thunk+0x5/0xfbef5
[  179.796563][   T36]  ? lockdep_hardirqs_on+0x9c/0x150
[  179.801758][   T36]  ? __pfx_kthread+0x10/0x10
[  179.806357][   T36]  ret_from_fork+0x3fc/0x770
[  179.810952][   T36]  ? __pfx_ret_from_fork+0x10/0x10
[  179.816071][   T36]  ? __switch_to_asm+0x39/0x70
[  179.820842][   T36]  ? __switch_to_asm+0x33/0x70
[  179.825610][   T36]  ? __pfx_kthread+0x10/0x10
[  179.830296][   T36]  ret_from_fork_asm+0x1a/0x30
[  179.835083][   T36]  </TASK>
[  179.838308][   T36] Kernel Offset: disabled
[  179.842630][   T36] Rebooting in 86400 seconds..