last executing test programs:

2m13.080160351s ago: executing program 2 (id=968):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000200), 0x1, 0x784, &(0x7f0000000800)="$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")
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x800810, &(0x7f0000000540)={[{@journal_async_commit}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x920000000001000}}], [{@smackfstransmute={'smackfstransmute', 0x3d, '*:{@]'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'journal_async_commit'}}, {@subj_user={'subj_user', 0x3d, 'ext4\x00'}}, {@dont_measure}, {@obj_role={'obj_role', 0x3d, '\x00\x00\x00\x00'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}]}, 0xff, 0x256, &(0x7f00000002c0)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x740, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@newqdisc={0x50, 0x24, 0xf0b, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x20, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x40000001}]}}]}, 0x50}}, 0x0)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x38, 0x1403, 0xc23, 0x70bd2e, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syz_tun\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x14f7325d9d03b00}, 0x4000)

2m11.087013046s ago: executing program 2 (id=977):
syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f00000000c0)='.\x02\x00', 0x8488, &(0x7f0000000780), 0xfe, 0x10fd, &(0x7f0000001140)="$eJzs2T9rFEEYBvBnds8/3cqmXwQtLCQknF8ghcK1ttqIpDJVrlL8OH4cTWUf0msRsF9Zb/dO5UTwTm1+PzjmvYd9Z2fKmQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMZsmnkhxUSTtlVZKSdN3F4ipJN+V33tdVSp6eLpaPz+dPlknqb4+XZ0kZuoa2tMf3brfzdt4et48OTu5/WL5+8+rF2dnp+ThNSZfL6/1vpYzrAQAAAH7U76z5z+8HAAAAfmdvFwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf6hvNnU7FVWSknTdxeIqSbel78Y/Wh8AAACwu5Iqz5tt+eoaYONhPjZlnQ/jlzLUR3m3pR8AAAD4pf7WWHz/fb3c3JzHH2S2PpcP2d3Mcni4+j8O+XyS1EmOfpr88vrty+lX+vpv7wUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgK/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAAAAAPYKAAD///F61s8=")
r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0)
truncate(&(0x7f0000000900)='./file1\x00', 0x4)
pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x0)

2m10.159720341s ago: executing program 2 (id=984):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = memfd_create(&(0x7f0000000080)=',\xea\x00', 0x4)
r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_QBUF(r5, 0xc058565d, &(0x7f0000000200)=@userptr={0x7, 0xe, 0x4, 0x400, 0xfffff001, {}, {0x5, 0x8, 0xf5, 0x2, 0x20, 0x8, "fa678636"}, 0x10000000, 0x2, {0x0}, 0x8000})
ftruncate(r4, 0x806ffffff)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x2}, 0x8)
sendto$inet6(r0, &(0x7f0000000140)="d4", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4a1d, 0x7ffffffd, @local, 0x4}, 0x1c)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xd, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="720ac4ff000000007110c600000000009500000000000000"], &(0x7f0000000480)='GPL\x00'}, 0x80)
keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000003580)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0xffffffffffffffff}], 0x9, 0x0)
sendmsg$inet6(r0, &(0x7f0000000280)={&(0x7f0000000000)={0xa, 0x4e21, 0xabf2, @rand_addr=' \x01\x00', 0x8d0d}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000180)="9c9ac7fe92ef", 0x6}], 0x1}, 0x20000001)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8)
socket$unix(0x1, 0x5, 0x0)

2m7.028310958s ago: executing program 2 (id=997):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000340)={[{@noload}, {@stripe={'stripe', 0x3d, 0x30c}}, {@jqfmt_vfsv1}, {@nojournal_checksum}, {@jqfmt_vfsv1}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$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")
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
r0 = creat(&(0x7f00000004c0)='./bus\x00', 0x20)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x80)
fspick(r1, &(0x7f0000000000)='./bus\x00', 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r4, 0x300, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x49e}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x32}}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev={0xac, 0x14, 0x14, 0x23}}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}]}, 0x44}}, 0x11)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0x5)
ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000200)=0xdd)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00))
write$bt_hci(r2, &(0x7f0000000100)=ANY=[@ANYRESDEC=r1, @ANYRES16=r3, @ANYRES64=r1], 0xa)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200002100000000000000", @ANYRES32, @ANYBLOB="000000262e01"], 0x50)
sendfile(r2, r1, 0x0, 0x40001)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r3)
sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x40, r6, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6fa, 0x62}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x13}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x32}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x20048000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, 0xffffffffffffffff, 0x0)
r7 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112)
getdents(r7, 0x0, 0x0)
r8 = gettid()
get_robust_list(r8, &(0x7f00000003c0)=&(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)}, &(0x7f0000000400)=0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x3, &(0x7f0000000500)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x64}}, &(0x7f0000000080)='GPL\x00', 0xa, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94)

2m5.5069266s ago: executing program 2 (id=1003):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x44, r1, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0), 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7030000000000008500000087000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000340)="c1dfb080cd21d308098ee688b5c6", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
set_mempolicy(0x4005, &(0x7f0000000040)=0x1001, 0x4)
r4 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f7", 0x1}], 0x1}], 0x1, 0x40800)

2m4.530840237s ago: executing program 2 (id=1011):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$cgroup_devices(r1, &(0x7f00000008c0)=ANY=[@ANYBLOB='b ', @ANYRESDEC=r1], 0x9)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r2=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x800)
write$FUSE_INIT(r3, &(0x7f0000000340)={0x50, 0x2f, 0x0, {0x7, 0x29, 0x0, 0x800006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0x50)
vmsplice(r3, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x14, 0x0)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x200002, 0x0)
splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x9, 0x0)
r5 = dup(r0)
r6 = socket$inet(0x2, 0x3, 0x9)
ioctl$sock_inet_SIOCSARP(r6, 0x8955, &(0x7f0000000000)={{0x2, 0x4, @broadcast}, {0x1, @broadcast}, 0x4a, {0x2, 0x102, @initdev={0xac, 0x1e, 0x2, 0x0}}, 'ip6gretap0\x00'})
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c)
sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xf, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043)
r7 = dup(r5)
io_uring_enter(r5, 0x6809, 0xb768, 0x2, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10)

2m4.364115551s ago: executing program 32 (id=1011):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$cgroup_devices(r1, &(0x7f00000008c0)=ANY=[@ANYBLOB='b ', @ANYRESDEC=r1], 0x9)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r2=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x800)
write$FUSE_INIT(r3, &(0x7f0000000340)={0x50, 0x2f, 0x0, {0x7, 0x29, 0x0, 0x800006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0x50)
vmsplice(r3, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x14, 0x0)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x200002, 0x0)
splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x9, 0x0)
r5 = dup(r0)
r6 = socket$inet(0x2, 0x3, 0x9)
ioctl$sock_inet_SIOCSARP(r6, 0x8955, &(0x7f0000000000)={{0x2, 0x4, @broadcast}, {0x1, @broadcast}, 0x4a, {0x2, 0x102, @initdev={0xac, 0x1e, 0x2, 0x0}}, 'ip6gretap0\x00'})
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c)
sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xf, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043)
r7 = dup(r5)
io_uring_enter(r5, 0x6809, 0xb768, 0x2, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10)

16.991808491s ago: executing program 5 (id=1498):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x7ad3db81}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$SO_TIMESTAMP(r3, 0x1, 0x40, &(0x7f0000000380)=0x4, 0x4)

16.647802281s ago: executing program 0 (id=1501):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x1, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000340)={0x10000000, 0x40071, 0x20000000d})
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r2=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000300)={r2, <r3=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000000380)={0x0, 0x4000, r3, 0x0, 0x0, 0x1f5, 0x0, 0x0, {0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd, 0x8, 0x0, 0x0, 0x0, 0x8001, 0xfffffffa, "b4bc323ef77d1f000071849800000000dfff00"}})
syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000))
socket(0x400000000010, 0x3, 0x0)

15.643951619s ago: executing program 0 (id=1507):
fcntl$lock(0xffffffffffffffff, 0x24, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, 0x0, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, 0x0, 0x0)
r1 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r1, &(0x7f0000000180)={0x2, 0xce20, @empty}, 0x10)
listen(r1, 0x3)
r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r2, &(0x7f0000000240)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x1, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x4e21, 0xce20, 0x41424344, 0x41424344, 0x0, 0x5, 0x5, 0x0, 0x5, 0x0, 0x18}}}}}, 0x36)

15.349406967s ago: executing program 0 (id=1511):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x1, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r2 = socket(0x840000000002, 0x3, 0x100)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x80, 0x40, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0xfffd, 0x3a, 0x1, 0x2f, 0x0, @empty, @broadcast}}}})
r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25SDTEFACILITIES(r4, 0x89eb, &(0x7f0000000180)={0xfffd, 0x105, 0x100, 0x0, 0x4, 0x3c, 0x7, "e75867de0700000000000000000006c000", "399b9bd344a7eddabb6638a300789e9890000100"})
connect$inet(r2, &(0x7f00000005c0)={0x2, 0x0, @local}, 0x10)
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x1, 0x4)
sendmmsg$inet(r2, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_WAIT_VBLANK(r6, 0xc018643a, &(0x7f0000000340)={0x10000000, 0x40071, 0x20000000d})
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r7=>0x0], 0x1})
r8 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(r8, 0xc01064c8, &(0x7f0000000640)={0x1, 0x0, &(0x7f0000000600)=[<r9=>0x0]})
ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r8, 0xc01864b0, &(0x7f00000008c0)={r9, 0x0, 0x8, 0xa3e, 0x1fc})
ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f0000000300)={r7, <r10=>0x0, r9, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_SETCRTC(r6, 0xc06864a2, &(0x7f0000000380)={0x0, 0x0, r10, 0x0, 0x0, 0x1f5, 0x0, 0x0, {0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd, 0x8, 0x0, 0x0, 0x0, 0x8001, 0xfffffffa, "b4bc323ef77d1f000071849800000000dfff00"}})
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b80000000001010400000000000000000a0000003c0001802c000180140003000000000000000000b0d6f86d0000000014000400ff0100001c83000000000000000000010c00028005000100000000003c0002802c001fb731c937304c5f00000000000000000000000000aa14000400fe8000000000000000000000000000aa0c00028005000100000000000800074000000100240006800c000380060002000000000014000400fe8000000000000000000000000000aa9e958faaca538858e277a8342e96df9261fb7e846d9be095993c6c0fd84b02ca149264f9eba405c38fda"], 0xb8}}, 0x804)
getsockopt$sock_buf(r1, 0x1, 0x38, &(0x7f0000000280)=""/102, &(0x7f0000000400)=0x66)
syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000))
socket(0x400000000010, 0x3, 0x0)

14.439422222s ago: executing program 0 (id=1513):
syz_open_dev$video(&(0x7f0000000100), 0x49, 0x0)
r0 = syz_open_dev$sg(&(0x7f00000000c0), 0x6f5e, 0x0)
capset(0x0, 0x0)
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85)
socket$nl_generic(0x10, 0x3, 0x10)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f000001fa80), 0x2, 0x300)
syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES8=r1, @ANYBLOB="06"], 0x0)

12.732110089s ago: executing program 5 (id=1520):
r0 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000003140), 0x1, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10)
listen(r1, 0x0)
r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000001000), 0x180, 0x0)
r3 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
r4 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r4, 0x1, 0x0)
fchdir(r5)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0x7, &(0x7f00000001c0)={0x8, 0x8f}, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r3}, 0x18)
bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000040)='./file0\x00'}, 0x18)
gettid()
ioctl$RTC_ALM_READ(r2, 0x80247008, &(0x7f0000000100))
r6 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r6, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10)
r7 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
r8 = dup(r7)
write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x8, 0x2, 0xfffffffffffffffd, 0x1}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x4, 0x0, 0x1136f858, 0x0, 0xffffffffffffffff}, 0x0, 0x0)
writev(r0, &(0x7f00000043c0)=[{&(0x7f00000032c0)="ea8268205953ec0e25903b01464f0c4900c1d51977817a399d2bb7dc1044c37660ffd0737f6c80b79f44c1b1d3e5f9694060dc0f0f", 0x35}, {&(0x7f0000003300)="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", 0xfcc}], 0x2)
r9 = socket$netlink(0x10, 0x3, 0x15)
setsockopt$bt_BT_FLUSHABLE(r8, 0x112, 0x8, &(0x7f0000000080)=0x6, 0x4)
sendmsg$netlink(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=ANY=[], 0x1c}], 0x1, 0x0, 0x0, 0x4004010}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180))

12.413254218s ago: executing program 5 (id=1522):
r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x9, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0x2b, &(0x7f0000000580), 0x4)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="24000000faff00002fbd7000f9dbdf2542201400ff02ff020018000008000f00ff070000"], 0x24}, 0x1, 0x0, 0x0, 0x44051}, 0x1000)
r6 = socket(0x15, 0x5, 0x0)
connect$netrom(r6, &(0x7f00000000c0)={{0xa, @null}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48)
getsockname$packet(r6, 0x0, &(0x7f0000000340))
sendfile(r0, r5, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x55, &(0x7f0000009b00)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x12}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040))
ioctl$sock_inet6_udp_SIOCINQ(r6, 0x541b, &(0x7f0000000140))

11.23174439s ago: executing program 4 (id=1527):
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10)
socket$netlink(0x10, 0x3, 0x0)
syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f00000000c0)='./file1\x00', 0x8488, &(0x7f0000000780), 0x1, 0x10fd, &(0x7f0000001140)="$eJzs2T9rFEEYBvBnds8/3cqmXwQtLCQknF8ghcK1ttqIpDJVrlL8OH4cTWUf0msRsF9Zb/dO5UTwTm1+PzjmvYd9Z2fKmQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMZsmnkhxUSTtlVZKSdN3F4ipJN+V33tdVSp6eLpaPz+dPlknqb4+XZ0kZuoa2tMf3brfzdt4et48OTu5/WL5+8+rF2dnp+ThNSZfL6/1vpYzrAQAAAH7U76z5z+8HAAAAfmdvFwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf6hvNnU7FVWSknTdxeIqSbel78Y/Wh8AAACwu5Iqz5tt+eoaYONhPjZlnQ/jlzLUR3m3pR8AAAD4pf7WWHz/fb3c3JzHH2S2PpcP2d3Mcni4+j8O+XyS1EmOfpr88vrty+lX+vpv7wUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgK/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAAAAAPYKAAD///F61s8=")
ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000"], 0x48)
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000040), 0x0)

11.165996992s ago: executing program 0 (id=1529):
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, 0x0)
r1 = userfaultfd(0x801)
mlockall(0x2)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x380})
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
syz_mount_image$hfs(&(0x7f0000000080), &(0x7f00000008c0)='./bus\x00', 0x80c808, &(0x7f0000000340)=ANY=[], 0x1, 0x2e6, &(0x7f0000000980)="$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")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r2, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2})
r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2)
r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x800)
write$binfmt_aout(r4, &(0x7f0000000380)=ANY=[@ANYBLOB="0307"], 0xc8)
dup3(r4, r3, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)

11.117080384s ago: executing program 5 (id=1530):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x7ad3db81}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$SO_TIMESTAMP(r3, 0x1, 0x40, &(0x7f0000000380)=0x4, 0x4)

8.929814544s ago: executing program 3 (id=1532):
r0 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000003140), 0x1, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10)
listen(r1, 0x0)
r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000001000), 0x180, 0x0)
r3 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
r4 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r4, 0x1, 0x0)
fchdir(r5)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0x7, &(0x7f00000001c0)={0x8, 0x8f}, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r3}, 0x18)
bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000040)='./file0\x00'}, 0x18)
gettid()
ioctl$RTC_ALM_READ(r2, 0x80247008, &(0x7f0000000100))
r6 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r6, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10)
r7 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
r8 = dup(r7)
write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x8, 0x2, 0xfffffffffffffffd, 0x1}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x4, 0x0, 0x1136f858, 0x0, 0xffffffffffffffff}, 0x0, 0x0)
writev(r0, &(0x7f00000043c0)=[{&(0x7f00000032c0)="ea8268205953ec0e25903b01464f0c4900c1d51977817a399d2bb7dc1044c37660ffd0737f6c80b79f44c1b1d3e5f9694060dc0f0f", 0x35}, {&(0x7f0000003300)="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", 0xfcc}], 0x2)
r9 = socket$netlink(0x10, 0x3, 0x15)
setsockopt$bt_BT_FLUSHABLE(r8, 0x112, 0x8, &(0x7f0000000080)=0x6, 0x4)
sendmsg$netlink(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=ANY=[], 0x1c}], 0x1, 0x0, 0x0, 0x4004010}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180))

7.064257345s ago: executing program 3 (id=1534):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
write$char_usb(0xffffffffffffffff, 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r3 = socket$inet6(0xa, 0x1, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, 0x0, 0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r5)
sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50020000", @ANYRES16=r6, @ANYBLOB="0100000000000000000001000000080001000000000004000480080002000100000010000c7d0c000b8008000a00b4ed000004000880c8000c"], 0x250}}, 0x2000c000)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)

6.808027592s ago: executing program 4 (id=1535):
fcntl$lock(0xffffffffffffffff, 0x24, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, 0x0, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, 0x0, 0x0)
r1 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r1, &(0x7f0000000180)={0x2, 0xce20, @empty}, 0x10)
listen(r1, 0x3)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, 0x0)
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r2, &(0x7f0000000240)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x1, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x4e21, 0xce20, 0x41424344, 0x41424344, 0x0, 0x5, 0x5, 0x0, 0x5, 0x0, 0x18}}}}}, 0x36)

5.564211627s ago: executing program 3 (id=1538):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01060000000000000000090000002c0004801300010062726f6164636173742d6c696e6b000014000780080003007f"], 0x40}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000000000020c007251500000000000109022400010000800009040080090300000009210000000122250009058103100010"], 0x0)
getpid()

5.220183116s ago: executing program 4 (id=1540):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
r0 = syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x0)
ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000300)={&(0x7f0000000240)=[{0x0, 0x2010, 0x0, 0xfffffffffffffffc}, {0x7, 0x801, 0x0, 0xfffffffffffffffe}], 0x2})
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000580)=""/78, 0x0})
ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x0, 0x1, 0xfffffffc, 0x6, 0x4, 0x0, "5debca561a5fbf61048955f6f876b2ff"})
r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000800)={r4, r4, r4}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}})
setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000500)={0x1, 0x1, 0x4, 0x9, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x13}, @loopback}, 0x10)
ioctl$SIOCGETMIFCNT_IN6(0xffffffffffffffff, 0x89e0, &(0x7f0000000580)={0x1})

4.489738787s ago: executing program 3 (id=1541):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'gre0\x00', &(0x7f00000001c0)={'gretap0\x00', <r2=>0x0, 0x40, 0x700, 0x0, 0x2, {{0xf, 0x4, 0x1, 0x4, 0x3c, 0x64, 0x0, 0x4d, 0x29, 0x0, @multicast2, @multicast1, {[@ra={0x94, 0x4}, @rr={0x7, 0x1b, 0x3e, [@remote, @dev={0xac, 0x14, 0x14, 0x17}, @multicast2, @multicast2, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @rr={0x7, 0x7, 0xad, [@initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}})
ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f00000002c0)={@remote, 0x64, r2})
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r3, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x4b, &(0x7f0000000100)=0x401, 0x4)
setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}, 0x1c)
listen(r4, 0x401)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newtaction={0xf4, 0x30, 0xffff, 0x0, 0x0, {}, [{0xe0, 0x1, [@m_ife={0xdc, 0x1, 0x0, 0x0, {{0x1}, {0xb4, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @link_local}, @TCA_IFE_METALST={0x1c, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x6}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0xe}]}, @TCA_IFE_TYPE={0x6}, @TCA_IFE_TYPE={0x6}, @TCA_IFE_DMAC={0x12, 0x3, @local}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x0, 0x5, @val=0x1}, @IFE_META_PRIO={0x0, 0x3, @val=0x3}, @IFE_META_SKBMARK={0x0, 0x1, @void}]}, @TCA_IFE_PARMS={0x1c}, @TCA_IFE_TYPE={0x6}, @TCA_IFE_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}}, @TCA_IFE_METALST={0x30, 0x6, [@IFE_META_SKBMARK={0x8}, @IFE_META_TCINDEX={0x1, 0x5, @void}, @IFE_META_TCINDEX={0x6, 0x5, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x0, 0x3, @void}, @IFE_META_TCINDEX={0x6}, @IFE_META_SKBMARK={0x0, 0x1, @void}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf4}}, 0x0)
syz_mount_image$jfs(&(0x7f0000000400), &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1c802, &(0x7f0000000000)=ANY=[], 0x3, 0x5f74, &(0x7f0000002040)="$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")
syz_open_dev$tty1(0xc, 0x4, 0x1)
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=@updpolicy={0x23c, 0x19, 0x1, 0xfffffffc, 0x10, {{@in=@broadcast, @in=@remote, 0x4e21, 0x0, 0xf7fb, 0x2002, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x401, 0x0, 0x9, 0x8, 0x0, 0x0, 0x20000000000000}, {0x81, 0x9, 0x83}, 0x0, 0x0, 0x2, 0x1, 0x0, 0x3}, [@tmpl={0x184, 0x5, [{{@in=@rand_addr=0x64010102, 0x4d4, 0x32}, 0x0, @in6=@rand_addr=' \x01\x00', 0x3506, 0x0, 0x0, 0x2}, {{@in=@loopback, 0x4, 0x2b}, 0x0, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x800}, {{@in=@dev={0xac, 0x14, 0x14, 0x28}, 0x4d3, 0x32}, 0x0, @in=@loopback}, {{@in6=@remote, 0x4d5, 0x33}, 0x0, @in=@private=0xa010101, 0x3504, 0x0, 0x0, 0x1, 0x0, 0xabf}, {{@in=@loopback, 0x4d4, 0x2b}, 0x0, @in=@remote, 0x3505}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x2b}, 0x8, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x10, 0x4, 0x0, 0xfc, 0x1, 0x40000}]}]}, 0x23c}}, 0x4080)
mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000080), 0x9410ca, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=0x0, @ANYBLOB=',wfdno=', @ANYRES32=r5])
r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
timer_create(0x2, &(0x7f0000000240)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100))
timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r6, 0xc0185879, 0x0)

4.110046607s ago: executing program 4 (id=1543):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
write$char_usb(0xffffffffffffffff, 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r3 = socket$inet6(0xa, 0x1, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="040000000400000004000000050001"], 0x50)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r5)
sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50020000", @ANYRES16=r6, @ANYBLOB="0100000000000000000003000000080001000000000004000480080002000100000010000c7d0c000b8008000a00b4ed000004000880"], 0x250}}, 0x2000c000)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)

3.937126071s ago: executing program 5 (id=1544):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x40040)
syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r1}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x17, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$HIDIOCGUSAGE(r1, 0x501c4814, &(0x7f0000000000)={0x2, 0xffffffff, 0x0, 0xfffff800})
socket$nl_xfrm(0x10, 0x3, 0x6)

3.048602486s ago: executing program 4 (id=1546):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000140)={0x0, 0x20, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c000000170a01080000000000001400020000080900020073797a32000000000900010073797a30"], 0x2c}, 0x1, 0x0, 0x0, 0x20040091}, 0x0)

2.957750039s ago: executing program 1 (id=1547):
syz_mount_image$reiserfs(&(0x7f0000000040), &(0x7f0000000080)='./bus\x00', 0x86, &(0x7f00000000c0)={[{}, {@usrjquota_file, 0x4}, {@grpjquota}, {@resize={'resize', 0x3d, 0x8}}, {@usrjquota, 0x3d}]}, 0xfc, 0x110a, &(0x7f0000006580)="$eJzs2LFqFEEYB/D/7B2YbmXTL4IWFhISzs4qRYRrrW1EUpkqV0UE8V18HEllH/IAFgFLYWQ3t0YkEDBnJPD7wcwO38438005EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALj0Yui2m6SbIk2SkvT96fI8ST/FH36ZNSl5dbhcHRwvXq6SzMbpZWhD1pCWbu/xVrfoFt1e93x7/0m3Onn/7s3R0eHxepmSPmcXmz9IWddzra3N7wcAAAD3Rb219s8l53e7PwAAAHCTjT4mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPyF2l6NuyQ/aq1pkpSk70+X50n6/1kgAAAAcGslTV6318UzPgNceZavbRnjU/tehjm7+TzmP7izmgEAAOD+md84o/x2H3+aeWqtH6d/jzLPzs7leP3Jt/1kdnKQ3V938k9jf3bx4e3USp39g7MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP9mBAxIAAAAAQf9ftyNQAAAAAAAAAAAAAAAAAAAAAOClAAAA///LONy9")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180200010000000000000000ff0300009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0)
ioctl$EVIOCGLED(r1, 0x80284504, &(0x7f0000000000)=""/52)
ftruncate(r0, 0x8)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
pipe2$watch_queue(0x0, 0x80)
socket$inet_udplite(0x2, 0x2, 0x88)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000200)=[{0x5, 0xfc, 0x0, 0x7fff7ffb}, {0x1, 0x80, 0xff, 0x10000002}]})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
getsockopt$llc_int(r3, 0x10c, 0x7, &(0x7f0000000000), &(0x7f0000000280)=0x4)
r4 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r5 = openat(0xffffffffffffff9c, &(0x7f0000002400)='.\x00', 0x0, 0x1a1)
ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000000)={0x2, 0x2000, 0x6, 0xadea})
quotactl$Q_SETQUOTA(0xffffffff80000802, &(0x7f0000000400)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x401, 0x4, 0x6, 0x8000000000000001, 0x1, 0x9, 0x8, 0x80006, 0x4040c405})
close_range(r2, 0xffffffffffffffff, 0x3f00000000000000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000004340)={0x6, 0xd, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb7030000ed000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa4)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r8}, 0xc)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000008c0)={'bridge0\x00', <r9=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001c0001004bbd7000fe07002507000000", @ANYRES32=r9, @ANYBLOB="80007e0608000200aaaaaaaaaa0c000008000f0000000000"], 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4040000)
getpid()
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000})

2.876029631s ago: executing program 0 (id=1548):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c)
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000005d40)='./file0\x00', 0x4000, &(0x7f0000001e40)=ANY=[@ANYBLOB="71756f74612c646973636172642c646973636172642c696f636861727365743d6b6f69382d72752c646973636172642c00f4193eb3ba2a0d5ff2cd7374288ff89ec513a53e007345decb720900f8312da2463eb0edf52fad1a00ebd41c14b3ce75d0cffefd379624b16f7260c835713b263352e03b5cb8fa0c042bd1225ed4ded2b62e12fea4d7e61b738e40781e58d5fff112364ac140f419e5dafecd283b3fab6b142ddbc893b35a81fe9265591ef35fa2928e095fee4c10b22e4212378de59bca0307cc644b9620b63f0000007bbbd422d87856b71348b8f45398b9660b6b3e8ee8a8c32f3234cb46e2cd827ec25c1ca4d046bc004f8df7b1ee690a5e50510700d80c7fa65fa724d0e1b4369f1b64fe249a0312010000004ac983de925f52d735b03fea941b1e948ad8d19cfda5b799325fd69d14fcf6cdde7700a63150eb3699e5314e0827750e244150ec19f3f3f1d8be542c084b5e40bfaa8ad206d2a33b0ddbd7f8e07dc7d17174a4549ffaf5976949cb69658c42ec7cd9fe8ad82852cefb04646edb3a41eb514eb6a772b3ee9f21e25822b54ec33e592d5c040946721101d53aff21f90351c95aa0f73f1853d6afcbf9448b220e988466066fa5c09e6198fc4520d199b93bdedee87c4043815aa05668a06f8da96680ccc1a139ade90f5c79af46208f9762f54e7c29088d9de69bd2d51c6b9c42209ddc3880051303b855853407d959a5777dce25201c5ea1faa084c36e3e349915ebec53435eb2910c59394ee84ba3baf9c440ae5833c23f46b0eaac543ce0c80ba0603213e53ea59755070b18bc10b9224aa082d96700e63d51c5bffa4f712c2d7fafb9cf506c06e1ddad4fc19038407786fedb9afdfb11a5f182676dd84c919f71d5eee2f3b740b68ee7f6518eb9d8baa26f1c3871f863b134ee942eb3af92d19e70d8268839cd7b4637f0627299f99b1873ca165e410f8bd421e1a4859fd9bd6bb34d25c07e1a52b9668a530b10b8585d797124a6975a71aedbe557a17b06bbfe547aa553c3d08b8921a4b0d938c03687bd48a9a387b4c066c056f457fba5738775b900a1e82a89aae1494b05c4bb0fc8ed1a93688bf850a4f7b0942eda1f16ecf043efa6b8c1f9e0fba31f4a58ed0031180fb1b8a00e4a86826b030000002dd1272a3d1609bed545b86ca7a6bf569ed35d0000ca23b0de742f6008fdf20928370d88f8c04bc3b97b9a9e0062e8fc5fd2337d85a66bd20730f3153db2459fb34c134c06c19364e9645e83040dd16ee08f18f0ba69ac9ca3e25e15442b07000000d30d38a64613b535fa808a9b3bae00bc371271d45db200a5cbf433e2f6dd03b7c7fcc040781e5151c9badb787e7e1e2f39d60998919aa8dbd156f31a5b7fa5f9e5ec01e8c799edc322703c7fc4a81ab9bc02dd96714ee9d7e75d28d040ff3566404fd6db547a4b553197c1f316d20ea54f9459cd81351a510d101e90eabe6dc6c6ac3ffa189c073a5fb3fc382df620bf5af9e638819c77a051e6875866a849f6f578c068c0e4c7cfbc15033997efa853c96297b3201dd30ea40dc94d010a0c33da9f63a10b8f813dc789b80be3bb3f00ee58b30d5c03a6ddbf418ac1b3d4a13839e4b273c4f914bed13f8806295495d41609478798396aeec06e8d342efd8ac6b422f6c23a011b1400000000000000bc2a02094e19a1ee8bb3c3c0c088ae8efaf68c85001faf7cf5426fb7c5c367ed93eb25c48a293549d15b91b59f1b574b3f6171f8e56a402ec56bdf51d90312b3ca5398f4050000007504be21456ec953bf06f12fff20c31e7c8b55fee5c49aa939830b09995ff149258118f9aae29206f9731288b56b10de51525665fdb4e289b1c177df97af3085f82045fbd012f1dde94ffecd90b7b63d8197d9c24a6fe5915ac7d7240847f6d0bf9099ee117c83e363f2ad36a4a9f4faa5734afe9770c38c565cae87a408d0acbb2db7db9174acab60a344814ee643fa82ba41706d2360269ed276e13dd83abbc258f07b0d58ab0b65200b18b7f9f871bcb43fec5a2e3789ecd0c1069d2da80b93c86dff8933e70c2108346003ddf6b60379eee63b66e7341cdd8f87ed9f11894c9ae040976321d87405b492f419ebfa77eb367ca6e360b808451102f54893d7d1695c24bcc184b1e7d19940a2b6931ade8638dd2b85a86dc511dbb97f5035d07ca024076e8581db332b1c5f135fe6b2e9d2c18c9d5d5a524d3d5b2657e4b28f1a09696bd5b076a1471c8b2ab2ca3ba57843af1d03590f4e8985e1c463c781bb03ad7ec816ea70bbe06411aae001e0ca72ee7e828ad14bb7a092d883ad000554bf7f00000000000075cc01f8a2e1802192f09e77bc488b3bd3f08a9ce88ba2e2bcc23cf5d7372b339ce1f5003db0ad70fa6e93aa908a2ced81f5514e23e2f94ff03c1c02f5a9195f4735563efd0a1fc7dafcfb3dae043fe0c172ec3a12747d7abf4382bf7453c13df994641017a0f461add956ef8f834b762af30408af6a61f317fd3c7b0816236a768601b7c6606ba52ff126eb13d33c915c5da99d118db488da3f3d7783a608282a93fcbe0910f0389c3ef91de7c84e23daa6554c42b2b3e9f70a9f790f29011a0b5101b23bfeba6e52877ed8a188958e39375dd203d434bef4dc82cc8a21fc40c6e6e6a2475f70bf1503beb9555036e63bdc937f8a4d61b21d06a9d3239d1df6f2e9ef16dee590b15ac028c6d873bb2965374b733d8e11ba763ab157ed91dd871b098c0543dcbba4cf67db8c83c84369dc67735fa4faa0fdcf34b1c6a862ccae9fe4fa28746504643b57f02623a2ef34ea90f2e7f7dd771f8f75217c799d978a3533fcfab6c6f5391b626d61b400f08172fc675e2a062d06c31b85452804f7b125c291f60a02a5d62271e96fe70d64bae36e28b42e197259169ebee8f64355544fb4d8b83c1c8fad02cd1a2e56a6f6e82ec7719a48a1bea803546b8af7a89faf7cef94d8ada45fc0a98a79ba90c95262f0110725c6bf7c81237534dcd6a8a113bd8ac48b7db5526ab762cec103674742476cd6b92b8c7abcfb1f8e08f0a05c1b209187049f3206bd545e8c20f8db6d8a7cdd0c9ecbb9011b611a013cd581521dfcb028d59d5c69d286fb93e4c498b3aaff7e0cdcf1f41fec65ebdbe4c2bf453140251cdd94c32b87c4634d6500000000000000000000000000000000816e6c33f92dca3e03c400"/2303], 0xff, 0x5e5c, &(0x7f0000005d80)="$eJzs3U9vHGcdB/Df/vH6T2kbVagKEQc3hdJSmv8JlH9NOXCAA0ioZxK5bhVIASUB0SoirnJAXICXAJdeOPQt8AL6GhAvgEg2px4og8Z+nmQ8XmcdEu/s+vl8JGfmN8+O95l8PZ5dz8w+AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADED77/k7O9iLjym7TgWMTnYhDRj1iu69WoZy7nxw8j4nhsN8fzETFYjKjX3/7n2YgLEfHJMxGbW7fX6sXnDtiPi2du3fjsh9/7x+//dPf4z97+6Uft9h9//vzHf7gTcexHr3/82Z0ns+0AAABQiqqqql56m38ivb/vd90pAGAq8vG/SvJytVqtVj/R+o/92eqPutC6qRrvTrOIiI3mOvVrBqfjAWDObMSnXXeBDsm/aMOIeKrrTgAzrdd1BzgUm1u313op317zeLC6057/Trkr/43e/fs79ptO0r7GZFo/X3djEM/t05/lKfVhluT8++38r+y0j9LjDjv/adkv/9HOrU/FyfkP2vm37Mr/zxExt/n3x+Zfqpz/8FHy3xjM8f4vfwAAAAAAjr789/9jHZ//XXz8TTmQh53/XZ1SHwAAAAAAAADgSXvc8f/uM/4fAAAAzKz6vXrtL888WLbfZ7HVy9/qRTzdejxQmNXGhwMCAAAAAAAAAAAAANMxjFhJ1/UvRMTTKytVVdVfTe36UT3u+vOu9O2HknX9Sx4AAHZ88kzrXv5exFJEvJU+629hZWWlqpaWV6qVankxv54dLS5Vy433tXlaL1scHeAF8XBU1d9sqbFe06T3y5Pa29+vfq5RNThAx6ajw8ABICJ2jkabjkhHTFU9G12/ymE+2P+PHvs/B9H1zykAAABw+Kqqqnrp47xPpHP+/a47BQBMRT7+t88LqNVqtVqtPnp1UzXenWYRERvNderXDIbjB4A5sxGfdt0FOiT/og0j4njXnQBmWq/rDnAoNrdur/VSvr3m8WB1pz1fC7Ir/43e9np5/XHTSdrXmEzr5+tuDOK5ffrz/JT6MEty/v12/ld22vMQ/4ed/7Tsl3+9ncc66E/Xcv6Ddv4tRyf//tj8S5XzHz5S/gP5AwAAAADADMt//z/m/G/eZAAAAAAAAACYO5tbt9fyfa/5/P8Xxzyu15xz/+eRkfPvHTh/9/8eJTn/fjv/1gU5g8b8vTcf5P/vrdtrH9361xfydObzXxiM6ude6PUHw3TNT7XwTlyL67EeZ/Y8frir/eye9oVd7ecmtJ/f0z6q25dz+6lYi1/G9Xj7fvvihAujlia0VxPac/4D+3+Rcv7Dxled/0pq77WmtXsf9vfs983puOe5/Lf/vLR375q+uzG4v21N9fad7KA/2/8nT43i1zfXb5z67dVbt26cjTTZtfRcpMkTlvNfSF85/5df3GnPv/eb++u9D0ePnP+suBvDffN/sTFfb+8rU+5bF3L+o/SV889HoPH7/zznv//+/2oH/QEAAAAAAAAAAAAAAICHqapq+xbRyxFxKd3/09W9mQDAdOXjf5Xk5Wq1Wq1Wq49e3VSN90aziIi/N9epXzP8btw3AwBm2X8j4p9dd4LOyL9g+fP+6umXuu4MMFU33//g51evX1+/cbPrngAAAAAAAAAA/688/udqY/zn7euAWuNG7xr/9c1YndvxP/ujwfZY52mDXoiHj/99Mh4+/vdwwvMtTGgfTWhfnNC+NKF97I0eDTn/F1LGOf8TacNKGv/15Q7607Wc/8k01nPO/yutxzXzr/46z/n3d+V/+tZ7vzp98/0PXrv23tV3199d/8XZM5cunL944fzFi6ffuXZ9/czOvx32+HDl/PPY164DLUvOP2cu/7Lk/L+cavmXJef/UqrlX5acf369J/+y5Pzzex/5lyXn/0qq5V+WnP9XUy3/suT8X021/MuS8/9aquVflpz/a6mWf1ly/qdSLf+y5PxPp1r+Zcn55zNc8i9Lzj9f2SD/suT8z6Va/mXJ+Z9PtfzLkvO/kGr5lyXnfzHV8i9Lzv9SquVflpz/11Mt/7Lk/L+RavmXJef/eqrlX5ac/zdTLf+y5Py/lWr5lyXn/+1Uy78sOf/vpFr+Zcn5fzfV8i9Lzv+NVMu/LA8+/9+MGTNm8kzXv5kAAAAAAAAAAAAAgLZpXE7c9TYCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPA/duBAAAAAAADI/7URqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrADBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFvXuLkbO87wf+7sleGwL+hzNxwDYnAwu76xM4xGCSkD8lPVAS0qYlNY69Nk58qnfNSahsCm2JglSk9oJeNCVRGkVqK1AVqalEI6RGau+aq0bcRK3EhS+gclBSNVVgq3fmeR7PzM7OrLHHnnmfzyfCP3vmfWeeeeed2f1u9J0FAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGq3/5MyfDBVFUf5X+2NNUVxY/n1VsbP85/y2871CAAAA4Ey9V/vzby9OF+xcxk4N2/zLNf/2vYWFhYXiS++eeP/PFhbSFeuKYmRlUdSui/71Fz9faNwmeK4YHxpu+Pdwl7sf6XL9aJfrx7pcv6LL9Su7XD/e5fpFB2CRVfWfx9Ru7PraX9fUD2lxaTFWu+76Nns9N7RyeDj+LKdmqLbPwti+4kBxsJgpphbtM1T7X1G8vr68r/uLeF/DDfe1tiiKkz99Zk9cw1A4xtcXTXdW0/jcvXNvse7dnz6z5ztzb1/VbnY9DItWWhQbN5TrfL4oTv24qhgqVqZjEtc53LDOtW3WOdK0zqHafuXfW9d5cpnrjI97PKzzRx3WuTZc9uR1RVHMF0tu0+q5YrhY3XKv6XiP18+I8jbKp/LDxehpnSfrl3GelPu8dV3zedJ6Tsbjvz4ck9El1tD4dLzz1RWLjvsHPU/KR90P52p52w+Wdzo+3vij1aZztdzmmRuWPgfaPndtzoF0LjecAxu6nQPDK0Zq58DwqTVvaDoHphftM1wM1e7rxA2dz4HJuUNHJ2efevq2A4d275/ZP3N4emrbls1bt2zeunVy34GDM1P1P0/vkA6Q1cVwOgc3hPeaeA7e1LJt4ym58M2z9zoY75PXQfnYP3djuaALh4slzvFym+c3nvnrIH3db3gdjDa8Dtq+p7Z5HYwu43VQbnNy4/K+Zo42/NduDb16L1zTcA6cz6+H5X0+cvPS74Vrw7peuOV0vx6OLDoH4sMaCq+98pL0/d74neG4LD4vri6vuGBFcXx25tjtT+6emzs2XYRxTlzS8Fy1ni+rGx5Tseh8GT7t82Xn3/zyxqvbXL4mHKvxWzs/V+U2WyY6P1e1d/f2x7Pp0k1FGGfZuT6e7b6alcczZYkOx7Pc5vnbzvx7wZRLGt7/xrq9/42Mjdbf/0bS0Rhrev9b/NSM1FZWFCdvW97731j471y//13aJ+9/5bF65PbO50C5zQuTp3sOjHZ8/7suzKGwnptDYhhvyP3v166fr5+mDc9l1/NmdHQsnDej8R6bz5vNi/Ypb628741TH+y82Xhd83PV9H1LBc+b8lj9+VTn86bc5o3pM3/vWBX/2vDesaLbOTA2sqJc71g6Cervdwur4jlwe7GnOFIcLPamfcpnubyviU3LOwdWhP/O9XvHlX1yDpTH6uVNnc+Bcpsfbj673zttDJekbRq+d2r9+cJSmf/q0VO313rYznbmL9f5qS2dfzZUbvP2ltPNGZ2P063hkgvaHKfW189S5/Te4twcpyvDOg9u7fyzqXKbS7ct83zaWRTFm9Nv1n7eFX6++/fH//17TT/3bfcz5Ten33xg8qEfn876AQD44N6v/Tm/ov69ZsP/Y72c//8fAAAAGAgx9w+Hmcj/AAAAUBkx94+Emcj/AAAAUBkx94+GmWSS/x+7c/ur7z1bpE8DXAji9fEwPHh3fbvY8Z4P/163cEp5+Se+Pfbq155d3n0PF0Xxywc+0nb7x+6O66o7Gtf5sebLF7ny2mXd/6MPn9qu8fMTTm6v3358PMs9DWJX+fXJTbXbXffUdG2+8UBRmw/Nv/Bc/fbr/47bn9hc3/4vw4eW7Nw31LT/xrCe68NcFz5T5sGdp45DOeN+r6695p8v+fyp+4v7DW24qPYwX/6D+u3Gz4h66ZL69vFxL7X+f/r6d18tt3/yhvbrf3a4/fpPhNt9K8xf7Khv33jMv9aw/j8K64/3F/e7/Vs/aLv+166ob/9aOC9eCbN1/ff+6Uffa/d8xfvZeVd9v3j/U/+9pbZfvL14+63rH392uul4tN7+G+/Wb2fH4z8badw+Xh7vJ3r0rubzeyg8v0098qIovvvHRdNxLj5e3+8fW9Yfb+/oXe3Xf2vLOo8OXVvb/9TjWdP0uL7x15vaPt64np1/t6bp8bx0Xzh+707+sLzdEw+F8zFc/78/qt9e62eZvnZf8/tN3P6VNfXXbby9yZb1v9Sy/vlry2PXff33v1tf/2v3rGxa/85Ph/Pp/vrstv79f3Vx0/7f/E79+Tj2xMThI7PHD+xtOKqNr+OV46tWX3Dhhy66OLyXtv5715G5x2aOrZtaN1UU6wbwIwN7vf5vhflf9TF/9u+h7sc/q593L36m/nXrpp/X//1SuPzR8HzGr4/f+IuxpvO19Xmfv6c+z3T9t4R1LNcVX//Pa5e14Ykvvn78H/7w7dbvC+LjOXrZeO3xvbz+8tp1Q2/Ur299v+rmPy5rfl3/ZHSqNr8fjutC+GTmDZfX76/19uNnk7z42frrN34nF/cvWj5PZM1I8+M40/X/JHwf84Mrm9//4vnx/WdbPs15TTFULmE+vD8U8/Xr41bxeL948vK29xc/h6eYv+p0lrmk2admJw8eOHz8ycm5mdm5ydmnnt516Mjxw3O7ap9duuvL3fY/9fpeXXt9753ZtqWovdqP1EePne/1H314z947pm7cO7Nv9/F9cw8fnTm2f8/s7J6ZvbM37t63b+aJbvsf2LtjetP2zXdsmth/YO+OO7dv37x94sDhI+Uy6ovqYtvUVyYOH9tV22V2x5bt01u3bpmaOHRk78yOO6amJo5327/2tWmi3PvxiWMzB3fPHTg0MzF74OmZHdPbt23b1PXTHw8d3Te7bvLY8cOTx2dnjk3WH8u6udrF5de+bvuTh9kj4f2uxVD47vwLt25Ln49b+vZXl7yp+ibN354W74TPgopf37r9O+b+sTCTTPI/AAAA5CDm/vDB/6eukP8BAACgMmLuXxlmIv8DAABAZcTcPx5mkkn+1//X/9f/1//X/9f/7yX9f/3/TvT/9f8Hef36//r/dNdv/f+Y+1cVRZb5HwAAAHIQc//qMBP5HwAAACoj5v4LwkzkfwAAAKiMmPsvDDPJI/+Ptf5V/1//X/+/sf8ft9X/L/T/9f8/IP1//f9O9P/1/wd5/X3Y/1+l/0+/6bf+f8z9HwozySP/AwAAQBZi7r8ozET+BwAAgMqIuf/iMBP5HwAAACoj5v41YSaZ5H+//1//X//f7//X/9f/P8uaDrH+v/5/J/r/+v+DvP4+7P/7/f/0nX7r/8fc///CTDLJ/wAAAJCDmPs/HGYi/wMAAEBlxNx/SZiJ/A8AAACVEXP/pWEmmeR//X/9f/1//X/9f/3/XtL/1//vRP9f/3+Q16//r/9Pd/3W/4+5/7Iwk0zyPwAAAOQg5v7Lw0zkfwAAAKiMmPuvCDOR/wEAAKAyYu6/Mswkk/yv/6//r/+v/6//r//fS/r/+v+d6P/r/w/y+vX/9f/prt/6/zH3XxVmkkn+BwAAgBzE3H91mIn8DwAAAJURc/9HwkzkfwAAAKiMmPvXhplkkv/1//X/9f/1//X/9f97abD6/8NLXqP/X6f/30z/X/9f/1//n876rf8fc/9Hw0wyyf8AAACQg5j7rwkzkf8BAACgMmLuvzbMRP4HAACAyoi5f12YSSb5X/9f/1//X/9f/1//v5cGq/+/NP3/Ov3/Zvr/+v/6//r/dNZv/f+Y+9eHmWSS/wEAACAHMfdvCDOR/wEAAKAyYu6/LsxE/gcAAIDKiLn/+jCTTPK//r/+v/6//r/+v/5/L+n/6/93ov+v/z/I69f/X17/f0W3G6LS+q3/H3P/DWEmmeR/AAAAyEHM/TeGmcj/AAAAUBkx998UZiL/AwAAQGXE3L8xzCST/K//r/+v/6//r/+v/99L+v+L+v9v/U+h/x/p/+v/D/L69f/9/n+667f+f8z9N4eZZJL/AQAAIAcx998SZiL/AwAAQGXE3H9rmIn8DwAAAJURc/9EmEkm+V//X/9f/1//X/9f/7+Xqtr/T++jfv+//r/+v/6//r/+P0vqt/5/zP23hZlkkv8BAAAgBzH33x5mIv8DAABAZcTcPxlmIv8DAABAZcTcPxVmkkn+1//X/9f/1//X/9f/76Wq9v/P4Pf/6/830P/X/x/k9ev/6//TXb/1/2Punw4zyST/AwAAQA5i7t8UZiL/AwAAQGXE3L85zET+BwAAgMqIuX9LmEkm+V//X/9f/1//X/9f/7+X9P/1/zvR/9f/H+T16//r/9NsuM1l/db/j7l/a5hJJvkfAAAAchBz/7YwE/kfAAAAKiPm/jvCTOR/AAAAqIyY++8MM8kk/+v/6//r/+v/6//r//eS/r/+fyf6//r/g7x+/X/9f7rrt/5/zP3bw0wyyf8AAACQg5j7PxZmIv8DAABAZcTcf1eYifwPAAAAA6Xd7yGMYu7/eJhJJvlf/7/q/f+Flfr/+v/6/53Xr//fW/r/+v+d6P/r/w/y+vX/9f/prt/6/zH37wgzyST/AwAAQA5i7r87zET+BwAAgMqIuf+eMBP5HwAAACoj5v6dYSaZ5H/9/6r3//3+f/1//f9u69f/7y39f/3/TvT/B7P/H75t0f8/N/3/8aX2b+z/l+eQ/j/9qN/6/zH33xtmkkn+BwAAgBzE3P+JMBP5HwAAACoj5v5PhpnI/wAAAFAZMfd/Kswkk/yv/6//r/+v/6//r//fS/r/+v+d6P8PZv8/0v/3+//1/+mm3/r/MfffF2aSSf4HAACAHMTc/+kwE/kfAAAAKiPm/v8fZiL/AwAAQGXE3H9/mEkm+V//X/9f/1//X/9f/7+X9P/1/zvR/9f/H+T16//r/9Ndv/X/Y+7/lTCTTPI/AAAA5CDm/gfCTOR/AAAAqIyY+z8TZiL/AwAAQGXE3P+rYSaZ5H/9/3PT/x9Ot6//r/+v/6//r/9/Nun/6/8X+v8f2Pnuzw/6+vX/9f/prt/6/zH3/1qYSSb5HwAAAHIQc/+vh5nI/wAAAFAZMff/RpiJ/A8AAACVEXP/g2EmmeR//X+//1//X/9f/1//v5f0//X/O9H/1/8f5PXr/+v/012/9f9j7v/NMJNM8j8AAADkIOb+h8JM5H8AAACojJj7PxtmIv8DAABAZcTc/7kwk0zyv/6//r/+v/6//r/+fy/p/+v/d6L/r/8/yOvX/9f/p7t+6//H3P9wmEkm+R8AAAByEHP/58NM5H8AAACojJj7fyvMRP4HAACAyoi5/7fDTDLJ//r/+v/6//r/+v/6/72k/7+4/1++h53P/v+K5Wyo/78s+v/6//r/+v901m/9/5j7vxBmkkn+BwAAgBzE3P87YSbyPwAAAFRGzP2/G2Yi/wMAAEBlxNz/SJhJJvlf/1//X/9f/1//X/+/l/T//f7/TvT/9f8Hef36//r/dNdv/f+Y+78YZpJJ/gcAAIAcxNz/e2Em8j8AAABURsz9u8JM5H8AAACojJj7Hw0zyST/6//r/+v/6//r/+v/95L+v/5/J/r/+v+DvH79f/1/uuu3/n/M/bvDTDLJ/wAAAJCDmPu/FGYi/wMAAEBlxNy/J8xE/gcAAIDKiLl/b5hJJvlf/1//X/9f/1//X/+/l/T/9f870f/X/x/k9ev/6//TXb/1/2PunwkzyST/AwAAQA5i7t8XZiL/AwAAQGXE3L8/zET+BwAAgMqIuf+xMJNM8r/+v/6//r/+v/6//n8v6f/r/3ei/6//P8jr1//X/6e7fuv/x9x/IMwkk/wPAAAAOYi5/8thJvI/AAAAVEbM/V8JM5H/AQAAoDJi7j8YZpJJ/tf/1//X/9f/1//X/+8l/X/9/070//X/B3n9+v/6/3TXb/3/mPsPhZlkkv8BAAAgBzH3Hw4zkf8BAACgMmLuPxJmIv8DAABAZcTcfzTMJJP8r/+v/6//r/+v/6//30v6//r/nej/6/8P8vr1//X/6a7f+v8x9/9+mEkm+R8AAAByEHP/sTAT+R8AAAAqI+b+2TAT+R8AAAAqI+b+uTCTTPK//r/+v/6//r/+v/5/L+n/6/93ov+v/z/I69f/1/+nu37r/8fcfzzMJJP8DwAAADmIuf/xMBP5HwAAACoj5v4nwkzkfwAAAKiMmPufDDPJJP/r/+v/6/+f6v+/sr9++Xnq/9d7fv/H3l3vanZWcRx/y2SAhBCuhSvgErgGLgN3Ke7u7u7u7u7uUCiuSUmYtdaB6XTvc9529332sz6ff1bamUyfdpImv0y+2fp//b/+/0L0//r/g/7/aKfu5/f+fv2//p91o/X/ufvvHbc02f8AAADQQe7++8Qt9j8AAABMI3f/feMW+x8AAACmkbv/fnFLk/2v/9f/6/99/1//r//fkv5f/79E/6//3/P79f/6f9aN1v/n7r9/3NJk/wMAAEAHufsfELfY/wAAADCN3P0PjFvsfwAAAJhG7v4HxS1N9r/+X/+v/9f/6//1/1vS/+v/l+j/9f97fr/+X//PutH6/9z9D45bmux/AAAA6CB3/0PiFvsfAAAAppG7/6Fxi/0PAAAA08jd/7C4pcn+1//r//X/+n/9v/5/S/p//f8S/b/+f8/v1//r/1k3Wv+fu//hcUuT/Q8AAAAd5O5/RNxi/wMAAMA0cvc/Mm6x/wEAAGAaufsfFbc02f/6f/2//l//r//X/29J/6//X6L/1//v+f36f/0/6zbv/+95/X/vefv/3P3Xxy1N9j8AAAB0kLv/0XGL/Q8AAADTyN3/mLjF/gcAAIBp5O5/bNzSZP/r//X/Z/3/Tdfp//X/+v+zv6//v23o//X/S/T/o/b/5/svof/X/+v/WbN5/7/S+1/917n7Hxe3NNn/AAAA0EHu/sfHLfY/AAAATCN3/xPiFvsfAAAAppG7/4lxS5P9r//X//v+v/5f/6//35L+X/+/RP8/av/v+/+3tv+/xzner/+ng9H6/9z9T4pbmux/AAAA6CB3/5PjFvsfAAAAppG7/ylxi/0PAAAA08jd/9S4pcn+1//r//X/+n/9v/5/S/p//f8S/b/+f8/v9/1//T/rRuv/c/c/LW5psv8BAACgg9z9T49b7H8AAACYRu7+Z8Qt9j8AAABMI3f/M+OWJvtf/6//1//r/29V/39J/6//X6b/1/8v0f/r//f8fv2//p91o/X/ufufFbc02f8AAADQQe7+Z8ct9j8AAABMI3f/c+IW+x8AAACmkbv/uXFLk/2v/9f/6//1/77/r//fkv5/uv7/Ov3/Gf2//l//r/9n2Wj9f+7+58UtTfY/AAAAdJC7//lxi/0PAAAA08jd/4K4xf4HAACAaeTuf2Hc0mT/6//1//p//b/+X/+/Jf3/dP2/7///D/2//l//r/9n2Wj9f+7+F8Uta8Pv8sqPAwAAAMPI3f/iuKXJn/8DAABAB7n7XxK32P8AAAAwjdz9L41bmux//b/+X/+v/9f/6/+3pP/X/y/R/1+7/7/zLfzz9P9jvV//r/9n3Wj9f+7+l8UtTfY/AAAAdJC7/+Vxi/0PAAAA08jd/4q4xf4HAACAaeTuf2Xc0mT/31L/f+Ndrvy4/v989P/Xfr/+X/+v/9f/6//1/0v0/77/v+f36//1/6wbrf/P3f+quKXJ/gcAAIAOcve/Om6x/wEAAGAauftfE7fY/wAAADCN3P2vjVua7H/f/9f/6//1//p//f+W9P/6/yX6f/3/nt+v/9f/s260/j93/+vilib7HwAAADrI3f/6uMX+BwAAgGnk7n9D3GL/AwAAwDRy978xbmmy//X/+v+T9/930P8n/X/8vur/9f8XoP/X/x/0/0c7dT+/9/fr//X/rBut/8/d/6a4pcn+BwAAgA5y9785brH/AQAAYBq5+98St9j/AAAAMI3c/W+NW5rsf/2//v/k/b/v/xf9f/y+6v/1/xeg/9f/H/T/Rzt1P7/39+v/9f+sG63/z93/trilyf4HAACADnL3vz1usf8BAABgGrn73xG32P8AAAAwjdz974xbmux//b/+X/+v/9f/6/+3pP/X/y/R/+v/9/x+/b/+n3Wj9f+5+98VtzTZ/wAAANBB7v53xy32PwAAAEwjd/974hb7HwAAAKaRu/+9cUuT/a//33v/f68b4gX6f/2//l//PyT9v/5/if5f/7/n9+v/9f+sG63/z93/vrilyf4HAACADnL3vz9usf8BAABgGrn7PxC32P8AAAAwjdz9H4xbmuz/Hv3/5Zv9tHn6f9//1//r//X/Y9P/6/+X6P/1/3t+v/5f/8+60fr/3P0filua7H8AAADoIHf/h+MW+x8AAACmkbv/I3GL/Q8AAADTyN3/0bilyf7v0f/fXIP+P/+1bt/+/6a76f/1/0X/r/8/6P/1/yv0//r/Pb9f/6//Z91o/X/u/o/FLU32PwAAAHSQu//jcYv9DwAAANPI3f+JuMX+BwAAgGnk7v9k3HD3u57uSbcr/f+0/b/v/+v/9f/6/yHo//X/S/T/+v89v1//r/9n3Wj9f+7+T8Ut/vwfAAAAppG7/9Nxi/0PAAAA08jd/5m4xf4HAACAaeTu/2zc0mT/6//1//p//b/+X/+/Jf2//n+J/l//v+f36//1/6wbrf/P3f+5uKXJ/gcAAIAOcvd/Pm6x/wEAAGAaufu/ELfY/wAAADCN3P1fjFua7H/9v/5f/3+b9f+Xr/719f/6f/2//l//v0z/r//f8/v1//p/1o3W/+fu/1Lc0mT/AwAAQAe5+78ct9j/AAAAMI3c/V+JW+x/AAAAmEbu/q/GLU32v/5f/6//9/1//b/+f0v6f/3/Ev2//n/P79f/6/9ZN1r/n7v/a3FLk/0PAAAAHeTu/3rcYv8DAADANHL3fyNusf8BAABgGrn7vxm3NNn/M/f/Sz9N/3+F/l//f9D/6/83pv/X/y/R/+v/9/x+/b/+n3Wj9f+5+78VtzTZ/wAAANBB7v5vxy32PwAAAEwjd/934hb7HwAAAKaRu/+7cUuT/T9z/79E/3+F/l//f9D/6/83pv/X/y/R/+v/9/x+/b/+n3Wj9f+5+78XtzTZ/wAAANBB7v7vxy32PwAAAEwjd/8P4hb7HwAAAKaRu/+HcUuT/a//1//r//X/+n/9/5b0//r/Jfp//f+e36//1/+zbrT+P3f/j+KWJvsfAAAAOsjd/+O4xf4HAACAaeTu/0ncYv8DAADANHL3/zRuabL/9f/6f/3/UP3/Ha/+dfT/+n/9/zL9v/7/oP8/2qn7+b2/X/+v/2fdaP1/7v6fxS1N9j8AAAB0kLv/53GL/Q8AAADTyN3/i7jF/gcAAIBp5O7/ZdzSZP/r//X/+v+j+/9LB9///7/36P/1/9ei/9f/L9H/6//3/H79v/6fdaP1/7n7fxW3NNn/AAAA0EHu/l/HLfY/AAAATCN3/2/iFvsfAAAAppG7/7dxS5P9r//X/+v/h/r+v/5f/6//vyD9v/7/oP8/2qn7+b2/X/+v/2fdaP1/7v4b4pYm+x8AAAA6yN3/u7jF/gcAAIBp5O7/fdxi/wMAAMA0cvffGLc02f/6f/3/lP3/nfT/+n/9/yj0//r/Jfp//f+e36//1/+zbrT+P3f/H+KWJvsfAAAAOsjd/8e4xf4HAACAaeTu/1PcYv8DAADANHL3/zluabL/9f/6/yn7f9//1//vrf+/dPY/YP3/xej/9f8H/f/RTt3P7/39+n/9P+tG6/9z9/8lbmmy/wEAAKCD3P1/jVvsfwAAAJhG7v6/xS32PwAAAEwjd//f45Ym+1//r//X/+v/9f8D9P++/380/b/+/6D/P9qp+/m9v1//r/9n3Wj9f+7+f8QtTfY/AAAAdJC7/59xi/0PAAAA08jd/6+4xf4HAACAaeTu/3fc0mT/6//1//p//b/+X/+/Jf2//n+J/l//v+f36//1/6wbrf/P3f+fAAAA//9nkS0F")
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xe9)
getdents(r4, 0xfffffffffffffffd, 0xbb)
sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)
r5 = syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f00000003c0)={{0x12, 0x1, 0x110, 0xff, 0xff, 0x0, 0x40, 0xbda, 0x8150, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x5, 0x80, 0x0, "", {{0x9, 0x4, 0x0, 0x7f, 0x3, 0xff, 0x11, 0x1, 0x5, "", {{0x9, 0x5, 0x81, 0x2, 0x40, 0x6, 0x9, 0x4}, {0x9, 0x5, 0x2, 0x2, 0x20, 0x2, 0x57, 0x6e}, {0x9, 0x5, 0x83, 0x3, 0x240, 0x3, 0x82, 0x8}}}}}}]}}, 0x0)
syz_usb_control_io$rtl8150(r5, &(0x7f0000000580)={0x14, 0x0, &(0x7f0000000480)={0x0, 0x3, 0x3}}, 0x0)
syz_usb_control_io$rtl8150(r5, &(0x7f0000002980)={0x14, 0x0, &(0x7f00000028c0)={0x0, 0x3, 0x3}}, 0x0)
syz_usb_control_io$rtl8150(r5, 0x0, 0x0)
syz_usb_control_io$rtl8150(r5, 0x0, &(0x7f0000004280)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004240)=ANY=[@ANYBLOB='\x00\t\x00\x00\a\x00\x00\x00']})

1.297170764s ago: executing program 1 (id=1549):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x55}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000}, 0x50)

1.225704307s ago: executing program 1 (id=1550):
r0 = socket$inet6(0xa, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
syz_mount_image$exfat(&(0x7f00000024c0), &(0x7f0000001540)='./file0\x00', 0x20010080, &(0x7f0000000440)=ANY=[], 0xfe, 0x14ee, &(0x7f0000002a80)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000440)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
unshare(0x2c020400)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000200000109022400010000000009040000010300000009210000000122050009058103"], 0x0)
writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06", 0x11}], 0x1)
syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x7}, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000004500)={0x24, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000300)={0x24, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000312"], 0x0, 0x0}, 0x0)
r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/cgroup\x00')
ioctl$NS_GET_OWNER_UID(r2, 0xb704, 0x0)
rmdir(&(0x7f00000008c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./bus/file0\x00', 0x80008, 0x0, 0x0, 0x0, &(0x7f0000000000))
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r3)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
close(r3)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000000)=0xff, 0x4)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@mcast2, 0x300, 0x0, 0x3, 0x9, 0x0, 0x4}, 0x20)

1.124138189s ago: executing program 4 (id=1551):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x101880a, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1, 0x550b, &(0x7f00000079c0)="$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")
r0 = syz_open_dev$loop(&(0x7f0000000500), 0xee8, 0x5042)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_wakeup_irq', 0x20940, 0x1e2)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000140)={r1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7ffc, 0x0, 0x0, 0x5, 0xc, "c44ef9682a689185ff07ec0f9eddd770e010a8b62022fd106fa715e63fee8ab07f3c19ed0c04afcaba06f6d9584488da0162d4cc7030ec4f7b9ab89b3e192e4a", "8b4575aabbbbe9b9489ea78d43a12e12538b330e6fe3bce7391939341700dc6c58f0abd4f0c29b3c71756374bc429c08000000cda4584203143a0b9705fb16b6", "666f1d5f5c43005b310134ce9a6d0369862b72c1f9f4980a2346c4dd62ad8050", [0x6, 0x61fe]}})
r2 = syz_open_dev$dvb_demux(&(0x7f0000000040), 0x2, 0x0)
ioctl$DVB_DEMUX_DMX_SET_BUFFER_SIZE(r2, 0x6f2d, 0x10000000000002)
quotactl$Q_QUOTAON(0xffffffff80000101, &(0x7f0000000140)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)

1.10841162s ago: executing program 3 (id=1552):
syz_open_dev$video(&(0x7f0000000100), 0x49, 0x0)
r0 = syz_open_dev$sg(&(0x7f00000000c0), 0x6f5e, 0x0)
capset(0x0, 0x0)
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85)
socket$nl_generic(0x10, 0x3, 0x10)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f000001fa80), 0x2, 0x300)
syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES8=r1, @ANYBLOB="06"], 0x0)

605.278444ms ago: executing program 5 (id=1553):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
syz_mount_image$xfs(&(0x7f0000000280), &(0x7f0000009740)='./file1\x00', 0x8, &(0x7f0000009780), 0x1, 0x9798, &(0x7f0000016540)="$eJzs3QWcbXXBeP25cOkOlVREFExKykC6REQaBOmSFJBSBMQCRDFQEOnu7u7u7u7uhvdz4RLi4qrP+/zFx7XWh5lTe878zu+792bO7LnnLDXPonMMDIw98FZvn77bziuNc9AWAwudsd/G99y+8stfOG3o1SO+dTLObENPZx96OsfAwMCgofcz6K3rBs967HHDDQweGPLfu40+yqjDjT4wMOrQi0PvZ2Cmt05G2//t5d54XzzQyYZ8u+3e+nizMYbcyZsDXWH2CQYGBkZ+z9cPGdc0f/dApS01+7zzvGv1jttwQ28e9O5tb54OfutjtL0HBkbbc+CD148hy47wnq/9dzbke4596yYrPfghfO//cy01+7zzv89/yLY4/NDrZhqyjb9/GzT2/vV8tQtvXWHoFA4aOnGD37O9fBjr/f+opWafZ8GBD96OBw69Z8bT3nhzvzl4roGBwXMPDAyeZ2Bg8Lwftkf97/ShrnxVVVX1oTT7HNMPec4+3Pt+Hhj57Z9r6efCC5585uaBgcELvfU8cfAKbz8XrKqqqqqqqqr/zGafY/o54fn/2MN6/j/1CfNM3fP/qqqqqqqqqv87zT/7HNMPea7/vuf/Ewzr+f8b96+361t/+z/bTG991esf7oOoqqqqqqqqqmE2z/z4/H+yYT3/P+/Eu5/s+X9VVVVVVVXV/50WmX6eOQfe8zp7Q6+e6u3b6fn/0Y9MsvKHNd6qqqqqqqqq+td7/bGTT3/3Nd8/PvC+13t/s6G/Fxh05JlXXvmhDfQ/o0F///uQrT7sMf3/bYjzyAdPNjCw7uIf9lDqQ+j/zGvV1/+T8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/cR9w/P+d1/+fcPWxHxi66JQn7vjEOu9+5Zvv/T94ofkf2/pDGvqH0X/r8f+BNQcNDAz1HXvNgYGBhWZfZLGpBgYG1nlixxOnGHjntpmH3PbVcYd/8w3i3/5nInOPw3e81eRvnQ5ZUQbGf+c+jnzz/ud/Y6/hB71vEO9pnOP322+NpV748vtPp/zgxzHc22eWPGuHPd7+tyzDvW+hkT/gi9++/7cfy/udh459qiFjn3qjddafesPNNv/imuusuPqqq6+67vTTzTDtNDNOO8s0M0y92pprrzrNW58/YM4me/PznP/MnI3+/jl7bPb3ztn7H9sHzdlkw56zN+9x+AtOGOftORv8L87ZnMOes8nWHPqNxplthIEV3pyaQQMD48w1wsCmQy5MO9LAwDhzD112giHLfm3c4QYGdnz3gQ45N9I76+CgrYYss9Q8i87x1m5qYODd03f7gPezH3HoyGcbejr70NM53vo2Yw+8uyoOnvXY44YbMhd/Mx2jjzLqcKMPDIw69OLQ+xmY5a2TUU95e7kPeJ/19w30zZdZ2e6tjzcbY2BgYLQhZ+ZacdAzQ6b+3/A+7f+j////ndfMg95ZHwcN/Ri6zFtes887/7vf681pGDJ3ww+9bqYhJv/Lb23/N/3deCcbeWCyYYx3GK+L82a0fq18/A2n/m+9Lg6Nd4JhjHcYr+P7geNd+sFlbnjrrv7Xxvu+fd2Cb36e7Z/Z1w0Me183PN3BqpdN+v593Tc/eIh/s7t8e45Get9CH7SvW3imy7cacv+zDXtft+CQsY/wN/u64QYGxpnz7X3dkB3fPCMM7DjkwnRDLsw7wsCBQy5M/+aFUQbOHHLhSyuvt/YqQ66Y7+/Xg6kG/c0faMJ2Ns/7trNB73nsg973952D3zodbe+338PpA/abg4Y+rH+4r6D1duxhjHcY7z+F8zzkurVOu/jz/1vvP0XjHXnY4/2g98v+wPFu8/KWt/8vj/ed7WyE90zXfP/MdjbZ325nQx7i8O/ZMv7Zn8NWgeXfOj/BO/e2y1hHvvMzxQjvu99/9DPFfMPezsZe831ft+2eA4OGNTfz/jNzM8nf7YO2fu/c/LM/b031qbduH34Yc3PlwHJbvj03I/6LczPvvzo3sw0M/7dzM3hg7oGBgSmG7h/m+WfmZoJhz80/u96MCsu/dX7Vd66aa5JLP/n23Lx/Lv7R3Mzzr87NZO+sN1O8edvkww2MOOLApitutNEG0771+e2L0731edjb4Fz/zFyO/b8zlxMN/qC5fHdV3Wm+5bb9B9vg3+3T377/uf7VuRx4Zy4H1nz/xlL/qfX7P3f5u8vfXf7u8neXv7v8xX3A8f93Xv9/4V3OnHHoLzdGmPiOK8b7sMf7Ifdfffx/qO/fHP8f74o7Jh5u4J3bhnl89q1l/iOPz8701slo+7+93PuPD/JAP/j47MuzbP/0v+n47P+ot7fVf+L3cO3/3eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/uI+4Pj/NG//HcAFlx697NADoSO8cdMlC3zY4/2Q+68+/j/U92+O/y9wyU1vDDfwzm3DPP7/1jKO4/8nvvLyy//Jx//f3lY7/l//oPzd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvLX9wHHP+f7e2/A5jlvAuWf/vvAS66/ZFJPuzxfsj9tx7/7/3/vbX/d5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+Ysbevx/4H1vb7lw6wUGx///b/cB/t/JH7P4L5I/ZvFfNH/M4r9Y/pjFf/H8MYv/EvljFv8l88cs/kvlj1n8l84fs/gvkz9m8f9u/pjFf9n8MYv/cvljFv/v5Y9Z/JfPH7P4r5A/ZvFfMX/M4r9S/pjFf+X8MYv/KvljFv9V88cs/qvlj1n8V88fs/ivkT9m8V8zf8zi//38MYv/WvljFv+188cs/uvkj1n8180fs/ivlz9m8V8/f8zi/4P8MYv/BvljFv8N88cs/hvlj1n8f5g/ZvHfOH/M4r9J/pjFf9P8MYv/ZvljFv/N88cs/j/KH7P4/zh/zOK/Rf6Yxf8n+WMW/y3zxyz+W+WPWfy3zh+z+P80f8ziv03+mMX/Z/ljFv+f549Z/H+RP2bx/2X+mMX/V8P2H/z/elj/qVn8t237xyz+2+WPWfy3zx+z+P86f8ziv0P+mMX/N/ljFv/f5o9Z/HfMH7P4/y5/zOL/+/wxi/8f8scs/n/MH7P475Q/ZvH/U/6Yxf/P+WMW/53zxyz+u+SPWfz/kj9m8d81f8zi/9f8MYv/bvljFv/d88cs/nvkj1n898wfs/jvlT9m8d87f8ziv0/+mMV/3/wxi/9++WMW//3zxyz+B+SPWfwPzB+z+B+UP2bxPzh/zOJ/SP6Yxf/Q/DGL/2H5Yxb/w/PHLP5H5I9Z/I/MH7P4H5U/ZvE/On/M4n9M/pjF/9j8MYv/cfljFv/j88cs/ifkj1n8T5T6b/0Pbrf4nyT1/0dZ/E/OH7P4n5I/ZvE/NX/M4n9a/pjF//T8MYv/GfljFv8z88cs/mflj1n8z84fs/ifkz9m8T9X7f/Bj9zif57a/4Oz+J+fP2bxvyB/zOJ/Yf6Yxf+i/DGL/8X5Yxb/S/LHLP6X5o9Z/C/LH7P4X54/ZvG/In/M4n9l/pjF/6r8MYv/1fljFv9r8scs/tfmj1n8r8sfs/hfnz9m8b8hf8zif2P+mMX/pvwxi//N+WMW/1vyxyz+t+aPWfxvyx+z+N+eP2bxvyN/zOJ/Z/6Yxf+u/DGL/935Yxb/e/LHLP735o9Z/O/LH7P4358/ZvF/IH/M4v9g/pjF/6H8MYv/w/ljFv9H8scs/o/mj1n8H8sfs/g/nj9m8X8if8zi/2T+mMX/qfwxi//T+WMW/2fyxyz+z+aPWfyfyx+z+D+fP2bxfyF/zOL/Yv6Yxf+l/DGL/8v5Yxb/V/LHLP6v5o9Z/F/LH7P4v54/ZvF/I39M4j9oIH/M4j8of8ziP1z+mMV/+Pwxi//g/DGL/wj5Yxb/EfPHLP4j5Y9Z/EfOH7P4j5I/ZvEfNX/M4j9a/pjFf/T8MYv/GPljFv8x88cs/mPlj1n8x84fs/iPkz9m8R83f8ziP17+mMV//Pwxi/9H8scs/h/NH7P4fyx/zOI/Qf6YxX/C/DGL/0T5Yxb/ifPHLP6T5I9Z/CfNH7P4fzx/zOL/ifwxi/9k+WMW/0/mj1n8J88fs/h/Kn/M4j9F/pjF/9P5Yxb/z+SPWfynzB+z+E+VP2bx/2z+mMX/c/ljFv/P549Z/L+QP2bx/2L+mMX/S/ljFv+p88cs/tPkj1n8p80fs/hPlz9m8Z8+f8zi/+X8MYv/DPljFv8Z88cs/jPlj1n8Z84fs/jPkj9m8f9K/pjF/6v5Yxb/r+WPWfy/nj9m8Z81f8zi/438MYv/bPljFv/Z88cs/nPkj1n858wfs/jPlT9m8Z87f8ziP0/+mMV/3vwxi/98+WMW//nzxyz+C+SPWfy/mT9m8V8wf8zi/638MYv/QvljFv9v549Z/BfOH7P4fyd/zOK/SP6YxX/R/DGL/2L5Yxb/xfPHLP5L5I9Z/JfMH7P4L5U/ZvFfOn/M4r9M/pjF/7v5Yxb/ZfPHLP7L5Y9Z/L+XP2bxXz5/zOK/Qv6YxX/F/DGL/0r5Yxb/lfPHLP6r5I9Z/FfNH7P4r5Y/ZvFfPX/M4r9G/pjFf838MYv/9/PHLP5r5Y9Z/NfOH7P4r5M/ZvFfN3/M4r9e/pjFf/38MYv/D/LHLP4b5I9Z/DfMH7P4b5Q/ZvH/Yf6YxX/j/DGL/yb5Yxb/TfPHLP6b5Y9Z/DfPH7P4/yh/zOL/4/wxi/8W+WMW/5/kj1n8t8wfs/hvlT9m8d86f8zi/9P8MYv/NvljFv+f5Y9Z/H+eP2bx/0X+mMX/l/ljFv9f5Y9Z/LfNH7P4b5c/ZvHfPn/M4v/r/DGL/w75Yxb/3+SPWfx/mz9m8d8xf8zi/7v8MYv/7/PHLP5/yB+z+P8xf8ziv1P+mMX/T/ljFv8/549Z/HfOH7P475I/ZvH/S/6YxX/X/DGL/1/zxyz+u+WPWfx3zx+z+O+RP2bx3zN/zOK/V/6YxX/v/DGL/z75Yxb/ffPHLP775Y9Z/PfPH7P4H5A/ZvE/MH/M4n9Q/pjF/+D8MYv/IfljFv9D88cs/oflj1n8D88fs/gfkT9m8T8yf8zif1T+mMX/6Pwxi/8x+WMW/2Pzxyz+x+WPWfyPzx+z+J+QP2bxPzF/zOJ/Uv6Yxf/k/DGL/yn5Yxb/U/PHLP6n5Y9Z/E/PH7P4n5E/ZvE/M3/M4n9W/pjF/+z8MYv/OfljFv9z88cs/uflj1n8z88fs/hfkD9m8b8wf8zif1H+mMX/4vwxi/8l+WMW/0vzxyz+l+WPWfwvzx+z+F+RP2bxvzJ/zOJ/Vf6Yxf/q/DGL/zX5Yxb/a/PHLP7X5Y9Z/K/PH7P435A/ZvG/MX/M4n9T/pjF/+b8MYv/LfljFv9b88cs/rflj1n8b88fs/jfkT9m8b8zf8zif1f+mMX/7vwxi/89+WMW/3vzxyz+9+WPWfzvzx+z+D+QP2bxfzB/zOL/UP6Yxf/h/DGL/yP5Yxb/R/PHLP6P5Y9Z/B/PH7P4P5E/ZvF/Mn/M4v9U/pjF/+n8MYv/M/ljFv9n88cs/s/lj1n8n88fs/i/kD9m8X8xf8zi/1L+mMX/5fwxi/8r+WMW/1fzxyz+r+WPWfxfzx+z+L+RPybxf/Ns/n+fxX9Q/pjFf7j8MYv/8PljFv/B+WMW/xHyxyz+I+aPWfxHyh+z+I+cP2bxHyV/zOI/av6YxX+0/DGL/+j5Yxb/MfLHLP5j5o9Z/MfKH7P4j50/ZvEfJ3/M4j9u/pjFf7z8MYv/+PljFv+P5I9Z/D+aP2bx/1j+mMV/gvwxi/+E+WMW/4nyxyz+E+ePWfwnyR+z+E+aP2bx/3j+mMX/E/ljFv/J8scs/p/MH7P4T54/ZvH/VP6YxX+K/DGL/6fzxyz+n8kfs/hPmT9m8Z8qf8zi/9n8MYv/5/LHLP6fzx+z+H8hf8zi/8X8MYv/l/LHLP5T549Z/KfJH7P4T5s/ZvGfLn/M4j99/pjF/8v5Yxb/GfLHLP4z5o9Z/GfKH7P4z5w/ZvGfJX/M4v+V/DGL/1fzxyz+X8sfs/h/PX/M4j9r/pjF/xv5Yxb/2fLHLP6z549Z/OfIH7P4z5k/ZvGfK3/M4j93/pjFf578MYv/vPljFv/58scs/vPnj1n8F8gfs/h/M3/M4r9g/pjF/1v5Yxb/hfLHLP7fzh+z+C+cP2bx/07+mMV/kfwxi/+i+WMW/8Xyxyz+i+ePWfyXyB+z+C+ZP2bxXyp/zOK/dP6YxX+Z/DGL/3fzxyz+y+aPWfyXyx+z+H8vf8ziv3z+mMV/hfwxi/+K+WMW/5Xyxyz+K+ePWfxXyR+z+K+aP2bxXy1/zOK/ev6YxX+N/DGL/5r5Yxb/7+ePWfzXyh+z+K+dP2bxXyd/zOK/bv6YxX+9/DGL//r5Yxb/H+SPWfw3yB+z+G+YP2bx3yh/zOL/w/wxi//G+WMW/03yxyz+m+aPWfw3yx+z+G+eP2bx/1H+mMX/x/ljFv8t8scs/j/JH7P4b5k/ZvHfKn/M4r91/pjF/6f5Yxb/bfLHLP4/yx+z+P88f8zi/4v8MYv/L/PHLP6/yh+z+G+bP2bx3y5/zOK/ff6Yxf/X+WMW/x3yxyz+v8kfs/j/Nn/M4r9j/pjF/3f5Yxb/3+ePWfz/kD9m8f9j/pjFf6f8MYv/n/LHLP5/zh+z+O+cP2bx3yV/zOL/l/wxi/+u+WMW/7/mj1n8d8sfs/jvnj9m8d8jf8ziv2f+mMV/r/wxi//e+WMW/33yxyz+++aPWfz3yx+z+O+fP2bxPyB/zOJ/YP6Yxf+g/DGL/8H5Yxb/Q/LHLP6H5o9Z/A/LH7P4H54/ZvE/In/M4n9k/pjF/6j8MYv/0fljFv9j8scs/sfmj1n8j8sfs/gfnz9m8T8hf8zif2L+mMX/pPwxi//J+WMW/1Pyxyz+p+aPWfxPyx+z+J+eP2bxPyN/zOJ/Zv6Yxf+s/DGL/9n5Yxb/c/LHLP7n5o9Z/M/LH7P4n58/ZvG/IH/M4n9h/pjF/6L8MYv/xfljFv9L8scs/pfmj1n8L8sfs/hfnj9m8b8if8zif2X+mMX/qvwxi//V+WMW/2vyxyz+1+aPWfyvyx+z+F+fP2bxvyF/zOJ/Y/6Yxf+m/DGL/835Yxb/W/LHLP635o9Z/G/LH7P4354/ZvG/I3/M4n9n/pjF/678MYv/3fljFv978scs/vfmj1n878sfs/jfnz9m8X8gf8zi/2D+mMX/ofwxi//D+WMW/0fyxyz+j+aPWfwfyx+z+D+eP2bxfyJ/zOL/ZP6Yxf+p/DGL/9P5Yxb/Z/LHLP7P5o9Z/J/LH7P4P58/ZvF/IX/M4v9i/pjF/6X8MYv/y/ljFv9X8scs/q/mj1n8X8sfs/i/nj9m8X8jf0ziP/xA/pjFf1D+mMV/uPwxi//w+WMW/8H5Yxb/EfLHLP4j5o9Z/EfKH7P4j5w/ZvEfJX/M4j9q/pjFf7T8MYv/6PljFv8x8scs/mPmj1n8x8ofs/iPnT9m8R8nf8ziP27+mMV/vPwxi//4+WMW/4/kj1n8P5o/ZvH/WP6YxX+C/DGL/4T5Yxb/ifLHLP4T549Z/CfJH7P4T5o/ZvH/eP6Yxf8T+WMW/8nyxyz+n8wfs/hPnj9m8f9U/pjFf4r8MYv/p/PHLP6fyR+z+E+ZP2bxnyp/zOL/2fwxi//n8scs/p/PH7P4fyF/zOL/xfwxi/+X8scs/lPnj1n8p8kfs/hPmz9m8Z8uf8ziP33+mMX/y/ljFv8Z8scs/jPmj1n8Z8ofs/jPnD9m8Z8lf8zi/5X8MYv/V/PHLP5fyx+z+H89f8ziP2v+mMX/G/ljFv/Z8scs/rPnj1n858gfs/jPmT9m8Z8rf8ziP3f+mMV/nvwxi/+8+WMW//nyxyz+8+ePWfwXyB+z+H8zf8ziv2D+mMX/W3r/kfFai/9Cen/O4v/t/DGL/8L5Yxb/7+SPWfwXyR+z+C+aP2bxXyx/zOK/eP6YxX+J/DGL/5L5Yxb/pfLHLP5L549Z/JfJH7P4fzd/zOK/bP6YxX+5/DGL//fyxyz+y+ePWfxXyB+z+K+YP2bxXyl/zOK/cv6YxX+V/DGL/6r5Yxb/1fLHLP6r549Z/NfIH7P4r5k/ZvH/fv6YxX+t/DGL/9r5Yxb/dfLHLP7r5o9Z/NfLH7P4r58/ZvH/Qf6YxX+D/DGL/4b5Yxb/jfLHLP4/zB+z+G+cP2bx3yR/zOK/af6YxX+z/DGL/+b5Yxb/H+WPWfx/nD9m8d8if8zi/5P8MYv/lvljFv+t8scs/lvnj1n8f5o/ZvHfJn/M4v+z/DGL/8/zxyz+v8gfs/j/Mn/M4v+r/DGL/7b5Yxb/7fLHLP7b549Z/H+dP2bx3yF/zOL/m/wxi/9v88cs/jvmj1n8f5c/ZvH/ff6Yxf8P+WMW/z/mj1n8d8ofs/j/KX/M4v/n/DGL/875Yxb/XfLHLP5/yR+z+O+aP2bx/2v+mMV/t/wxi//u+WMW/z3yxyz+e+aPWfz3yh+z+O+dP2bx3yd/zOK/b/6YxX+//DGL//75Yxb/A/LHLP4H5o9Z/A/KH7P4H5w/ZvE/JH/M4n9o/pjF/7D8MYv/4fljFv8j8scs/kfmj1n8j8ofs/gfnT9m8T8mf8zif2z+mMX/uPwxi//x+WMW/xPyxyz+J+aPWfxPyh+z+J+cP2bxPyV/zOJ/av6Yxf+0/DGL/+n5Yxb/M/LHLP5n5o9Z/M/KH7P4n50/ZvE/J3/M4n9u/pjF/7z8MYv/+fljFv8L8scs/hfmj1n8L8ofs/hfnD9m8b8kf8zif2n+mMX/svwxi//l+WMW/yvyxyz+V+aPWfyvyh+z+F+dP2bxvyZ/zOJ/bf6Yxf+6/DGL//X5Yxb/G/LHLP435o9Z/G/KH7P435w/ZvG/JX/M4n9r/pjF/7b8MYv/7fljFv878scs/nfmj1n878ofs/jfnT9m8b8nf8zif2/+mMX/vvwxi//9+WMW/wfyxyz+D+aPWfwfyh+z+D8s9h9hGLdZ/B8R+w8ri/+j+WMW/8fyxyz+j+ePWfyfyB+z+D+ZP2bxfyp/zOL/dP6Yxf+Z/DGL/7P5Yxb/5/LHLP7P549Z/F/IH7P4v5g/ZvF/KX/M4v9y/pjF/5X8MYv/q/ljFv/X8scs/q/nj1n838gfk/gPHsgfs/gPyh+z+A+XP2bxHz5/zOI/OH/M4j9C/pjFf8T8MYv/SPljFv+R88cs/qPkj1n8R80fs/iPlj9m8R89f8ziP0b+mMV/zPwxi/9Y+WMW/7Hzxyz+4+SPWfzHzR+z+I+XP2bxHz9/zOL/kfwxi/9H88cs/h/LH7P4T5A/ZvGfMH/M4j9R/pjFf+L8MYv/JPljFv9J88cs/h/PH7P4fyJ/zOI/Wf6Yxf+T+WMW/8nzxyz+n8ofs/hPkT9m8f90/pjF/zP5Yxb/KfPHLP5T5Y9Z/D+bP2bx/1z+mMX/8/ljFv8v5I9Z/L+YP2bx/1L+mMV/6vwxi/80+WMW/2nzxyz+0+WPWfynzx+z+H85f8ziP0P+mMV/xvwxi/9M+WMW/5nzxyz+s+SPWfy/kj9m8f9q/pjF/2v5Yxb/r+ePWfxnzR+z+H8jf8ziP1v+mMV/9vwxi/8c+WMW/znzxyz+c+WPWfznzh+z+M+TP2bxnzd/zOI/X/6YxX/+/DGL/wL5Yxb/b+aPWfwXzB+z+H8rf8ziv1D+mMX/2/ljFv+F88cs/t/JH7P4L5I/ZvFfNH/M4r9Y/pjFf/H8MYv/EvljFv8l88cs/kvlj1n8l84fs/gvkz9m8f9u/pjFf9n8MYv/cvljFv/v5Y9Z/JfPH7P4r5A/ZvFfMX/M4r/SB/lv+W8a139oFv+V2/4xi/8q+WMW/1Xzxyz+q+WPWfxXzx+z+K+RP2bxXzN/zOL//fwxi/9a+WMW/7Xzf7f3TIzFf538MYv/uvljFv/18scs/uvnj1n8f5A/ZvHfIH/M4r9h/pjFf6P8MYv/D/PHLP4b549Z/DfJH7P4b5o/ZvHfLH/M4r95/pjF/0f5Yxb/H+ePWfy3yB+z+P8kf8ziv2X+mMV/q/wxi//W+WMW/5/mj1n8t8kfs/j/LH/M4v/z/DGL/y/yxyz+v8wfs/j/Kn/M4r9t/pjFf7v8MYv/9vljFv9f549Z/HfIH7P4/yZ/zOL/2/wxi/+O+WMW/9/lj1n8f58/ZvH/Q/6Yxf+P+WMW/53yxyz+f8ofs/j/OX/M4r9z/pjFf5f8MYv/X/LHLP675o9Z/P+aP2bx3y1/zOK/e/6YxX+P/DGL/575Yxb/vfLHLP57549Z/PfJH7P475s/ZvHfL3/M4r9//pjF/4D8MYv/gfljFv+D8scs/gfnj1n8D8kfs/gfmj/m8B88cFj+mMN/YPDh+WMW/yPyxyz+R+aPWfyPyh+z+B+dP2bxPyZ/zOJ/bP6Yxf+4/DGL//H5Yxb/E/LHLP4n5o9Z/E/KH7P4n5w/ZvE/JX/M4n9q/pjF/7T8MYv/6fljFv8z8scs/mfmj1n8z8ofs/ifnT9m8T8nf8zif27+mMX/vPwxi//5+WMW/wvyxyz+F+aPWfwvyh+z+F+cP2bxvyR/zOJ/af6Yxf+y/DGL/+X5Yxb/K/LHLP5X5o9Z/K/KH7P4X50/ZvG/Jn/M4n9t/pjF/7r8MYv/9fljFv8b8scs/jfmj1n8b8ofs/jfnD9m8b8lf8zif2v+mMX/tvwxi//t+WMW/zvyxyz+d+aPWfzvyh+z+N+dP2bxvyd/zOJ/b/6Yxf++/DGL//35Yxb/B/LHLP4P5o9Z/B/KH7P4P2z0H7TVP15E4v+I0f+fyOL/aP6Yxf+x/DGL/+P5Yxb/J/LHLP5P5o9Z/J/KH7P4P50/ZvF/Jn/M4v9s/pjF/7n8sf9G/yWGnn2v//P5Y/+N/rT9v5A/ZvF/MX/M4v9S/pjF/+X8MYv/K/ljFv9X88cs/q/lj1n8X88fs/i/kT8m8R9hIH/M4j8of8ziP1z+mMV/+Pwxi//g/DGL/wj5Yxb/EfPHLP4j5Y9Z/EfOH7P4j5I/ZvEfNX/M4j9a/pjFf/T8MYv/GPljFv8x88cs/mPlj1n8x84fs/iPkz9m8R83f8ziP17+mMV//Pwxi/9H8scs/h/NH7P4fyx/zOI/Qf6YxX/C/DGL/0T5Yxb/ifPHLP6T5I9Z/CfNH7P4fzx/zOL/ifwxi/9k+WMW/0/mj1n8J88fs/h/Kn/M4j9F/pjF/9P5Yxb/z+SPWfynzB+z+E+VP2bx/2z+mMX/c/ljFv/P549Z/L+QP2bx/2L+mMX/S/ljFv+p88cs/tPkj1n8p80fs/hPlz9m8Z8+f8zi/+X8MYv/DPljFv8Z88cs/jPlj1n8Z84fs/jPkj9m8f9K/pjF/6v5Yxb/r+WPWfy/nj9m8Z81f8zi/438MYv/bPljFv/Z88cs/nPkj1n858wfs/jPlT9m8Z87f8ziP0/+mMV/3vwxi/98+WMW//nzxyz+C+SPWfy/mT9m8V8wf8zi/638MYv/QvljFv9v549Z/BfOH7P4fyd/zOK/SP6YxX/R/DGL/2L5Yxb/xfPHLP5L5I9Z/JfMH7P4L5U/ZvFfOn/M4r9M/pjF/7v5Yxb/ZfPHLP7L5Y9Z/L+XP2bxXz5/zOK/Qv6YxX/F/DGL/0r5Yxb/lfPHLP6r5I9Z/FfNH7P4r5Y/ZvFfPX/M4r9G/pjFf838MYv/9/PHLP5r5Y9Z/NfOH7P4r5M/ZvFfN3/M4r9e/pjFf/38MYv/D/LHLP4b5I9Z/DfMH7P4b5Q/ZvH/Yf6YxX/j/DGL/yb5Yxb/TfPHLP6b5Y9Z/DfPH7P4/yh/zOL/4/wxi/8W+WMW/5/kj1n8t8wfs/hvlT9m8d86f8zi/9P8MYv/NvljFv+f5Y9Z/H+eP2bx/0X+mMX/l/ljFv9f5Y9Z/LfNH7P4b5c/ZvHfPn/M4v/r/DGL/w75Yxb/3+SPWfx/mz9m8d8xf8zi/7v8MYv/7/PHLP5/yB+z+P8xf8ziv1P+mMX/T/ljFv8/549Z/HfOH7P475I/ZvH/S/6YxX/X/DGL/1/zxyz+u+WPWfx3zx+z+O+RP2bx3zN/zOK/V/6YxX/v/DGL/z75Yxb/ffPHLP775Y9Z/PfPH7P4H5A/ZvE/MH/M4n9Q/pjF/+D8MYv/IfljFv9D88cs/oflj1n8D88fs/gfkT9m8T8yf8zif1T+mMX/6Pwxi/8x+WMW/2Pzxyz+x+WPWfyPzx+z+J+QP2bxPzF/zOJ/Uv6Yxf/k/DGL/yn5Yxb/U/PHLP6n5Y9Z/E/PH7P4n5E/ZvE/M3/M4n9W/pjF/+z8MYv/OfljFv9z88cs/uflj1n8z88fs/hfkD/2pv/r//3+F+aPWbb/i/LHLP4X549Z/C/JH7P4X5o/ZvG/LH/M4n95/pjF/4r8MYv/lfljFv+r8scs/lfnj1n8r8kfs/hfmz9m8b8uf8zif33+mMX/hvwxi/+N+WMW/5vyxyz+N+ePWfxvyR+z+N+aP2bxvy1/zOJ/e/6Yxf+O/DGL/535Yxb/u/LHLP53549Z/O/JH7P435s/ZvG/L3/M4n9//pjF/4H8MYv/g/ljFv+H8scs/g/nj1n8H8kfs/g/mj9m8X8sf8zi/3j+mMX/ifwxi/+T+WMW/6fyxyz+T+ePWfyfyR+z+D+bP2bxfy5/zOL/fP6Yxf+F/DGL/4v5Yxb/l/LHLP4v549Z/F/JH7P4v5o/ZvF/LX/M4v96/pjF/438MYn/iAP5Yxb/QfljFv/h8scs/sPnj1n8B+ePWfxHyB+z+I+YP2bxHyl/zOI/cv6YxX+U/DGL/6j5Yxb/0fLH/kv9Bw0MbPU3/qPnj/2X+r/Ze/3HyB+z+I+ZP2bxHyt/zOI/dv6YxX+c/DGL/7j5Yxb/8fLHLP7j549Z/D+SP2bx/2j+mMX/Y/ljFv8J8scs/hPmj1n8J8ofs/hPnD9m8Z8kf8ziP2n+mMX/4/ljFv9P5I9Z/CfLH7P4fzJ/zOI/ef6Yxf9T+WMW/ynyxyz+n84fs/h/Jn/M4j9l/pjFf6r8MYv/Z/PHLP6fyx+z+H8+f8zi/4X8MYv/F/PHLP5fyh+z+E+dP2bxnyZ/zOI/bf6YxX+6/DGL//T5Yxb/L+ePWfxnyB+z+M+YP2bxnyl/zOI/c/6YxX+W/DGL/1fyxyz+X80fs/h/LX/M4v/1/DGL/6z5Yxb/b+SPWfxnyx+z+M+eP2bxnyN/zOI/Z/6YxX+u/DGL/9z5Yxb/efLHLP7z5o9Z/OfLH7P4z58/ZvFfIH/M4v/N/DGL/4L5Yxb/b+WPWfwXyh+z+H87f8ziv3D+mMX/O/ljFv9F8scs/ovmj1n8F8sfs/gvnj9m8V8if8ziv2T+mMV/qfwxi//S+WMW/2Xyxyz+380fs/gvmz9m8V8uf8zi/738MYv/8vljFv8V8scs/ivmj1n8V8ofs/ivnD9m8V8lf8ziv2r+mMV/tfwxi//q+WMW/zXyxyz+a+aPWfy/nz9m8V8rf8ziv3b+mMV/nfwxi/+6+WMW//Xyxyz+6+ePWfx/kD9m8d8gf8ziv2H+mMV/o/wxi/8P88cs/hvnj1n8N8kfs/hvmj9m8d8sf8ziv3n+mMX/R/ljFv8f549Z/LfIH7P4/yR/zOK/Zf6YxX+r/DGL/9b5Yxb/n2r9RxrmrRb/bbT+w87i/7P8MYv/z/PH/qv9x37n2hF/kT/2X+3/7rUj/jJ/zOL/q/wxi/+2+WMW/+3yxyz+2+ePWfx/nT9m8d8hf8zi/xuP/+b/ysIW/996/P+lLP475o9Z/H+XP2bx/33+mMX/D/ljFv8/5o9Z/HfKH7P4/yl/zOL/5/wxi//O+WMW/13yxyz+f8kfs/jvmj9m8f9r/pjFf7f8MYv/7vljFv898scs/nvmj1n898ofs/jvnT9m8d8nf8ziv2/+mMV/v/wxi//+5D/Kv3Fc/6FZ/A9o+8cs/gfmj1n8D8ofs/gfnD9m8T8kf8zif2j+mMX/sPwxi//h+WMW/yPyxyz+R+aPWfyPyh+z+B+dP2bxPyZ/zOJ/bP6Yxf+4/DGL//H5Yxb/E/LHLP4n5o9Z/E/KH7P4n5w/ZvE/JX/M4n9q/pjF/7T8MYv/6fljFv8z8scs/mfmj1n8z8ofs/ifnT9m8T8nf8zif27+mMX/vPwxi//5+WMW/wvyxyz+F+aPWfwvyh+z+F+cP2bxvyR/zOJ/af6Yxf+y/DGL/+X5Yxb/K/LHLP5X5o9Z/K/KH7P4X50/ZvG/Jn/M4n9t/pjF/7r8MYv/9fljFv8b8scs/jfmj1n8b8ofs/jfnD9m8b8lf8zif2v+mMX/tvwxi//t+WMW/zvyxyz+d+aPWfzvyh+z+N+dP2bxvyd/zOJ/b/6Yxf++/DGL//35Yxb/B/LHLP4P5o9Z/B/KH7P4P/x+/1H+zeP6D83i/0jbP2bxfzR/zOL/WP6Yxf/x/DGL/xP5Yxb/J/PHLP5P5Y9Z/J/OH7P4P5M/ZvF/Nn/M4v9c/pjF//n8MYv/C/ljFv8X88cs/i/lj1n8X84fs/i/kj9m8X81f8zi/1r+mMX/9fwxi/8b+WMS/5EG8scs/oPyxyz+w+WPWfyHzx+z+A/OH7P4j5A/ZvEfMX/M4j9S/pjFf+T8MYv/KPljFv9R88cs/qPlj1n8R88fs/iPkT9m8R8zf8ziP1b+mMV/7Pwxi/84+WMW/3Hzxyz+4+WPWfzHzx+z+H8kf8zi/9H8MYv/x/LHLP4T5I9Z/CfMH7P4T5Q/ZvGfOH/M4j9J/pjFf9L8MYv/x/PHLP6fyB+z+E+WP2bx/2T+mMV/8vwxi/+n8scs/lPkj1n8P50/ZvH/TP6YxX/K/DGL/1T5Yxb/z+aPWfw/lz9m8f98/pjF/wv5Yxb/L+aPWfy/lD9m8Z86f8ziP03+mMV/2vwxi/90+WMW/+nzxyz+X84fs/jPkD9m8Z8xf8ziP1P+mMV/5vwxi/8s+WMW/6/kj1n8v5o/ZvH/Wv6Yxf/r+WMW/1nzxyz+38gfs/jPlj9m8Z89f8ziP0f+mMV/zvwxi/9c+WMW/7nzxyz+8+SPWfznzR+z+M+XP2bxnz9/zOK/QP6Yxf+b+WMW/wXzxyz+38ofs/gvlD9m8f92/pjFf+H8MYv/d/LHLP6L5I9Z/BfNH7P4L5Y/ZvFfPH/M4r9E/pjFf8n8MYv/UvljFv+l88cs/svkj1n8v5s/ZvFfNn/M4r9c/pjF/3v5Yxb/5fPHLP4r5I9Z/FfMH7P4r5Q/ZvFfOX/M4r9K/pjFf9X8MYv/avljFv/V88cs/mvkj1n818wfs/h/P3/M4r9W/pjFf+38MYv/OvljFv9188cs/uvlj1n8188fs/j/IH/M4r9B/pjFf8P8MYv/RvljFv8f5o9Z/DfOH7P4b5I/ZvHfNH/M4r9Z/pjFf/P8MYv/j/LH3us/ysB/r/+P88cs2/8W+WMW/5/kj1n8t8wfs/hvlT9m8d86f8zi/9P8MYv/NvljFv+f5Y9Z/H+eP2bx/0X+mMX/l/ljFv9f5Y9Z/LfNH7P4b5c/ZvHfPn/M4v/r/DGL/w75Yxb/3+SPWfx/mz9m8d8xf8zi/7v8MYv/7/PHLP5/yB+z+P8xf8ziv1P+mMX/T/ljFv8/549Z/HfOH7P475I/ZvH/S/6YxX/X/DGL/1/zxyz+u+WPWfx3zx+z+O+RP2bx3zN/zOK/V/6YxX/v/DGL/z75Yxb/ffPHLP775Y9Z/PfPH7P4H5A/ZvE/MH/M4n9Q/pjF/+D8MYv/IfljFv9D88cs/oflj1n8D88fs/gfkT9m8T8yf8zif1T+mMX/6Pwxi/8x+WMW/2Pzxyz+x+WPWfyPzx+z+J+QP2bxPzF/zOJ/Uv6Yxf/k/DGL/yn5Yxb/U/PHLP6n5Y9Z/E/PH7P4n5E/ZvE/M3/M4n9W/pjF/+z8MYv/OfljFv9z88cs/uflj1n8z88fs/hfkD9m8b8wf8zif1H+mMX/4vwxi/8l+WMW/0vzxyz+l+WPWfwvzx+z+F+RP2bxvzJ/zOJ/Vf6Yxf/q/DGL/zX5Yxb/a/PHLP7X5Y9Z/K/PH7P435A/ZvG/MX/M4n9T/pjF/+b8MYv/LfljFv9b88cs/rflj1n8b88fs/jfkT9m8b8zf8zif1f+mMX/7vwxi/89+WMW/3vzxyz+9+WPWfzvzx+z+D+QP2bxfzB/zOL/UP6Yxf/h/DGL/yP5Yxb/R/PHLP6P5Y9Z/B/PH7P4P5E/ZvF/Mn/M4v9U/pjF/+n8MYv/M/ljFv9n88cs/s/lj1n8n88fs/i/kD9m8X8xf8zi/1L+mMX/5fwxi/8r+WMW/1fzxyz+r+WPWfxfzx+z+L+RPybxH3kgf8ziPyh/zOI/XP6YxX/4/DGL/+D8MYv/CPljFv8R88cs/iPlj1n8R84fs/iPkj9m8R81f8ziP1r+mMV/9Pwxi/8Y+WMW/zHzxyz+Y+WPWfzHzh+z+I+TP2bxHzd/zOI/Xv6YxX/8/DGL/0fyxyz+H80fs/h/LH/M4j9B/pjFf8L8MYv/RPljFv+J88cs/pPkj1n8J80fs/h/PH/M4v+J/DGL/2T5Yxb/T+aPWfwnzx+z+H8qf8ziP0X+mMX/0/ljFv/P5I9Z/KfMH7P4T5U/ZvH/bP6Yxf9z+WMW/8/nj1n8v5A/ZvH/Yv6Yxf9L+WMW/6nzxyz+0+SPWfynzR+z+E+XP2bxnz5/zOL/5fwxi/8M+WMW/xnzxyz+M+WPWfxnzh+z+M+SP2bx/0r+mMX/q/ljFv+v5Y9Z/L+eP2bxnzV/zOL/jfwxi/9s+WMW/9nzxyz+c+SPWfznzB+z+M+VP2bxnzt/zOI/T/6YxX/e/DGL/3z5Yxb/+fPHLP4L5I9Z/L+ZP2bxXzB/zOL/rfwxi/9C+WMW/2/nj1n8F84fs/h/J3/M4r9I/pjFf9H8MYv/YvljFv/F88cs/kvkj1n8l8wfs/gvlT9m8V86f8ziv0z+mMX/u/ljFv9l88cs/svlj1n8v5c/ZvFfPn/M4r9C/pjFf8X8MYv/SvljFv+V88cs/qvkj1n8V80fs/ivlj9m8V89f8ziv0b+mMV/zfwxi//388cs/mvlj1n8184fs/ivkz9m8V83f8ziv17+mMV//fwxi/8P8scs/hvkj1n8N8wfs/hvlD9m8f9h/pjFf+P8MYv/JvljFv9N88cs/pvlj1n8N88fs/j/KH/M4v/j/DGL/xb5Yxb/n+SPWfy3zB+z+G+VP2bx3zp/zOL/0/wxi/82+WMW/5/lj1n8f54/ZvH/Rf6Yxf+X+WMW/1/lj1n8t80fs/hvlz9m8d8+f8zi/+v8MYv/DvljFv/f5I9Z/H+bP2bx3zF/zOL/u/wxi//v88cs/n/IH7P4/zF/zOK/U/6Yxf9P+WMW/z/nj1n8d84fs/jvkj9m8f9L/pjFf9f8MYv/X/PHLP675Y9Z/HfPH7P475E/ZvHfM3/M4r9X/pjFf+/8MYv/PvljFv9988cs/vvlj1n8988fs/gfkD9m8T8wf8zif1D+mMX/4Pwxi/8h+WMW/0Pzxyz+h+WPWfwPzx+z+B+RP2bxPzJ/zOJ/VP6Yxf/o/DGL/zH5Yxb/Y/PHLP7H5Y9Z/I/PH7P4n5A/ZvE/MX/M4n9S/pjF/+T8MYv/KfljFv9T88cs/qflj1n8T88fs/ifkT9m8T8zf8zif1b+mMX/7Pwxi/85+WMW/3Pzxyz+5+WPWfzPzx+z+F+QP2bxvzB/zOJ/Uf6Yxf/i/DGL/yX5Yxb/S/PHLP6X5Y9Z/C/PH7P4X5E/ZvG/Mn/M4n9V/pjF/+r8MYv/NfljFv9r88cs/tflj1n8r88fs/jfkD9m8b8xf8zif1P+mMX/5vwxi/8t+WMW/1vzxyz+t+WPWfxvzx+z+N+RP2bxvzN/zOJ/V/6Yxf/u/DGL/z35Yxb/e/PHLP735Y9Z/O/PH7P4P5A/ZvF/MH/M4v9Q/pjF/+H8MYv/I/ljFv9H88cs/o/lj1n8H88fs/g/kT9m8X8yf8zi/1T+mMX/6fwxi/8z+WMW/2fzxyz+z+WPWfyfzx+z+L+QP2bxfzF/zOL/Uv6Yxf/l/DGL/yv5Yxb/V/PHLP6v5Y9Z/F/PH7P4v5E/JvEfZSB/zOI/KH/M4j9c/pjFf/j8MYv/4Pwxi/8I+WMW/xHzxyz+I+WPWfxHzh+z+I+SP2bxHzV/zOI/Wv6YxX/0/DGL/xj5Yxb/MfPHLP5j5Y9Z/MfOH7P4j5M/ZvEfN3/M4j9e/pjFf/z8MYv/R/LHLP4fzR+z+H8sf8ziP0H+mMV/wvwxi/9E+WMW/4nzxyz+k+SPWfwnzR+z+H88f8zi/4n8MYv/ZPljFv9P5o9Z/CfPH7P4fyp/zOI/Rf6Yxf/T+WMW/8/kj1n8p8wfs/hPlT9m8f9s/pjF/3P5Yxb/z+ePWfy/kD9m8f9i/pjF/0v5Yxb/qfPHLP7T5I9Z/KfNH7P4T5c/ZvGfPn/M4v/l/DGL/wz5Yxb/GfPHLP4z5Y9Z/GfOH7P4z5I/ZvH/Sv6Yxf+r+WMW/6/lj1n8v54/ZvGfNX/M4v+N/DGL/2z5Yxb/2fPHLP5z5I9Z/OfMH7P4z5U/ZvGfO3/M4j9P/pjFf978MYv/fPljFv/588cs/gvkj1n8v5k/ZvFfMH/M4v+t/DGL/0L5Yxb/b+ePWfwXzh+z+H8nf8ziv0j+mMV/0fwxi/9i+WMW/8Xzxyz+S+SPWfyXzB+z+C+VP2bxXzp/zOK/TP6Yxf+7+WMW/2Xzxyz+y+WPWfy/lz9m8V8+f8ziv0L+mMV/xfwxi/9K+WMW/5Xzxyz+q+SPWfxXzR+z+K+WP2bxXz1/zOK/Rv6YxX/N/DGL//fzxyz+a+WPWfzXzh+z+K+TP2bxXzd/zOK/Xv6YxX/9/DGL/w/yxyz+G+SPWfw3zB+z+G+UP2bx/2H+mMV/4/wxi/8m+WMW/03zxyz+m+WPWfw3zx+z+P8of8zi/+P8MYv/FvljFv+f5I9Z/LfMH7P4b5U/ZvHfOn/M4v/T/DGL/zb5Yxb/n+WPWfx/nj9m8f9F/pjF/5f5Yxb/X+WPWfy3zR+z+G+XP2bx3z5/zOL/6/wxi/8O+WMW/9/kj1n8f5s/ZvHfMX/M4v+7/DGL/+/zxyz+f8gfs/j/MX/M4r9T/pjF/0/5Yxb/P+ePWfx3zh+z+O+SP2bx/0v+mMV/1/wxi/9f88cs/rvlj1n8d88fs/jvkT9m8d8zf8ziv1f+mMV/7/wxi/8++WMW/33zxyz+++WPWfz3zx+z+B+QP2bxPzB/zOJ/UP6Yxf/g/DGL/yH5Yxb/Q/PHLP6H5Y9Z/A/PH7P4H5E/ZvE/Mn/M4n9U/pjF/+j8MYv/MfljFv9j88cs/sflj1n8j88fs/ifkD9m8T8xf8zif1L+mMX/5Pwxi/8p+WMW/1Pzxyz+p+WPWfxPzx+z+J+RP2bxPzN/zOJ/Vv6Yxf/s/DGL/zn5Yxb/c/PHLP7n5Y9Z/M/PH7P4X5A/ZvG/MH/M4n9R/pjF/+L8MYv/JfljFv9L88cs/pflj1n8L88fs/hfkT9m8b8yf8zif1X+mMX/6vwxi/81+WMW/2vzxyz+1+WPWfyvzx+z+N+QP2bxvzF/zOJ/U/6Yxf/m/DGL/y35Yxb/W/PHLP635Y9Z/G/PH7P435E/ZvG/M3/M4n9X/pjF/+78MYv/PfljFv9788cs/vflj1n8788fs/g/kD9m8X8wf8zi/1D+mMX/4fwxi/8j+WMW/0fzxyz+j+WPWfwfzx+z+D+RP2bxfzJ/zOL/VP6Yxf/p/DGL/zP5Yxb/Z/PHLP7P5Y9Z/J/PH7P4v5A/ZvF/MX/M4v9S/pjF/+X8MYv/K/ljFv9X88cs/q/lj1n8X88fs/i/kT8m8R91IH/M4j8of8ziP1z+mMV/+Pwxi//g/DGL/wj5Yxb/EfPHLP4j5Y9Z/EfOH7P4j5I/ZvEfNX/M4j9a/pjFf/T8MYv/GPljFv8x88cs/mPlj1n8x84fs/iPkz9m8R83f8ziP17+mMV//Pwxi/9H8scs/h/NH7P4fyx/zOI/Qf6YxX/C/DGL/0T5Yxb/ifPHLP6T5I9Z/CfNH7P4fzx/zOL/ifwxi/9k+WMW/0/mj1n8J88fs/h/Kn/M4j9F/pjF/9P5Yxb/z+SPWfynzB+z+E+VP2bx/2z+mMX/c/ljFv/P549Z/L+QP2bx/2L+mMX/S/ljFv+p88cs/tPkj1n8p80fs/hPlz9m8Z8+f8zi/+X8MYv/DPljFv8Z88cs/jPlj1n8Z84fs/jPkj9m8f9K/pjF/6v5Yxb/r+WPWfy/nj9m8Z81f8zi/438MYv/bPljFv/Z88cs/nPkj1n858wfs/jPlT9m8Z87f8ziP0/+mMV/3vwxi/98+WMW//nzxyz+C+SPWfy/mT9m8V8wf8zi/638MYv/QvljFv9v549Z/BfOH7P4fyd/zOK/SP6YxX/R/DGL/2L5Yxb/xfPHLP5L5I9Z/JfMH7P4L5U/ZvFfOn/M4r9M/pjF/7v5Yxb/ZfPHLP7L5Y9Z/L+XP2bxXz5/zOK/Qv6YxX/F/DGL/0r5Yxb/lfPHLP6r5I9Z/FfNH7P4r5Y/ZvFfPX/M4r9G/pjFf838MYv/9/PHLP5r5Y9Z/NfOH7P4r5M/ZvFfN3/M4r9e/pjFf/38MYv/D/LHLP4b5I9Z/DfMH7P4b5Q/ZvH/Yf6YxX/j/DGL/yb5Yxb/TfPH3vUf/423+rBH9P+zD/DfLH/Msv1vnj9m8f9R/pjF/8f5Yxb/LXT+o/xTS1n8f6Lz/+ey+G+ZP2bx3yp/zOK/df6Yxf+n+WMW/23yxyz+P8sfs/j/PH/M4v+L/DGL/y/zxyz+v8ofs/hvmz9m8d8uf8ziv33+mMX/1/ljFv8d8scs/r/JH7P4/zZ/zOK/Y/6Yxf93+WMW/9/nj1n8/5A/ZvH/Y/6YxX+n/DGL/5/yxyz+f84fs/jvnD9m8d8lf8zi/5f8MYv/rvljFv+/5o9Z/HfLH7P4754/ZvHfI3/M4r9n/pjFf6/8MYv/3vljFv998scs/vvmj1n898sfs/jvnz9m8T8gf8zif2D+mMX/oPwxi//B+WMW/0Pyxyz+h+aPWfwPyx+z+B+eP2bxPyJ/zOJ/ZP6Yxf+o/DGL/9H5Yxb/Y/LHLP7H5o9Z/I8D/0EDA1v9O4f2n5jF//i2f8zif0L+mMX/xPwxi/9J+WMW/5Pzxyz+p+SPWfxPzR+z+J+WP2bxPz1/zOJ/Rv6Yxf/M/DGL/1n5Yxb/s/PHLP7n5I9Z/M/NH7P4n5c/ZvE/P3/M4n9B/pjF/8L8MYv/RfljFv+L88cs/pfkj1n8L80fs/hflj9m8b88f8zif0X+mMX/yvwxi/9Vw/If7t8wrv/QLP5Xt/1jFv9r8scs/tfmj1n8r8sfs/hfnz9m8b8hf8zif2P+mMX/pvwxi//N+WMW/1vyxyz+t+aPWfxvyx+z+N+eP2bxvyN/zOJ/Z/6Yxf+u/DGL/935Yxb/e/LHLP735o9Z/O/LH7P4358/ZvF/IH/M4v9g/pjF/6H8MYv/w/ljFv9H8scs/o/mj1n8H8sfs/g/nj9m8X8if8zi/2T+mMX/qfwxi//T+WMW/2fyxyz+z+aPWfyfyx+z+D+fP2bxfyF/zOL/Yv6Yxf+l/DGL/8v5Yxb/V/LHLP6v5o9Z/F/LH7P4v54/ZvF/I39M4j/aQP6YxX9Q/pjFf7j8MYv/8PljFv/B+WMW/xHyxyz+I+aPWfxHyh+z+I+cP2bxHyV/zOI/av6YxX+0/DGL/+j5Yxb/MfLHLP5j5o9Z/MfKH7P4j50/ZvEfJ3/M4j9u/pjFf7z8MYv/+PljFv+P5I9Z/D+aP2bx/1j+mMV/gvwxi/+E+WMW/4nyxyz+E+ePWfwnyR+z+E+aP2bx/3j+mMX/E/ljFv/J8scs/p/MH7P4T54/ZvH/VP6YxX+K/DGL/6fzxyz+n8kfs/hPmT9m8Z8qf8zi/9n8MYv/5/LHLP6fzx+z+H8hf8zi/8X8MYv/l/LHLP5T549Z/KfJH7P4T5s/ZvGfLn/M4j99/pjF/8v5Yxb/GfLHLP4z5o9Z/GfKH7P4z5w/ZvGfJX/M4v+V/DGL/1fzxyz+X8sfs/h/PX/M4j9r/pjF/xv5Yxb/2fLHLP6z549Z/OfIH7P4z5k/ZvGfK3/M4j93/pjFf578MYv/vPljFv/58scs/vPnj1n8F8gfs/h/M3/M4r9g/pjF/1v5Yxb/hfLHLP7fzh+z+C+cP2bx/07+mMV/kfwxi/+i+WMW/8Xyxyz+i+ePWfyXyB+z+C+ZP2bxXyp/zOK/dP6YxX+Z/DGL/3fzxyz+y+aPWfyXyx+z+H8vf8ziv3z+mMV/hfwxi/+K+WMW/5Xyxyz+K+ePWfxXyR+z+K+aP2bxXy1/zOK/ev6YxX+N/DGL/5r5Yxb/7+ePWfzXyh+z+K+dP2bxXyd/zOK/bv6YxX+9/DGL//r5Yxb/H+T/N70x9NTiv0H+mMV/w/wxi/9G+WMW/x/mj1n8N84fs/hvkj9m8d80f8ziv1n+mMV/8/wxi/+P8scs/j/OH7P4b5E/ZvH/Sf6YxX/L/DGL/1b5Yxb/rfPHLP4/zR+z+G+TP2bx/1n+mMX/5/ljFv9f5I9Z/H+ZP2bx/1X+mMV/2/wxi/92+WMW/+3zxyz+v84fs/jvkD9m8f9N/pjF/7f5Yxb/HfPH3vUfNDCw1X+v/+/yxyzb/+/zxyz+f8gfs/j/MX/M4r9T/pjF/0/5Yxb/P+ePWfx3zh+z+O+SP2bx/0v+mMV/1/wxi/9f88cs/rvlj1n8d88fs/jvkT9m8d8zf8ziv1f+mMV/7/wxi/8++WMW/33zxyz+++WPWfz3zx+z+B+QP2bxPzB/zOJ/UP6Yxf/g/DGL/yH5Yxb/Q/PHLP6H5Y9Z/A/PH7P4H5E/ZvE/Mn/M4n9U/pjF/+j8MYv/MfljFv9j88cs/sflj1n8j88fs/ifkD9m8T8xf8zif1L+mMX/5Pwxi/8p+WMW/1Pzxyz+p+WPWfxPzx+z+J+RP2bxPzN/zOJ/Vv6Yxf/s/DGL/zn5Yxb/c/PHLP7n5Y9Z/M/PH7P4X5A/ZvG/MH/M4n9R/pjF/+L8MYv/JfljFv9L88cs/pflj1n8L88fs/hfkT9m8b8yf8zif1X+mMX/6vwxi/81+WMW/2vzxyz+1+WPWfyvzx+z+N+QP2bxvzF/zOJ/U/6Yxf/m/DGL/y35Yxb/W/PHLP635Y9Z/G/PH7P435E/ZvG/M3/M4n9X/pjF/+78MYv/PfljFv9788cs/vflj1n8788fs/g/kD9m8X8wf8zi/1D+mMX/4fwxi/8j+WMW/0fzxyz+j+WPWfwfzx+z+D+RP2bxfzJ/zOL/VP6Yxf/p/DGL/zP5Yxb/Z/PHLP7P5Y9Z/J/PH7P4v5A/ZvF/MX/M4v9S/pjF/+X8MYv/K/ljFv9X88cs/q/lj1n8X88fs/i/kT8m8R99IH/M4j8of8ziP1z+mMV/+Pwxi//g/DGL/wj5Yxb/EfPHLP4j5Y9Z/EfOH7P4j5I/ZvEfNX/M4j9a/pjFf/T8MYv/GPljFv8x88cs/mPlj1n8x84fs/iPkz9m8R83f8ziP17+mMV//Pwxi/9H8scs/h/NH7P4fyx/zOI/Qf6YxX/C/DGL/0T5Yxb/ifPHLP6T5I9Z/CfNH7P4fzx/zOL/ifwxi/9k+WMW/0/m/05bvue8xX/y/DGL/6fyxyz+U+SPWfw/nT9m8f9M/pjFf8r8MYv/VPljFv/P5o9Z/D+XP2bx/3z+mMX/C/ljFv8v5o9Z/L+UP2bxnzp/zOI/Tf6YxX/a/DGL/3T5Yxb/6fPHLP5fzh+z+M+QP2bxnzF/zOI/U/6YxX/m/DGL/yz5Yxb/r+SPWfy/mj9m8f9a/pjF/+v5Yxb/WfPHLP7fyB+z+M+WP2bxnz1/zOI/R/6YxX/O/DGL/1z5Yxb/ufPHLP7z5I9Z/OfNH7P4z5c/ZvGfP3/M4r9A/pjF/5v5Yxb/BfPHLP7fyh+z+C+UP2bx/3b+mMV/4fwxi/938scs/ovkj1n8F80fs/gvlj9m8V88f8ziv0T+mMV/yfwxi/9S+WMW/6Xzxyz+y+SPWfy/mz9m8V82f8ziv1z+mMX/e/ljFv/l88cs/ivkj1n8V8wfs/ivlD9m8V85f8ziv0r+mMV/1fwxi/9q+WMW/9Xzxyz+a+SPWfzXzB+z+H8/f8ziv1b+mMV/7fwxi/86+WMW/3Xzxyz+6+WPWfzXzx+z+P8gf8ziv0H+mMV/w/wxi/9G+WMW/x/mj1n8N84fs/hvkj9m8d80f8ziv1n+mMV/8/wxi/+P8scs/j/OH7P4b5E/ZvH/Sf6YxX/L/DGL/1b5Yxb/rfPHLP4/zR+z+G+TP2bx/1n+mMX/5/ljFv9f5I9Z/H+ZP2bx/1X+mMV/2/wxi/92+WMW/+3zxyz+v84fs/jvkD9m8f9N/pjF/7f5Yxb/HfPHLP6/yx+z+P8+f8zi/4f8MYv/H/PHLP475Y9Z/P+UP2bx/3P+mMV/5/wxi/8u+WMW/7/kj1n8d80fs/j/NX/M4r9b/pjFf/f8MYv/HvljFv8988cs/nvlj1n8984fs/jvkz9m8d83f8ziv1/+mMV///wxi/8B+WMW/wPzxyz+B+WPWfwPzh+z+B+SP2bxPzR/zOJ/WP6Yxf/w/DGL/xH5Yxb/I/PHLP5H5Y9Z/I/OH7P4H5M/ZvE/Nn/M4n9c/pjF//j8MYv/CfljFv8T88cs/iflj1n8T84fs/ifkj9m8T81f8zif1r+mMX/9Pwxi/8Z+WMW/zPzxyz+Z+WPWfzPzh+z+J+TP2bxPzd/zOJ/Xv6Yxf/8/DGL/wX5Yxb/C/PHLP4X5Y9Z/C/OH7P4X6L23/4Db7H4X6r2/+As/pflj1n8L88fs/hfkT9m8b8yf8zif1X+mMX/6vwxi/81+WMW/2vzxyz+1+WPWfyvzx+z+N+QP2bxvzF/zOJ/U/6Yxf/m/DGL/y35Yxb/W/PHLP635Y9Z/G/PH7P435E/ZvG/M3/M4n9X/pjF/+78MYv/PfljFv9788cs/vflj1n8788fs/g/kD9m8X8wf8zi/1D+mMX/4fwxi/8j+WMW/0fzxyz+j+WPWfwfzx+z+D+RP2bxfzJ/zOL/VP6Yxf/p/DGL/zP5Yxb/Z/PHLP7P5Y9Z/J/PH7P4v5A/ZvF/MX/M4v9S/pjF/+X8MYv/K/ljFv9X88cs/q/lj1n8X88fs/i/kT8m8R9jIH/M4j8of8ziP1z+mMV/+Pwxi//g/DGL/wj5Yxb/EfPHLP4j5Y9Z/EfOH7P4j5I/ZvEfNX/M4j9a/pjFf/T8MYv/GPljFv8x88cs/mPlj1n8x84fs/iPkz9m8R83f8ziP17+mMV//Pwxi/9H8scs/h/NH7P4fyx/zOI/Qf6YxX/C/DGL/0T5Yxb/ifPHLP6T5I9Z/CfNH7P4fzx/zOL/ifwxi/9k+WMW/0/mj1n8J88fs/h/Kn/M4j+F13+rYd1o8f+013+YWfw/kz9m8Z8yf8ziP1X+mMX/s/ljFv/P5Y9Z/D+fP2bx/0L+mMX/i/ljFv8v5Y9Z/KfOH7P4T5M/ZvGfNn/M4j9d/pjFf/r8MYv/l/PHLP4z5I9Z/GfMH7P4z5Q/ZvGfOX/M4j9L/pjF/yv5Yxb/r+aPWfy/lj9m8f96/pjFf9b8MYv/N/LHLP6z5Y9Z/GfPH7P4z5E/ZvGfM3/M4j9X/pjFf+78MYv/PPljFv9588cs/vPlj1n8588fs/gvkD9m8f9m/pjFf8H8MYv/t/LHLP4L5Y9Z/L+dP2bxXzh/zOL/nfwxi/8i+WMW/0Xzxyz+i+WPWfwXzx+z+C+RP2bxXzJ/zOK/VP6YxX/p/DGL/zL5Yxb/7+aPWfyXzR+z+C+XP2bx/17+mMV/+fwxi/8K+WMW/xXzxyz+K+WPWfxXzh+z+K+SP2bxXzV/zOK/Wv6YxX/1/DGL/xr5Yxb/NfPHLP7fzx+z+K+VP2bxXzt/zOK/Tv6YxX/d/DGL/3r5Yxb/9fPHLP4/yB+z+G+QP2bx3zB/zOK/Uf6Yxf+H+WMW/43zxyz+m+SPWfw3zR+z+G+WP2bx3zx/zOL/o/wxi/+P88cs/lvkj1n8f5I/ZvHfMn/M4r9V/pjFf+v8MYv/T/PHLP7b5I9Z/H+WP2bx/3n+mMX/F/ljFv9f5o9Z/H+VP2bx3zZ/zOK/Xf6YxX/7/DGL/6/zxyz+O+SPWfx/kz9m8f9t/pjFf8f8MYv/7/LHLP6/zx+z+P8hf8zi/8f8MYv/TvljFv8/5Y9Z/P+cP2bx3zl/zOK/S/6Yxf8v+WMW/13zxyz+f80fs/jvlj9m8d89f8ziv0f+mMV/z/wxi/9e+WMW/73zxyz+++SPWfz3zR+z+O+XP2bx3z9/zOJ/QP6Yxf/A/DGL/0H5Yxb/g/PHLP6H5I9Z/A/NH7P4H5Y/ZvE/PH/M4n9E/pjF/8j8MYv/UfljFv+j88cs/sfkj1n8j80fs/gflz9m8T8+f8zif0L+mMX/xPwxi/9J+WMW/5Pzxyz+p+SPWfxPzR+z+J+WP2bxPz1/zOJ/Rv6Yxf/M/DGL/1n5Yxb/s/PHLP7n5I9Z/M/NH7P4n5c/ZvE/P3/M4n9B/pjF/8L8MYv/RfljFv+L88cs/pfkj1n8L80fs/hflj9m8b88f8zif0X+mMX/yvwxi/9V+WMW/6vzxyz+1+SPWfyvzR+z+F+XP2bxvz5/zOJ/Q/6Yxf/G/DGL/035Yxb/m/PHLP635I9Z/G/NH7P435Y/ZvG/PX/M4n9H/pjF/878MYv/XfljFv+788cs/vfkj1n8780fs/jflz9m8b8/f8zi/0D+mMX/wfwxi/9D+WMW/4fzxyz+j+SPWfwfzR+z+D+WP2bxfzx/zOL/RP6Yxf/J/DGL/1P5Yxb/p/PHLP7P5I9Z/J/NH7P4P5c/ZvF/Pn/M4v9C/pjF/8X8MYv/S/ljFv+X88cs/q/kj1n8X80fs/i/lj9m8X89f8zi/0b+mMR/zIH8MYv/oPwxi/9w+WMW/+Hzxyz+g/PHLP4j5I9Z/EfMH7P4j5Q/ZvEfOX/M4j9K/pjFf9T8MYv/aPljFv/R88cs/mPkj1n8x8wfs/iPlT9m8R87f8ziP07+mMV/3Pwxi/94+WMW//Hzxyz+H8kfs/h/NH/M4v+x/DGL/wT5Yxb/CfPHLP4T5Y9Z/CfOH7P4T5I/ZvGfNH/M4v/x/DGL/yfyxyz+k+WPWfw/mT9m8Z88f8zi/6n8MYv/FPljFv9P549Z/D+TP2bxnzJ/zOI/Vf6Yxf+z+WMW/8/lj1n8P58/ZvH/Qv6Yxf+L+WMW/y/lj1n8p84fs/hPkz9m8Z82f8ziP13+mMV/+vwxi/+X88cs/jPkj1n8Z8wfs/jPlD9m8Z85f8ziP0v+mMX/K/ljFv+v5o9Z/L+WP2bx/3r+mMV/1vwxi/838scs/rPlj1n8Z88fs/jPkT9m8Z8zf8ziP1f+mMV/7vwxi/88+WMW/3nzxyz+8+WPWfznzx+z+C+QP2bx/2b+mMV/wfwxi/+38scs/gvlj1n8v50/ZvFfOH/M4v+d/DGL/yL5Yxb/RfPHLP6L5Y9Z/BfPH7P4L5E/ZvFfMn/M4r9U/pjFf+n8MYv/MvljFv/v5o9Z/JfNH7P4L5c/ZvH/Xv6YxX/5/DGL/wr5Yxb/FfPHLP4r5Y9Z/FfOH7P4r5I/ZvFfNX/M4r9a/pjFf/X8MYv/GvljFv8188cs/t/PH7P4r5U/ZvFfO3/M4r9O/pjFf938MYv/evljFv/188cs/j/IH7P4b5A/ZvHfMH/M4r9R/pjF/4f5Yxb/jfPHLP6b5I9Z/DfNH7P4b5Y/ZvHfPH/M4v+j/DGL/4/zxyz+W+SPWfx/kj9m8d8yf8ziv1X+mMV/6/wxi/9P88cs/tvkj1n8f5Y/ZvH/ef6Yxf8X+WMW/1/mj1n8f5U/ZvHfNn/M4r9d/pjFf/v8MYv/r/PHLP475I9Z/H+TP2bx/23+mMV/x/wxi//v8scs/r/PH7P4/yF/zOL/x/wxi/9O+WMW/z/lj1n8/5w/ZvHfOX/M4r9L/pjF/y/5Yxb/XfPHLP5/zR+z+O+WP2bx3z1/zOK/R/6YxX/P/DGL/175Yxb/vfPHLP775I9Z/PfNH7P475c/ZvHfP3/M4n9A/pjF/8D8MYv/QfljFv+D88cs/ofkj1n8D80fs/gflj9m8T88f8zif0T+mMX/yPwxi/9R+WMW/6Pzxyz+x+SPWfyPzR+z+B+XP2bxPz5/zOJ/Qv6Yxf/E/DGL/0n5Yxb/k/PHLP6n5I9Z/E/NH7P4n5Y/ZvE/PX/M4n9G/pjF/8z8MYv/WfljFv+z88cs/ufkj1n8z80fs/iflz9m8T8/f8zif0H+mMX/wvwxi/9F+WMW/4vzxyz+l+SPWfwvzR+z+F+WP2bxvzx/zOJ/Rf6Yxf/K/DGL/1X5Yxb/q/PHLP7X5I9Z/K/NH7P4X5c/ZvG/Pn/M4n9D/pjF/8b8MYv/TfljFv+b88cs/rfkj1n8b80fs/jflj9m8b89f8zif0f+mMX/zvwxi/9d+WMW/7vzxyz+9+SPWfzvzR+z+N+XP2bxvz9/zOL/QP6Yxf/B/DGL/0P5Yxb/h/PHLP6P5I9Z/B/NH7P4P5Y/ZvF/PH/M4v9E/pjF/8n8MYv/U/ljFv+n88cs/s/kj1n8n80fs/g/lz9m8X8+f8zi/0L+mMX/xfwxi/9L+WMW/5fzxyz+r+SPWfxfzR+z+L+WP2bxfz1/zOL/Rv6YxH+sgfwxi/+g/DGL/3D5Yxb/4fPHLP6D88cs/iPkj1n8R8wfs/iPlD9m8R85f8ziP0r+mMV/1Pwxi/9o+WMW/9Hzxyz+Y+SPWfzHzB+z+I+VP2bxHzt/zOI/Tv6YxX/c/DGL/3j5Yxb/8fPHLP4fyR+z+H80f8zi/7H8MYv/BPljFv8J88cs/hPlj1n8J84fs/hPkj9m8Z80f8zi//+xc+dRdtb1HcdvEoad6q9He7qIRpQCLZIFUGktBghkQcYgsiQkkSyTxSQkZoEshkRtm6YUxFJB1DaaNhXEoq0SKxqIgsWyCZTahZSKFBDbiGtTVJKem8zEZPplTudJn4fK9/X6IzP3Dt8r5H0+3MvJOb5c/1CW/q/QP5Sl/2D9Q1n6v1L/UJb+R+gfytL/VfqHsvR/tf6hLP2P1D+Upf+v6h/K0v8o/UNZ+h+tfyhL/2P0D2Xp/2v6h7L0/3X9Q1n6H6t/KEv/1+gfytL/OP1DWfoP0T+Upf9Q/UNZ+g/TP5Sl/3D9Q1n6H69/KEv/E/QPZel/ov6hLP1fq38oS//X6R/K0v/1+oey9D9J/1CW/r+hfyhL/9/UP5Sl/xv0D2Xp/1v6h7L0P1n/UJb+b9Q/lKX/CP1DWfqfon8oS/9T9Q9l6X+a/qEs/UfqH8rS/3T9Q1n6n6F/KEv/UfqHsvQfrX8oS/8x+oey9B+rfyhL/zP1D2Xp/yb9Q1n6n6V/KEv/Tv1DWfq/Wf9Qlv7j9A9l6X+2/qEs/d+ifyhL/3P0D2Xp/1b9Q1n6n6t/KEv/8/QPZel/vv6hLP0v0D+Upf94/UNZ+k/QP5Sl/4X6h7L0n6h/KEv/SfqHsvSfrH8oS/+36R/K0v8i/UNZ+k/RP5Sl/1T9Q1n6T9M/lKX/dP1DWfp36R/K0n+G/qEs/WfqH8rSf5b+oSz9Z+sfytL/7fqHsvSfo38oS/+5+oey9J+nfyhL/4v1D2XpP1//UJb+C/QPZen/Dv1DWfov1D+Upf8i/UNZ+i/WP5Sl/xL9Q1n6X6J/KEv/S/UPZem/VP9Qlv7L9A9l6b9c/1CW/iv0D2Xp/079Q1n6r9Q/lKX/ZfqHsvRfpX8oS//V+oey9H+X/qEs/d+tfyhL//foH8rS/7f1D2Xp/zv6h7L0/139Q1n6r9E/lKX/7+kfytJ/rf6hLP1/X/9Qlv6X6x/K0v8P9A9l6X+F/qEs/a/UP5Sl/3v1D2Xpf5X+oSz936d/KEv/P9Q/lKX/1fqHsvT/I/1DWfq/X/9Qlv7X6B/K0v9a/UNZ+n9A/1CW/tfpH8rS/4P6h7L0/5D+oSz9P6x/KEv/P9Y/lKX/n+gfytJ/nf6hLP0/on8oS/+P6h/K0n+9/qEs/f9U/1CW/n+mfyhL/w36h7L0/3P9Q1n6f0z/UJb+1+sfytL/Bv1DWfp/XP9Qlv436h/K0v8T+oey9P8L/UNZ+t+kfyhL/0/qH8rS/1P6h7L0/0v9Q1n6/5X+oSz9P61/KEv/z+gfytL/Zv1DWfpv1D+Upf9n9Q9l6f/X+oey9P+c/qEs/W/RP5Sl/+f1D2Xp/wX9Q1n6b9I/lKX/rfqHsvS/Tf9Qlv6b9Q9l6f9F/UNZ+n9J/1CW/rfrH8rS/w79Q1n6f1n/UJb+f6N/KEv/O/UPZen/Ff1DWfr/rf6hLP3v0j+Upf/d+oey9L9H/1CW/vfqH8rS/z79Q1n6f1X/UJb+9+sfytL/Af1DWfo/qH8oS/+/0z+Upf9D+oey9P97/UNZ+n9N/1CW/v+gfyhL/3/UP5Sl/z/pH8rS/5/1D2Xp/7D+oSz9t+gfytL/X/QPZen/iP6hLP3/Vf9Qlv5f1z+Upf+j+oey9P+G/qEs/R/TP5Sl/7/pH8rS/3H9Q1n6P6F/KEv/J/UPZen/Tf1DWfo/pX8oS/9v6R/K0v/f9Q9l6f8f+oey9N+qfyhL/2/rH8rS/2n9Q1n6f0f/UJb+39U/lKX/9/QPZen/ff1DWfr/QP9Qlv4/1D+Upf9/6h/K0n+b/qEs/f9L/1CW/s/oH8rS/0f6h7L0/7H+oSz9f6J/KEv/Z/UPZem/Xf9Qlv479A8l6f/ilv6hLP0H6B/K0n+g/qEs/QfpH8rSfz/9Q1n6d+gfytJ/f/1DWfofoH8oS/8D9Q9l6X+Q/qEs/Q/WP5Sl/yH6h7L0P1T/UJb+h+kfytL/5/QPZen/Iv1DL7j+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/98sWrZ8zpS5c7sW+sY3vvHN7m+e738zAQAA/9d++qH/+f47AQAAAAAAAAAAAAAAAAAAgLya+L8Te77/GQEAAAAAAAAAAAAA4GfdmM5Ttg4asNdTg/Z8cPi9XTu/nrDtglkbNmwsPV+7f3xm8JID93ywY8eOHecs2nR698MDWq1W+3/txd2PD+x93H791fe9btyuR2XEB6aWG1a2Om/bcMljj0z70bGbOnY+29G6aMbsuV1DB7Za5bSO1tL2g2EDWq1yRkfrqvaD4e0Hozpa17cfHL/zwUGtze0Hx02bP3d6+4nRlX/P4IViTOfq1qC9Ftva698Ge+5/9X0TlvZ87eMle15tv1b3/tc9O+6hXj/r8Rz773n9ckrv/ff7HxB4Tv3b/4yhPV/7eMn/8f5/xk+GbYp+9tz773n9cqr9Q32Cz/97bbT35/5en/8HBy+5+7589s5B7f0PP/j7M7qf2u9/8/n/p69fTuu9/4F7ff5vf44f2fP5/4BWq5y+j78dkMqYzndt7ev9v+/97/fLvW4G7Ln/tZNGv7+9/1fc/uhLup/q6Of+R/b1/r+2198r0D9jOj+6o9f7fz/23zoqeMnd+193xRfPb+9/5aibb9jjZ/3Z/+m99z9k8bwFQxYtW/6a2fOmzOya2XXx8cNPHDb0tcNOGnrikJ0fCXb9uo+/K5DDvr3/tw7udTOg1eraff/Ke142sr3/O9Y/Mbb7qQP7uf8z+nz/H+z9H0JHDGztv39r6ZTFixcO2/Vrz8Phu37d9ZcF++/Hf/+/6ujuv6znzwwHtFq/uPt+1aTW/e39v/zJB97Y/dT+/dz/qD73P2LvP6sE+mcf3/+n97rZa//lUy+6rr3/UYcMv7v7qf7+9//oPvf/Ee//sC/GdLZqfRNt73/g49dcU+26jPHnf1CfJvZ/XFlzdLXrMtb+oT5N7L9r/rG3VrsuZ9o/1KeJ/a957+izq12XN9k/1KeJ/d/z3cfurHZdzrJ/qE8T+/96x/eWVbsunfYP9Wli/zeuGP90tevyZvuH+jSx/5dd+/Q3ql2XcfYP9Wli/+c/NXJxtetytv1DfZrY/4rDz72r2nV5i/1DfZrY/9Bp2ydWuy7n2D/Up4n9P/ieD3662nV5q/1DfZrY/3XPDjuy2nU51/6hPk3s/+aDBn+o2nU5z/6hPk3sf/ullx9W7bqcb/9Qnyb2v/rWjhHVrssF9g/1aWL/d2++6WvVrst4+4f6NLH/J0+4bVa16zLB/qE+Tez/E2Nfsr3adbnQ/qE+Tey/8+MLSrXrMtH+oT5N7L/joYfXVLsuk+wf6tPE/o8ZfNdJ1a7LZPuH+jSx/6mTp3yy2nV5m/1DfZrY/6hnPnZEtetykf1DfZrY/6FrDv1Mtesyxf6hPk3sf/Ciww+udl2m2j/Up4n9zzls44erXZdp9g/1aWL/a7c+uKjadZlu/1CfJvb/pauXPV7tunTZP9Snif1/e+asC6tdlxn2D/VpYv8bfun2e6tdl5n2D/VpYv8P33/W6mrXZZb9Q32a2P9VNz3xC9Wuy2z7h/o0sf8vTNh2fbXr8nb7h/o0sf9tr554crXrMsf+oT5N7P+ld7z+gWrXZa79Q32a2P/kW64eVe26zLN/qE8T+1/Y+e5nql2Xi+0f6tPE/k8aesz8atdlvv1DfZrY/5Vb1k2tdl0W2D/Up4n9f3n9CT+odl3eYf9Qnyb2/9R5R46tdl0W2j/Up4n9rz/6yi3Vrssi+4f6NLH/EV/51vHVrsti+4f6NLH/QzaesqHadVli/1CfJvZ/1KnjfqXadbnE/qE+Tex/7ht+fEW163Kp/UN9mtj/z/9wyeZq12Wp/UN9mtj/+MsfOa/adVlm/1CfJva/ZNVXv1ntuiy3f6hPE/s/ecD0y6pdlxX2D/VpYv9bHm29r9p1eaf9Q32a2P+16248oNp1WWn/UJ8m9v/5Obd8rtp1ucz+oT5N7P87Ly1Dql2XVfYPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwH+zAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhR04EAAAAAAA8n9thKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqirswLEAAAAAgDB/6yB6NwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICjAAAA//+Y5I3v")
mkdir(&(0x7f00000008c0)='./bus\x00', 0x0)
getdents64(0xffffffffffffffff, 0x0, 0x0)
rename(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='./file0\x00')
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$PPPIOCGL2TPSTATS(r0, 0x80047453, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
write$char_usb(0xffffffffffffffff, 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r4 = socket$inet6(0xa, 0x1, 0x0)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="040000000400000004000000050001"], 0x50)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="a40000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400000000000000000000000000000000000c0002800500010000000000080007400000000010000d80040003800600020000000000"], 0xa4}}, 0x0)
r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r6)
sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50020000", @ANYRES16=r8, @ANYBLOB="0100000000000000000001000000080001000000000004000480080002000100000010000c7d0c000b8008000a00b4ed000004000880"], 0x250}}, 0x2000c000)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)

381.570589ms ago: executing program 3 (id=1554):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x7ad3db81}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$SO_TIMESTAMP(r3, 0x1, 0x40, &(0x7f0000000380)=0x4, 0x4)

305.007572ms ago: executing program 1 (id=1555):
r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', &(0x7f0000000080)={0x200000, 0x20, 0x10}, 0x2)
r1 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newtfilter={0x25ec, 0x2c, 0xca7, 0x70bd25, 0x400000, {0x0, 0x0, 0x0, r2, {0xfff3, 0x4}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}, @filter_kind_options=@f_flower={{0xb}, {0x25a8, 0x2, [@TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0xb4}, @TCA_FLOWER_KEY_PORT_DST_MAX={0x6, 0x5a, 0x4e24}, @TCA_FLOWER_ACT={0x2574, 0x3, [@m_ctinfo={0x140, 0x18, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x1}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xe}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x8d}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x9}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xe0000}]}, {0xe9, 0x6, "b101dcb858a12de7e122d7cb63b03033e7e60d2762c8dda29839d7de6fc0a982b78ec46485aa53148595425918101a45113e57183839e387d7b68f9aad953cdd4a6b1c7ccc016541265283d4be9c72ee2f16a66ad55707e36e9c13e8f2f755f72358b5945ff7bfcd42394d706819684f12afb96fe946c1fea42fbd8be3af697024864c36232ff8f3734b7ada6d4b776264c336246c6eb809e34fd57a357f7c690505c2b4e33fe4268f62ef4be164b6629c5b3e2ed3273244cb5c40469998c4726707a6d0776b9d84980f400af7480f75b25901ba820159f4ab1c324316cd410cc74dc95e59"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_mpls={0x5c, 0x4, 0x0, 0x0, {{0x9}, {0x24, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5}, @TCA_MPLS_TC={0x5, 0x6, 0x5}, @TCA_MPLS_TTL={0x5, 0x7, 0x4}, @TCA_MPLS_PROTO={0x6, 0x4, 0xf9}]}, {0xe, 0x6, "5a9c9e10d7c4072804e5"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_gact={0x11c, 0x0, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x9, 0xfcf1, 0xffffffffffffffff, 0x80, 0x80000001}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x188e, 0x10000000}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x24e1, 0x3}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x988, 0x7}}]}, {0xb4, 0x6, "6a66617902aa5de76439fbee7a7a55babaeaff9857e890eeab1a08a79db34a0e042859a8e1b1abd5d35e41f35c968e0bc050fce0288afdd6c49cb3e8b9133893d933f6ac4a36bca9fe2e77bd8fa7c9734072e57bbbebe2e052594676aa8534a44be18fca0a1295c7e18eb77542fa89392a0fba1fe1a8faf28692c0fbd1bd9c131022fa8be6750c201928df88a8cfba0afdca371954354f96bfb22b8e16e3937fb334df7f7cc7d1ca05a676eda983fb41"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_bpf={0xcc, 0xd, 0x0, 0x0, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0x5, 0xffffffffffffffff, 0x1, 0x2}}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x8}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0xc3, 0xfffffffa, 0x1, 0x8, 0x1}}]}, {0x6a, 0x6, "699d5cab45d2ebff2e37ffa396ef68dfbb443cf0d9a8fb9186bfb8d7d4a558146e473031cd4d30393780c854428a22426b5ea338762b00886c69abd90d890eb4f24309b5413ac279849dfc656ada8e1702f3e6bc6e1f97e073c58bdca46ad73ebc9aeef6fcbf"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_bpf={0x78, 0x19, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8, 0x5, r0}, @TCA_ACT_BPF_OPS={0x14, 0x4, [{0x7fff, 0x3, 0x5, 0x4}, {0x40, 0xb, 0x0, 0xfffffc00}]}]}, {0x31, 0x6, "23d1dacd33975eacc43a8612742ebe3296326821257f901d9bff3bf94ea3c9ade4f1a5f900238748abf0cec542"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_pedit={0x1ec4, 0x1d, 0x0, 0x0, {{0xa}, {0x1dd4, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x100, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x54, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}]}, @TCA_PEDIT_PARMS={0xe20, 0x2, {{{0xb, 0xffffff34, 0x0, 0x2, 0x800}, 0x8}, [{0x7, 0x4, 0x4, 0x4, 0x2, 0x10}, {0x5, 0x88da, 0x2, 0x6, 0xe, 0x80000001}, {0x3ff, 0x8e07, 0x4, 0x6c, 0x7, 0xffff}, {0xfffffff7, 0x3, 0x4, 0x8, 0x1, 0x9}, {0x7, 0x200, 0x3, 0x1, 0x7fffffff, 0x8}, {0x7, 0x2, 0x2d, 0x1, 0x5c7e}, {0xd9, 0x8, 0x7, 0x6, 0x7, 0x3ff}, {0xec, 0x7f, 0x9, 0x100, 0x9, 0x1}, {0x0, 0x29, 0x7, 0x6, 0x9, 0x2}, {0x9, 0x10, 0x1, 0x80000001, 0x3, 0xdc27}, {0x1, 0xffff, 0x23, 0x3dfa, 0x9, 0x5}, {0x101, 0xd90, 0x5, 0x6dda, 0x7ff, 0x5d8a348e}, {0x39, 0x8000, 0x1, 0x100, 0x4, 0x8}, {0x0, 0x3ff, 0xa8, 0xc82d, 0xa9, 0x5}, {0x3, 0xaa, 0x9, 0x100, 0xffffffff, 0x486}, {0x10000, 0x401, 0x0, 0x4, 0x1, 0x7}, {0x3ff, 0x0, 0x7ff, 0x6, 0x2134, 0xff}, {0xc, 0x0, 0x9, 0x9, 0x9, 0x1}, {0x3, 0x7, 0xff0e, 0xc94, 0x5, 0x6}, {0x9, 0x200, 0x400, 0x101, 0xa, 0xae}, {0x9, 0x9, 0x9, 0x0, 0x7, 0x5}, {0xff, 0x10000, 0x2, 0x5, 0xffffffff, 0xc}, {0xbce0, 0xa0a2, 0x1, 0x5, 0x6097, 0x637}, {0x10001, 0x7f, 0x10, 0x9, 0x5, 0x4}, {0x5, 0x6, 0x7, 0x8, 0x7ff, 0x6}, {0x2, 0x9, 0xb8a1, 0x0, 0xfffffff7, 0xf82}, {0x6, 0xfffffffe, 0x0, 0xfffffff6, 0x3, 0x7}, {0x4, 0x0, 0x4, 0xfffffff7, 0xeb9, 0xa}, {0x0, 0x200, 0x7, 0xeae, 0x0, 0x36d}, {0x4065, 0x5, 0x3, 0x8, 0x6, 0x5}, {0x7, 0x7, 0xfffffff4, 0x0, 0x4, 0x5}, {0x0, 0x9, 0x6e, 0x74, 0x0, 0xffffff7f}, {0x7, 0x80000000, 0x4, 0x40, 0x7, 0x4}, {0x1, 0x1, 0x7, 0x5, 0x0, 0x6}, {0x0, 0x9, 0x1a, 0x6, 0x9, 0x8000}, {0x5, 0x8, 0x29, 0x36, 0x9, 0x200}, {0x3, 0x6f4, 0xe80d5290, 0x3ff, 0x6, 0x8}, {0x4, 0x7, 0x3, 0x6, 0x8, 0x4}, {0x1000, 0x4, 0x7, 0xd62, 0xfffffff2, 0x9}, {0x59f5, 0x1000, 0x1084, 0xcb5, 0x94, 0x354}, {0x3, 0x2, 0x7, 0x2da4d7ff, 0x4}, {0xc, 0x5, 0x7, 0x2, 0xaf, 0x8}, {0x0, 0x6, 0x9ce, 0x1, 0x800, 0x7}, {0x1, 0x0, 0x8, 0x57, 0x6, 0x1000}, {0xfffffffd, 0x5, 0x10000, 0x7, 0x10001, 0x8}, {0x8, 0x4, 0x4, 0x7, 0x72db, 0x10000}, {0x533, 0xffffffff, 0x7, 0x9, 0xfb4e, 0x9}, {0x8572, 0x5, 0x6, 0x8, 0x12b9, 0x1}, {0xc357, 0x4, 0x1, 0x1, 0x5, 0x9784}, {0x5, 0xc35b, 0x10000, 0x80000000, 0x2, 0x5}, {0x5, 0x3, 0x10, 0x100, 0x5, 0x6}, {0x9, 0x6, 0x0, 0xfff, 0x3, 0x8}, {0x8, 0x7, 0x5, 0xbf, 0x2, 0x81}, {0x5, 0x46c2797d, 0x7, 0xff, 0x9, 0xd}, {0xc52e, 0x2, 0x6, 0x6, 0x6, 0xf}, {0x6c17f579, 0x40, 0x70a, 0x7, 0x0, 0x7}, {0x5, 0x80000000, 0x797, 0x5, 0x4, 0xfffffff7}, {0x10000, 0x4, 0x6, 0x31c3, 0x7f, 0x7}, {0x9, 0x2, 0x7, 0x2, 0x25, 0x81}, {0x81, 0x5, 0x3, 0x5d0, 0x8, 0x4}, {0x7, 0x58581cdf, 0x40, 0x9, 0x1889da6e, 0x81}, {0xf56, 0xb258, 0x5, 0x7fff, 0x5, 0x8000}, {0x4, 0x1ff, 0x1000, 0xc, 0x7, 0xa38}, {0x1000000, 0x5, 0x3, 0x8000, 0xffff9bc9, 0x6}, {0x4, 0x8, 0x1, 0x5, 0x5, 0x5}, {0x0, 0x1, 0x0, 0x3, 0x7}, {0x10000, 0x8, 0x10001, 0x6, 0x40, 0xff}, {0x7, 0x4, 0x10, 0x3ff, 0x2, 0x40}, {0x81, 0x40000000, 0x43b, 0xffff6382, 0x3, 0x8}, {0x101, 0x8, 0x3, 0x162, 0x1}, {0x8, 0x8, 0x2, 0xffff, 0x3, 0x8000}, {0x9d, 0x7, 0x8af1, 0x9, 0x5}, {0x5, 0x101, 0x1000, 0x10000, 0x5, 0xfffffffa}, {0x80000001, 0x5, 0x3ff, 0xf, 0x0, 0xe}, {0x7, 0x5c76, 0x4, 0x6, 0x0, 0x1}, {0x9, 0xb89efcf, 0x8c89, 0x93a, 0x1, 0xff0}, {0x1, 0x3, 0xfffffff0, 0x5, 0x5, 0x2}, {0x9, 0xb6e, 0x4, 0x4, 0x9, 0x395}, {0xff, 0x4, 0x7, 0xffff, 0x7, 0x7ff}, {0x3, 0x1, 0x6, 0x7, 0x0, 0x65d1}, {0x71, 0x11b84046, 0x9, 0x7b57, 0x6, 0x35a9}, {0x17, 0x7, 0x3, 0x9, 0x8}, {0x1ff, 0x7, 0x9, 0x0, 0x4}, {0xafb, 0x101, 0x7, 0x1, 0x6, 0x10}, {0x9, 0x8, 0x504a, 0xb10, 0x1ac}, {0x6, 0x5, 0x3, 0x0, 0x80000000, 0xffff}, {0x4, 0xa6c2, 0xf795, 0x3, 0x4, 0xf0}, {0x8000, 0x9a, 0x1ff, 0x86, 0x9, 0x1}, {0x9, 0x8, 0xfffffff7, 0xfffffff7, 0xb8f, 0x5}, {0x9f55, 0xcd8, 0x6, 0x3, 0x6, 0x8}, {0x0, 0x5101, 0x401, 0x8, 0x101, 0x6e63}, {0x180a, 0x2, 0x4, 0xcb, 0x498, 0x200}, {0x800, 0x1, 0x1, 0x0, 0x3, 0x7}, {0xe18, 0x1, 0x6, 0x7, 0x5, 0x9}, {0x1, 0x1, 0x101, 0x6, 0x3, 0x40}, {0x4, 0x1d, 0x1, 0x5, 0x8, 0xac4}, {0x0, 0x6, 0x7, 0x4, 0x80, 0x2}, {0x101, 0x2, 0x1, 0x400, 0x1000, 0x2d55}, {0x1, 0x2, 0x4, 0x80, 0x10001, 0x7f}, {0x5, 0x9, 0xba91, 0x1, 0x6, 0xf2f3}, {0xb7, 0x2, 0x6, 0x0, 0x9, 0x6}, {0x401, 0x6, 0xffff0001, 0x3, 0xc89, 0x80000000}, {0x3, 0x6, 0x0, 0x3, 0x3}, {0x80000000, 0x3, 0x10000, 0x3ff, 0xa, 0x8}, {0xfffffffa, 0x3, 0x18000000, 0x8, 0x81, 0x1ff}, {0x5, 0x2, 0x8, 0x4}, {0x7fffffff, 0xfffff03b, 0x0, 0x33, 0x32e, 0x4}, {0x3, 0x7, 0x5, 0x2, 0x5, 0x7}, {0x6, 0x1, 0xd, 0x3, 0x9, 0x2}, {0x5, 0x9, 0x0, 0x10, 0x0, 0x985}, {0x80000000, 0x257e544d, 0xcd, 0x0, 0x6, 0x8}, {0xce, 0x5d, 0x1, 0x3, 0x9, 0x4}, {0x2, 0x989f, 0x9, 0x3, 0x449, 0x7}, {0xd1, 0x1ff, 0x8001, 0xa0000000, 0x6, 0x200}, {0x5, 0xfffffff8, 0xfffffff8, 0x8}, {0x1, 0xff, 0x5, 0xffff5244, 0x9, 0x10001}, {0x7, 0x0, 0x5, 0x4, 0x2, 0xc97}, {0x80000001, 0x0, 0x0, 0x5f, 0x1, 0x7}, {0xd15, 0x6, 0x2, 0x7, 0x8, 0x5}, {0x6, 0xfffffff7, 0xac18, 0x6, 0x5}, {0x0, 0xfffffe01, 0x4e, 0xd8, 0x5}, {0xffff, 0x4, 0x7f, 0x79777e7, 0xeeeb, 0xb}, {0x2, 0x7, 0xffff}, {0x9b9, 0x3, 0x1, 0x2, 0xb8d7, 0x9}, {0x0, 0x0, 0xc0000000, 0x6, 0x0, 0x5}, {0x9, 0x0, 0x80000000, 0x66, 0xc, 0x7}, {0x4, 0x2, 0xe, 0x7, 0x20, 0xffff}, {0x7, 0x8, 0x8, 0x5, 0xf, 0x1}], [{0x5}, {0x1, 0x1}, {0x0, 0x2}, {0x3, 0x1}, {0x5}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x2}, {}, {0x4}, {0x2, 0x1}, {0x1}, {0x4}, {0x2, 0x1}, {0x2}, {0x2}, {0x0, 0x1}, {0x5}, {0x2}, {0x4, 0x1}, {0x3}, {0x2}, {0x1, 0x1}, {0x2}, {0x2, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x3}, {0x2}, {0x2, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x3}, {0x3}, {0x5}, {0x4}, {}, {0x5}, {0x1, 0x1}, {0x1}, {0x5}, {0x2, 0x1}, {0x4}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x5}, {0x1}, {0x2}, {0x3, 0x1}, {0x2, 0x1}, {0x5}, {}, {0x2}, {0x4, 0x1}, {0x1}, {0x4}, {0x1, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x2}, {0x4, 0x1}, {0x4}, {0x5}, {}, {0x0, 0x1}, {0x1}, {0x1, 0x1}, {0x4}, {0x2}, {0x5}, {0x2}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x1}, {0xf6e29134aba76551}, {0x5, 0x1}, {0x3}, {0x1}, {0x4, 0x1}, {0x3}, {0x1, 0x1}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x5}, {0xa65590f1b03a851, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x5}, {0x3}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x0, 0x1}, {0x4, 0x1}, {0x5}, {0x3, 0x1}], 0x1}}, @TCA_PEDIT_PARMS_EX={0xeb0, 0x4, {{{0x3, 0x5, 0xffffffffeffffff8, 0x8, 0x8377}, 0x49, 0x7, [{0x6, 0x5, 0x1, 0x7, 0x0, 0x4}, {0x5, 0x6, 0x1ce4, 0x8, 0x3ff, 0xffffff6c}, {0x8001, 0x0, 0x6d, 0x7e8, 0x2, 0x7f}, {0xde44, 0xa56, 0x5, 0x4, 0xa21, 0x6}, {0x10000, 0x6, 0x5, 0x7fff, 0x5, 0x70}, {0x2, 0x7f, 0xe4, 0x5, 0x1, 0x9}]}, [{0x5, 0x4, 0x6, 0x6, 0xffffffff, 0x80}, {0x800000, 0x3, 0x4, 0x101, 0x7, 0x7}, {0x400, 0x7, 0x5, 0x2, 0x7, 0x4}, {0x143, 0xdb, 0x8001, 0x7f, 0xffff, 0x7}, {0x7, 0x4, 0xe, 0xf, 0x0, 0x5}, {0x9, 0x3, 0x3, 0x800, 0xfe}, {0xf, 0x6, 0x401, 0x7, 0x3, 0x1}, {0x1f9, 0x6, 0x200000, 0xffffffff, 0x6, 0x3}, {0x2376, 0x7fffffff, 0x0, 0x2, 0x5831, 0xa}, {0x7fff, 0x6, 0x3, 0x800, 0x9, 0xf01}, {0xfffff4d4, 0x7, 0x5, 0xfffffff7, 0x7, 0xffffffff}, {0x81, 0x100, 0x4, 0x0, 0xcd9, 0xae1}, {0x8001, 0x5, 0x10000, 0x5, 0x3000, 0x7}, {0x3, 0x8, 0x2, 0x1, 0x800, 0x5}, {0x3ff, 0x9, 0x5, 0x3, 0xff1a, 0xfffffe01}, {0x1, 0x7ff, 0x9, 0xffff0bc7, 0x6d, 0x7}, {0x1, 0x8, 0xe87, 0x4, 0xce38, 0xf}, {0x1, 0x9, 0x7a, 0x2, 0x2, 0x8}, {0x1, 0x9, 0x9, 0x8, 0x3, 0x8}, {0x4, 0x4, 0xd, 0x6, 0x7c12632, 0x5}, {0x5c, 0x8, 0x400, 0xffff, 0x0, 0x7}, {0x5, 0x1000, 0x1ff, 0x4, 0x44f, 0x5}, {0x7, 0x1000, 0x101, 0x8, 0x5, 0x8}, {0x9, 0x7, 0x2, 0x6, 0x3, 0x1}, {0x80000000, 0x7fffffff, 0x0, 0x0, 0x1ff, 0xeb}, {0x0, 0x7, 0x0, 0xb, 0x101, 0x6}, {0x9, 0x6, 0x69cb, 0x2, 0x9, 0x62a}, {0x4, 0x8, 0x1, 0x35cc, 0xd9, 0x5}, {0x7, 0xffffffff, 0x38, 0x0, 0x3, 0x8}, {0x4, 0xb49, 0x6ee0, 0x2, 0x8, 0x8}, {0x6ca8ada, 0xff, 0x8, 0x401, 0x7, 0x13}, {0x6, 0x10001, 0xfffffffa, 0x5, 0xb0, 0x40}, {0x9, 0x3ff, 0x1, 0x5, 0x3, 0x4a7}, {0xfffffffa, 0xfa02, 0x7f, 0x1, 0x2, 0xb27}, {0x1, 0x9, 0x4, 0x2, 0x7ff, 0x5}, {0x7ff, 0xc8000000, 0x100, 0x5, 0xb29, 0x9}, {0x7f, 0x0, 0x10001, 0x10, 0x2, 0x7}, {0x6, 0x3f, 0x2, 0xfffffffe, 0xa4, 0x18}, {0x800, 0x9, 0xbd44, 0xfffffff7, 0x193, 0xc0}, {0x10, 0x400, 0x7812, 0x9, 0xa48, 0xe9}, {0x5, 0x5, 0x2, 0x5, 0x0, 0xf}, {0xda6, 0x3, 0x1, 0x3, 0x9, 0x4}, {0x10000, 0xf4b5, 0x3, 0xfff, 0x8, 0xffffffff}, {0x1ff, 0x7, 0x8, 0x1, 0x7, 0x80000001}, {0xa, 0x101, 0x2cd4, 0x100000, 0x1, 0x5}, {0xfffffff7, 0x4, 0x3, 0x0, 0xfffffff6, 0xcca5}, {0x1, 0x8000, 0x3, 0x101, 0x80000001, 0x5}, {0x8000, 0x2, 0x7f, 0x2, 0xc, 0x5}, {0x4, 0x8, 0x15, 0x1, 0x1, 0x6}, {0x9, 0x3, 0x5, 0x8, 0x800, 0x8}, {0x6, 0x800000, 0x9, 0x384, 0xfffff79c, 0x6}, {0x8, 0x8d15, 0x6, 0x1, 0x93, 0x373}, {0x9, 0xfff, 0x7f, 0x161, 0x4, 0x7f}, {0x1, 0x4, 0xfffffff8, 0x1, 0x2, 0x4}, {0xfffffffb, 0x80000001, 0xffffffff, 0xbb0, 0x7fff, 0x8000}, {0x87d, 0x3, 0x9, 0x200, 0x1, 0xfffffff4}, {0x1, 0x6, 0x8, 0x1, 0x81, 0x2}, {0x5, 0x3, 0x3, 0x1000, 0x9, 0xda}, {0x3, 0xfffffffa, 0x2, 0x8001, 0xbd, 0x81}, {0x6, 0x8001, 0x3, 0xdbb, 0xfffffffd, 0x14c}, {0x0, 0xffff291e, 0x9, 0x362b27a7, 0x8}, {0xf, 0x8001, 0x0, 0x3, 0x7fffffff, 0x5}, {0x1000, 0x10000, 0x2, 0x5, 0x2}, {0xd, 0x5, 0x7, 0x200, 0x3f7d, 0x8}, {0xf, 0x85d, 0x4, 0x3, 0xed1, 0x8}, {0x5, 0x4, 0x10, 0x3, 0x9, 0x1}, {0x6, 0x8, 0xffff7fff, 0x81, 0xb339, 0x6}, {0x7, 0x80000000, 0x59, 0x0, 0x5, 0x5ba2b039}, {0x8, 0x9, 0x4, 0x8000, 0x0, 0x80000000}, {0xe, 0x400, 0x9, 0xfffffff8, 0x7, 0x81}, {0xe4, 0x9, 0x2, 0xf, 0xa70, 0x2b}, {0x10, 0x4, 0xde, 0xf, 0xd2ec, 0x40}, {0x7f, 0xb8, 0x4, 0x4, 0x9, 0x4}, {0x2, 0x2, 0x2205, 0x4, 0x8, 0x2}, {0x1, 0xa2a1, 0x80, 0x3, 0x74, 0xf92}, {0x1ff, 0x8, 0xfffffffa, 0xf, 0x10001, 0x6}, {0xf, 0x4, 0x2, 0x5, 0x69, 0xc}, {0x7f, 0x7, 0x3, 0x7, 0x7fffffff, 0x7fffffff}, {0x4688537, 0x80, 0x6, 0x7, 0x40, 0x80000000}, {0xe5, 0x6, 0x5, 0x9, 0xd, 0xa}, {0x3, 0x9, 0x8, 0x7fffffff, 0x8}, {0x6, 0x7, 0x8, 0x65d5fe5a, 0x1dc, 0x9}, {0x3, 0x1, 0x1, 0x3, 0x7fffffff, 0x1}, {0x80000000, 0xfffff000, 0x9, 0x339, 0x3ff, 0x9}, {0xb64e, 0x90000000, 0x36ef03bb, 0x7, 0x9e4a, 0x2}, {0x80000001, 0xffffff01, 0x9, 0x8, 0x9, 0x7f}, {0x6, 0x3ff, 0x9, 0x6a1, 0x2, 0x3}, {0x5, 0x689, 0x0, 0x10001, 0xffff, 0x5}, {0x7, 0x9, 0xffffaa17, 0x6, 0x9, 0x7}, {0x7, 0x9501, 0x5, 0x8, 0x7, 0x2}, {0xd5, 0xb, 0x2, 0x2, 0x5, 0x7}, {0x0, 0xfffffff8, 0x6, 0x90, 0xb4c, 0xffff}, {0x401, 0x8, 0x1, 0x8c3, 0x1, 0x7fffffff}, {0x3ff, 0x900000, 0x2, 0x8, 0x4, 0x67f0}, {0x2, 0x7f, 0x43, 0x8, 0x7, 0x81}, {0x5, 0xe47f, 0x9, 0x9, 0x40, 0x3ff}, {0xb4, 0x7fffffff, 0x8, 0x4, 0x3, 0x8}, {0x3da, 0x0, 0x1, 0x5c1, 0x10000, 0x2}, {0x7, 0x6, 0xfe0e, 0x9, 0xf, 0x6}, {0xe6, 0x2, 0x200, 0x9, 0x1, 0x7}, {0x101, 0x1, 0x0, 0xe, 0x5, 0x5}, {0x5, 0x100, 0x4, 0xd96, 0xfffffeff, 0x40}, {0x8, 0xfffffff2, 0x8001, 0x6, 0x5e, 0x1}, {0x7, 0xc79, 0x7, 0x6, 0x9, 0x7}, {0x2, 0x7fffffff, 0x0, 0x7, 0x4, 0x7f}, {0xb45, 0x6, 0x3, 0xc, 0x5a7, 0x30}, {0x3, 0x1, 0x48b3, 0xb1, 0x80000000, 0xb9d0}, {0xfffffffa, 0x407d, 0x8000, 0x6, 0x7, 0x9}, {0x6, 0x1, 0x1f, 0x7, 0x5, 0x9e0}, {0xffffffff, 0x80000001, 0x0, 0x7, 0x50000, 0x3}, {0xf2e6, 0x71c, 0x8, 0x360000, 0x43252f57, 0xe072}, {0x401, 0x1, 0x400, 0xa, 0x6fe, 0x3}, {0xffffff1b, 0x1, 0xffffffff, 0x9, 0xfffff8d7, 0x6}, {0x3, 0x2, 0x9, 0x2, 0x77, 0xb}, {0x9, 0x0, 0x9, 0x4, 0x1, 0x59d6221c}, {0x9, 0x1281, 0x40, 0x5, 0x7, 0xfffffffc}, {0x3ff, 0xb3b, 0xfffffffb, 0x8, 0x81, 0xd95f}, {0x1, 0xf5, 0x8, 0x1, 0xfffffff4, 0xce}, {0x7f, 0x1, 0x0, 0x5, 0x30000, 0x1}, {0x4, 0x7, 0x8001, 0x4, 0x80000001, 0x5}, {0x40000000, 0x4, 0x3, 0x2, 0x7, 0x8}, {0x0, 0x5, 0x2, 0x62a, 0x7, 0x3}, {0xa0, 0x8001, 0x1, 0x9, 0xffff, 0x80000000}, {0x200, 0x5, 0x9, 0x3, 0x10}, {0xbe, 0x65d, 0x401, 0xd, 0x8, 0x6}, {0x80000000, 0x80000000, 0x6, 0x2, 0xffff, 0x3e7}, {0xf1, 0x400, 0xffffffff, 0x4, 0x10000, 0x38}, {0x3ff, 0x1000, 0x5, 0x5, 0x9, 0x8}], [{0x4}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x3}, {0x1}, {0x5, 0x1}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x7, 0x1}, {0x1}, {0x2}, {0x2}, {0x3}, {0x6}, {}, {0x2, 0x1}, {0x4}, {0x0, 0x1}, {0x1, 0x1}, {0x3}, {0x5}, {0x0, 0x6c1c61bb44d48d6d}, {0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x2, 0x1}, {}, {0x3, 0x1}, {0x2}, {0x2, 0x1}, {0x5}, {0x5}, {0x2}, {0x4}, {0x2}, {0x2}, {0x3, 0x1}, {0x1, 0x1}, {0x3}, {}, {0x5, 0x1}, {0x1, 0x1}, {0x4}, {0x1}, {}, {0x4, 0x1}, {0x4}, {0x2, 0x1}, {0x0, 0x1}, {0x6}, {0x5}, {0x1}, {0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x1f30ed25d3094f2f}, {0x1}, {0x4, 0x1}, {0x5}, {0x5}, {0x2}, {0x7}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x4}, {}, {0x2, 0x1}, {0x507da97fdcedeec}, {0x1, 0x1}, {0x3}, {0x4}, {0x3}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x3}, {0x1}, {0x3}, {0x5}, {0x6, 0x1}, {0x1}, {0x2}, {0x1, 0x1}, {0x2}, {0x5, 0x1}, {}, {0x0, 0x2}, {0x1, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x3}, {0x4}, {0x2}]}}]}, {0xc6, 0x6, "b947128447a9b57fd7d226094ae405e84dfdd8b75ddb385158deb7c7f55d79ce0d13eb0ddae135477735a49b0a8f6ca351262eece318110853344593ba3143ceec2e05d49907d0c19130d3d50dbb53c7a1259baebb33dbfb8d4735d5a030d7e25eb004299bebf12b049bd8c6b657e7cf6b3016bc7d0bff175dfaba927d1ff00229e6edd0138a98990d68a148ead9759135e0dbdc44b6d06d2bb6d6b0a8b2391f99780be9e07c3fa037c835c520e8cc950645affcf5627105d6fc93787b82685541b7"}, {0xc}, {0xc}}}, @m_nat={0x2b0, 0xd, 0x0, 0x0, {{0x8}, {0x194, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x4, 0x6, 0x2, 0x7f}, @empty, @dev={0xac, 0x14, 0x14, 0x30}, 0xf7d9298c517c62be, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x0, 0x5, 0x80000000, 0x8}, @broadcast, @dev={0xac, 0x14, 0x14, 0x27}, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x5, 0x7, 0x10000, 0x7}, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x7, 0x3, 0x0, 0xff07}, @private=0xa010101, @multicast2, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0xed, 0x6, 0x4, 0x6}, @local, @broadcast, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xfffffffd, 0x0, 0x20000000, 0x0, 0x9}, @dev={0xac, 0x14, 0x14, 0xf}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x1000, 0x8, 0x3ff, 0x1}, @empty, @local, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x200, 0xceb6, 0x5, 0x7, 0x400}, @dev={0xac, 0x14, 0x14, 0x20}, @dev={0xac, 0x14, 0x14, 0x22}, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x3, 0x1, 0x9, 0x6}, @remote, @dev={0xac, 0x14, 0x14, 0xc}, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x3ff, 0x5, 0x3ff, 0x5}, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x20}, 0xff}}]}, {0xf8, 0x6, "349cd210d205bc7504c6b551982973ec832075a7d9fa1fc8d01c324a66166a11be44a0feaeaf93478c4e2ba9271a6b3f70364cc7cb0e9107d33d128946c8a137c8f3578b7fd888b6c2b6e5977d2526905e7c4cc283dd9bbcf90a987fd75bb0e60d6a00829ad543dd1afea99ca87397757697265b92daa0230c73396a88494f9608063ed73640ef2251c2dbd8503230b09ed0307d4a34ad959e3d66179301a38eb84872406ad67d928086c244804eacee5acb32e507d81396c557d9b911bb9d602a75d2913d5205323488604a3c908dd63151b3f03cfe72448f9d7ba2054283c16e6e6933f81f0b6d0fb90d9f92eb85dc6ed93e1d"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}]}, @TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @empty}, @TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0xbf07ce76c67d7ea9}, @TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @local}, @TCA_FLOWER_KEY_SCTP_SRC={0x6}]}}]}, 0x25ec}}, 0x20040054)

147.741606ms ago: executing program 1 (id=1556):
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv6_newnexthop={0x20, 0x68, 0x309, 0x0, 0x25dfdbff, {}, [@NHA_FDB={0x4}, @NHA_GROUP={0x4}]}, 0x20}}, 0x0) (async)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4003000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, r0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xfffffff3}, @MPTCP_PM_ATTR_LOC_ID={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) (async)
syz_emit_ethernet(0x72, &(0x7f0000000500)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '-Z\x00', 0x3c, 0x3c, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, {[@hopopts={0x33, 0x4, '\x00', [@calipso={0x7, 0x8}, @hao={0xc9, 0x10, @mcast2}, @ra]}], {{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0)

0s ago: executing program 1 (id=1557):
r0 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000003140), 0x1, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10)
listen(r1, 0x0)
r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000001000), 0x180, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[], 0x50)
r4 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r4, 0x1, 0x0)
fchdir(r5)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0x7, &(0x7f00000001c0)={0x8, 0x8f}, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r3}, 0x18)
bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000040)='./file0\x00'}, 0x18)
gettid()
ioctl$RTC_ALM_READ(r2, 0x80247008, &(0x7f0000000100))
r6 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r6, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10)
r7 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
r8 = dup(r7)
write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x8, 0x2, 0xfffffffffffffffd, 0x1}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x4, 0x0, 0x1136f858, 0x0, 0xffffffffffffffff}, 0x0, 0x0)
writev(r0, &(0x7f00000043c0)=[{&(0x7f00000032c0)="ea8268205953ec0e25903b01464f0c4900c1d51977817a399d2bb7dc1044c37660ffd0737f6c80b79f44c1b1d3e5f9694060dc0f0f", 0x35}, {&(0x7f0000003300)="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", 0xfcc}], 0x2)
r9 = socket$netlink(0x10, 0x3, 0x15)
setsockopt$bt_BT_FLUSHABLE(r8, 0x112, 0x8, &(0x7f0000000080)=0x6, 0x4)
sendmsg$netlink(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=ANY=[], 0x1c}], 0x1, 0x0, 0x0, 0x4004010}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180))

kernel console output (not intermixed with test programs):

ftover after parsing attributes in process `syz.1.732'.
[  248.632898][ T6936] loop2: detected capacity change from 0 to 40427
[  248.645478][ T6952] bridge0: port 1(bridge_slave_0) entered disabled state
[  248.684690][ T6936] F2FS-fs (loop2): Invalid SB checksum offset: 0
[  248.713460][ T6936] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock
[  248.739977][ T6936] F2FS-fs (loop2): invalid crc value
[  248.800721][ T6936] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  249.896593][ T6936] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0
[  249.926355][ T6936] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  250.407420][ T6954] loop0: detected capacity change from 0 to 32768
[  250.435063][ T6969] loop4: detected capacity change from 0 to 4096
[  250.570853][ T6954] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.733 (6954)
[  250.636344][ T6972] loop2: detected capacity change from 0 to 1024
[  250.637974][ T6954] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  250.678424][ T6954] BTRFS info (device loop0): using free space tree
[  250.706963][ T6954] BTRFS info (device loop0): has skinny extents
[  250.807553][ T4187] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22.
[  250.817491][ T4187] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  250.818825][ T6972] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  250.898090][ T6972] EXT4-fs (loop2): orphan cleanup on readonly fs
[  251.038069][ T6954] BTRFS info (device loop0): enabling ssd optimizations
[  251.081757][ T6972] EXT4-fs error (device loop2): __ext4_get_inode_loc:4334: comm syz.2.737: Invalid inode table block 0 in block_group 0
[  251.160805][ T6972] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5873: Corrupt filesystem
[  251.200093][ T6972] EXT4-fs error (device loop2): ext4_quota_write:6648: inode #3: comm syz.2.737: mark_inode_dirty error
[  251.262160][ T6972] Quota error (device loop2): write_blk: dquota write failed
[  251.295150][ T6972] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  251.305627][ T6996] loop4: detected capacity change from 0 to 4096
[  251.353986][ T6972] EXT4-fs error (device loop2): ext4_acquire_dquot:6236: comm syz.2.737: Failed to acquire dquot type 0
[  251.389089][ T6972] EXT4-fs error (device loop2): __ext4_get_inode_loc:4334: comm syz.2.737: Invalid inode table block 0 in block_group 0
[  251.482973][ T6996] ntfs: (device loop4): check_mft_mirror(): $MFT and $MFTMirr (record 2) do not match.  Run ntfsfix or chkdsk.
[  251.504241][ T6996] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  251.561214][ T6996] ntfs: (device loop4): ntfs_read_locked_inode(): Corrupt standard information attribute in inode.
[  251.605822][ T6996] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[  251.656414][ T6972] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5873: Corrupt filesystem
[  251.689210][ T6996] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  251.689799][ T6972] EXT4-fs error (device loop2): ext4_ext_truncate:4472: inode #15: comm syz.2.737: mark_inode_dirty error
[  251.734015][ T6996] ntfs: volume version 3.1.
[  251.764073][ T6972] EXT4-fs error (device loop2): __ext4_get_inode_loc:4334: comm syz.2.737: Invalid inode table block 0 in block_group 0
[  251.857991][ T6972] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5873: Corrupt filesystem
[  251.905065][ T6972] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem
[  251.934682][ T6972] EXT4-fs error (device loop2): __ext4_get_inode_loc:4334: comm syz.2.737: Invalid inode table block 0 in block_group 0
[  252.150758][ T6972] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5873: Corrupt filesystem
[  252.199735][ T6972] EXT4-fs error (device loop2): ext4_truncate:4286: inode #15: comm syz.2.737: mark_inode_dirty error
[  252.269833][ T6972] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem
[  252.316321][ T4331] usb 5-1: new full-speed USB device number 16 using dummy_hcd
[  252.319211][ T6972] EXT4-fs (loop2): 1 truncate cleaned up
[  252.422676][ T6972] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  252.536203][ T7007] netlink: 12 bytes leftover after parsing attributes in process `syz.0.744'.
[  252.570525][ T7007] loop0: detected capacity change from 0 to 512
[  252.644833][ T7007] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  252.786696][ T4331] usb 5-1: config 0 has an invalid interface number: 11 but max is 0
[  252.805939][ T4331] usb 5-1: config 0 has no interface number 0
[  252.817070][ T7007] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002]
[  252.836803][ T4331] usb 5-1: config 0 interface 11 altsetting 253 endpoint 0x7 has invalid maxpacket 1023, setting to 64
[  252.848382][ T4331] usb 5-1: config 0 interface 11 altsetting 253 has a duplicate endpoint with address 0x87, skipping
[  252.859455][ T4331] usb 5-1: config 0 interface 11 has no altsetting 0
[  252.866550][ T7007] EXT4-fs (loop0): orphan cleanup on readonly fs
[  252.866572][ T7007] EXT4-fs error (device loop0): ext4_orphan_get:1432: comm syz.0.744: bad orphan inode 267
[  252.868082][ T7007] EXT4-fs (loop0): Remounting filesystem read-only
[  252.875266][ T4331] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b
[  252.899301][ T4331] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  252.980926][ T7007] EXT4-fs (loop0): mounted filesystem without journal. Opts: nojournal_checksum,noblock_validity,discard,errors=remount-ro,inode_readahead_blks=0x0000000001000000. Quota mode: none.
[  253.187638][ T4331] usb 5-1: config 0 descriptor??
[  253.333490][ T7003] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  253.398654][ T4331] keyspan 5-1:0.11: Keyspan 2 port adapter converter detected
[  253.550964][ T4331] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 87
[  253.660703][ T7007] ip6t_srh: unknown srh invflags 4000
[  253.667498][ T4331] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 81
[  253.696293][ T4331] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 82
[  253.704489][ T4331] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 1
[  253.726201][ T4331] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 2
[  253.760390][ T7025] EXT4-fs warning (device loop0): dx_probe:893: inode #2: comm syz.0.744: dx entry: limit 0 != root limit 125
[  253.769045][ T4331] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 85
[  253.780632][ T4331] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 5
[  253.781071][ T7025] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.744: Corrupt directory, running e2fsck is recommended
[  253.798697][ T4331] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  253.818757][ T4331] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 83
[  253.833751][ T4331] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 84
[  253.895249][ T4331] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 3
[  253.923086][ T4331] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 4
[  253.953746][ T4331] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 86
[  253.973486][ T4331] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 6
[  253.994303][ T4331] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  254.029895][ T4331] usb 5-1: USB disconnect, device number 16
[  254.095857][ T4331] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  254.125850][ T4331] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  254.146880][ T4331] keyspan 5-1:0.11: device disconnected
[  254.429528][ T7046] netlink: 8 bytes leftover after parsing attributes in process `syz.1.755'.
[  254.442763][ T5693] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  254.445512][ T7046] netlink: 4 bytes leftover after parsing attributes in process `syz.1.755'.
[  254.472208][ T7046] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  254.481918][ T7046] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  254.490875][ T7046] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  254.499850][ T7046] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  254.848924][ T5693] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 248, changing to 7
[  254.961077][ T7055] vivid-008: disconnect
[  255.030764][ T5693] usb 3-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40
[  255.039942][ T5693] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  255.073294][ T5693] usb 3-1: Product: syz
[  255.077518][ T5693] usb 3-1: Manufacturer: syz
[  255.082125][ T5693] usb 3-1: SerialNumber: syz
[  255.479356][ T5693] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  255.500711][ T5693] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  255.522073][ T5693] usb 3-1: unit 4 not found!
[  255.564964][ T5693] usb 3-1: USB disconnect, device number 25
[  255.711492][ T7051] vivid-008: reconnect
[  255.830900][ T7069] loop4: detected capacity change from 0 to 4096
[  255.837998][ T4294] udevd[4294]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  256.088622][ T7082] loop2: detected capacity change from 0 to 7
[  256.114340][ T4173] Dev loop2: unable to read RDB block 7
[  256.120538][ T4173]  loop2: AHDI p1 p2 p3
[  256.129566][ T4173] loop2: partition table partially beyond EOD, truncated
[  256.149012][ T4173] loop2: p1 start 1818582900 is beyond EOD, truncated
[  256.176242][ T4173] loop2: p3 start 335544320 is beyond EOD, truncated
[  256.195475][ T7082] Dev loop2: unable to read RDB block 7
[  256.201390][ T7082]  loop2: AHDI p1 p2 p3
[  256.218218][ T7088] netlink: 'syz.3.767': attribute type 1 has an invalid length.
[  256.226439][ T7082] loop2: partition table partially beyond EOD, truncated
[  256.249692][ T7082] loop2: p1 start 1818582900 is beyond EOD, truncated
[  256.289407][ T7082] loop2: p3 start 335544320 is beyond EOD, truncated
[  256.324352][ T7094] netlink: 28 bytes leftover after parsing attributes in process `syz.2.768'.
[  256.344548][ T7094] bridge0: port 1(bridge_slave_0) entered disabled state
[  256.468493][ T7096] loop2: detected capacity change from 0 to 128
[  257.067227][ T4331] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  258.170198][ T4331] usb 3-1: config index 0 descriptor too short (expected 45, got 36)
[  258.179344][ T4331] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  258.190374][ T4331] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  258.200310][ T4331] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  258.213749][ T4331] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  258.223246][ T4331] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  258.242456][ T4331] usb 3-1: config 0 descriptor??
[  258.347630][ T7113] loop0: detected capacity change from 0 to 32768
[  258.434368][ T7131] netlink: 28 bytes leftover after parsing attributes in process `syz.1.781'.
[  258.462235][ T7113] XFS (loop0): Mounting V5 Filesystem
[  258.471455][ T7131] device bridge_slave_0 left promiscuous mode
[  258.477737][ T7131] bridge0: port 1(bridge_slave_0) entered disabled state
[  258.588216][ T7144] loop4: detected capacity change from 0 to 16
[  258.605236][ T7144] erofs: Unknown parameter '��'
[  258.637631][ T7113] XFS (loop0): Ending clean mount
[  258.783814][ T4391] Bluetooth: hci4: command 0x0405 tx timeout
[  259.048611][ T5692] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  259.497874][ T5692] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  259.526052][ T5692] usb 1-1: config 0 has no interfaces?
[  259.551917][ T5692] usb 1-1: New USB device found, idVendor=110a, idProduct=1130, bcdDevice= e.76
[  259.594897][ T5692] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  259.647898][ T5692] usb 1-1: config 0 descriptor??
[  259.751228][ T7160] loop4: detected capacity change from 0 to 16
[  259.771835][ T7160] erofs: Unknown parameter '��'
[  260.047715][ T5692] usb 1-1: USB disconnect, device number 13
[  260.076327][ T4183] XFS (loop0): Unmounting Filesystem
[  260.841806][ T4331] usbhid 3-1:0.0: can't add hid device: -71
[  260.849115][ T4331] usbhid: probe of 3-1:0.0 failed with error -71
[  260.859096][ T4331] usb 3-1: USB disconnect, device number 26
[  260.943951][ T7174] netlink: 28 bytes leftover after parsing attributes in process `syz.4.793'.
[  261.740054][ T7203] program syz.0.802 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  261.807273][ T7179] loop2: detected capacity change from 0 to 40427
[  261.857820][ T7179] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  261.880002][ T7179] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  261.927884][ T7179] F2FS-fs (loop2): Found nat_bits in checkpoint
[  262.013059][ T7179] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  262.020889][ T7179] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  262.061950][ T5692] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  262.325790][ T5692] usb 1-1: Using ep0 maxpacket: 16
[  262.457723][ T5692] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  262.473515][ T7211] loop4: detected capacity change from 0 to 32768
[  262.489349][ T5692] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  262.668443][ T7211] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.803 (7211)
[  262.679926][ T7218] netlink: 28 bytes leftover after parsing attributes in process `syz.3.806'.
[  262.712222][ T7211] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  262.732415][ T7211] BTRFS info (device loop4): using free space tree
[  262.742557][ T7211] BTRFS info (device loop4): has skinny extents
[  262.767341][ T5692] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  262.778554][ T5692] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  262.786682][ T5692] usb 1-1: Product: syz
[  262.820623][ T5692] usb 1-1: Manufacturer: syz
[  262.825533][ T5692] usb 1-1: SerialNumber: syz
[  262.830922][ T7220] device netdevsim0 entered promiscuous mode
[  262.862890][ T7211] BTRFS info (device loop4): enabling ssd optimizations
[  263.230653][ T5692] usb 1-1: 0:2 : does not exist
[  263.635137][ T5692] usb 1-1: USB disconnect, device number 14
[  263.944480][ T4173] udevd[4173]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  264.326311][ T7264] FAULT_INJECTION: forcing a failure.
[  264.326311][ T7264] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  264.340635][ T7264] CPU: 1 PID: 7264 Comm: syz.0.815 Not tainted syzkaller #0
[  264.347980][ T7264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  264.358188][ T7264] Call Trace:
[  264.361498][ T7264]  <TASK>
[  264.364467][ T7264]  dump_stack_lvl+0x188/0x250
[  264.369367][ T7264]  ? show_regs_print_info+0x20/0x20
[  264.374594][ T7264]  ? load_image+0x400/0x400
[  264.379125][ T7264]  ? __lock_acquire+0x7d10/0x7d10
[  264.384180][ T7264]  should_fail+0x38c/0x4c0
[  264.388724][ T7264]  _copy_from_user+0x2e/0x170
[  264.393433][ T7264]  __copy_msghdr_from_user+0x48a/0x630
[  264.398924][ T7264]  ? verify_lock_unused+0x140/0x140
[  264.404157][ T7264]  ? __ia32_sys_shutdown+0x1d0/0x1d0
[  264.409497][ T7264]  ___sys_sendmsg+0x19a/0x2e0
[  264.414220][ T7264]  ? __sys_sendmsg+0x2a0/0x2a0
[  264.419030][ T7264]  ? vfs_write+0x8b2/0xd60
[  264.423497][ T7264]  __se_sys_sendmsg+0x1af/0x290
[  264.428388][ T7264]  ? __x64_sys_sendmsg+0x80/0x80
[  264.433367][ T7264]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  264.439498][ T7264]  ? lockdep_hardirqs_on+0x94/0x140
[  264.445111][ T7264]  do_syscall_64+0x4c/0xa0
[  264.449563][ T7264]  ? clear_bhb_loop+0x30/0x80
[  264.454269][ T7264]  ? clear_bhb_loop+0x30/0x80
[  264.459081][ T7264]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  264.465002][ T7264] RIP: 0033:0x7f1d35912dd9
[  264.469448][ T7264] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  264.489265][ T7264] RSP: 002b:00007f1d33b6c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  264.497811][ T7264] RAX: ffffffffffffffda RBX: 00007f1d35b8bfa0 RCX: 00007f1d35912dd9
[  264.505818][ T7264] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000008
[  264.513922][ T7264] RBP: 00007f1d33b6c090 R08: 0000000000000000 R09: 0000000000000000
[  264.521956][ T7264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  264.529998][ T7264] R13: 00007f1d35b8c038 R14: 00007f1d35b8bfa0 R15: 00007ffd56d22f58
[  264.538007][ T7264]  </TASK>
[  264.551230][ T7273] netlink: 36 bytes leftover after parsing attributes in process `syz.1.817'.
[  265.795770][ T1432] ieee802154 phy0 wpan0: encryption failed: -22
[  265.803209][ T1432] ieee802154 phy1 wpan1: encryption failed: -22
[  266.109400][ T7274] loop4: detected capacity change from 0 to 40427
[  266.156254][ T7274] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  266.164042][ T7274] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  266.200444][ T7288] netlink: 'syz.3.823': attribute type 6 has an invalid length.
[  266.208965][ T7288] netlink: 'syz.3.823': attribute type 7 has an invalid length.
[  266.217092][ T7288] netlink: 'syz.3.823': attribute type 8 has an invalid length.
[  266.299744][ T7274] F2FS-fs (loop4): Found nat_bits in checkpoint
[  266.496552][ T7274] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  266.503665][ T7274] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  266.700416][ T7309] netlink: 36 bytes leftover after parsing attributes in process `syz.1.830'.
[  268.596451][ T7325] loop2: detected capacity change from 0 to 32768
[  268.652819][ T7339] loop0: detected capacity change from 0 to 32768
[  268.691407][ T7339] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.838 (7339)
[  268.762818][ T7339] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  268.771812][ T7339] BTRFS info (device loop0): enabling auto defrag
[  268.778874][ T7339] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  268.788394][ T7339] BTRFS info (device loop0): use zstd compression, level 3
[  268.795814][ T7339] BTRFS info (device loop0): turning on async discard
[  268.802803][ T7339] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  268.813523][ T7339] BTRFS info (device loop0): trying to use backup root at mount time
[  268.821867][ T7339] BTRFS info (device loop0): enabling ssd optimizations
[  268.828989][ T7339] BTRFS info (device loop0): using spread ssd allocation scheme
[  268.836670][ T7339] BTRFS info (device loop0): force zlib compression, level 3
[  268.844152][ T7339] BTRFS info (device loop0): using free space tree
[  268.850754][ T7339] BTRFS info (device loop0): has skinny extents
[  268.889084][ T4173] udevd[4173]: incorrect btrfs checksum on /dev/loop2
[  269.105933][ T4304] BTRFS warning (device loop0): checksum verify failed on 5337088 wanted 0xe63dbdda found 0xc926492d level 0
[  269.129125][ T7339] BTRFS warning (device loop0): failed to read root (objectid=2): -5
[  269.139390][ T4298] BTRFS warning (device loop0): checksum verify failed on 5324800 wanted 0x9f73850b found 0x80379423 level 0
[  269.207195][ T7339] BTRFS warning (device loop0): couldn't read tree root
[  269.215700][ T7339] BTRFS error (device loop0): parent transid verify failed on 5255168 wanted 5 found 7
[  269.225987][ T7339] BTRFS warning (device loop0): couldn't read tree root
[  269.245295][ T7373] netlink: 36 bytes leftover after parsing attributes in process `syz.4.842'.
[  269.275748][ T7339] BTRFS info (device loop0): clearing free space tree
[  269.283210][ T7339] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  269.293080][ T7339] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  269.391566][ T7339] BTRFS info (device loop0): creating free space tree
[  269.400395][ T7339] BTRFS info (device loop0): setting compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  269.410410][ T7339] BTRFS info (device loop0): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  269.500183][ T7339] netlink: 'syz.0.838': attribute type 6 has an invalid length.
[  269.507965][ T7339] netlink: 'syz.0.838': attribute type 7 has an invalid length.
[  269.515878][ T7339] netlink: 'syz.0.838': attribute type 8 has an invalid length.
[  269.873406][ T4229] usb 5-1: new full-speed USB device number 17 using dummy_hcd
[  270.589567][ T4229] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  270.771267][ T4229] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[  270.802235][ T4229] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  270.835109][ T4229] usb 5-1: Product: syz
[  270.856527][ T4229] usb 5-1: Manufacturer: syz
[  270.866909][ T7401] batman_adv: batadv0: Adding interface: dummy0
[  270.872339][ T4229] usb 5-1: SerialNumber: syz
[  270.896119][ T7401] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  270.922284][ T4229] usb 5-1: config 0 descriptor??
[  271.006207][ T7401] batman_adv: batadv0: Interface activated: dummy0
[  271.085603][ T7401] ip6gretap0: mtu less than device minimum
[  271.092861][ T7382] netlink: 'syz.1.844': attribute type 10 has an invalid length.
[  271.121484][ T7382] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.844'.
[  271.143571][ T7382] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  273.229032][ T7428] netlink: 16 bytes leftover after parsing attributes in process `syz.0.857'.
[  273.272881][    T7] usb 5-1: USB disconnect, device number 17
[  273.651451][ T7434] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  273.678429][ T7434] CIFS mount error: No usable UNC path provided in device string!
[  273.678429][ T7434] 
[  273.689170][ T7434] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  274.489054][ T7450] loop0: detected capacity change from 0 to 64
[  275.407819][ T7450] MINIX-fs: mounting file system with errors, running fsck is recommended
[  275.485335][ T7461] netlink: 24 bytes leftover after parsing attributes in process `syz.4.870'.
[  275.794932][ T7469] netlink: 'syz.4.874': attribute type 1 has an invalid length.
[  276.410243][ T7469] 8021q: adding VLAN 0 to HW filter on device bond1
[  276.421199][ T7475] batman_adv: batadv0: Adding interface: dummy0
[  276.466651][ T7475] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  276.511350][ T7475] batman_adv: batadv0: Interface activated: dummy0
[  276.535871][ T7469] batadv0: mtu less than device minimum
[  276.550910][ T7469] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  276.564613][ T7469] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  276.577825][ T7469] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  276.591246][ T7469] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  276.604117][ T7469] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  276.617007][ T7469] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  276.629663][ T7469] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  276.642652][ T7469] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  276.655729][ T7469] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  276.669704][ T6451] usb 1-1: new full-speed USB device number 15 using dummy_hcd
[  277.909943][ T7480] overlayfs: failed to clone upperpath
[  277.994831][ T6451] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  278.118579][ T7495] loop2: detected capacity change from 0 to 2048
[  278.152251][ T7499] loop4: detected capacity change from 0 to 2048
[  278.166717][ T6451] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[  278.180710][ T6451] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  278.202697][ T7499] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  278.218284][ T4294]  loop2: p2 p3 < > p4 < p5 >
[  278.223524][ T4294] loop2: partition table partially beyond EOD, truncated
[  278.231613][ T6451] usb 1-1: Product: syz
[  278.249750][ T6451] usb 1-1: Manufacturer: syz
[  278.255373][ T6451] usb 1-1: SerialNumber: syz
[  278.256410][ T4294] loop2: p3 start 4225 is beyond EOD, truncated
[  278.262095][ T6451] usb 1-1: config 0 descriptor??
[  278.371412][ T7499] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  278.421842][ T7495]  loop2: p2 p3 < > p4 < p5 >
[  278.465219][ T7495] loop2: partition table partially beyond EOD, truncated
[  278.508208][ T7495] loop2: p3 start 4225 is beyond EOD, truncated
[  281.804233][ T4895] udevd[4895]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory
[  281.804342][ T4173] udevd[4173]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory
[  281.827440][ T4294] udevd[4294]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[  281.932537][ T7516] loop4: detected capacity change from 0 to 4096
[  281.999593][ T5692] usb 1-1: USB disconnect, device number 15
[  282.029893][ T7516] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512)
[  282.138532][ T4175] udevd[4175]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory
[  282.157601][ T4177] udevd[4177]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[  282.170105][ T4173] udevd[4173]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory
[  283.818629][ T4331] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  283.902863][ T7531] loop4: detected capacity change from 0 to 32768
[  283.937532][ T7531] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.895 (7531)
[  283.973459][ T7531] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  283.989484][ T7531] BTRFS info (device loop4): using free space tree
[  284.002139][ T7531] BTRFS info (device loop4): has skinny extents
[  284.102203][ T4331] usb 3-1: Using ep0 maxpacket: 16
[  284.163606][ T7531] BTRFS info (device loop4): enabling ssd optimizations
[  284.200984][ T7531] BTRFS info (device loop4): device stats zeroed by syz.4.895 (7531)
[  284.246233][ T4331] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  284.264514][ T4331] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  284.498952][ T4331] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  284.508863][ T4331] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  284.517499][ T4331] usb 3-1: Product: syz
[  284.521801][ T4331] usb 3-1: Manufacturer: syz
[  284.526933][ T4331] usb 3-1: SerialNumber: syz
[  284.711179][ T7583] loop4: detected capacity change from 0 to 1024
[  284.932619][ T7583] netlink: 16 bytes leftover after parsing attributes in process `syz.4.904'.
[  284.994301][ T4331] usb 3-1: 0:2 : does not exist
[  285.033749][ T4331] usb 3-1: USB disconnect, device number 27
[  285.719411][ T4294] udevd[4294]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  285.828145][ T7604] netlink: 8 bytes leftover after parsing attributes in process `syz.1.912'.
[  285.985621][ T7611] loop2: detected capacity change from 0 to 4096
[  286.047637][ T7614] loop4: detected capacity change from 0 to 1024
[  286.147670][ T7614] hfsplus: invalid catalog btree flag
[  286.169803][ T7614] hfsplus: failed to load catalog file
[  286.270569][ T7617] loop4: detected capacity change from 0 to 1024
[  286.526874][ T7617] netlink: 16 bytes leftover after parsing attributes in process `syz.4.917'.
[  287.781049][ T7635] netlink: 8 bytes leftover after parsing attributes in process `syz.1.924'.
[  287.986213][ T4229] usb 5-1: new full-speed USB device number 18 using dummy_hcd
[  288.295802][ T7631] loop2: detected capacity change from 0 to 32768
[  288.339058][ T4331] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  288.585312][ T7648] netlink: 16 bytes leftover after parsing attributes in process `syz.3.930'.
[  288.649299][ T7631] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.922 (7631)
[  288.687624][ T7631] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  288.710808][ T7631] BTRFS info (device loop2): enabling auto defrag
[  288.721611][ T7631] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  288.745308][ T4229] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  288.753364][ T7631] BTRFS info (device loop2): use zstd compression, level 3
[  288.763199][ T7651] "syz.3.931" (7651) uses obsolete ecb(arc4) skcipher
[  288.812831][ T7631] BTRFS info (device loop2): turning on async discard
[  288.841550][ T7631] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  288.852570][ T7631] BTRFS info (device loop2): trying to use backup root at mount time
[  288.860694][ T7631] BTRFS info (device loop2): enabling ssd optimizations
[  288.862513][ T4331] usb 1-1: device descriptor read/64, error -71
[  288.890034][ T7631] BTRFS info (device loop2): using spread ssd allocation scheme
[  288.922477][ T7631] BTRFS info (device loop2): force zlib compression, level 3
[  288.930578][ T4229] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[  288.946322][ T4229] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  288.959034][ T7631] BTRFS info (device loop2): using free space tree
[  288.980156][ T4229] usb 5-1: Product: syz
[  288.984377][ T4229] usb 5-1: Manufacturer: syz
[  288.990866][ T7631] BTRFS info (device loop2): has skinny extents
[  289.032646][ T4229] usb 5-1: SerialNumber: syz
[  289.055431][ T4229] usb 5-1: config 0 descriptor??
[  289.197010][ T4331] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  289.223676][ T1392] BTRFS warning (device loop2): checksum verify failed on 5337088 wanted 0xe63dbdda found 0xc926492d level 0
[  289.247414][ T7631] BTRFS warning (device loop2): failed to read root (objectid=2): -5
[  289.262649][ T4304] BTRFS warning (device loop2): checksum verify failed on 5324800 wanted 0x9f73850b found 0x80379423 level 0
[  289.285394][ T7631] BTRFS warning (device loop2): couldn't read tree root
[  289.298254][ T7631] BTRFS error (device loop2): parent transid verify failed on 5255168 wanted 5 found 7
[  289.356581][ T7631] BTRFS warning (device loop2): couldn't read tree root
[  289.429300][ T4331] usb 1-1: device descriptor read/64, error -71
[  289.569202][ T4331] usb usb1-port1: attempt power cycle
[  289.639810][ T7631] BTRFS info (device loop2): clearing free space tree
[  289.698481][ T7631] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  289.749493][ T4385] Bluetooth: hci4: command 0x0406 tx timeout
[  289.810248][ T7631] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  290.028833][ T4331] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  290.177104][ T4331] usb 1-1: device descriptor read/8, error -71
[  290.265132][ T7631] BTRFS info (device loop2): creating free space tree
[  290.409945][ T7631] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  290.489109][ T5692] usb 5-1: USB disconnect, device number 18
[  290.496185][ T7631] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  290.497426][ T4331] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  290.658214][ T4331] usb 1-1: device descriptor read/8, error -71
[  290.814442][ T4331] usb usb1-port1: unable to enumerate USB device
[  291.232806][ T7691] netlink: 8 bytes leftover after parsing attributes in process `syz.2.938'.
[  291.925620][ T7698] netlink: 16 bytes leftover after parsing attributes in process `syz.1.941'.
[  292.378387][ T4324] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  292.666876][ T4324] usb 3-1: Using ep0 maxpacket: 8
[  292.812295][ T4324] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  292.833635][ T4324] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  292.835596][ T7725] program syz.0.952 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  292.843617][ T4324] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  292.869943][ T4324] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024
[  292.887096][ T4324] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  292.898716][ T4324] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  292.923246][ T4324] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  292.945517][ T4324] usb 3-1: config 0 descriptor??
[  292.966355][ T7701] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  293.167689][ T7727] netlink: 16 bytes leftover after parsing attributes in process `syz.1.954'.
[  293.245703][ T5692] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  293.498960][ T4229] usb 3-1: USB disconnect, device number 28
[  293.505395][ T5692] usb 1-1: Using ep0 maxpacket: 16
[  293.639955][ T5692] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  293.660815][ T5692] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  293.842947][ T5692] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  293.889118][ T5692] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  294.024642][ T5692] usb 1-1: Product: syz
[  294.112284][ T5692] usb 1-1: Manufacturer: syz
[  294.196110][ T5692] usb 1-1: SerialNumber: syz
[  294.398888][ T7738] loop4: detected capacity change from 0 to 8192
[  294.453807][ T7738] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal
[  294.506936][ T7738] REISERFS (device loop4): using ordered data mode
[  294.513605][ T7738] reiserfs: using flush barriers
[  294.528281][ T7751] loop2: detected capacity change from 0 to 64
[  294.546512][ T7738] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  294.562933][ T5692] usb 1-1: 0:2 : does not exist
[  294.568783][ T7738] REISERFS (device loop4): checking transaction log (loop4)
[  294.583527][ T5692] usb 1-1: USB disconnect, device number 20
[  294.610822][ T7738] REISERFS (device loop4): Using r5 hash to sort names
[  294.658612][ T7738] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  294.759498][ T7754] netlink: 16 bytes leftover after parsing attributes in process `syz.3.965'.
[  294.788145][ T7751] hfs: inconsistency in B*Tree (-1,0,2,3,0)
[  294.800852][ T7751] hfs: get root inode failed
[  295.040426][ T4173] udevd[4173]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  295.192181][ T7761] loop2: detected capacity change from 0 to 2048
[  295.633007][ T7761] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  296.598873][ T7761] ext4 filesystem being mounted at /152/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  296.648519][ T7761] EXT4-fs error (device loop2): ext4_xattr_block_get:543: inode #15: comm syz.2.968: corrupted xattr block 128
[  296.661759][ T7761] EXT4-fs error (device loop2): ext4_xattr_block_get:543: inode #15: comm syz.2.968: corrupted xattr block 128
[  296.674171][ T7761] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.968: bg 0: block 345: padding at end of block bitmap is not set
[  296.678672][ T7761] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6191: Corrupt filesystem
[  296.843456][ T4324] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  296.894463][ T7784] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  296.913879][ T7784] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  297.118627][ T7788] netlink: 16 bytes leftover after parsing attributes in process `syz.1.976'.
[  297.304487][ T4324] usb 5-1: config index 0 descriptor too short (expected 45, got 36)
[  297.316711][ T4324] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  297.349764][ T4324] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  297.384506][ T4324] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  297.408924][ T4324] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  297.428253][ T4324] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  297.475055][ T4324] usb 5-1: config 0 descriptor??
[  297.524021][ T7796] loop2: detected capacity change from 0 to 8192
[  297.579434][ T7796] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal
[  297.654567][ T7796] REISERFS (device loop2): using ordered data mode
[  297.687049][   T26] audit: type=1326 audit(1777538006.070:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7809 comm="syz.3.981" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5c58643dd9 code=0x0
[  297.715994][ T7805] autofs4:pid:7805:autofs_fill_super: called with bogus options
[  297.730428][ T7796] reiserfs: using flush barriers
[  297.771693][ T7796] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  297.801143][   T26] audit: type=1326 audit(1777538006.116:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7809 comm="syz.3.981" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5c58643dd9 code=0x0
[  297.860744][ T7796] REISERFS (device loop2): checking transaction log (loop2)
[  297.892378][ T7796] REISERFS (device loop2): Using r5 hash to sort names
[  297.899756][ T7796] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  298.112309][ T4324] plantronics 0003:047F:FFFF.000A: unknown main item tag 0xd
[  298.122008][ T4324] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving
[  298.148511][ T4324] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  298.992535][ T4324] usb 5-1: USB disconnect, device number 19
[  299.099748][ T7824] loop4: detected capacity change from 0 to 1024
[  299.109537][ T7818] fido_id[7818]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  299.326106][ T7824] EXT4-fs (loop4): Ignoring removed orlov option
[  299.356259][ T7824] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities
[  299.918984][ T7834] kernel profiling enabled (shift: 9)
[  300.401379][ T7824] team0: Port device bridge1 added
[  300.638665][ T7847] autofs4:pid:7847:autofs_fill_super: called with bogus options
[  301.368857][ T7859] loop2: detected capacity change from 0 to 512
[  301.976761][ T7859] EXT4-fs (loop2): 1 truncate cleaned up
[  302.017066][ T7859] EXT4-fs (loop2): mounted filesystem without journal. Opts: noload,stripe=0x000000000000030c,jqfmt=vfsv1,nojournal_checksum,jqfmt=vfsv1,usrjquota=,,errors=continue. Quota mode: none.
[  302.204896][ T7859] mkiss: ax0: crc mode is auto.
[  302.253263][ T7859] overlayfs: missing 'lowerdir'
[  302.355997][ T7867] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #2: block 13: comm syz.2.997: lblock 0 mapped to illegal pblock 13 (length 1)
[  302.371015][ T5693] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  302.423711][ T7867] EXT4-fs error (device loop2): __ext4_get_inode_loc:4334: comm syz.2.997: Invalid inode table block 808464432 in block_group 0
[  302.453765][ T7850] loop4: detected capacity change from 0 to 32768
[  302.487219][ T7850] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.994 (7850)
[  302.508924][ T7867] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5873: Corrupt filesystem
[  302.521476][ T7872] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1002'.
[  302.535871][ T7850] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  302.565216][ T7850] BTRFS info (device loop4): using free space tree
[  302.573158][ T7867] EXT4-fs error (device loop2): ext4_dirty_inode:6077: inode #2: comm syz.2.997: mark_inode_dirty error
[  302.584864][ T7850] BTRFS info (device loop4): has skinny extents
[  302.672766][ T7850] BTRFS info (device loop4): enabling ssd optimizations
[  302.719076][ T4190] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #2: block 13: comm syz-executor: lblock 0 mapped to illegal pblock 13 (length 1)
[  302.736976][ T7850] BTRFS info (device loop4): device stats zeroed by syz.4.994 (7850)
[  302.745859][ T4296] EXT4-fs error (device loop2): __ext4_get_inode_loc:4334: comm kworker/u4:6: Invalid inode table block 808464432 in block_group 0
[  302.754571][ T5693] usb 1-1: config index 0 descriptor too short (expected 45, got 36)
[  302.797318][ T5693] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  302.836866][ T5693] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  302.858674][ T5693] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  302.880778][ T5693] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  302.914665][ T5693] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  302.947351][ T5693] usb 1-1: config 0 descriptor??
[  303.306546][ T7901] loop4: detected capacity change from 0 to 64
[  303.338161][ T7901] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended.  mounting read-only.
[  303.356911][ T7901] hfs: filesystem is marked locked, mounting read-only.
[  303.450938][ T5693] plantronics 0003:047F:FFFF.000B: unknown main item tag 0xd
[  303.459487][ T5693] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving
[  303.518501][ T5693] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  303.527522][ T7908] fuse: Bad value for 'fd'
[  303.646068][ T7907] loop4: detected capacity change from 0 to 4096
[  303.769616][ T4324] usb 1-1: USB disconnect, device number 21
[  304.007852][ T1392] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  304.119922][ T1392] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  304.209591][ T1392] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  304.436639][ T1392] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  305.362644][ T7947] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1022'.
[  305.649769][ T7947] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1022'.
[  305.850669][ T7950] netlink: 11562 bytes leftover after parsing attributes in process `syz.3.1022'.
[  306.236906][ T7957] loop0: detected capacity change from 0 to 512
[  306.359940][ T7962] loop4: detected capacity change from 0 to 512
[  306.380786][ T7957] sctp: [Deprecated]: syz.0.1025 (pid 7957) Use of int in max_burst socket option.
[  306.380786][ T7957] Use struct sctp_assoc_value instead
[  306.399928][ T7957] mmap: syz.0.1025 (7957) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst.
[  306.447649][ T7962] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option
[  306.490495][   T26] audit: type=1800 audit(1777538014.305:18): pid=7968 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1025" name="file1" dev="loop0" ino=1048606 res=0 errno=0
[  306.520226][ T7962] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e02c, mo2=0042]
[  306.544040][ T6720] Bluetooth: hci2: command 0x0409 tx timeout
[  306.563901][ T7962] System zones: 1-12
[  306.578636][ T7962] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 33261: comm syz.4.1024: invalid block
[  306.622501][ T7962] EXT4-fs (loop4): Remounting filesystem read-only
[  306.631259][ T7962] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1024: invalid indirect mapped block 8 (level 2)
[  306.647894][ T7926] chnl_net:caif_netlink_parms(): no params data found
[  306.658133][ T7962] EXT4-fs (loop4): Remounting filesystem read-only
[  306.666658][ T7962] EXT4-fs (loop4): 1 truncate cleaned up
[  306.681724][ T7962] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_dev=0x0000000000000008,nojournal_checksum,dax=inode,data_err=ignore,max_batch_time=0x0000000000000001,errors=remount-ro,nomblk_io_submit,. Quota mode: none.
[  306.901714][ T7972] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1027'.
[  307.229706][ T7926] bridge0: port 1(bridge_slave_0) entered blocking state
[  307.236223][ T7926] bridge0: port 1(bridge_slave_0) entered disabled state
[  307.246262][ T7926] device bridge_slave_0 entered promiscuous mode
[  307.252237][ T7926] bridge0: port 2(bridge_slave_1) entered blocking state
[  307.262373][ T7926] bridge0: port 2(bridge_slave_1) entered disabled state
[  307.284037][ T7926] device bridge_slave_1 entered promiscuous mode
[  308.484005][ T7926] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  308.485691][ T7926] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  308.544089][ T8008] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1032'.
[  308.544126][ T8008] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1032'.
[  308.607365][ T7926] team0: Port device team_slave_0 added
[  308.632794][ T7926] team0: Port device team_slave_1 added
[  308.728184][ T6720] Bluetooth: hci2: command 0x041b tx timeout
[  308.782538][ T7926] batman_adv: batadv0: Adding interface: batadv_slave_0
[  308.783256][ T7926] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  308.783287][ T7926] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  308.785979][ T7926] batman_adv: batadv0: Adding interface: batadv_slave_1
[  308.785995][ T7926] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  308.786021][ T7926] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  308.895958][ T7926] device hsr_slave_0 entered promiscuous mode
[  308.906425][ T7926] device hsr_slave_1 entered promiscuous mode
[  308.925577][ T7926] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  308.925701][ T7926] Cannot create hsr debugfs directory
[  310.015078][ T7926] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  310.027084][ T7926] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  310.031335][ T7926] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  310.046478][ T7926] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  310.214582][ T1392] device hsr_slave_0 left promiscuous mode
[  310.215310][ T1392] device hsr_slave_1 left promiscuous mode
[  310.216425][ T1392] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  310.216512][ T1392] batman_adv: batadv0: Removing interface: batadv_slave_0
[  310.249925][ T1392] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  310.249960][ T1392] batman_adv: batadv0: Removing interface: batadv_slave_1
[  310.250637][ T1392] device bridge_slave_1 left promiscuous mode
[  310.253613][ T1392] bridge0: port 2(bridge_slave_1) entered disabled state
[  310.270101][ T1392] device bridge_slave_0 left promiscuous mode
[  310.270261][ T1392] bridge0: port 1(bridge_slave_0) entered disabled state
[  310.337108][ T1392] device virt_wifi0 left promiscuous mode
[  310.343448][ T1392] device veth1_macvtap left promiscuous mode
[  310.343716][ T1392] device veth0_macvtap left promiscuous mode
[  310.343801][ T1392] device veth1_vlan left promiscuous mode
[  310.343989][ T1392] device veth0_vlan left promiscuous mode
[  310.720073][ T8057] netlink: 'syz.3.1044': attribute type 10 has an invalid length.
[  310.720101][ T8057] netlink: 208708 bytes leftover after parsing attributes in process `syz.3.1044'.
[  310.950684][ T4229] Bluetooth: hci2: command 0x040f tx timeout
[  311.697676][ T1392] team0 (unregistering): Port device team_slave_1 removed
[  311.739372][ T1392] team0 (unregistering): Port device team_slave_0 removed
[  311.761276][ T1392] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  311.788413][ T1392] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  311.907543][ T1392] bond0 (unregistering): Released all slaves
[  312.089402][ T8069] fuse: Unknown parameter '4'
[  312.131489][ T8069] netlink: 'syz.1.1048': attribute type 3 has an invalid length.
[  312.236089][ T7926] 8021q: adding VLAN 0 to HW filter on device bond0
[  312.285922][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  312.310215][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  312.356800][ T7926] 8021q: adding VLAN 0 to HW filter on device team0
[  312.394008][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  312.414224][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  312.432422][ T4505] bridge0: port 1(bridge_slave_0) entered blocking state
[  312.440127][ T4505] bridge0: port 1(bridge_slave_0) entered forwarding state
[  312.476432][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  312.494641][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  312.541509][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  312.564789][ T4505] bridge0: port 2(bridge_slave_1) entered blocking state
[  312.571936][ T4505] bridge0: port 2(bridge_slave_1) entered forwarding state
[  312.606581][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  312.634762][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  312.693072][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  312.737018][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  312.764109][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  312.815501][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  312.854127][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  312.893951][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  313.115189][ T8093] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma?
[  313.136711][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  313.162888][ T4229] Bluetooth: hci2: command 0x0419 tx timeout
[  313.405510][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  313.441545][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  313.465204][ T7926] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  314.125515][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  314.133628][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  314.233434][ T7926] 8021q: adding VLAN 0 to HW filter on device batadv0
[  315.334565][ T8143] netlink: 'syz.3.1062': attribute type 1 has an invalid length.
[  315.342754][ T7899] usb 1-1: new full-speed USB device number 22 using dummy_hcd
[  315.444864][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  315.460997][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  315.532103][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  315.562569][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  315.594811][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  315.617601][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  315.652365][ T7926] device veth0_vlan entered promiscuous mode
[  315.738680][ T7926] device veth1_vlan entered promiscuous mode
[  315.795795][ T8152] overlayfs: failed to clone upperpath
[  315.865517][ T7899] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  316.063372][ T7899] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[  316.085053][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  316.112051][ T7899] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  316.126074][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  316.163514][ T7899] usb 1-1: Product: syz
[  316.178242][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  316.199225][ T7899] usb 1-1: Manufacturer: syz
[  316.233334][ T7899] usb 1-1: SerialNumber: syz
[  316.243388][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  316.290744][ T7899] usb 1-1: config 0 descriptor??
[  316.334464][ T7926] device veth0_macvtap entered promiscuous mode
[  316.370528][ T8120] loop4: detected capacity change from 0 to 32768
[  316.378102][ T7926] device veth1_macvtap entered promiscuous mode
[  316.427889][ T7926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  316.456197][ T7926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  316.485940][ T7926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  316.560844][ T7926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  316.566743][ T8120] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.1058 (8120)
[  316.571113][ T7926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  316.600878][ T7926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  316.657811][ T7926] batman_adv: batadv0: Interface activated: batadv_slave_0
[  316.784177][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  316.863827][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  317.016906][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  317.175653][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  317.346099][ T8120] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  317.406117][ T7926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  317.540433][ T8120] BTRFS info (device loop4): using free space tree
[  317.571624][ T7926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  317.657162][ T8120] BTRFS info (device loop4): has skinny extents
[  317.729512][ T7926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  317.845936][ T7899] usb 1-1: USB disconnect, device number 22
[  317.880634][ T8120] BTRFS error (device loop4): open_ctree failed: -12
[  317.903917][ T7926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  317.908972][ T4294] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by udevd (4294)
[  317.914292][ T7926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  317.937182][ T7926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  317.951808][ T7926] batman_adv: batadv0: Interface activated: batadv_slave_1
[  317.992864][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  318.006296][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  318.043861][ T8185] loop0: detected capacity change from 0 to 256
[  318.086007][ T7926] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  318.137824][ T8185] exfat: Deprecated parameter 'utf8'
[  318.193259][ T7926] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  318.234074][ T7926] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  318.281278][ T7926] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  318.341225][ T8185] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x72bddf51, utbl_chksum : 0xe619d30d)
[  318.516308][ T4229] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  318.744561][ T4301] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  318.756007][ T4301] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  318.805920][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  318.863329][ T4296] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  318.883170][ T4296] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  318.934213][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  318.954604][ T4229] usb 5-1: config index 0 descriptor too short (expected 45, got 36)
[  318.963027][ T4229] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  319.029225][ T4229] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  319.096996][ T4229] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  319.142605][ T4229] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  319.190659][ T4229] usb 5-1: config 0 descriptor??
[  319.266776][ T4229] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[  319.702629][ T4324] usb 6-1: new full-speed USB device number 2 using dummy_hcd
[  320.093854][ T4324] usb 6-1: config 251 has an invalid interface number: 89 but max is 0
[  320.113198][ T4324] usb 6-1: config 251 has no interface number 0
[  320.129977][ T4324] usb 6-1: config 251 interface 89 altsetting 4 endpoint 0x6 has invalid maxpacket 1024, setting to 64
[  320.170208][ T4324] usb 6-1: config 251 interface 89 has no altsetting 0
[  320.348397][ T4324] usb 6-1: New USB device found, idVendor=9bfa, idProduct=c467, bcdDevice=9b.33
[  320.368450][ T4324] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  320.405341][ T4324] usb 6-1: Product: syz
[  320.418598][ T4324] usb 6-1: Manufacturer: syz
[  320.423257][ T4324] usb 6-1: SerialNumber: syz
[  321.847303][ T4229] usb 5-1: USB disconnect, device number 20
[  322.002379][ T8254] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1078'.
[  322.641208][    T7] usb 5-1: new full-speed USB device number 21 using dummy_hcd
[  322.758206][ T8247] loop0: detected capacity change from 0 to 32768
[  322.797481][ T8247] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  322.825773][ T8247] BTRFS info (device loop0): using free space tree
[  322.848133][ T8247] BTRFS info (device loop0): has skinny extents
[  323.059769][ T8247] BTRFS info (device loop0): enabling ssd optimizations
[  323.079744][    T7] usb 5-1: unable to get BOS descriptor or descriptor too short
[  323.107778][ T8247] BTRFS info (device loop0): device stats zeroed by syz.0.1077 (8247)
[  323.122177][    T7] usb 5-1: not running at top speed; connect to a high speed hub
[  323.250603][    T7] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  323.272315][ T4324] usb 6-1: bad CDC descriptors
[  323.303404][ T4324] usb 6-1: USB disconnect, device number 2
[  323.312153][    T7] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  323.539015][    T7] usb 5-1: New USB device found, idVendor=1235, idProduct=8204, bcdDevice= 0.40
[  323.548236][    T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  323.580301][    T7] usb 5-1: Product: syz
[  323.624194][    T7] usb 5-1: Manufacturer: syz
[  323.639752][    T7] usb 5-1: SerialNumber: syz
[  324.194501][    T7] usb 5-1: USB disconnect, device number 21
[  324.251513][ T8324] 9pnet: Insufficient options for proto=fd
[  324.294570][ T8324] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
[  326.516838][ T8356] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1095'.
[  326.900108][ T8322] loop4: detected capacity change from 0 to 40427
[  327.001592][ T8322] F2FS-fs (loop4): invalid crc value
[  327.064007][ T8322] F2FS-fs (loop4): Found nat_bits in checkpoint
[  327.360652][ T8378] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1101'.
[  328.031672][ T8322] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0
[  328.058903][ T4227] usb 6-1: new full-speed USB device number 3 using dummy_hcd
[  328.067403][ T8322] F2FS-fs (loop4): Cannot turn on quotas: -2 on 1
[  328.099678][ T8322] F2FS-fs (loop4): Start checkpoint disabled!
[  328.461092][ T8392] netlink: 'syz.4.1105': attribute type 32 has an invalid length.
[  328.476149][ T4227] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  328.605712][ T8397] trusted_key: encrypted_key: keyword 'new����U�_5' not recognized
[  328.658807][ T4227] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[  328.676769][ T4227] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  328.685614][ T4227] usb 6-1: Product: syz
[  328.690127][ T4227] usb 6-1: Manufacturer: syz
[  328.694997][ T4227] usb 6-1: SerialNumber: syz
[  328.703184][ T4227] usb 6-1: config 0 descriptor??
[  328.732322][ T8400] loop0: detected capacity change from 0 to 1024
[  329.047390][ T8400] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1108'.
[  331.292578][ T1432] ieee802154 phy0 wpan0: encryption failed: -22
[  331.300159][ T1432] ieee802154 phy1 wpan1: encryption failed: -22
[  332.871455][ T4227] usb 6-1: USB disconnect, device number 3
[  333.538093][ T8423] autofs4:pid:8423:autofs_fill_super: called with bogus options
[  333.688759][ T8421] loop0: detected capacity change from 0 to 16
[  333.952191][ T8421] erofs: Unknown parameter '��'
[  334.011633][ T8426] netlink: 'syz.4.1117': attribute type 32 has an invalid length.
[  334.399031][ T8445] program syz.4.1120 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  334.455917][ T8448] loop0: detected capacity change from 0 to 4096
[  334.589073][ T8448] NILFS (loop0): invalid segment: Checksum error in segment payload
[  334.597979][ T8448] NILFS (loop0): trying rollback from an earlier position
[  334.627530][ T8448] NILFS (loop0): recovery complete
[  334.684879][ T8459] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  334.767977][ T8421] netlink: 11 bytes leftover after parsing attributes in process `syz.0.1114'.
[  334.791211][ T1107] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  334.987481][ T8465] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1124'.
[  335.122605][ T1107] usb 5-1: Using ep0 maxpacket: 16
[  335.314847][ T1107] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  335.352536][ T1107] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  335.560870][ T1107] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  335.591908][ T1107] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  336.797578][ T1107] usb 5-1: Product: syz
[  336.802700][ T1107] usb 5-1: Manufacturer: syz
[  336.807438][ T1107] usb 5-1: SerialNumber: syz
[  336.966199][ T8500] autofs4:pid:8500:autofs_fill_super: called with bogus options
[  337.270824][ T5691] usb 1-1: new full-speed USB device number 23 using dummy_hcd
[  337.901553][ T8507] netlink: 'syz.1.1131': attribute type 32 has an invalid length.
[  337.955125][ T1107] usb 5-1: 0:2 : does not exist
[  338.010346][ T1107] usb 5-1: USB disconnect, device number 22
[  338.122520][ T8518] loop4: detected capacity change from 0 to 1024
[  338.221886][ T5691] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  338.292978][ T4173] udevd[4173]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  338.441122][ T8518] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1135'.
[  338.636157][ T8531] 9pnet: Insufficient options for proto=fd
[  338.653143][ T5691] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[  338.680674][ T5691] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  338.689270][ T5691] usb 1-1: Product: syz
[  338.698516][ T5691] usb 1-1: Manufacturer: syz
[  338.727400][ T5691] usb 1-1: SerialNumber: syz
[  338.759065][ T5691] usb 1-1: config 0 descriptor??
[  338.811263][ T8538] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1141'.
[  338.854567][ T8542] autofs4:pid:8542:autofs_fill_super: called with bogus options
[  338.878354][ T8536] loop5: detected capacity change from 0 to 4096
[  338.952788][ T8536] EXT4-fs (loop5): inline encryption not supported
[  339.250675][ T5691] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  339.331513][ T8536] EXT4-fs (loop5): Test dummy encryption mode enabled
[  339.358484][ T8536] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[  339.374316][ T8536] System zones: 0-5
[  339.392188][ T5693] usb 1-1: USB disconnect, device number 23
[  339.425934][ T8536] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug,delalloc,inlinecrypt,test_dummy_encryption,errors=continue,errors=continue,delalloc,barrier,,errors=continue. Quota mode: writeback.
[  339.586029][ T8536] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1139'.
[  339.653502][ T5691] usb 5-1: Using ep0 maxpacket: 32
[  339.804569][ T8564] program syz.5.1143 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  339.814627][ T5691] usb 5-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  339.841601][ T5691] usb 5-1: config 0 interface 0 has no altsetting 0
[  339.854008][ T5691] usb 5-1: New USB device found, idVendor=07c0, idProduct=1525, bcdDevice= 0.00
[  339.861543][ T8566] netlink: 200 bytes leftover after parsing attributes in process `syz.1.1144'.
[  339.867325][ T5691] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  339.884547][ T5691] usb 5-1: config 0 descriptor??
[  340.114081][ T4391] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  340.122239][ T8571] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1146'.
[  340.201610][ T7899] usb 5-1: USB disconnect, device number 23
[  340.343635][ T8577] loop0: detected capacity change from 0 to 4096
[  340.422667][ T4391] usb 6-1: Using ep0 maxpacket: 16
[  340.552369][ T4391] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  340.589700][ T4391] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  340.797074][ T4391] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  340.833388][ T4391] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  341.010412][ T4391] usb 6-1: Product: syz
[  341.014653][ T4391] usb 6-1: Manufacturer: syz
[  341.138648][ T4391] usb 6-1: SerialNumber: syz
[  341.407197][ T8605] netlink: 7 bytes leftover after parsing attributes in process `syz.3.1153'.
[  341.780092][ T4391] usb 6-1: 0:2 : does not exist
[  341.850529][ T8615] netlink: 200 bytes leftover after parsing attributes in process `syz.4.1156'.
[  341.865633][ T4391] usb 6-1: USB disconnect, device number 4
[  341.926115][ T4173] udevd[4173]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  342.137757][ T8617] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1157'.
[  342.143730][ T8621] loop0: detected capacity change from 0 to 4096
[  342.367835][ T8625] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  342.427183][   T26] audit: type=1800 audit(1777538047.937:19): pid=8621 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1154" name="file1" dev="loop0" ino=15 res=0 errno=0
[  342.722472][ T8638] loop4: detected capacity change from 0 to 4096
[  343.226503][ T8649] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1163'.
[  343.780990][ T8668] program syz.4.1169 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  344.211255][ T8643] loop0: detected capacity change from 0 to 40427
[  344.217884][ T1109] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  344.249340][ T8677] netlink: 200 bytes leftover after parsing attributes in process `syz.1.1170'.
[  344.276787][ T8643] F2FS-fs (loop0): invalid crc value
[  344.314664][ T8643] F2FS-fs (loop0): Found nat_bits in checkpoint
[  344.504726][ T1109] usb 5-1: Using ep0 maxpacket: 16
[  344.512839][ T8643] F2FS-fs (loop0): Start checkpoint disabled!
[  344.561758][ T8643] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  344.654973][ T1109] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  344.724159][ T1109] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  345.018035][ T1109] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  345.068739][ T1109] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  345.124690][ T1109] usb 5-1: Product: syz
[  345.176174][ T1109] usb 5-1: Manufacturer: syz
[  345.197647][ T1109] usb 5-1: SerialNumber: syz
[  345.355549][ T8704] net_ratelimit: 10 callbacks suppressed
[  345.355568][ T8704] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  345.604855][ T8710] device wireguard0 entered promiscuous mode
[  345.613661][ T1109] usb 5-1: 0:2 : does not exist
[  345.698764][ T1109] usb 5-1: USB disconnect, device number 24
[  345.969757][ T4173] udevd[4173]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  346.353713][ T1107] usb 1-1: new full-speed USB device number 24 using dummy_hcd
[  346.379710][ T8734] loop4: detected capacity change from 0 to 4096
[  346.474040][ T8740] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  346.495444][   T26] audit: type=1800 audit(1777538051.746:20): pid=8734 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1181" name="file1" dev="loop4" ino=15 res=0 errno=0
[  346.498725][ T8734] FAULT_INJECTION: forcing a failure.
[  346.498725][ T8734] name failslab, interval 1, probability 0, space 0, times 0
[  346.565276][ T8734] CPU: 1 PID: 8734 Comm: syz.4.1181 Not tainted syzkaller #0
[  346.572722][ T8734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  346.583086][ T8734] Call Trace:
[  346.586394][ T8734]  <TASK>
[  346.589347][ T8734]  dump_stack_lvl+0x188/0x250
[  346.594202][ T8734]  ? show_regs_print_info+0x20/0x20
[  346.599534][ T8734]  ? load_image+0x400/0x400
[  346.604073][ T8734]  ? __might_sleep+0xf0/0xf0
[  346.608696][ T8734]  ? __lock_acquire+0x7d10/0x7d10
[  346.613968][ T8734]  should_fail+0x38c/0x4c0
[  346.618508][ T8734]  should_failslab+0x5/0x20
[  346.623056][ T8734]  slab_pre_alloc_hook+0x51/0xc0
[  346.628211][ T8734]  ? __alloc_file+0x25/0x240
[  346.632848][ T8734]  kmem_cache_alloc+0x3d/0x290
[  346.637845][ T8734]  __alloc_file+0x25/0x240
[  346.642855][ T8734]  alloc_empty_file+0x90/0x180
[  346.647663][ T8734]  path_openat+0x10f/0x2fa0
[  346.652229][ T8734]  ? verify_lock_unused+0x140/0x140
[  346.657466][ T8734]  ? __kasan_slab_alloc+0xb3/0xd0
[  346.662541][ T8734]  ? __kasan_slab_alloc+0x9c/0xd0
[  346.667692][ T8734]  ? slab_post_alloc_hook+0x4c/0x380
[  346.673192][ T8734]  ? __x64_sys_openat+0x135/0x160
[  346.678376][ T8734]  ? entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  346.684773][ T8734]  ? do_filp_open+0x410/0x410
[  346.689543][ T8734]  do_filp_open+0x1e2/0x410
[  346.694435][ T8734]  ? vfs_tmpfile+0x300/0x300
[  346.699101][ T8734]  ? _raw_spin_unlock+0x24/0x40
[  346.704004][ T8734]  ? alloc_fd+0x598/0x630
[  346.708492][ T8734]  do_sys_openat2+0x150/0x4b0
[  346.713310][ T8734]  ? __lock_acquire+0x7d10/0x7d10
[  346.718367][ T8734]  ? do_sys_open+0xe0/0xe0
[  346.722817][ T8734]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  346.728922][ T8734]  ? lock_chain_count+0x20/0x20
[  346.733888][ T8734]  ? vtime_user_exit+0x2c8/0x3e0
[  346.738958][ T8734]  __x64_sys_openat+0x135/0x160
[  346.743843][ T8734]  do_syscall_64+0x4c/0xa0
[  346.748566][ T8734]  ? clear_bhb_loop+0x30/0x80
[  346.753454][ T8734]  ? clear_bhb_loop+0x30/0x80
[  346.758266][ T8734]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  346.764189][ T8734] RIP: 0033:0x7fbaefd07dd9
[  346.768732][ T8734] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  346.788501][ T8734] RSP: 002b:00007fbaedf61028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  346.796964][ T8734] RAX: ffffffffffffffda RBX: 00007fbaeff80fa0 RCX: 00007fbaefd07dd9
[  346.805179][ T8734] RDX: 0000000000183341 RSI: 0000200000000080 RDI: ffffffffffffff9c
[  346.813198][ T8734] RBP: 00007fbaedf61090 R08: 0000000000000000 R09: 0000000000000000
[  346.821202][ T8734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  346.829425][ T8734] R13: 00007fbaeff81038 R14: 00007fbaeff80fa0 R15: 00007fffa589fe08
[  346.837646][ T8734]  </TASK>
[  346.840894][    C1] vkms_vblank_simulate: vblank timer overrun
[  346.898742][ T1107] usb 1-1: config 0 has an invalid interface number: 8 but max is 0
[  346.917923][ T1107] usb 1-1: config 0 has no interface number 0
[  346.939343][ T8749] comedi comedi3: 8255: I/O port conflict (0x2,4)
[  346.946722][ T1107] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  346.965204][ T8749] comedi comedi3: 8255: I/O port conflict (0x3,4)
[  346.971909][ T8749] comedi comedi3: 8255: I/O port conflict (0x4,4)
[  346.995917][ T1107] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  347.002135][ T8749] comedi comedi3: 8255: I/O port conflict (0xc9,4)
[  347.026847][ T8749] comedi comedi3: 8255: I/O port conflict (0x5c952399,4)
[  347.034087][ T8749] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  347.065983][ T8749] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  347.075295][ T8749] comedi comedi3: 8255: I/O port conflict (0x6,4)
[  347.100041][ T8749] comedi comedi3: 8255: I/O port conflict (0xc,4)
[  347.107417][ T8749] comedi comedi3: 8255: I/O port conflict (0x81,4)
[  347.128940][ T8749] comedi comedi3: 8255: I/O port conflict (0x4,4)
[  347.140179][ T8749] comedi comedi3: 8255: I/O port conflict (0x3ff,4)
[  347.151290][ T8749] comedi comedi3: 8255: I/O port conflict (0x2,4)
[  347.181652][ T1107] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  347.201260][ T8749] comedi comedi3: 8255: I/O port conflict (0x8,4)
[  347.205512][ T1107] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  347.236153][ T1107] usb 1-1: Product: syz
[  347.254090][ T1107] usb 1-1: SerialNumber: syz
[  347.279093][ T1107] usb 1-1: config 0 descriptor??
[  347.338903][ T1107] cm109 1-1:0.8: invalid payload size 0, expected 4
[  347.406161][ T1107] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input17
[  347.646922][    C0] cm109 1-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90
[  347.656886][ T4391] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  347.924256][ T4391] usb 6-1: Using ep0 maxpacket: 8
[  348.102548][ T8786] device wireguard0 entered promiscuous mode
[  348.158003][ T8790] autofs4:pid:8790:autofs_fill_super: called with bogus options
[  348.240652][ T4391] usb 6-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb
[  348.260969][ T4391] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  348.285390][ T4391] usb 6-1: Product: syz
[  348.301742][ T4391] usb 6-1: Manufacturer: syz
[  348.317288][ T4391] usb 6-1: SerialNumber: syz
[  348.486167][ T8780] loop0: detected capacity change from 0 to 32768
[  348.503758][ T8792] netlink: 'syz.3.1191': attribute type 10 has an invalid length.
[  348.512145][ T8792] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1191'.
[  348.521647][ T8792] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  348.550505][ T8780] JBD2: Ignoring recovery information on journal
[  348.634483][ T8780] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  348.887717][   T26] audit: type=1800 audit(1777538053.982:21): pid=8727 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1175" name="file1" dev="loop0" ino=17059 res=0 errno=0
[  348.936542][    T7] usb 1-1: USB disconnect, device number 24
[  348.952285][    C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
[  348.955876][   T26] audit: type=1800 audit(1777538054.020:22): pid=8727 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1175" name="file1" dev="loop0" ino=17059 res=0 errno=0
[  348.959324][    C0] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  349.095746][    T7] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  349.104424][ T8799] loop5: detected capacity change from 0 to 4096
[  349.495266][ T4391] mxuport 6-1:254.0: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71)
[  349.527267][ T4391] mxuport 6-1:254.0: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71)
[  349.536499][ T4391] mxuport: probe of 6-1:254.0 failed with error -71
[  349.576965][ T4391] usb 6-1: USB disconnect, device number 5
[  349.642835][ T8819] autofs4:pid:8819:autofs_fill_super: called with bogus options
[  349.652012][ T4183] ocfs2: Unmounting device (7,0) on (node local)
[  349.704913][ T8812] loop4: detected capacity change from 0 to 40427
[  349.763618][ T8812] F2FS-fs (loop4): invalid crc value
[  349.775047][ T8812] F2FS-fs (loop4): Found nat_bits in checkpoint
[  349.879372][ T8812] F2FS-fs (loop4): Start checkpoint disabled!
[  349.906250][ T8812] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  350.035188][ T8828] program syz.0.1203 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  350.076841][ T7926] ntfs3: loop5: ntfs_evict_inode r=5 failed, -22.
[  350.084120][ T7926] ntfs3: loop5: Mark volume as dirty due to NTFS errors
[  350.130411][ T8812] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  350.164778][ T8812] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  350.215749][   T26] audit: type=1326 audit(1777538055.227:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8831 comm="syz.5.1204" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1e4373add9 code=0x0
[  350.854304][ T8839] loop4: detected capacity change from 0 to 256
[  351.670625][ T8839] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  351.696640][ T8839] exFAT-fs (loop4): Medium has reported failures. Some data may be lost.
[  351.800216][ T8839] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c91aa, utbl_chksum : 0xe619d30d)
[  351.968357][ T8875] autofs4:pid:8875:autofs_fill_super: called with bogus options
[  352.003288][ T8839] netlink: 'syz.4.1206': attribute type 10 has an invalid length.
[  352.005338][ T8872] device syzkaller0 entered promiscuous mode
[  352.012658][ T8839] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1206'.
[  352.034341][ T8839] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  352.528414][ T8891] loop0: detected capacity change from 0 to 4096
[  352.562159][ T4391] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  352.947242][ T4391] usb 6-1: config index 0 descriptor too short (expected 45, got 36)
[  353.007591][ T4391] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  353.191225][ T4391] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  353.361218][ T4391] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  353.388018][ T4391] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  353.413291][ T4391] usb 6-1: config 0 descriptor??
[  353.665797][ T8902] loop4: detected capacity change from 0 to 512
[  354.518868][ T8902] EXT4-fs error (device loop4): ext4_iget_extra_inode:4573: inode #15: comm syz.4.1230: corrupted in-inode xattr
[  354.567026][ T8902] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.1230: couldn't read orphan inode 15 (err -117)
[  354.602130][ T8902] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  355.388500][ T4391] usb 6-1: string descriptor 0 read error: -71
[  355.396693][ T4391] usb 6-1: USB disconnect, device number 6
[  355.708196][ T8921] loop0: detected capacity change from 0 to 8
[  357.024796][ T8957] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1246'.
[  358.161208][ T8940] loop0: detected capacity change from 0 to 32768
[  358.405123][ T8975] loop5: detected capacity change from 0 to 16
[  358.419194][ T8972] loop4: detected capacity change from 0 to 40427
[  358.468059][ T8972] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x1ffff
[  358.479296][ T8972] F2FS-fs (loop4): invalid crc value
[  358.504107][ T8975] MTD: Attempt to mount non-MTD device "/dev/loop5"
[  358.541197][ T8940] XFS (loop0): Mounting V5 Filesystem
[  358.647844][ T8972] F2FS-fs (loop4): Found nat_bits in checkpoint
[  358.742566][ T8972] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  358.832891][ T8940] XFS (loop0): Ending clean mount
[  359.105310][ T1109] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  359.593866][ T9003] loop5: detected capacity change from 0 to 4096
[  360.607953][ T4183] XFS (loop0): Unmounting Filesystem
[  360.674395][ T5693] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[  360.708091][ T1109] usb 5-1: Using ep0 maxpacket: 8
[  360.856947][ T1109] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  360.911100][ T1109] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  360.945555][ T1109] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  360.966901][ T1109] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  361.022087][   T26] audit: type=1804 audit(1777538065.334:24): pid=9003 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.1256" name="/newroot/22/bus/file1" dev="loop5" ino=33 res=1 errno=0
[  361.067195][ T1109] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  361.099049][ T1109] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  361.132730][ T1109] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  361.180193][ T1109] usb 5-1: config 0 descriptor??
[  361.389384][ T1109] usb 5-1: USB disconnect, device number 25
[  361.398567][ T4187] handle_bad_sector: 6 callbacks suppressed
[  361.398591][ T4187] attempt to access beyond end of device
[  361.398591][ T4187] loop4: rw=2049, want=45104, limit=40427
[  361.442198][ T7899] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  362.645536][ T7899] usb 6-1: Using ep0 maxpacket: 8
[  362.784527][ T7899] usb 6-1: device descriptor read/all, error -71
[  362.887564][ T7926] ntfs3: loop5: ntfs_evict_inode r=5 failed, -22.
[  362.917000][ T7926] ntfs3: loop5: Mark volume as dirty due to NTFS errors
[  362.976607][ T9034] 9pnet: Insufficient options for proto=fd
[  363.239202][ T9044] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1272'.
[  363.629201][ T9040] loop4: detected capacity change from 0 to 32768
[  363.721832][ T9040] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.1264 (9040)
[  363.741388][ T9040] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  363.754691][ T9040] BTRFS info (device loop4): using free space tree
[  363.762476][ T9040] BTRFS info (device loop4): has skinny extents
[  363.782425][ T7899] usb 6-1: new full-speed USB device number 8 using dummy_hcd
[  363.842623][ T9040] BTRFS info (device loop4): enabling ssd optimizations
[  363.904176][ T9040] BTRFS info (device loop4): device stats zeroed by syz.4.1264 (9040)
[  364.541527][ T7899] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  364.765611][ T7899] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[  364.780893][ T7899] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  364.789168][ T7899] usb 6-1: Product: syz
[  364.793758][ T7899] usb 6-1: Manufacturer: syz
[  364.901914][ T7899] usb 6-1: SerialNumber: syz
[  364.943841][ T7899] usb 6-1: config 0 descriptor??
[  365.139710][ T7899] Bluetooth: hci2: command 0x0405 tx timeout
[  365.151311][ T9091] loop4: detected capacity change from 0 to 4096
[  366.550176][ T5693] usb 1-1: new full-speed USB device number 26 using dummy_hcd
[  366.806766][ T5693] usb 1-1: device descriptor read/64, error -71
[  367.011352][ T4387] usb 6-1: USB disconnect, device number 8
[  367.127382][ T5693] usb 1-1: new full-speed USB device number 27 using dummy_hcd
[  367.344917][ T5693] usb 1-1: device descriptor read/64, error -71
[  367.490636][ T5693] usb usb1-port1: attempt power cycle
[  367.986479][ T9119] loop5: detected capacity change from 0 to 128
[  368.056797][ T5693] usb 1-1: new full-speed USB device number 28 using dummy_hcd
[  368.220769][ T5693] usb 1-1: device descriptor read/8, error -71
[  368.967325][ T5693] usb 1-1: new full-speed USB device number 29 using dummy_hcd
[  369.040089][ T5693] usb 1-1: device descriptor read/8, error -71
[  369.179251][ T5693] usb usb1-port1: unable to enumerate USB device
[  369.207957][ T9136] program syz.4.1300 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  369.234776][ T9134] Set syz1 is full, maxelem 14 reached
[  369.393844][ T9144] SET target dimension over the limit!
[  370.471820][ T5691] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  370.984859][ T5691] usb 5-1: Using ep0 maxpacket: 16
[  371.065690][ T4387] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  371.124151][ T5691] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  371.164232][ T5691] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  371.457784][ T4387] usb 6-1: config 0 has an invalid interface number: 8 but max is 0
[  371.474963][ T4387] usb 6-1: config 0 has no interface number 0
[  371.500445][ T4387] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  371.544419][ T4387] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  371.587015][ T4387] usb 6-1: config 0 interface 8 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  371.654320][ T4387] usb 6-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00
[  371.869508][ T4387] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  371.885112][ T5691] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  371.918867][ T5691] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  371.938549][ T5691] usb 5-1: Product: syz
[  371.943643][ T5691] usb 5-1: Manufacturer: syz
[  371.952803][ T5691] usb 5-1: SerialNumber: syz
[  371.964987][ T4387] usb 6-1: config 0 descriptor??
[  372.331826][ T5691] usb 5-1: 0:2 : does not exist
[  372.404158][ T5691] usb 5-1: USB disconnect, device number 26
[  372.484071][ T4387] uclogic 0003:28BD:0042.000C: item fetching failed at offset 5/7
[  372.675649][ T4387] uclogic 0003:28BD:0042.000C: parse failed
[  372.682357][ T4387] uclogic: probe of 0003:28BD:0042.000C failed with error -22
[  372.687225][ T4173] udevd[4173]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  372.710598][ T9162] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1308'.
[  372.733818][ T5691] usb 6-1: USB disconnect, device number 9
[  373.644450][ T9213] binder: 9210:9213 ioctl 4058587a 200000000500 returned -22
[  373.918177][ T9217] loop0: detected capacity change from 0 to 512
[  374.083058][ T9217] EXT4-fs (loop0): Unrecognized mount option "permit_directio" or missing value
[  375.080924][ T9236] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1331'.
[  376.349300][ T5693] usb 1-1: new full-speed USB device number 30 using dummy_hcd
[  376.571036][ T9259] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1340'.
[  376.584573][ T7899] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  376.677930][ T9264] autofs4:pid:9264:autofs_fill_super: called with bogus options
[  376.808968][ T5693] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  376.873648][ T7899] usb 6-1: Using ep0 maxpacket: 8
[  377.044472][ T5693] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[  377.065647][ T5693] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  377.100969][ T5693] usb 1-1: Product: syz
[  377.122904][ T5693] usb 1-1: Manufacturer: syz
[  377.140235][ T7899] usb 6-1: config 1 interface 0 has no altsetting 0
[  377.150894][ T5693] usb 1-1: SerialNumber: syz
[  377.185981][ T5693] usb 1-1: config 0 descriptor??
[  377.364654][ T7899] usb 6-1: New USB device found, idVendor=1aad, idProduct=000f, bcdDevice= 0.40
[  377.393800][ T7899] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  377.407183][ T7899] usb 6-1: Product: Ѓ
[  377.411452][ T7899] usb 6-1: Manufacturer: щ
[  377.427239][ T7899] usb 6-1: SerialNumber: С
[  378.618350][ T5691] usb 1-1: USB disconnect, device number 30
[  378.665738][ T9274] netlink: 'syz.0.1345': attribute type 1 has an invalid length.
[  378.674145][ T9274] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1345'.
[  378.881970][ T7899] usbhid 6-1:1.0: can't add hid device: -71
[  378.888911][ T7899] usbhid: probe of 6-1:1.0 failed with error -71
[  378.921289][ T7899] usb 6-1: USB disconnect, device number 10
[  379.435149][ T9297] autofs4:pid:9297:autofs_fill_super: called with bogus options
[  380.151589][ T9300] loop5: detected capacity change from 0 to 512
[  380.210505][ T9300] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended
[  380.346422][ T9300] EXT4-fs (loop5): orphan cleanup on readonly fs
[  380.962104][ T9300] EXT4-fs error (device loop5): mb_free_blocks:1889: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  381.223171][ T9300] EXT4-fs error (device loop5): ext4_do_update_inode:5229: inode #12: comm syz.5.1351: corrupted inode contents
[  381.522846][ T9300] EXT4-fs error (device loop5): ext4_dirty_inode:6077: inode #12: comm syz.5.1351: mark_inode_dirty error
[  381.589977][ T9300] EXT4-fs error (device loop5): ext4_do_update_inode:5229: inode #12: comm syz.5.1351: corrupted inode contents
[  381.724380][ T9300] EXT4-fs error (device loop5): __ext4_ext_dirty:183: inode #12: comm syz.5.1351: mark_inode_dirty error
[  381.765773][ T9300] EXT4-fs error (device loop5): ext4_do_update_inode:5229: inode #12: comm syz.5.1351: corrupted inode contents
[  381.831152][ T9300] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem
[  381.870783][ T9300] EXT4-fs error (device loop5): ext4_do_update_inode:5229: inode #12: comm syz.5.1351: corrupted inode contents
[  381.926768][ T9300] EXT4-fs error (device loop5): ext4_truncate:4286: inode #12: comm syz.5.1351: mark_inode_dirty error
[  381.960762][ T9300] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem
[  382.014788][ T9300] EXT4-fs (loop5): 1 truncate cleaned up
[  382.034696][ T9300] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodelalloc,noblock_validity,nolazytime,auto_da_alloc=0x0000000000000005,minixdf,resgid=0x000000000000ee01,noinit_itable,nolazytime,journal_dev=0x0000000000000afb2,errors=continue. Quota mode: writeback.
[  382.108283][ T9317] x_tables: unsorted underflow at hook 1
[  382.227897][ T9300] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended
[  382.298623][ T9300] EXT4-fs (loop5): re-mounted. Opts: (null). Quota mode: writeback.
[  382.363119][ T9318] loop4: detected capacity change from 0 to 32768
[  382.415216][ T9318] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.1356 (9318)
[  382.498142][ T9318] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  382.525823][ T9318] BTRFS info (device loop4): using free space tree
[  382.540875][ T9318] BTRFS info (device loop4): has skinny extents
[  382.606509][ T9324] chnl_net:caif_netlink_parms(): no params data found
[  382.926145][ T9318] BTRFS info (device loop4): enabling ssd optimizations
[  382.954107][ T9324] bridge0: port 1(bridge_slave_0) entered blocking state
[  382.976718][ T9324] bridge0: port 1(bridge_slave_0) entered disabled state
[  382.996953][ T9316] BTRFS info (device loop4): device stats zeroed by syz.4.1356 (9316)
[  383.004403][ T9324] device bridge_slave_0 entered promiscuous mode
[  383.035516][ T9324] bridge0: port 2(bridge_slave_1) entered blocking state
[  383.043239][ T9324] bridge0: port 2(bridge_slave_1) entered disabled state
[  383.052516][ T9324] device bridge_slave_1 entered promiscuous mode
[  383.061034][ T9363] device pim6reg1 entered promiscuous mode
[  383.646554][ T9324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  383.667473][ T9324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  383.872932][ T9324] team0: Port device team_slave_0 added
[  384.386617][ T5693] Bluetooth: hci0: command 0x0409 tx timeout
[  384.440957][ T9324] team0: Port device team_slave_1 added
[  384.548877][ T9385] loop4: detected capacity change from 0 to 16
[  384.618920][ T9324] batman_adv: batadv0: Adding interface: batadv_slave_0
[  384.656027][ T9324] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  384.687411][ T9385] erofs: Unknown parameter '��'
[  385.054156][ T9324] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  385.206820][ T9324] batman_adv: batadv0: Adding interface: batadv_slave_1
[  385.214638][ T9324] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  385.242086][ T9324] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  385.382401][ T9324] device hsr_slave_0 entered promiscuous mode
[  385.408180][ T9324] device hsr_slave_1 entered promiscuous mode
[  385.438311][ T9324] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  385.453438][ T9324] Cannot create hsr debugfs directory
[  385.744009][ T9402] loop4: detected capacity change from 0 to 512
[  386.718567][ T5691] Bluetooth: hci0: command 0x041b tx timeout
[  386.838518][ T9324] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  387.463367][ T9324] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  388.174344][ T9324] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  388.776649][ T9402] EXT4-fs: error -4 creating inode table initialization thread
[  388.788795][ T9402] EXT4-fs (loop4): mount failed
[  388.799850][ T9324] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  389.446166][ T1109] Bluetooth: hci0: command 0x040f tx timeout
[  389.690929][ T9324] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  389.749134][ T9324] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  389.775744][ T9324] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  389.826719][ T9324] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  390.135180][ T9324] 8021q: adding VLAN 0 to HW filter on device bond0
[  390.253830][ T9324] 8021q: adding VLAN 0 to HW filter on device team0
[  390.400486][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  390.413442][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  390.452909][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  390.505596][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  390.555774][  T144] bridge0: port 1(bridge_slave_0) entered blocking state
[  390.563012][  T144] bridge0: port 1(bridge_slave_0) entered forwarding state
[  390.711576][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  390.720495][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  390.829519][  T144] bridge0: port 2(bridge_slave_1) entered blocking state
[  390.836857][  T144] bridge0: port 2(bridge_slave_1) entered forwarding state
[  390.878987][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  390.896533][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  390.908975][ T9476] program syz.4.1391 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  390.912832][ T9475] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  390.941354][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  391.014252][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  391.039822][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  391.051351][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  391.062604][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  391.084413][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  391.097099][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  391.171654][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  391.345146][ T1109] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  391.630506][ T1109] usb 5-1: Using ep0 maxpacket: 16
[  391.642555][ T5691] Bluetooth: hci0: command 0x0419 tx timeout
[  391.708365][ T9498] udc-core: couldn't find an available UDC or it's busy
[  391.734265][ T9498] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  391.791199][ T1109] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  391.818388][ T9498] udc-core: couldn't find an available UDC or it's busy
[  391.827365][ T1109] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  391.853091][ T9498] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  391.861781][ T9501] fuse: Bad value for 'fd'
[  392.036649][ T1109] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  392.045910][ T5691] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  392.063956][ T1109] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  392.076217][ T1109] usb 5-1: Product: syz
[  392.087994][ T1109] usb 5-1: Manufacturer: syz
[  392.096073][ T1109] usb 5-1: SerialNumber: syz
[  392.189067][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  392.206429][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  392.226247][ T9324] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  392.324959][ T5691] usb 6-1: Using ep0 maxpacket: 16
[  392.355342][ T9471] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  392.364424][ T9471] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  392.382331][ T9324] 8021q: adding VLAN 0 to HW filter on device batadv0
[  392.407636][ T9471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  392.416949][ T9471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  392.439305][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  392.449712][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  392.459646][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  392.470285][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  392.481795][ T9324] device veth0_vlan entered promiscuous mode
[  392.488553][ T1109] usb 5-1: 0:2 : does not exist
[  392.501585][ T9324] device veth1_vlan entered promiscuous mode
[  392.529583][ T5691] usb 6-1: unable to get BOS descriptor or descriptor too short
[  392.556090][ T9324] device veth0_macvtap entered promiscuous mode
[  392.566189][ T1109] usb 5-1: USB disconnect, device number 27
[  392.585136][ T9471] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  392.600437][ T9471] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  392.603907][ T4173] udevd[4173]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  392.627837][ T5691] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  392.629621][ T9471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  392.649097][ T5691] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  392.662441][ T5691] usb 6-1: config 1 interface 1 has no altsetting 0
[  392.685731][ T9471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  392.701730][ T9324] device veth1_macvtap entered promiscuous mode
[  392.713580][ T9471] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  392.736537][ T9324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  392.747569][ T9324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  392.758997][ T9324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  392.769813][ T9324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  392.780063][ T9324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  392.793094][ T9324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  392.803280][ T9324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  392.827311][ T9324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  392.840240][ T9324] batman_adv: batadv0: Interface activated: batadv_slave_0
[  392.853696][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  392.863281][ T5691] usb 6-1: New USB device found, idVendor=0582, idProduct=0145, bcdDevice= 0.40
[  392.875779][ T5691] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  392.889869][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  392.898415][ T5691] usb 6-1: Product: syz
[  392.903331][ T5691] usb 6-1: Manufacturer: syz
[  392.908045][ T5691] usb 6-1: SerialNumber: syz
[  392.915819][ T9324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  392.934888][ T9324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  392.946163][ T9516] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  392.959159][ T9324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  392.972567][ T9324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  392.998447][ T9324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  393.027830][ T9324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  393.051542][ T9324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  393.062132][ T9324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  393.634001][ T9324] batman_adv: batadv0: Interface activated: batadv_slave_1
[  393.725666][ T9324] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  393.766805][ T5691] usb 6-1: USB disconnect, device number 11
[  393.835608][ T9324] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  393.887986][ T9324] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  393.927731][ T9324] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  394.377539][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  394.385564][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  394.453953][ T9536] loop4: detected capacity change from 0 to 256
[  394.516287][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  394.566009][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  394.576538][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  394.604019][ T4442] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  394.604083][ T9538] loop5: detected capacity change from 0 to 128
[  394.612870][ T4442] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  394.627949][ T9471] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  394.639226][ T9536] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  394.684109][ T9536] exFAT-fs (loop4): Medium has reported failures. Some data may be lost.
[  394.688710][ T9538] FAT-fs (loop5): Unrecognized mount option "����00000000000000000000000184467440737095516151844674407370955161518446744073709551615���u�I�[�s
q
[  394.688710][ T9538] �|^�ĕ�&k�_��N�N����7�����*Z��" or missing value
[  394.761374][ T9536] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  395.178049][ T4387] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[  395.303709][ T6720] usb 1-1: new high-speed USB device number 31 using dummy_hcd
[  395.434432][ T4387] usb 5-1: Using ep0 maxpacket: 32
[  395.779086][ T6720] usb 1-1: Using ep0 maxpacket: 8
[  396.095000][ T6720] usb 1-1: config 1 interface 0 has no altsetting 0
[  396.514382][ T6720] usb 1-1: New USB device found, idVendor=1aad, idProduct=000f, bcdDevice= 0.40
[  396.534434][ T6720] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  397.005710][ T4387] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  397.065568][ T1432] ieee802154 phy0 wpan0: encryption failed: -22
[  397.072214][ T1432] ieee802154 phy1 wpan1: encryption failed: -22
[  397.081657][ T6720] usb 1-1: Product: Ѓ
[  397.085786][ T6720] usb 1-1: Manufacturer: щ
[  397.090659][ T6720] usb 1-1: SerialNumber: С
[  397.111728][ T4387] usb 5-1: config 0 interface 0 has no altsetting 0
[  397.128725][ T4387] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00
[  397.262268][ T4387] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  397.293996][ T4387] usb 5-1: config 0 descriptor??
[  397.551014][ T9587] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1427'.
[  397.668014][ T4387] usbhid 5-1:0.0: can't add hid device: -71
[  397.674251][ T4387] usbhid: probe of 5-1:0.0 failed with error -71
[  397.721631][ T6720] usbhid 1-1:1.0: can't add hid device: -71
[  397.727696][ T6720] usbhid: probe of 1-1:1.0 failed with error -71
[  397.727958][ T4387] usb 5-1: USB disconnect, device number 28
[  397.777996][ T6720] usb 1-1: USB disconnect, device number 31
[  399.346957][ T9610] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  399.795091][ T9623] program syz.0.1439 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  400.463254][ T9600] loop5: detected capacity change from 0 to 32768
[  400.592487][ T9600] XFS (loop5): Mounting V5 Filesystem
[  400.715207][ T9600] XFS (loop5): Ending clean mount
[  400.838320][ T7926] XFS (loop5): Unmounting Filesystem
[  401.343905][ T4266] usb 1-1: new high-speed USB device number 32 using dummy_hcd
[  401.476458][ T9643] loop4: detected capacity change from 0 to 4096
[  401.524843][ T9643] ntfs: (device loop4): check_mft_mirror(): $MFT and $MFTMirr (record 2) do not match.  Run ntfsfix or chkdsk.
[  401.538984][ T9643] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  401.556405][ T9643] ntfs: (device loop4): ntfs_read_locked_inode(): Corrupt standard information attribute in inode.
[  401.577366][ T9643] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[  401.578922][ T4266] usb 1-1: device descriptor read/64, error -71
[  401.619043][ T9643] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  401.662571][ T9643] ntfs: volume version 3.1.
[  401.714602][ T9657] loop5: detected capacity change from 0 to 128
[  401.802836][ T9657] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  401.877454][ T9657] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  401.911506][ T4266] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[  402.164826][ T4266] usb 1-1: device descriptor read/64, error -71
[  403.362931][ T4266] usb usb1-port1: attempt power cycle
[  403.628117][ T9667] loop4: detected capacity change from 0 to 32768
[  403.763143][ T9667] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.1449 (9667)
[  403.822302][ T9667] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  403.831385][ T9667] BTRFS info (device loop4): setting nodatasum
[  403.849390][ T9667] BTRFS info (device loop4): enabling auto defrag
[  403.895740][ T9667] BTRFS info (device loop4): disabling tree log
[  403.916445][ T9667] BTRFS info (device loop4): using free space tree
[  403.938458][ T9667] BTRFS info (device loop4): has skinny extents
[  404.271572][ T9667] BTRFS info (device loop4): enabling ssd optimizations
[  404.550022][ T4173] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop4 scanned by udevd (4173)
[  404.990231][ T9695] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1459'.
[  405.065402][ T9709] loop0: detected capacity change from 0 to 40427
[  405.093209][ T9709] F2FS-fs (loop0): build fault injection attr: rate: 771, type: 0x1ffff
[  405.168762][ T9709] F2FS-fs (loop0): invalid crc value
[  405.204661][ T9709] F2FS-fs (loop0): Found nat_bits in checkpoint
[  405.350341][ T9709] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  405.409949][ T9738] program syz.4.1466 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  405.761813][ T9324] attempt to access beyond end of device
[  405.761813][ T9324] loop0: rw=2049, want=45104, limit=40427
[  406.141962][ T6720] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[  406.154900][ T9752] loop5: detected capacity change from 0 to 1024
[  406.226442][ T9752] EXT4-fs (loop5): Ignoring removed orlov option
[  406.308214][ T9752] EXT4-fs (loop5): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,errors=remount-ro,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,. Quota mode: none.
[  406.387953][ T6720] usb 5-1: device descriptor read/64, error -71
[  406.687072][ T6720] usb 5-1: new high-speed USB device number 30 using dummy_hcd
[  406.962635][ T6720] usb 5-1: device descriptor read/64, error -71
[  407.063863][ T9780] loop5: detected capacity change from 0 to 128
[  407.093363][ T6720] usb usb5-port1: attempt power cycle
[  407.187703][ T9780] ADFS-fs (loop5): error: can't find an ADFS filesystem on dev loop5.
[  408.418290][ T9793] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1482'.
[  408.579213][ T6720] usb 5-1: new high-speed USB device number 31 using dummy_hcd
[  408.813459][ T6720] usb 5-1: device descriptor read/8, error -71
[  408.891585][ T9761] loop0: detected capacity change from 0 to 32768
[  409.079989][ T9761] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.1470 (9761)
[  409.421570][ T9761] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  409.647054][ T9761] BTRFS info (device loop0): using free space tree
[  409.653800][ T9761] BTRFS info (device loop0): has skinny extents
[  410.137261][ T6720] usb 5-1: new low-speed USB device number 32 using dummy_hcd
[  410.420913][ T9842] netlink: 'syz.5.1493': attribute type 4 has an invalid length.
[  410.448879][ T6720] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  410.471876][ T9842] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.1493'.
[  410.489720][ T6720] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 8
[  410.543688][ T6720] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  410.608093][ T6720] usb 5-1: New USB device found, idVendor=046d, idProduct=c53f, bcdDevice= 0.00
[  410.672543][ T6720] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  410.724416][ T6720] usb 5-1: config 0 descriptor??
[  410.779921][ T9810] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  411.164607][ T9761] BTRFS error (device loop0): open_ctree failed: -12
[  411.480752][ T6720] hid (null): unknown global tag 0xa3
[  411.488682][ T6720] logitech-djreceiver 0003:046D:C53F.000D: unexpected long global item
[  411.498294][ T6720] logitech-djreceiver 0003:046D:C53F.000D: logi_dj_probe: parse failed
[  411.507124][ T6720] logitech-djreceiver: probe of 0003:046D:C53F.000D failed with error -22
[  411.628333][ T4266] usb 5-1: USB disconnect, device number 32
[  413.318547][ T9885] netlink: 'syz.0.1511': attribute type 4 has an invalid length.
[  413.432886][ T9887] loop4: detected capacity change from 0 to 164
[  413.778032][ T9887] Unable to read rock-ridge attributes
[  413.803785][ T9887] isofs_fill_super: root inode is not a directory. Corrupted media?
[  414.010019][ T9890] program syz.0.1513 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  414.360127][ T4232] usb 1-1: new high-speed USB device number 35 using dummy_hcd
[  415.743320][ T4232] usb 1-1: device descriptor read/64, error -71
[  416.110085][ T4232] usb 1-1: new high-speed USB device number 36 using dummy_hcd
[  416.368830][ T4232] usb 1-1: device descriptor read/64, error -71
[  416.972685][ T4232] usb usb1-port1: attempt power cycle
[  417.074543][   T26] audit: type=1326 audit(1777538117.795:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9929 comm="syz.3.1526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c58643dd9 code=0x7ffc0000
[  417.278124][   T26] audit: type=1326 audit(1777538117.813:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9929 comm="syz.3.1526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7f5c58643dd9 code=0x7ffc0000
[  417.348926][   T26] audit: type=1326 audit(1777538117.813:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9929 comm="syz.3.1526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c58643dd9 code=0x7ffc0000
[  417.634744][   T26] audit: type=1326 audit(1777538117.813:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9929 comm="syz.3.1526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f5c58643dd9 code=0x7ffc0000
[  417.658102][    C1] vkms_vblank_simulate: vblank timer overrun
[  417.946279][   T26] audit: type=1326 audit(1777538117.813:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9929 comm="syz.3.1526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5c58643b42 code=0x7ffc0000
[  418.213219][   T26] audit: type=1326 audit(1777538118.010:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9929 comm="syz.3.1526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f5c5860460e code=0x7ffc0000
[  418.510942][   T26] audit: type=1326 audit(1777538118.609:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9929 comm="syz.3.1526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f5c58643c07 code=0x7ffc0000
[  418.533980][    C1] vkms_vblank_simulate: vblank timer overrun
[  418.798890][ T9933] loop4: detected capacity change from 0 to 8192
[  418.871899][   T26] audit: type=1326 audit(1777538118.656:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9929 comm="syz.3.1526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5c5860460e code=0x7ffc0000
[  419.024578][ T9933] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal
[  419.142496][ T9933] REISERFS (device loop4): using ordered data mode
[  419.217465][   T26] audit: type=1326 audit(1777538118.665:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9929 comm="syz.3.1526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f5c5860460e code=0x7ffc0000
[  419.256030][ T9933] reiserfs: using flush barriers
[  419.425529][ T9933] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  419.568978][   T26] audit: type=1326 audit(1777538118.936:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9929 comm="syz.3.1526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c58643dd9 code=0x7ffc0000
[  419.685238][ T9933] REISERFS (device loop4): checking transaction log (loop4)
[  419.827967][ T9933] REISERFS (device loop4): Using r5 hash to sort names
[  419.932948][ T9933] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  422.721675][ T9962] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1538'.
[  423.852274][ T9976] netlink: 216 bytes leftover after parsing attributes in process `syz.3.1541'.
[  424.459207][ T9987] netlink: 532 bytes leftover after parsing attributes in process `syz.4.1543'.
[  424.664293][ T4266] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  425.270016][ T4266] usb 6-1: config index 0 descriptor too short (expected 45, got 36)
[  425.280933][ T4266] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  425.324847][ T4266] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  425.357339][ T4266] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  425.392685][ T4266] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  425.425045][ T4266] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  426.549962][ T9995] loop0: detected capacity change from 0 to 32768
[  426.553106][ T4266] usb 6-1: config 0 descriptor??
[  426.883945][ T9991] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1547'.
[  427.027598][ T4232] usb 1-1: new high-speed USB device number 38 using dummy_hcd
[  427.089252][T10000] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1550'.
[  427.140050][ T4266] usbhid 6-1:0.0: can't add hid device: -71
[  427.146199][ T4266] usbhid: probe of 6-1:0.0 failed with error -71
[  427.157557][ T4266] usb 6-1: USB disconnect, device number 12
[  427.360215][T10002] loop4: detected capacity change from 0 to 40427
[  427.428960][ T4232] usb 1-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64
[  427.439476][ T4232] usb 1-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32
[  427.449516][ T4232] usb 1-1: config 1 interface 0 has no altsetting 0
[  427.475602][T10002] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x1ffff
[  427.487760][T10002] F2FS-fs (loop4): invalid crc value
[  427.496716][T10002] F2FS-fs (loop4): Found nat_bits in checkpoint
[  427.552946][T10002] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  427.575153][T10002] loop6: detected capacity change from 0 to 8
[  427.586823][    C0] print_req_error: 74 callbacks suppressed
[  427.586842][    C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  427.604056][    C0] buffer_io_error: 5 callbacks suppressed
[  427.604071][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  427.629796][    C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  427.640927][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  427.669848][ T4232] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40
[  427.680207][ T4232] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  427.688402][ T4232] usb 1-1: Product: syz
[  427.692853][ T4232] usb 1-1: Manufacturer: syz
[  427.707111][    C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  427.718318][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  427.737401][ T4232] usb 1-1: SerialNumber: syz
[  427.766274][    C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  427.777328][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  427.844010][    C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  427.855305][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  427.863879][ T9994] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  427.871632][ T9994] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  427.877013][T10009] loop5: detected capacity change from 0 to 32768
[  427.881325][    C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  427.896479][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  427.923489][    C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  427.934498][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  427.943739][    C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  427.954817][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  427.963448][ T4294] ldm_validate_partition_table(): Disk read failed.
[  427.970439][    C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  427.981530][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  428.000553][    C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  428.011579][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  428.020921][ T4294] Dev loop6: unable to read RDB block 0
[  428.038069][ T4294]  loop6: unable to read partition table
[  428.043888][ T4294] loop6: partition table beyond EOD, truncated
[  428.057130][T10002] ldm_validate_partition_table(): Disk read failed.
[  428.104368][T10002] Dev loop6: unable to read RDB block 0
[  428.140778][T10002]  loop6: unable to read partition table
[  428.152776][T10002] loop6: partition table beyond EOD, truncated
[  428.211925][T10002] loop_reread_partitions: partition scan of loop6 (�N�h*h�������p��� "�o��?<��ʺ��XD��
b��p0�O{���>.) failed (rc=-5)
[  428.226645][T10009] XFS (loop5): Mounting V5 Filesystem
[  428.307222][T10002] 
[  428.309704][T10002] ======================================================
[  428.316787][T10002] WARNING: possible circular locking dependency detected
[  428.324084][T10002] syzkaller #0 Not tainted
[  428.328498][T10002] ------------------------------------------------------
[  428.335956][T10002] syz.4.1551/10002 is trying to acquire lock:
[  428.342013][T10002] ffff888074b67938 ((wq_completion)loop6){+.+.}-{0:0}, at: flush_workqueue+0x150/0x13d0
[  428.352510][T10002] 
[  428.352510][T10002] but task is already holding lock:
[  428.359893][T10002] ffff888020dff468 (&lo->lo_mutex){+.+.}-{3:3}, at: __loop_clr_fd+0xaa/0xb90
[  428.369041][T10002] 
[  428.369041][T10002] which lock already depends on the new lock.
[  428.369041][T10002] 
[  428.379472][T10002] 
[  428.379472][T10002] the existing dependency chain (in reverse order) is:
[  428.388599][T10002] 
[  428.388599][T10002] -> #6 (&lo->lo_mutex){+.+.}-{3:3}:
[  428.396083][T10002]        __mutex_lock_common+0x1e3/0x2400
[  428.401835][T10002]        mutex_lock_killable_nested+0x17/0x20
[  428.407898][T10002]        lo_open+0x6a/0x100
[  428.412414][T10002]        blkdev_get_whole+0x90/0x390
[  428.417984][T10002]        blkdev_get_by_dev+0x2d0/0xa60
[  428.423615][T10002]        blkdev_open+0x12d/0x2c0
[  428.428712][T10002]        do_dentry_open+0x7ff/0xf80
[  428.434378][T10002]        path_openat+0x26f5/0x2fa0
[  428.439572][T10002]        do_filp_open+0x1e2/0x410
[  428.444675][T10002]        do_sys_openat2+0x150/0x4b0
[  428.449900][T10002]        __x64_sys_openat+0x135/0x160
[  428.455289][T10002]        do_syscall_64+0x4c/0xa0
[  428.460233][T10002]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  428.466637][T10002] 
[  428.466637][T10002] -> #5 (&disk->open_mutex){+.+.}-{3:3}:
[  428.474644][T10002]        __mutex_lock_common+0x1e3/0x2400
[  428.480371][T10002]        mutex_lock_nested+0x17/0x20
[  428.485652][T10002]        blkdev_get_by_dev+0x157/0xa60
[  428.491114][T10002]        swsusp_check+0xa1/0x2b0
[  428.496167][T10002]        software_resume+0xc6/0x3b0
[  428.501375][T10002]        resume_store+0xe4/0x130
[  428.506304][T10002]        kernfs_fop_write_iter+0x379/0x4c0
[  428.512111][T10002]        vfs_write+0x745/0xd60
[  428.516878][T10002]        ksys_write+0x152/0x260
[  428.521806][T10002]        do_syscall_64+0x4c/0xa0
[  428.526751][T10002]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  428.533161][T10002] 
[  428.533161][T10002] -> #4 (system_transition_mutex/1){+.+.}-{3:3}:
[  428.541669][T10002]        __mutex_lock_common+0x1e3/0x2400
[  428.547398][T10002]        mutex_lock_nested+0x17/0x20
[  428.552673][T10002]        software_resume+0x7c/0x3b0
[  428.557870][T10002]        resume_store+0xe4/0x130
[  428.562802][T10002]        kernfs_fop_write_iter+0x379/0x4c0
[  428.568618][T10002]        vfs_write+0x745/0xd60
[  428.573410][T10002]        ksys_write+0x152/0x260
[  428.578276][T10002]        do_syscall_64+0x4c/0xa0
[  428.583212][T10002]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  428.589657][T10002] 
[  428.589657][T10002] -> #3 (&of->mutex){+.+.}-{3:3}:
[  428.596884][T10002]        __mutex_lock_common+0x1e3/0x2400
[  428.602621][T10002]        mutex_lock_nested+0x17/0x20
[  428.607935][T10002]        kernfs_seq_start+0x51/0x3c0
[  428.613349][T10002]        seq_read_iter+0x3c4/0xd50
[  428.618662][T10002]        vfs_read+0x759/0xd60
[  428.623443][T10002]        ksys_read+0x152/0x260
[  428.628219][T10002]        do_syscall_64+0x4c/0xa0
[  428.633155][T10002]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  428.639576][T10002] 
[  428.639576][T10002] -> #2 (&p->lock){+.+.}-{3:3}:
[  428.646613][T10002]        __mutex_lock_common+0x1e3/0x2400
[  428.652433][T10002]        mutex_lock_nested+0x17/0x20
[  428.657743][T10002]        seq_read_iter+0xad/0xd50
[  428.662943][T10002]        do_iter_readv_writev+0x47e/0x5f0
[  428.668673][T10002]        do_iter_read+0x20b/0x7c0
[  428.673843][T10002]        loop_process_work+0x16dd/0x24a0
[  428.679487][T10002]        process_one_work+0x85f/0x1010
[  428.684965][T10002]        worker_thread+0xaa6/0x1290
[  428.690178][T10002]        kthread+0x436/0x520
[  428.694782][T10002]        ret_from_fork+0x1f/0x30
[  428.699799][T10002] 
[  428.699799][T10002] -> #1 ((work_completion)(&lo->rootcg_work)){+.+.}-{0:0}:
[  428.709185][T10002]        process_one_work+0x7bb/0x1010
[  428.714649][T10002]        worker_thread+0xaa6/0x1290
[  428.719944][T10002]        kthread+0x436/0x520
[  428.724627][T10002]        ret_from_fork+0x1f/0x30
[  428.729659][T10002] 
[  428.729659][T10002] -> #0 ((wq_completion)loop6){+.+.}-{0:0}:
[  428.737819][T10002]        __lock_acquire+0x2c42/0x7d10
[  428.743200][T10002]        lock_acquire+0x19e/0x400
[  428.748433][T10002]        flush_workqueue+0x16c/0x13d0
[  428.754160][T10002]        drain_workqueue+0xcf/0x380
[  428.759444][T10002]        destroy_workqueue+0x7b/0xb20
[  428.764895][T10002]        __loop_clr_fd+0x234/0xb90
[  428.770004][T10002]        blkdev_put+0x53f/0x7d0
[  428.775132][T10002]        blkdev_close+0x76/0xa0
[  428.780101][T10002]        __fput+0x234/0x930
[  428.784700][T10002]        task_work_run+0x125/0x1a0
[  428.789811][T10002]        get_signal+0x1222/0x12c0
[  428.794844][T10002]        arch_do_signal_or_restart+0xe7/0x12c0
[  428.800996][T10002]        exit_to_user_mode_loop+0x9e/0x130
[  428.806903][T10002]        exit_to_user_mode_prepare+0xee/0x180
[  428.813077][T10002]        syscall_exit_to_user_mode+0x16/0x40
[  428.819324][T10002]        do_syscall_64+0x58/0xa0
[  428.824365][T10002]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  428.830932][T10002] 
[  428.830932][T10002] other info that might help us debug this:
[  428.830932][T10002] 
[  428.841181][T10002] Chain exists of:
[  428.841181][T10002]   (wq_completion)loop6 --> &disk->open_mutex --> &lo->lo_mutex
[  428.841181][T10002] 
[  428.854906][T10002]  Possible unsafe locking scenario:
[  428.854906][T10002] 
[  428.862535][T10002]        CPU0                    CPU1
[  428.867925][T10002]        ----                    ----
[  428.873309][T10002]   lock(&lo->lo_mutex);
[  428.877597][T10002]                                lock(&disk->open_mutex);
[  428.884753][T10002]                                lock(&lo->lo_mutex);
[  428.891543][T10002]   lock((wq_completion)loop6);
[  428.896402][T10002] 
[  428.896402][T10002]  *** DEADLOCK ***
[  428.896402][T10002] 
[  428.904750][T10002] 2 locks held by syz.4.1551/10002:
[  428.909975][T10002]  #0: ffff888020d71d18 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_put+0xf9/0x7d0
[  428.919619][T10002]  #1: ffff888020dff468 (&lo->lo_mutex){+.+.}-{3:3}, at: __loop_clr_fd+0xaa/0xb90
[  428.929101][T10002] 
[  428.929101][T10002] stack backtrace:
[  428.935144][T10002] CPU: 1 PID: 10002 Comm: syz.4.1551 Not tainted syzkaller #0
[  428.942642][T10002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  428.952703][T10002] Call Trace:
[  428.955987][T10002]  <TASK>
[  428.958915][T10002]  dump_stack_lvl+0x188/0x250
[  428.963723][T10002]  ? load_image+0x400/0x400
[  428.968249][T10002]  ? show_regs_print_info+0x20/0x20
[  428.973539][T10002]  ? print_circular_bug+0x12b/0x1a0
[  428.978748][T10002]  check_noncircular+0x296/0x330
[  428.983803][T10002]  ? add_chain_block+0x940/0x940
[  428.988755][T10002]  ? lockdep_lock+0xf1/0x1f0
[  428.993472][T10002]  ? mark_lock+0x94/0x320
[  428.997818][T10002]  __lock_acquire+0x2c42/0x7d10
[  429.002802][T10002]  ? __lock_acquire+0x13bc/0x7d10
[  429.007844][T10002]  ? verify_lock_unused+0x140/0x140
[  429.013067][T10002]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  429.019197][T10002]  ? verify_lock_unused+0x140/0x140
[  429.024419][T10002]  ? __perf_event_task_sched_in+0x4e6/0x560
[  429.030337][T10002]  ? memset+0x1e/0x40
[  429.034441][T10002]  lock_acquire+0x19e/0x400
[  429.039194][T10002]  ? flush_workqueue+0x150/0x13d0
[  429.044338][T10002]  ? __mutex_trylock_common+0x155/0x260
[  429.050223][T10002]  ? read_lock_is_recursive+0x10/0x10
[  429.055613][T10002]  ? __init_swait_queue_head+0xa5/0x150
[  429.061371][T10002]  flush_workqueue+0x16c/0x13d0
[  429.066317][T10002]  ? flush_workqueue+0x150/0x13d0
[  429.071469][T10002]  ? __lock_acquire+0x7d10/0x7d10
[  429.076652][T10002]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  429.082773][T10002]  ? _raw_spin_lock_irqsave+0x8b/0x100
[  429.088422][T10002]  ? rcu_work_rcufn+0x120/0x120
[  429.093359][T10002]  ? __mutex_unlock_slowpath+0x1b0/0x6c0
[  429.099249][T10002]  ? finish_wait+0xc0/0x1d0
[  429.103753][T10002]  drain_workqueue+0xcf/0x380
[  429.108455][T10002]  destroy_workqueue+0x7b/0xb20
[  429.113467][T10002]  __loop_clr_fd+0x234/0xb90
[  429.118609][T10002]  ? lo_release+0x172/0x1f0
[  429.123223][T10002]  ? lo_open+0x100/0x100
[  429.127463][T10002]  blkdev_put+0x53f/0x7d0
[  429.131806][T10002]  blkdev_close+0x76/0xa0
[  429.136142][T10002]  ? blkdev_open+0x2c0/0x2c0
[  429.140905][T10002]  __fput+0x234/0x930
[  429.145370][T10002]  task_work_run+0x125/0x1a0
[  429.149964][T10002]  get_signal+0x1222/0x12c0
[  429.154536][T10002]  ? kasan_save_stack+0x4b/0x60
[  429.159384][T10002]  ? kasan_save_stack+0x35/0x60
[  429.164231][T10002]  ? kasan_record_aux_stack+0xb8/0x100
[  429.169708][T10002]  ? task_work_add+0x2f/0x1d0
[  429.174421][T10002]  ? fput_many+0xde/0x1a0
[  429.178745][T10002]  ? __se_sys_ioctl+0x157/0x170
[  429.183589][T10002]  ? do_syscall_64+0x4c/0xa0
[  429.188180][T10002]  ? entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  429.194243][T10002]  arch_do_signal_or_restart+0xe7/0x12c0
[  429.199889][T10002]  ? get_sigframe_size+0x10/0x10
[  429.204829][T10002]  ? kick_process+0xd4/0x140
[  429.209440][T10002]  ? exit_to_user_mode_loop+0x3b/0x130
[  429.214934][T10002]  exit_to_user_mode_loop+0x9e/0x130
[  429.220261][T10002]  exit_to_user_mode_prepare+0xee/0x180
[  429.225843][T10002]  syscall_exit_to_user_mode+0x16/0x40
[  429.231343][T10002]  do_syscall_64+0x58/0xa0
[  429.235807][T10002]  ? clear_bhb_loop+0x30/0x80
[  429.240697][T10002]  ? clear_bhb_loop+0x30/0x80
[  429.245412][T10002]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  429.251347][T10002] RIP: 0033:0x7fbaefd07dd9
[  429.255801][T10002] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  429.275752][T10002] RSP: 002b:00007fbaedf61028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  429.284463][T10002] RAX: 0000000000000000 RBX: 00007fbaeff80fa0 RCX: 00007fbaefd07dd9
[  429.292746][T10002] RDX: 0000200000000140 RSI: 0000000000004c0a RDI: 0000000000000004
[  429.300726][T10002] RBP: 00007fbaefd9dd69 R08: 0000000000000000 R09: 0000000000000000
[  429.308786][T10002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  429.316754][T10002] R13: 00007fbaeff81038 R14: 00007fbaeff80fa0 R15: 00007fffa589fe08
[  429.324817][T10002]  </TASK>
[  429.331621][T10009] XFS (loop5): Ending clean mount
[  429.696688][T10044] netlink: 'syz.5.1553': attribute type 2 has an invalid length.
[  429.714495][T10044] netlink: 532 bytes leftover after parsing attributes in process `syz.5.1553'.
[  430.026802][ T7926] XFS (loop5): Unmounting Filesystem
[  432.857044][ T4232] rtl8150 1-1:1.0: couldn't reset the device
[  432.863165][ T4232] rtl8150: probe of 1-1:1.0 failed with error -5
[  432.877633][ T4232] usb 1-1: USB disconnect, device number 38
[  437.462699][ T4232] Bluetooth: hci2: command 0x0406 tx timeout