last executing test programs:

3m29.770401838s ago: executing program 2 (id=794):
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000002c0)={'team0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x50, 0x12, 0xff05, 0x40000, 0x4, {0x0, 0x0, 0x4a00, 0x0, 0x4, 0x20210}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x4, 0x28003}}}}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040085}, 0x40040)

3m29.540868154s ago: executing program 2 (id=797):
r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000002c0)={{0x12, 0x1, 0x110, 0xf1, 0x18, 0x80, 0x40, 0x93a, 0x2600, 0x1a06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7f, 0x0, 0x80, 0x2f, "", [{{0x9, 0x4, 0xc0, 0x0, 0x0, 0xfa, 0x4b, 0xb3, 0x2c}}]}}]}}, 0x0)
syz_usb_control_io(r0, &(0x7f0000000a00)={0x2c, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x280a}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

3m27.487879394s ago: executing program 2 (id=807):
socket(0x10, 0x3, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1)
creat(0x0, 0x175)
mknod(&(0x7f00000000c0)='./bus\x00', 0x8000, 0xd02)
acct(&(0x7f0000000000)='./bus\x00')
acct(0x0)
listen(0xffffffffffffffff, 0x5)
r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140))
r3 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21)
syz_ublk_setup_queues(r3, 0x0, &(0x7f0000000340)={0x0, 0xfb7e, 0x800, 0x2, 0x321, 0x0, r2}, &(0x7f00000007c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd3db, 0x200, 0x1, 0x3de, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9e00, 0x200, 0x1, 0x278, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb60e, 0x1000, 0x1, 0x321, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc9b3, 0x200, 0x3, 0x92}}], 0x4, &(0x7f00000017c0)={0x2e, 0x40, 0x0, r0, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0xf6}, 0x0, 0x0, '\x00', {0x5, 0xc81, 0x0, 0x0}}, 0x0)
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
socket$kcm(0xa, 0x5, 0x0)
mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0)
read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r4)
sendmsg$DEVLINK_CMD_RATE_SET(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000640)={0x34, r5, 0xb1b, 0x70bd2a, 0x0, {0x2a}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0xd4209235c937efa7}, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r6, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20)
r7 = socket$kcm(0x2, 0x5, 0x0)
sendmsg$inet(r7, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)='\x00', 0xe0}], 0x1}, 0x3e8)

3m26.987230826s ago: executing program 2 (id=809):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x51, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x2, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0xf000, 0x3, 0x1, {0x22, 0x8}}, {{{0x9, 0x5, 0x81, 0x3, 0x220, 0xd, 0x1, 0x88}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000600)={0x2c, &(0x7f0000000000)={0x20, 0xb, 0x8, {0x8, 0xf, "5f8db22461c3"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

3m24.937056416s ago: executing program 2 (id=825):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)={0x28, 0x13, 0x1, 0x0, 0x0, "", [@nested={0x18, 0xd3, 0x0, 0x0, [@typed={0x35, 0x0, 0x0, 0x0, @u64=0x1f}, @typed={0x8, 0x1c, 0x0, 0x0, @u32=0xc9}]}]}, 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0)

3m24.730255011s ago: executing program 2 (id=826):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="01000000420000000600000008000000000000"], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r0}, 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r1}, 0x38)

3m7.611226927s ago: executing program 32 (id=826):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="01000000420000000600000008000000000000"], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r0}, 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r1}, 0x38)

1m40.983784066s ago: executing program 0 (id=1167):
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x200000, 0x2, 0x0, 0x2, 0x8007, 0xff}, 0x20)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl(r0, 0x8b32, &(0x7f0000000040))

1m40.80178614s ago: executing program 0 (id=1168):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000001280)={0x1, 0x0, [{0x40000082}]})

1m40.242321553s ago: executing program 0 (id=1170):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x6a855000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
iopl(0x3)

1m38.869749857s ago: executing program 0 (id=1174):
syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000180)='./file1\x00', 0x1000802, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0xc, 0x27e, &(0x7f00000005c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000380)=""/52, 0x34)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

1m38.580588414s ago: executing program 0 (id=1176):
r0 = socket$inet(0x2b, 0x801, 0x0)
connect$inet(r0, &(0x7f0000000580)={0x2, 0x4e24, @local}, 0x10)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000340)={0x200000, 0x200000, 0x0, 0x0, 0x5989})
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, 0x0, 0x0)

1m38.105871796s ago: executing program 0 (id=1179):
r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0xfc5d, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0x3, 0x84, 0x2, 0x3, 0x10007f, 0x5, 0x53, 0x6, 0x3, 0x80005, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x1003, 0xfffffffb, 0x2, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x26, 0xd, 0x1, 0x0, 0x7, 0xe661, 0x4, 0x7, 0x3, 0x40000008, 0x4c78, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x800080ee, 0x7, 0x17, 0xeb, 0x7, 0x200, 0x3e, 0x8c, 0x6, 0xca9, 0x0, 0x5, 0x4, 0x8, 0x400, 0x1, 0x1, 0x5, 0x6, 0x6, 0x5, 0x40001, 0x40], [0x10000007, 0x9, 0x80000130, 0x8008, 0x5, 0xfffffd5d, 0x6, 0xc8, 0xf9, 0xe, 0x7, 0x6c7, 0xb, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0x1, 0x4, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x100401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4004e0, 0xfffffffb, 0x4, 0xb, 0x1, 0x49, 0x400008, 0x9, 0x6, 0x49, 0x8020, 0x1, 0xfe000000, 0xffff, 0xfffffe01, 0x0, 0x9, 0x7, 0x3, 0x9, 0x1, 0x3, 0x6e8cbe90, 0xbc45, 0x48c93694, 0x43, 0x9], [0x7, 0xa, 0x2, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x8, 0x5, 0x1, 0x86, 0x2, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x2000000c, 0x81, 0x6d03, 0x90f, 0x10, 0x800003, 0x200, 0x80, 0xfffeffff, 0x4, 0x2950bfb0, 0xfffffff8, 0xa2, 0xb, 0x5, 0x9, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7fc, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x5, 0x21c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x4], [0x9, 0xbb31, 0x80000000, 0xb, 0x5, 0x93e, 0x6, 0x1000006, 0x0, 0x8000e4, 0x80000000, 0x1ff, 0x5, 0x57, 0x4, 0x3, 0xfd, 0x10000, 0x4, 0x5, 0xffffffff, 0x7f, 0x2, 0x5, 0x1, 0x3, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000000, 0x7, 0x804, 0xc8, 0x8, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x3, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d693, 0xa1f, 0xf42, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x928, 0xb1e, 0xffffffff, 0x200, 0xffff2441, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000000000)=0x1)

1m37.634060747s ago: executing program 33 (id=1179):
r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0xfc5d, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0x3, 0x84, 0x2, 0x3, 0x10007f, 0x5, 0x53, 0x6, 0x3, 0x80005, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x1003, 0xfffffffb, 0x2, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x26, 0xd, 0x1, 0x0, 0x7, 0xe661, 0x4, 0x7, 0x3, 0x40000008, 0x4c78, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x800080ee, 0x7, 0x17, 0xeb, 0x7, 0x200, 0x3e, 0x8c, 0x6, 0xca9, 0x0, 0x5, 0x4, 0x8, 0x400, 0x1, 0x1, 0x5, 0x6, 0x6, 0x5, 0x40001, 0x40], [0x10000007, 0x9, 0x80000130, 0x8008, 0x5, 0xfffffd5d, 0x6, 0xc8, 0xf9, 0xe, 0x7, 0x6c7, 0xb, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0x1, 0x4, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x100401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4004e0, 0xfffffffb, 0x4, 0xb, 0x1, 0x49, 0x400008, 0x9, 0x6, 0x49, 0x8020, 0x1, 0xfe000000, 0xffff, 0xfffffe01, 0x0, 0x9, 0x7, 0x3, 0x9, 0x1, 0x3, 0x6e8cbe90, 0xbc45, 0x48c93694, 0x43, 0x9], [0x7, 0xa, 0x2, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x8, 0x5, 0x1, 0x86, 0x2, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x2000000c, 0x81, 0x6d03, 0x90f, 0x10, 0x800003, 0x200, 0x80, 0xfffeffff, 0x4, 0x2950bfb0, 0xfffffff8, 0xa2, 0xb, 0x5, 0x9, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7fc, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x5, 0x21c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x4], [0x9, 0xbb31, 0x80000000, 0xb, 0x5, 0x93e, 0x6, 0x1000006, 0x0, 0x8000e4, 0x80000000, 0x1ff, 0x5, 0x57, 0x4, 0x3, 0xfd, 0x10000, 0x4, 0x5, 0xffffffff, 0x7f, 0x2, 0x5, 0x1, 0x3, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000000, 0x7, 0x804, 0xc8, 0x8, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x3, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d693, 0xa1f, 0xf42, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x928, 0xb1e, 0xffffffff, 0x200, 0xffff2441, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000000000)=0x1)

59.281540941s ago: executing program 4 (id=1313):
syz_open_dev$dvb_demux(&(0x7f00000001c0), 0x0, 0x2000)
r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000080)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0)

59.073035556s ago: executing program 4 (id=1315):
openat$kvm(0xffffff9c, 0x0, 0x800, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0})
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$netlink(r0, &(0x7f0000000200)={0x10, 0x0, 0xffffffff, 0x80065c9}, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_io_uring_setup(0x5ffd, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x1000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1}, 0x48)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB], 0xa8}}, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r5, 0x1, 0x1000000000000f, &(0x7f0000000180)=0x57bb, 0x3c)
setsockopt$sock_attach_bpf(r5, 0x1, 0x34, &(0x7f00000000c0), 0x4)
sendmsg$NFT_BATCH(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x30, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000)
clock_gettime(0x1, &(0x7f0000000000))
openat$ttynull(0xffffffffffffff9c, 0x0, 0xa0100, 0x0)
clock_settime(0x0, 0x0)

57.860822585s ago: executing program 4 (id=1318):
socket(0x10, 0x3, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
creat(0x0, 0x175)
mknod(&(0x7f00000000c0)='./bus\x00', 0x8000, 0xd02)
acct(&(0x7f0000000000)='./bus\x00')
acct(0x0)
listen(0xffffffffffffffff, 0x5)
r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140))
r3 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21)
syz_ublk_setup_queues(r3, 0x0, &(0x7f0000000340)={0x0, 0xfb7e, 0x800, 0x2, 0x321, 0x0, r2}, &(0x7f00000007c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd3db, 0x200, 0x1, 0x3de, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9e00, 0x200, 0x1, 0x278, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb60e, 0x1000, 0x1, 0x321, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc9b3, 0x200, 0x3, 0x92}}], 0x4, &(0x7f00000017c0)={0x2e, 0x40, 0x0, r0, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0xf6}, 0x0, 0x0, '\x00', {0x5, 0xc81, 0x0, 0x0}}, 0x0)
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0)
read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020)
sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000640)={0x34, 0x0, 0xb1b, 0x70bd2a, 0x0, {0x2a}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0xd4209235c937efa7}, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r4, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20)

56.798505251s ago: executing program 4 (id=1320):
syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000a80)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x7, 0xee6, &(0x7f0000001ec0)="$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")
mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x80000, 0x2)
ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, 0x0)

55.794051985s ago: executing program 4 (id=1323):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x121301, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd)
write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xff2e)
ioctl$TCFLSH(r0, 0x540b, 0x2)

53.730976552s ago: executing program 4 (id=1329):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_TX_RATES={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800)

52.581223521s ago: executing program 34 (id=1329):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_TX_RATES={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800)

6.389260885s ago: executing program 3 (id=1468):
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x8, &(0x7f0000005a40)=ANY=[@ANYBLOB='nodiscard,nocheckpoint_merge,alloc_mode=default,active_logs=6,background_gc=on,fault_injection=00000000000000000016,discard,noacl,noinline_dentry,alloc_mode=default,noextent_cache,active_logs=2,fault_type=00000000000000003444,smackfsdef=fault_injection,audit,fsuuid=f362c\x0047-7ce8-eaab-0ae6-21\x0015a33,uid<', @ANYRESDEC=0x0, @ANYBLOB="2c7375626a5f726f6c653d5e617461647630002c6f626a5f747970653d6e6f643be1d2491fb1d1f0696e6c696e655f64656e7472792c7063723d3030303030307f003030303030303030303032392c00"], 0x1, 0x5505, &(0x7f0000000340)="$eJzs3E1rY9UbAPAn7XTe//Mv4sLdXBiEFiZh0nlBd6PO4At2KKMuXGmapCEzSW5p0rR25cKluPCbiIIrl34GF67diQvFnaDknlud+gJC08ZOfz+4ee45OXnuc8Iw8NxbEsCptZj9/GMlrsSFiJiPiMsRxXmlPAp3U3guIq5GxNwTR6Wc/33ibERcjIgrk+QpZ6V869Pr42u3f3jjp6++OXfm0mdffju7XQOz9nxE9DfT+U4/xbyT4qNyvjHuFrF/a1zG9Eb/cTnOU9xprxcZdhr76xpFvNlJ6/PN7eEkbvQazUnsdDeK+c1BuuBw3NnPU3zgUWOrGLfa60XsDvMidvZSXbt76f+2veEo5WmV+T4o0sdotB/TfHu3nfaz+biIzcGonE9581Z7dxLHZSwvF8281yrqWD/MN/3f9mZ3sL2bjdtbw24+yG7X6i/U6neq9a281R61b1Ub/dadW9lSpzdZVh21G/27nTzv9Nq1Zt5fzpY6zWa1Xs+W7rXXu41BVq/XbtZuVG8vl2fXs1cfvJP1WtnSJL7cHWyPur1htpFvZekTy9lK7eaLy9m1evbW6lq29vD+/dW1t9+79+6Dl1Zff6Vc9JeysqWVGysr1fqN6kp9+RTt/6Oy6CnuHw6lMusCAE4e/T8wC0fX/289jDj6/j/0/1Nxovrf097/H8H+4VD0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9Z3C5+/VpwspvGlcv5/5dQz5bgSEXMR8evfmI+zB3LOl3kW/mH9wp9q+LoSRYbJNc6Vx8WIuFsev/z/qL8FAAAAeHp98eHVT1K3nl4WZ10QxyndtJm7/P6U8lUiYmHx+yllm5u8PDulZMW/7zOxO6VsxQ2s81NKlm65nZlWtn9l/kA4/0SopDB3rOUAAADH4mAncLxdCAAAAMfp41kXwGxUYv9R5v6z4OIv7/94IHjhwAgAAAA4gSqzLgAAAAA4ckX/7/f/AAAA4OmWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPnfm4TB6I4AD8bvLD/tGi1921lb1DGlrDHPUYUkCYoIAfSQhqgBnJLCRFEeBwCEYdIHttK9H2SMxnL/HiD4DAz0gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF26r9aL26vf121zdvt28owGAAAAuGRbrRf1P7PU/9rc/97c+tn0i4goI+LS3H0Un84yR01O9fL8zenz1asa7iLqhMN7TJrrS0T8aa7HH11/CgAAAPBxbZareZqtpz+zoQuiT2nRpvz2N1NeERHV7CFTWnnI+5UprP5+j+N/prR6AWuaKSwtuY1zpb1J/XM/rtpNT5oiNeXFlx2LzDZ2AACgR6Ozpt9ZCAAAAH36N3QBDKOI563M41bgJDXN9t7nsx4AAADwDhVDFwAAAAB0rp7/93T+3975fwAAADCMdP4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXdpW68VmuZq3zdnt28kzGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhif95RIATCIAz2ru9M5v6HlQZNTU2qQPj4G4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIv9eUmBEAiCKJgz/nfS9z+sJOgZRIiAhkcVtWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIud+3mNo4oDAP5mZmdrq+IaZQ8RUfCgF7vd1tbexIMSPPgnCCHd1titP9ocbCliLt4k515EjyKCEm/9H3JOIJd4y2EPETwrMzuTnfwA118zm+TzgTfvu8Mw7/tmIeQ77yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACURm9P4iQ7dMZxXJzb3Hu4lPVbh/rM47Xt+axlcVRn0ifDi9UPUbe5RAAAADg7krK+DyHspOsLWR938vo/La/Jav5vnx7HZT1/uO4v+7L2z9ovP+8+vz9QZzxOdtOby8PBpaOptP6/Wc62Z/7yilb+5PN3L0n+hcTvrT43SvPnGX29sfFOOw/P1ZEtAPBPXCz7Iih/H8r6fpOJAXBmtCqFd1n/J51mcwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACow2g1PFnGUQhhvjWJM1t7D5eO6x+vbc+X7dqjR2vhy8k9s1ukIYSby8PBpVpnM9vu3X9we3E4HNytP3gphNDU6G8V07/9wRQXh9DI8xH8R0FcfNmzks/JCBr8oQQAwKmUFi2r63fS9YXsXDQXwh/fHaz/X63EYcr6f/fDa5vVsar1f7+2Gc6+3sqdT3v37j94ffnO4q3BrcHHb1zuv9m/cv3q1eu9/F1JzxsTAAAA/p120ar1fzx3dP3/QiUOU9b/n33T/6I6VqL+P9Zk0a/pTAAAAM62Z1/+/bfomPNRux0+X1xZudsfH/c/Xx4fG0j1bztXtGr9n8w1nRUAAABQh9FqdGD9/0YlDlOu/z/1/Qs/Vu+ZhBDOF+v/F5c+Gd6obzozrY4/J256jgAAADTrfNGq6/9pvv8/3t/yEIcQXntlHBf/BnCq+j9596sfqmNV9/9fqW+KMynujp9H3ndDaHWbzggAAIDT7ImiZcX+r+n6wkc/XXi/bf8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQN3+DAAA//962D6S")
openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103643, 0x32)
symlinkat(&(0x7f0000001040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00')
openat$incfs(0xffffffffffffff9c, &(0x7f0000000540)='.log\x00', 0x1c10c1, 0x9c37611dc13d0db7)

5.619594433s ago: executing program 6 (id=1472):
unshare(0x10000000)
unshare(0x40000000)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000400)={&(0x7f0000000000), 0x10, &(0x7f0000000500)={&(0x7f0000000600)={0x44, 0x9, 0x6, 0x5, 0x0, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @empty}}]}]}, 0x44}}, 0x0)

4.662096767s ago: executing program 6 (id=1473):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x8001000d, 0xad, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x8d}, 0x90)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
ioctl(r0, 0x8b1a, &(0x7f0000000040))

4.315870375s ago: executing program 3 (id=1474):
r0 = syz_open_dev$loop(&(0x7f0000000180), 0x7, 0x1e3d83)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='freezer.state\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00000014000800000000000000007f"}})
ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x591)

4.315099625s ago: executing program 6 (id=1475):
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0)
r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x3, 0x82040)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045520, &(0x7f0000000040)=0x1)

4.12732704s ago: executing program 1 (id=1477):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x1c, r2, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x400c4}, 0x10)

3.928104645s ago: executing program 1 (id=1478):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000003540)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000040)={0x58, r1, 0x1, 0x470bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2c0}], @NL80211_ATTR_FRAME={0x2a, 0x33, @assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x6}, @device_a, @device_a, @initial, {0x2, 0xfff}}, 0x600, 0x8b1, {0x0, 0x6, @default_ibss_ssid}, @val, @void}}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}]]}, 0x58}, 0x1, 0x0, 0x0, 0x20040040}, 0x8800)

3.684066931s ago: executing program 1 (id=1479):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)={0xb, 0x0, 0xa, 0x2, 0x8})

3.369764668s ago: executing program 5 (id=1480):
r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0)
ioctl$CEC_DQEVENT(r0, 0xc0506107, 0x0)
ioctl$CEC_DQEVENT(r0, 0xc0506107, 0x0)
ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000180)=0xd0)

3.194461032s ago: executing program 1 (id=1481):
syz_mount_image$hpfs(&(0x7f0000000140), &(0x7f0000009ec0)='./file1\x00', 0x3200041, &(0x7f0000000000)=ANY=[@ANYBLOB="6561733d6e6f2c636173653d617369732c636865636b3d6e6f6e652c00ecb1696642cb97380abf69dce83f1c1dd0eb96506352e4c7d6b88109eebe378da654d5d91d6a45e65053658f366b87b26180bdb0a0e2ef4103c4336999ae591f101bac606a7595fc5a131d32d3723526dc1d4b5c1ce2f300a7eb59286590c97f58ae092a495a425b0bec6265"], 0x1, 0x9e16, &(0x7f000001c580)="$eJwsk1MUnge3BlM3tW27ndq2bdv21P1eG6ltu0mbJrVtm6mNlGf9a52Lud0Xs+e5e4DDBzhigPcM8N4BjhzgfQMcNcDRA7x/gA8M8MEBPjTAhwf4yAAfHeBjA3x8gE8M8MkBPjXApwf4zACfHeBzA3x+gC8M8MUBvjTAlwf4ygBfHeBrA3x9gG8M8M0BvjXAtwf4zgDfHeB7A3x/gB8M8MMBfjTAjwf4yQA/HeBnA/x8gF8McMwAvxzgVwP8eoDfDPDbAX43wO8H+MMAfxzgTwP8eYC/DPDXAf42wN8H+McAxw7wzwH+NcC/B/jPAP8d4H8DHBLgOAGOG+B4AY4f4AQBThjgRAFOHODQACcJcNIAJwtw8gCnCHDKAKcKcOoApwlw2gCnC3D6AGcIcMYAZwpw5gBnCXDWAGcLcPYA5whwzgDnCnDuAOcJcN4A5wtw/gAXCHDBABcKcOEAFwlw0QAXC3DxAJcIcMkAlwqQAJcOcJkAlw1wuQCXD3CFAFcMcKUAVw5wlQBXDXC1AFcPcI0A1wxwrQDXDnCdANcNcL0A1w9wgwA3DHCjADcOcJMANw1wswA3D3CLALcMcKsAtw5wmwC3DXC7ALcPcIcAdwxwpwB3DnCXAHcNcLcAdw9wjwD3DHCvAPcOcJ8A9w1wvwD3D/CAAA8M8KAADw7wkAAPDfCwAA8P8IgAjwzwqACPDvCYAI8N8LgAjw/whABPDPCkAE8O0ABPCfDUAE8L8PQAzwjwzADPCvDsAAcBBgGGAUYBxgEmAaYBZgHmARYBlgFWAdYBNgG2AXYB9gEOC/CcAM8N8LwAzw/wggAvDPCiAC8O8JIALw3wsgAvD/CKAK8M8KoArw7wmgCvDfC6AK8P8IYAbwzwpgBvDvCWAG8N8LYAbw/wjgDvDPCuAO8OcHiAIwK8J8B7AxwZ4H0BjgpwdID3B/hAgA8G+FCADwf4SICPBvhYgI8H+ESATwb4VIBPB/hMgM8G+FyAzwf4QoAvBvhSgC8H+EqArwb4WoCvB/hGgG8G+FaAbwf4ToDvBvhegO8H+EGAHwb4UYAfB/hJgJ8G+FmAnwf4RYBjAvwywK8C/DrAbwL8NsDvAvw+wB8C/DHAnwL8OcBfAvw1wN8C/D3APwIcG+CfAf4V4N8B/hPgvwH+F+CQEMcJcdwQxwtx/BAnCHHCECcKceIQh4Y4SYiThjhZiJOHOEWIU4Y4VYhThzhNiNOGOF2I04c4Q4gzhjhTiDOHOEuIs4Y4W4izhzhHiHOGOFeIc4c4T4jzhjhfiPOHuECIC4a4UIgLh7hIiIuGuFiIi4e4RIhLhrhUiIS4dIjLhLhsiMuFuHyIK4S4YogrhbhyiKuEuGqIq4W4eohrhLhmiGuFuHaI64S4bojrhbh+iBuEuGGIG4W4cYibhLhpiJuFuHmIW4S4ZYhbhbh1iNuEuG2I24W4fYg7hLhjiDuFuHOIu4S4a4i7hbh7iHuEuGeIe4W4d4j7hLhviPuFuH+IB4R4YIgHhXhwiIeEeGiIh4V4eIhHhHhkiEeFeHSIx4R4bIjHhXh8iCeEeGKIJ4V4coiGeEqIp4Z4Woinh3hGiGeGeFaIZ4c4CDEIMQwxCjEOMQkxDTELMQ+xCLEMsQqxDrEJsQ2xC7EPcViI54R4bojnhXh+iBeEeGGIF4V4cYiXhHhpiJeFeHmIV4R4ZYhXhXh1iNeEeG2I14V4fYg3hHhjiDeFeHOIt4R4a4i3hXh7iHeEeGeId4V4d4jDQxwR4j0h3hviyBDvC3FUiKNDvD/EB0J8MMSHQnw4xEdCfDTEx0J8PMQnQnwyxKdCfDrEZ0J8NsTnQnw+xBdCfDHEl0J8OcRXQnw1xNdCfD3EN0J8M8S3Qnw7xHdCfDfE90J8P8QPQvwwxI9C/DjET0L8NMTPQvw8xC9CHBPilyF+FeLXIX4T4rchfhfi9yH+EOKPIf4U4s8h/hLiryH+FuLvIf4R4tgQ/wzxrxD/DvGfEP8N8b8Qh0Q4ToTjRjhehONHOEGEE0Y4UYQTRzg0wkkinDTCySKcPMIpIpwywqkinDrCaSKcNsLpIpw+whkinDHCmSKcOcJZIpw1wtkinD3COSKcM8K5Ipw7wnkinDfC+SKcP8IFIlwwwoUiXDjCRSJcNMLFIlw8wiUiXDLCpSIkwqUjXCbCZSNcLsLlI1whwhUjXCnClSNcJcJVI1wtwtUjXCPCNSNcK8K1I1wnwnUjXC/C9SPcIMINI9wowo0j3CTCTSPcLMLNI9wiwi0j3CrCrSPcJsJtI9wuwu0j3CHCHSPcKcKdI9wlwl0j3C3C3SPcI8I9I9wrwr0j3CfCfSPcL8L9IzwgwgMjPCjCgyM8JMJDIzwswsMjPCLCIyM8KsKjIzwmwmMjPC7C4yM8IcITIzwpwpMjNMJTIjw1wtMiPD3CMyI8M8KzIjw7wkGEQYRhhFGEcYRJhGmEWYR5hEWEZYRVhHWETYRthF2EfYTDIjwnwnMjPC/C8yO8IMILI7wowosjvCTCSyO8LMLLI7wiwisjvCrCqyO8JsJrI7wuwusjvCHCGyO8KcKbI7wlwlsjvC3C2yO8I8I7I7wrwrsjHB7hiAjvifDeCEdGeF+EoyIcHeH9ET4Q4YMRPhThwxE+EuGjET4W4eMRPhHhkxE+FeHTET4T4bMRPhfh8xG+EOGLEb4U4csRvhLhqxG+FuHrEb4R4ZsRvhXh2xG+E+G7Eb4X4fsRfhDhhxF+FOHHEX4S4acRfhbh5xF+EeGYCL+M8KsIv47wmwi/jfC7CL+P8IcIf4zwpwh/jvCXCH+N8LcIf4/wjwjHRvhnhH9F+HeE/0T4b4T/RTgkxnFiHDfG8WIcP8YJYpwwxolinDjGoTFOEuOkMU4W4+QxThHjlDFOFePUMU4T47QxThfj9DHOEOOMMc4U48wxzhLjrDHOFuPsMc4R45wxzhXj3DHOE+O8Mc4X4/wxLhDjgjEuFOPCMS4S46IxLhbj4jEuEeOSMS4VIzEuHeMyMS4b43IxLh/jCjGuGONKMa4c4yoxrhrjajGuHuMaMa4Z41oxrh3jOjGuG+N6Ma4f4wYxbhjjRjFuHOMmMW4a42Yxbh7jFjFuGeNWMW4d4zYxbhvjdjFuH+MO4w8Z8j+/O8W4c4y7xLhrjLvFuHuMe8S4Z4x7xbh3jPvEuG+M+8W4f4wHxHhgjAfFeHCMh8R4aIyHxXh4jEfEeGSMR8V4dIzHxHhsjMfFeHyMJ8R4YownxXhyjMZ4SoynxnhajKfHeEaMZ8Z4VoxnxziIMYgxjDGKMY4xiTGNMYsxj7GIsYyxirGOsYmxjbGLsY9xWIznxHhujOfFeH6MF8R4YYwXxXhxjJfEeGmMl8V4eYxXxHhljFfFeHWM18R4bYzXxXh9jDfEeGOMN8V4c4y3xHhrjLfFeHuMd8R4Z4x3xXh3jMNjHBHjPTHeG+PIGO+LcVSMo2O8P8YHYnwwxodifDjGR2J8NMbHYnw8xidifDLGp2J8OsZnYnw2xudifD7GF2J8McaXYnw5xldifDXG12J8PcY3YnwzxrdifDvGd2J8N8b3Ynw/xg9i/DDGj2L8OMZPYvw0xs9i/DzGL2IcE+OXMX4V49cxfhPjtzF+F+P3Mf4Q448x/hTjzzH+EuOvMf4W4+8x/hHj2Bj/jPGvGP+O8Z8Y/43xvxiHJDhOguMmOF6C4yc4QYITJjhRghMnODTBSRKcNMHJEpw8wSkSnDLBqRKcOsFpEpw2wekSnD7BGRKcMcGZEpw5wVkSnDXB2RKcPcE5EpwzwbkSnDvBeRKcN8H5Epw/wQUSXDDBhRJcOMFFElw0wcUSXDzBJRJcMsGlEiTBpRNcJsFlE1wuweUTXCHBFRNcKcGVE1wlwVUTXC3B1RNcI8E1E1wrwbUTXCfBdRNcL8H1E9wgwQ0T3CjBjRPcJMFNE9wswc0T3CLBLRPcKsGtE9wmwW0T3C7B7RPcIcEdE9wpwZ0T3CXBXRPcLcHdE9wjwT0T3CvBvRPcJ8F9E9wvwf0TPCDBAxM8KMGDEzwkwUMTPCzBwxM8IsEjEzwqwaMTPCbBYxM8LsHjEzwhwRMTPCnBkxM0wVMSPDXB0xI8PcEzEjwzwbMSPDvBQYJBgmGCUYJxgkmCaYJZgnmCRYJlglWCdYJNgm2CXYJ9gsMSPCfBcxM8L8HzE7wgwQsTvCjBixO8JMFLE7wswcsTvCLBKxO8KsGrE7wmwWsTvC7B6xO8IcEbE7wpwZsTvCXBWxO8LcHbE7wjwTsTvCvBuxMcnuCIBO9J8N4ERyZ4X4KjEhyd4P0JPpDggwk+lODDCT6S4KMJPpbg4wk+keCTCT6V4NMJPpPgswk+l+DzCb6Q4IsJvpTgywm+kuCrCb6W4OsJvpHgmwm+leDbCb6T4LsJvpfg+wl+kOCHCX6U4McJfpLgpwl+luDnCX6R4JgEv0zwqwS/TvCbBL9N8LsEv0/whwR/TPCnBH9O8JcEf03wtwR/T/CPBMcm+GeCfyX4d4L/JPhvgv8lOCTFcVIcN8XxUhw/xQlSnDDFiVKcOMWhKU6S4qQpTpbi5ClOkeKUKU6V4tQpTpPitClOl+L0Kc6Q4owpzpTizCnOkuKsKc6W4uwpzpHinCnOleLcKc6T4rwpzpfi/CkukOKCKS6U4sIpLpLioikuluLiKS6R4pIpLpUiKS6d4jIpLpvicikun+IKKa6Y4koprpziKimumuJqKa6e4hoprpniWimuneI6Ka6b4noprp/iBilumOJGKW6c4iYpbpriZilunuIWKW6Z4lYpbp3iNilum+J2KW6f4g4p7pjiTinunOIuKe6a4m4p7p7iHinumeJeKe6d4j4p7pvifinun+IBKR6Y4kEpHpziISkemuJhKR6e4hEpHpniUSkeneIxKR6b4nEpHp/iCSmemOJJKZ6coimekuKpKZ6W4ukpnpHimSmeleLZKQ5SDFIMU4xSjFNMUkxTzFLMUyxSLFOsUqxTbFJsU+xS7FMcluI5KZ6b4nkpnp/iBSlemOJFKV6c4iUpXpriZSlenuIVKV6Z4lUpXp3iNSlem+J1KV6f4g0p3pjiTSnenOItKd6a4m0p3p7iHSnemeJdKd6d4vAUR6R4T4r3pjgyxftSHJXi6BTvT/GBFB9M8aEUH07xkRQfTfGxFB9P8YkUn0zxqRSfTvGZlOTZFJ9L8fkUX0jxxRRfSvHlFF9J8dUUX0vx9RTfSPHNFN9K8e0U30nx3RTfS/H9FD9I8cMUP0rx4xQ/SfHTFD9L8fMUv0hxTIpfpvhVil+n+E2K36b4XYrfp/hDij+m+FOKP6f4S4q/pvhbir+n+EeKY1P8M8W/Uvw7xX9S/DfF/1IckuE4GY6b4XgZjp/hBBlOmOFEGU6c4dAMJ8lw0gwny3DyDKfIcMoMp8pw6gynyXDaDKfLcPoMZ8hwxgxnynDmDGfJcNYMZ8tw9gznyHDODOfKcO4M58lw3gzny3D+DBfIcMEMF8pw4QwXyXDRDBfLcPEMl8hwyQyXypAMl85wmQyXzXC5DJfPcIUMV8xwpQxXznCVDFfNcLUMV89wjQzXzHCtDNfOcJ0M181wvQzXz3CDDDfMcKMMN85wkww3zXCzDDfPcIsMt8xwqwy3znCbDLfNcLsMt89whwx3zHCnDHfOcJcMd81wtwx3z3CPDPfMcK8M985wnwz3zXC/DPfP8IAMD8zwoAwPzvCQDA/N8LAMD8/wiAyPzPCoDI/O8JgMj83wuAyPz/CEDE/M8KQMT87QDE/J8NQMT8vw9AzPyPDMDM/K8OwMBxkGGYYZRhnGGSYZphlmGeYZFhmWGVYZ1hk2GbYZdhn2GQ7L8JwMz83wvAzPz/CCDC/M8KIML87wkgwvzfCyDC/P8IoMr8zwqgyvzvCaDK/N8LoMr8/whgxvzPCmDG/O8JYMb83wtgxvz/CODO/M8K4M785weIYjMrwnw3szHJnhfRmOynB0hvdn+ECGD2b4UIYPZ/hIho9m+FiGj2f4RIZPZvhUhk9n+EyGz2b4XIbPZ/hChi9m+FKGL2f4SoavZvhahq9n+EaGb2b4VoZvZ/hOhu9m+F6G72f4QYYfZvhRhh9n+EmGn2b4WYafZ/hFhmMy/DLDrzL8OsNvMvw2w+8y/D7DHzL8McOfMvw5w18y/DXD3zL8PcM/Mhyb4Z8Z/pXh3xn+k+G/Gf6X4ZAcx8lx3BzHy3H8HCfIccIcJ8px4hyH5jhJjpPmOFmOk+c4RY5T5jhVjlPnOE2O0+Y4XY7T5zhDjjPmOFOOM+c4S46z5jhbjrPnOEeOc+Y4V45z5zhPjvPmOF+O8+e4QI4L5rhQjgvnuEiOi+a4WI6L57hEjkvmuFSO5Lh0jsvkuGyOy+W4fI4r5LhijivluHKOq+S4ao6r5bh6jmvkuGaOa+W49sRDhvzPxbo5rpfj+jlukOOGOW6U48Y5bpLjpjluluPmOW6R45Y5bpXj1jluk+O2OW6X4/Y57pDjjjnulOPOOe6S46457pbj7jnukeOeOe6V49457pPjvjnul+P+OR6Q44E5HpTjwTkekuOhOR6W4+E5HpHjkTkelePROR6T47E5Hpfj8TmekOOJOZ6U48k5muMpOZ6a42k5np7jGTmemeNZOZ6d4yDHIMcwxyjHOMckxzTHLMc8xyLHMscqxzrHJsc2xy7HPsdhOZ6T47k5npfj+TlekOOFOV6U48U5XpLjpTleluPlOV6R45U5XpXj1Tlek+O1OV6X4/U53pDjjTnelOPNOd6S46053pbj7TnekeOdOd71v3+NGTZ2eI4j/tfykCFD/sfIHIcMGTJkVI6jc7w/xwdyfPB/7Q8ZMuThHB/J8dEcH8vx8RyfyPHJHJ/K8ekcn8nx2Ryfy/H5HF/I8cUcX8rx5RxfyfHVHF/L8fUc38jxzRzfyvHtHN/J8d0c38vx/Rw/yPHDHD/K8eMcP8nx0xw/y/HzHL/IcUyOX+b4VY5f5/hNjt/m+F2O3+f4Q44/5vhTjj/n+EuOv+b4W46/5/hHjmNz/DPHv3L8O8d/cvw3x//+56TAcQoct8DxChy/wAkKnLDAiQqcuMChBU5S4KQFTlbg5AVOUeCUBU5V4NQFTlPgtAVOV+D0Bc5Q4IwFzlTgzAXOUuCsBc5W4OwFzlHgnAXOVeDcBc5T4LwFzlfg/AUuUOCCBS5U4MIFLlLgogUuVuDiBS5R4JIFLlUgBS5d4DIFLlvgRjM1Y5cvcIUCVyxwpQJXLnCV/2e1AlcvcI0C1yxwrQLXLnCdAtctcL0C1y9wgwI3/N+9AjcucJMCNy1wswI3L3CLArcscKsCty5wmwK3LXC7ArcvcIcCdyxwpwJ3LnCXAnctcLcCdy9wjwL3LHCvAvcucJ8C9y1wvwL3L/CAAg8s8KACDy7wkAIPLfCwAg8v8IgCjyzwqAKPLvCYAo8t8LgCjy/whAJPLPCkAk8u0AJPKfDUAk8r8PQCzyjwzALPKvDsAgcFBgWGBUYFxgUmBaYFZgXmBRYFlgVWBdYFNgW2BXYF9gUOK/CcAs8t8LwCzy/wggIvLPCiAi8u8JICLy3wsgIvL/CKAq8s8KoCry7wmgKvLfC6Aq8v8IYCbyzwpgJvLvCWAm8t8LYCby/wjgLvLPCuAu8ucHiBIwq8p8B7CxxZ4H0FjipwdIH3F/hAgQ8W+FCBDxf4SIGPFvhYgY8X+ESBTxb4VIFPF/hMgc8W+FyBzxf4QoEvFvhSgS8X+EqBrxb4WoGvF/hGgW8W+FaBbxf4ToHvFvhege8X+EGBHxb4UYEfF/hJgZ8W+FmBnxf4RYFjCvyywK8K/LrAbwr8tsDvCvy+wB8K/LHAnwr8ucBfCvy1wN8K/L3APwocW+CfBf5V4N8F/lPgvwX+V+CQEscpcdwSxytx/BInKHHCEicqceISh5Y4SYmTljhZiZOXOEWJU5Y4VYlTlzhNidOWOF2J05c4Q4kzljhTiTOXOEuJs5Y4W4mzlzhHiXOWOFeJc5c4T4nzljhfifOXuECJC5a4UIkLl7hIiYuWuFiJi5e4RIlLlrhUiZS4dInLlLhsicuVuHyJK5S4YokrlbhyiauUuGqJq5W4eolrlLhmiWuVuHaJ65S4bonrlbh+iRuUuGGJG5W4cYmblLhpiZuVuHmJW5S4ZYlblbh1iduUuG2J25W4fYk7lLhjiTuVuHOJu5S4a4m7lbh7iXuUuGeJe5W4d4n7lLhvifuVuH+JB5R4YIkHlXhwiYeUeGiJh5V4eIlHlHhkiUeVeHSJx5R4bInHlXh8iSeUeGKJJ5V4comWeEqJp5Z4Womnl3hGiWeWeFaJZ5c4KDEoMSwxKjEuMSkxLTErMS+xKLEssSqxLrEpsS2xK7EvcViJ55R4bonnlXh+iReUeGGJF5V4cYmXlHhpiZeVeHmJV5R4ZYlXlXh1ideUeG2J15V4fYk3lHhjiTeVeHOJt5R4a4m3lXh7iXeUeGeJd5V4d4nDSxxR4j0l3lviyBLvK3FUiaNLvL/EB0p8sMSHSny4xEdKfLTEx0p8vMQnSnyyxKdKfLrEZ0p8tsTnSny+xBdKfLHEl0p8ucRXSny1xNdKfL3EN0p8s8S3Sny7xHdKfLfE90p8v8QPSvywxI9K/LjET0r8tMTPSvy8xC9KHFPilyV+VeLXJX5T4rclflfi9yX+UOKPJf5U4s8l/lLiryX+VuLvJf5R4tgS/yzxrxL/LvGfEv8t8b8Sh1Q4ToXjVjheheNXOEGFE1Y4UYUTVzi0wkkqnLTCySqcvMIpKpyywqkqnLrCaSqctsLpKpy+whkqnLHCmSqcucJZKpy1wtkqnL3COSqcs8K5Kpy7wnkqnLfC+Sqcv8IFKlywwoUqXLjCRSpctMLFKly8wiUqXLLCpSqkwqUrXKbCZStcrsLlK1yhwhUrXKnClStcpcJVK1ytwtUrXKPCNStcq8K1K1ynwnUrXK/C9SvcoMINK9yowo0r3KTCTSvcrMLNK9yiwi0r3KrCrSvcpsJtK9yuwu0r3KHCHSvcqcKdK9ylwl0r3K3C3Svco8I9K9yrwr0r3KfCfSvcr8L9KzygwgMrPKjCgys8pMJDKzyswsMrPKLCIys8qsKjKzymwmMrPK7C4ys8ocITKzypwpMrtMJTKjy1wtMqPL3CMyo8s8KzKjy7wkGFQYVhhVGFcYVJhWmFWYV5hUWFZYVVhXWFTYVthV2FfYXDKjynwnMrPK/C8yu8oMILK7yowosrvKTCSyu8rMLLK7yiwisrvKrCqyu8psJrK7yuwusrvKHCGyu8qcKbK7ylwlsrvK3C2yu8o8I7K7yrwrsrHF7hiArvqfDeCkdWeF+FoyocXeH9FT5Q4YMVPlThwxU+UuGjFT5W4eMVPlHhkxU+VeHTFT5T4bMVPlfh8xW+UOGLFb5U4csVvlLhqxW+VuHrFb5R4ZsVvlXh2xW+U+G7Fb5X4fsVflDhhxV+VOHHFX5S4acVflbh5xV+UeGYCr+s8KsKv67wmwq/rfC7Cr+v8IcKf6zwpwp/rvCXCn+t8LcKf6/wjwrHVvhnhX9V+HeF/1T4b4X/VTikxnFqHLfG8Wocv8YJapywxolqnLjGoTVOUuOkNU5W4+Q1TlHjlDVOVePUNU5T47Q1Tlfj9DXOUOOMNc5U48w1zlLjrDXOVuPsNc5R45w1zlXj3DXOU+O8Nc5X4/w1LlDjgjUuVOPCNS5S46I1Llbj4jUuUeOSNS5VIzUuXeMyNS5b43I1Ll/jCjWuWONKNa5c4yo1rlrjajWuXuMaNa5Z41o1rl3jOjWuW+N6Na5f4wY1bljjRjVuXOMmNW5a42Y1bl7jFjVuWeNWNW5d4zY1blvjdjVuX+MONe5Y40417lzjLjXuWuNuNe5e4x417lnjXjXuXeM+Ne5b43417l/jATUeWONBNR5c4yE1HlrjYTUeXuMRNR5Z41E1Hl3jMTUeW+NxNR5f4wk1nljjSTWeXKM1nlLjqTWeVuPpNZ5R45k1nlXj2TUOagxqDGuMaoxrTGpMa8xqzGssaixrrGqsa2xqbGvsauxrHFbjOTWeW+N5NZ5f4wU1XljjRTVeXOMlNV5a42U1Xl7jFTVeWeNVNV5d4zU1XlvjdTVeX+MNNd5Y40013lzjLTXeWuNtNd5e4x013lnjXTXeXePwGkfUeE+N99Y4ssb7ahxV4+ga76/xgRofrPGhGh+u8ZEaH63xsRofr/GJGp+s8akan67xmRqfrfG5Gp+v8YUaX6zxpRpfrvGVGl+t8bUaX6/xjRrfrPGtGt+u8Z0a363xvRrfr/GDGj+s8aMaP67xkxo/rfGzGj+v8Ysax9T4ZY1f1fh1jd/U+G2N39X4fY0/1PhjjT/V+HONv9T4a42/1fh7jX/UOLbGP2v8q8a/a/ynxn9r/K/GIQ2O0+C4DY7X4PgNTtDghA1O1ODEDQ5tcJIGJ21wsgYnb3CKBqdscKoGp25wmganbXC6BqdvcIYGZ2xwpgZnbnCWBmdtcLYGZ29wjgbnbHCuBuducJ4G521wvgbnb3CBBhdscKEGF25wkQYXbXCxBhdvcIkGl2xwqQZpcOkGl2lw2QaXa3D5BldocMUGV2pw5QZXaXDVBldrcPUG12hwzQbXanDtBtdpcN0G12tw/QY3aHDDBjdqcOMGN2lw0wY3a3DzBrdocMsGt2pw6wa3aXDbBrdrcPsGd2hwxwZ3anDnBndpcNcGd2tw9wb3aHDPBvdqcO8G92lw3wb3a3D/Bg9o8MAGD2rw4AYPafDQBg9r8PAGj2jwyAaPavDoBo9p8NgGj2vw+AZPaPDEBk9q8OQGbfCUBk9t8LQGT2/wjAbPbPCsBs9ucNBg0GDYYNRg3GDSYNpg1mDeYNFg2WDVYN1g02DbYNdg3+CwBs9p8NwGz2vw/AYvaPDCBi9q8OIGL2nw0gYva/DyBq9o8MoGr2rw6gavafDaBq9r8PoGb2jwxgZvavDmBm9p8NYGb2vw9gbvaPDOBu9q8O4Ghzc4osF7Gry3wZEN3tfgqAZHN3h/gw80+GCDDzX4cIOPNPhog481+HiDTzT4ZINPNfh0g880+GyDzzX4fIMvNPhigy81+HKDrzT4aoOvNfh6g280+GaDbzX4doPvNPhug+81+H6DHzT4YYMfNfhxg580+GmDnzX4eYNfNDimwS8b/KrBrxv8psFvG/yuwe8b/KHBHxv8qcGfG/ylwV8b/K3B3xv8o8GxDf7Z4F8N/t3gPw3+2+B/DQ5pcZwWx21xvBbHb3GCFidscaIWJ25xaIuTtDhpi5O1OHmLU7Q4ZYtTtTh1i9O0OG2L07U4fYsztDhjizO1OHOLs7Q4a4uztTh7i3O0OGeLc7U4d4vztDhvi/O1OH+LC7S4YIsLtbhwi4u0uGiLi7W4eItLtLhki0u1SItLt7hMi8u2uFyLy7e4QosrtrhSiyu3uEqLq7a4Wourt7hGi2u2uFaLa7e4Tovrtrhei+u3uEGLG7a4UYsbt7hJi5u2uFmLm7e4RYtbtrhVi1u3uE2L27a4XYvbt7hDizu2uFOLO7e4S4u7trhbi7u3uEeLe7a4V4t7t7hPi/u2uF+L+7d4QIsHtnhQiwe3eEiLh7Z4WIuHt3hEi0e2eFSLR7d4TIvHtnhci8e3eEKLJ7Z4Uosnt2iLp7R4aountXh6i2e0eGaLZ7V4douDFoMWwxajFuMWkxbTFrMW8xaLFssWqxbrFpsW2xa7FvsWh7V4Tovntnhei+e3eEGLF7Z4UYsXt3hJi5e2eFmLl7d4RYtXtnhVi1e3eE2L17Z4XYvXt3hDize2eFOLN7d4S4u3tnhbi7e3eEeLd7Z4V4t3tzi8xREt3tPivS2ObPG+Fke1OLrF+1t8oMUHW3yoxYdbfKTFR1t8rMXHW3yixSdbfKrFp1t8psVnW3yuZej/dvNCiy+2+FKLL7f4Souvtvhai6+3+EaLb7b4Votvt/hOi++2+F6L77f4QYsftvhRix+3+EmLn7b4WYuft/hFi2Na/LLFr1r8usVvWvy2xe9a/L7FH1r8scWfWvy5xV9a/LXF31r8vcU/Whzb4p8t/tXi3y3+0+K/Lf7X4pAOx+lw3A7H63D8DifocMIOJ+pw4g6HdjhJh5N2OFmHk3c4RYdTdjhVh1N3OE2H03Y4XYfTdzhDhzN2OFOHM3c4S4ezdjhbh7N3OEeHc3Y4V4dzdzhPh/N2OF+H83e4QIcLdrhQhwt3uEiHi3a4WIeLd7hEh0t2uFSHdLh0h8t0uGyHy3W4fIcrdLhix9AhQ4a4coerdLhqh6t1uHqHa3S4Zodrdbh2h+t0uG6H63W4focbdLhhhxt1uHGHm3S4aYebdbh5h1t0uGWHW3W4dYfbdLhth9t1uH2HO3S4Y4c7dbhzh7t0uGuHu3W4e4d7dLhnh3t1uHeH+3S4b4f7dbh/hwd0eGCHB3V4cIeHdHhoh4d1eHiHR3R4ZIdHdXh0h8d0eGyHx3V4fIcndHhihyd1eHKHdnhKh6d2eFqHp3d4RodndnhWh2d3OOgw6DDsMOow7jDpMO0w6zDvsOiw7LDqsO6w6bDtsOuw73BYh+d0eG6H53V4focXdHhhhxd1eHGHl3R4aYeXdXh5h1d0eGWHV3V4dYfXdHhth9d1eH2HN3R4Y4c3dXhzh7d0eGuHt3V4e4d3dHhnh3d1eHeHwzsc0eE9Hd7b4cgO7+twVIejO7y/wwc6fLDDhzp8uMNHOny0w8c6fLzDJzp8ssOnOny6w2c6fLbD5zp8vsMXOnyxw5c6fLnDVzp8tcPXOny9wzc6fLPDtzp8u8N3Ony3w/c6fL/DDzr8sMOPOvy4w086/LTDzzr8vMMvOhzT4ZcdftXh1x1+0+G3HX7X4fcd/tDhjx3+1OHPHf7S4a8d/tbh7x3+0eHYDv/s8K8O/+7wnw7/7fC/Dof0OE6P4/Y4Xo/j9zhBjxP2OFGPE/c4tMdJepy0x8l6nLzHKXqcssepepy6x2l6nLbH6XqcvscZepyxx5l6nLnHWXqctcfZepy9xzl6nLPHuXqcu8d5epy3x/l6nL/HBXpcsMeFely4x0V6XLTHxXpcvMclelyyx6V6pMele1ymx2V7XK7H5XtcoccVe1ypx5V7XKXHVXtcrcfVe1yjxzV7XKvHtXtcp8d1e1yvx/V73KDHDXvcqMeNe9ykx0173KzHzXvcoscte9yqx6173KbHbXvcrsfte9yhxx173KnHnXvcpcdde9ytx9173KPHPXvcq8e9e9ynx3173K/H/Xs8oMcDezyox4N7PKTHQ3s8rMfDezyixyN7PKrHo3s8psdjezyux+N7PKHHE3s8qceTe7THU3o8tcfTejy9xzN6PLPHs3o8u8dBj0GPYY9Rj3GPSY9pj1mPeY9Fj2WPVY91j02PbY9dj32Pw3o8p8dzezyvx/N7vKDHC3u8qMeLe7ykx0t7vKzHy3u8oscre7yqx6t7vKbHa3u8rsfre7yhxxt7vKnHm3u8pcdbe7ytx9t7vKPHO3u8q8e7exze44ge7+nx3h5H9nhfj6N6HP1/LNIDE54Hg0DR1G1q23Zvbdu2bfvWSO33sVHbTmrbtm1FOzvz/YUzZ4DDBzhigI8M8NEBPjbAxwf4xACfHOBTA3x6gM8M8NkBPjfA5wf4wgBfHOBLA3x5gK8M8NUBvjbA1wf4xgDfHOBbA3x7gO8M8N0BvjfA9wf4wQA/HOBHA/x4gJ8M8NMBfjbAzwf4xQC/HOBXA/x6gN8M8NsBfjfA7wf4wwB/HOBPA/x5gL8M8NcB/jbA3wf4xwD/HOBfA/x7gP8M8N8B/jfAkQMcNcDRAxwzwLEDHBLgOAGOG+B4AY4f4AQBThjgRAFOHOAkAQ4NcNIAJwtw8gCnCHDKAKcKcOoApwlw2gCnC3D6AGcIcMYAZwpw5gBnCXDWAGcLcPYA5whwzgDnCnDuAOcJcN4A5wtw/gAXCHDBABcKcOEAFwlw0QAXC3DxAJcIcMkAlwqQAJcOcJkAlw1wuQCXD3CFAFcMcKUAVw5wlQBXDXC1AFcPcI0A1wxwrQDXDnCdANcNcL0A1w9wgwA3DHCjADcOcJMANw1wswA3D3CLALcMcKsAtw5wmwC3DXC7ALcPcIcAdwxwpwB3DnCXAHcNcLcAdw9wjwD3DHCvAPcOcJ8A9w1wvwD3D/CAAA8M8KAADw7wkAAPDfCwAA8P8IgAjwzwqACPDvCYAI8N8LgAjw/whABPDPCkAE8O0ABPCfDUAE8L8PQAzwjwzADPCvDsAM8J8NwAhwV4XoDnB3hBgBcGeFGAFwd4SYCXBnhZgJcHeEWAVwZ4VYCDAIMAwwCjAOMAkwDTALMA8wCLAMsAqwDrAJsA2wC7APsArw7wmgCvDfC6AK8P8IYAbwzwpgBvDvCWAG8N8LYAbw/wjgDvDPCuAO8O8J4A7w3wvgDvD/CBAB8M8KEAHw5weIAjAnwkwEcDfCzAxwN8IsAnA3wqwKcDfCbAZwN8LsDnA3whwBcDfCnAlwN8JcBXA3wtwNcDfCPANwN8K8C3A3wnwHcDfC/A9wP8IMAPA/wowI8D/CTATwP8LMDPA/wiwC8D/CrArwP8JsBvA/wuwO8D/CHAHwP8KcCfA/wlwF8D/C3A3wP8I8A/A/wrwL8D/CfAfwP8L8CRAY4KcHSAYwIcG+CQEMcJcdwQxwtx/BAnCHHCECcKceIQJwlxaIiThjhZiJOHOEWIU4Y4VYhThzhNiNOGOF2I04c4Q4gzhjhTiDOHOEuIs4Y4W4izhzhHiHOGOFeIc4c4T4jzhjhfiPOHuECIC4a4UIgLh7hIiIuGuFiIi4e4RIhLhrhUiIS4dIjLhLhsiMuFuHyIK4S4YogrhbhyiKuEuGqIq4W4eohrhLhmiGuFuHaI64S4bojrhbh+iBuEuGGIG4W4cYibhLhpiJuFuHmIW4S4ZYhbhbh1iNuEuG2I24W4fYg7hLhjiDuFuHOIu4S4a4i7hbh7iHuEuGeIe4W4d4j7hLhviPuFuH+IB4R4YIgHhXhwiIeEeGiIh4V4eIhHhHhkiEeFeHSIx4R4bIjHhXh8iCeEeGKIJ4V4coiGeEqIp4Z4Woinh3hGiGeGeFaIZ4d4TojnhjgsxPNCPD/EC0K8MMSLQrw4xEtCvDTEy0K8PMQrQrwyxKtCHIQYhBiGGIUYh5iEmIaYhZiHWIRYhliFWIfYhNiG2IXYh3h1iNeEeG2I14V4fYg3hHhjiDeFeHOIt4R4a4i3hXh7iHeEeGeId4V4d4j3hHhviPeFeH+ID4T4YIgPhfhwiMNDHBHiIyE+GuJjIT4e4hMhPhniUyE+HeIzIT4b4nMhPh/iCyG+GOJLIb4c4ishvhriayG+HuIbIb4Z4lshvh3iOyG+G+J7Ib4f4gchfhjiRyF+HOInIX4a4mchfh7iFyF+GeJXIX4d4jchfhvidyF+H+IPIf4Y4k8h/hziLyH+GuJvIf4e4h8h/hniXyH+HeI/If4b4n8hjgxxVIijQxwT4tgQh0Q4ToTjRjhehONHOEGEE0Y4UYQTRzhJhEMjnDTCySKcPMIpIpwywqkinDrCaSKcNsLpIpw+whkinDHCmSKcOcJZIpw1wtkinD3COSKcM8K5Ipw7wnkinDfC+SKcP8IFIlwwwoUiXDjCRSJcNMLFIlw8wiUiXDLCpSIkwqUjXCbCZSNcLsLlI1whwhUjXCnClSNcJcJVI1wtwtUjXCPCNSNcK8K1I1wnwnUjXC/C9SPcIMINI9wowo0j3CTCTSPcLMLNI9wiwi0j3CrCrSPcJsJtI9wuwu0j3CHCHSPcKcKdI9wlwl0j3C3C3SPcI8I9I9wrwr0j3CfCfSPcL8L9IzwgwgMjPCjCgyM8JMJDIzwswsMjPCLCIyM8KsKjIzwmwmMjPC7C4yM8IcITIzwpwpMjNMJTIjw1wtMiPD3CMyI8M8KzIjw7wnMiPDfCYRGeF+H5EV4Q4YURXhThxRFeEuGlEV4W4eURXhHhlRFeFeEgwiDCMMIowjjCJMI0wizCPMIiwjLCKsI6wibCNsIuwj7CqyO8JsJrI7wuwusjvCHCGyO8KcKbI7wlwlsjvC3C2yO8I8I7I7wrwrsjvCfCeyO8L8L7I3wgwgcjfCjChyMcHuGICB+J8NEIH4vw8QifiPDJCJ+K8OkIn4nw2Qifi/D5CF+I8MUIX4rw5QhfifDVCF+L8PUI34jwzQjfivDtCN+J8N0I34vw/Qg/iPDDCD+K8OMIP4nw0wg/i/DzCL+I8MsIv4rw6wi/ifDbCL+L8PsIf4jwxwh/ivDnCH+J8NcIf4vw9wj/iPDPCP+K8O8I/4nw3wj/i3BkhKMiHB3hmAjHRjgkxnFiHDfG8WIcP8YJYpwwxolinDjGSWIcGuOkMU4W4+QxThHjlDFOFePUMU4T47QxThfj9DHOEOOMMc4U48wxzhLjrDHOFuPsMc4R45wxzhXj3DHOE+O8Mc4X4/wxLhDjgjEuFOPCMS4S46IxLhbj4jEuEeOSMS4VIzEuHeMyMS4b43IxLh/jCjGuGONKMa4c4yoxrhrjajGuHuMaMa4Z41oxrh3jOjGuG+N6Ma4f4wYxbhjjRjFuHOMmMW4a42Yxbh7jFjFuGeNWMW4d4zYxbhvjdjFuH+MOMe4Y404x7hzjLjHuGuNuMe4e4x4x7hnjXjHuHeM+Me4b434x7h/jATEeGONBMR4c4yExHhrjYTEeHuMRMR4Z41ExHh3jMTEeG+NxMR4f4wkxnhjjSTGeHKMxnhLjqTGeFuPpMZ4R45kxnhXj2TGeE+O5MQ6L8bwYz4/xghgvjPGiGC+O8ZIYL43xshgvj/GKGK+M8aoYBzEGMYYxRjHGMSYxpjFmMeYxFjGWMVYx1jE2MbYxdjH2MV4d4zUxXhvjdTFeH+MNMd4Y400x3hzjLTHeGuNtMd4e4x0x3hnjXTHeHeM9Md4b430x3h/jAzE+GONDMT4c4/AYR8T4SIyPxvhYjI/H+ESMT8b4VIxPx/hMjM/G+FyMz8f4QowvxvhSjC/H+EqMr8b4Woyvx/hGjG/G+FaMb8f4TozvxvhejO/H+EGMH8b4UYwfx/hJjJ/G+FmMn8f4RYxfxvhVjF/H+E2M38b4XYzfx/hDjD/G+FOMP8f4S4y/xvhbjL/H+EeMf8b4V4x/x/hPjP/G+F+MI2McFePoGMfEODbGIQmOk+C4CY6X4PgJTpDghAlOlODECU6S4NAEJ01wsgQnT3CKBKdMcKoEp05wmgSnTXC6BKdPcIYEZ0xwpgRnTnCWBGdNcLYEZ09wjgTnTHCuBOdOcJ4E501wvgTnT3CBBBdMcKEEF05wkQQXTXCxBBdPcIkEl0xwqQRJcOkEl0lw2QSXS3D5BFdIcMUEV0pw5QRXSXDVBFdLcPUE10hwzQTXSnDtBNdJcN0E10tw/QQ3SHDDBDdKcOMEN0lw0wQ3S3DzBLdIcMsEt0pw6wS3SXDbBLdLcPsEd0hwxwR3SnDnBHdJcNcEd0tw9wT3SHDPBPdKcO8E90lw3wT3S3D/BA9I8MAED0rw4AQPSfDQBA9L8PAEj0jwyASPSvDoBI9J8NgEj0vw+ARPSPDEBE9K8OQETfCUBE9N8LQET0/wjATPTPCsBM9O8JwEz01wWILnJXh+ghckeGGCFyV4cYKXJHhpgpcleHmCVyR4ZYJXJThIMEgwTDBKME4wSTBNMEswT7BIsEywSrBOsEmwTbBLsE/w6gSvSfDaBK9L8PoEb0jwxgRvSvDmBG9J8NYEb0vw9gTvSPDOBO9K8O4E70nw3gTvS/D+BB9I8MEEH0rw4QSHJzgiwUcSfDTBxxJ8PMEnEnwywacSfDrBZxJ8NsHnEnw+wRcSfDHBlxJ8OcFXEnw1wdcSfD3BNxJ8M8G3Enw7wXcSfDfB9xJ8P8EPEvwwwY8S/DjBTxL8NMHPEvw8wS8S/DLBrxL8OsFvEvw2we8S/D7BHxL8McGfEvw5wV8S/DXB3xL8PcE/Evwzwb8S/DvBfxL8N8H/EhyZ4KgERyc4JsGxCQ5JcZwUx01xvBTHT3GCFCdMcaIUJ05xkhSHpjhpipOlOHmKU6Q4ZYpTpTh1itOkOG2K06U4fYozpDhjijOlOHOKs6Q4a4qzpTh7inOkOGeKc6U4d4rzpDhvivOlOH+KC6S4YIoLpbhwioukuGiKi6W4eIpLpLhkikulSIpLp7hMisumuFyKy6e4QoorprhSiiunuEqKq6a4Woqrp7hGimumuFaKa6e4TorrprheiuunuEGKG6a4UYobp7hJipumuFmKm6e4RYpbprhVilunuE2K26a4XYrbp7hDijumuFOKO6e4S4q7prhbirunuEeKe6a4V4p7p7hPivumuF+K+6d4QIoHpnhQigeneEiKh6Z4WIqHp3hEikemeFSKR6d4TIrHpnhciseneEKKJ6Z4Uoonp2iKp6R4aoqnpXh6imekeGaKZ6V4dornpHhuisNSPC/F81O8IMULU7woxYtTvCTFS1O8LMXLU7wixStTvCrFQYpBimGKUYpxikmKaYpZinmKRYplilWKdYpNim2KXYp9ileneE2K16Z4XYrXp3hDijemeFOKN6d4S4q3pnhbireneEeKd6Z4V4p3p3hPivemeF+K96f4QIoPpvhQig+nODzFESk+kuKjKT6W4uMpPpHikyk+leLTKT6T4rMpPpfi8ym+kOKLKb6U4sspvpLiqym+luLrKb6R4pspvpXi2ym+k+K7Kb6X4vspfpDihyl+lOLHKX6S4qcpfpbi5yl+keKXKX6V4tcpfpPityl+l+L3Kf6Q4o8p/pTizyn+kuKvKf6W4u8p/pHinyn+leLfKf6T4r8p/pfiyBRHpTg6xTEpjk1xSIbjZDhuhuNlOH6GE2Q4YYYTZThxhpNkODTDSTOcLMPJM5wiwykznCrDqTOcJsNpM5wuw+kznCHDGTOcKcOZM5wlw1kznC3D2TOcI8M5M5wrw7kznCfDeTOcL8P5M1wgwwUzXCjDhTN8P8NFM1wsw8UzXCLDJTNcKkMyXDrDZTJcNsPlMlw+wxUyXDHDlTJcOcNVMlw1w9UyXD3DNTJcM8O1Mlw7w3UyXDfD9TJcP8MNMtwww40y3DjDTTLcNMPNMtw8wy0y3DLDrTLcOsNtMtw2w+0y3D7DHTLcMcOdMtw5w10y3DXD3TLcPcM9Mtwzw70y3DvDfTLcN8P9Mtw/wwMyPDDDgzI8OMNDMjw0w8MyPDzDIzI8MsOjMjw6w2MyPDbD4zI8PsMTMjwxw5MyPDlDMzwlw1MzPC3D0zM8I8MzMzwrw7MzPCfDczMcluF5GZ6f4QUZXpjhRRlenOElGV6a4WUZXp7hFRlemeFVGQ4yDDIMM4wyjDNMMkwzzDLMMywyLDOsMqwzbDJsM+wy7DO8OsNrMrw2w+syvD7DGzK8McObMrw5w1syvDXD2zK8PcM7Mrwzw7syvDvDezK8N8P7Mrw/wwcyfDDDhzJ8OMPhGY7I8JEMH83wsQwfz/CJDJ/M8KkMn87wmQyfzfC5DJ/P8IUMX8zwpQxfzvCVDF/N8LUMX8/wjQzfzPCtDN/O8J0M383wvf8d/iDDDzP8KMOPM/wkw08z/CzDzzP8IsMvM/wqw68z/CbDbzP8LsPvM/whwx8z/CnDnzP8JcNfM/wtw98z/CPDPzP8K8O/M/wnw38z/C/DkRmOynB0hmMyHJvhkBzHyXHcHMfLcfwcJ8hxwhwnynHiHCfJcWiOk+Y4WY6T5zhFjlPmOFWOU+c4TY7T5jhdjtPnOEOOM+Y4U44z5zhLjrPmOFuOs+c4R45z5jhXjnPnOE+O8+Y4X47z57hAjgvmuFCOC+e4SI6L5rhYjovnuESOS+a4VI7kuHSOy+S4bI7L5bh8jivkuGKOK+W4co6r5LhqjqvluHqOa+S4Zo5r5bh2juvkuG6O6+W4fo4b5LhhjhvluHGOm+S4aY6b5bh5jlvkuGWOW+W4dY7b5LhtjtvluH2OO+S4Y4475bhzjrvkuGuOu+W4e4575LhnjnvluHeO++S4b4775bh/jgfkeGCOB+V4cI6H5HhojofleHiOR+R4ZI5H5Xh0jsfkeGyOx+V4fI4n5HhijifleHKO5nhKjqfmeFqOp+d4Ro5n5nhWjmfneE6O5+Y4LMfzcjw/xwtyvDDHi3K8OMdLcrw0x8tyvDzHK3K8MserchzkGOQY5hjlGOeY5JjmmOWY51jkWOZY5Vjn2OTY5tjl2Od4dY7X5HhtjtfleH2ON+R4Y4435XhzjrfkeGuOt+V4e4535HhnjnfleHeO9+R4b4735Xh/jg/k+GCOD+X4cI7DcxyR4yM5PprjYzk+nuMTOT6Z41M5Pp3jMzk+m+NzOT6f4ws5vpjjSzm+nOMrOb6a42s5vp7jGzm+meNbOb6d4zs5vpvjezm+n+MHOX6Y40c5fpzjJzl+muNnOX6e4xc5fpnjVzl+neM3OX6b43c5fp/jDzn+mONPOf6c4y85/prjbzn+nuMfOf6Z4185/p3jPzn+m+N/OY7McVSOo3Mck+PYHIcUOE6B4xY4XoHjFzhBgRMWOFGBExc4SYFDC5y0wMkKnLzAKQqcssCpCpy6wGkKnLbA6QqcvsAZCpyxwJkKnLnAWQqctcDZCpy9wDkKnLPAuQqcu8B5Cpy3wPkKnL/ABQpcsMCFCly4wEUKXLTAxQpcvMAlClyywKUKpMClC1ymwGULXK7A5QtcocAVC1ypwJULXKXAVQtcrcDVC1yjwDULXKvAtQtcp8B1C1yvwPUL3KDADQvcqMCNC9ykwE0L3KzAzQvcosAtC9yqwK0L3KbAbQvcrsDtC9yhwB0L3KnAnQvcpcBdC9ytwN0L3KPAPQvcq8C9C9ynwH0L3K/A/Qs8oMADCzyowIMLPKTAQws8rMDDCzyiwCMLPKrAows8psBjCzyuwOMLPKHAEws8qcCTC7TAUwo8tcDTCjy9wDMKPLPAswo8u8BzCjy3wGEFnlfg+QVeUOCFBV5U4MUFXlLgpQVeVuDlBV5R4JUFXlXgoMCgwLDAqMC4wKTAtMCswLzAosCywKrAusCmwLbArsC+wKsLvKbAawu8rsDrC7yhwBsLvKnAmwu8pcBbC7ytwNsLvKPAOwu8q8C7C7ynwHsLvK/A+wt8oMAHC3yowIcLHF7giAIfKfDRAh8r8PECnyjwyQKfKvDpAp8p8NkCnyvw+QJfKPDFAl8q8OUCXynw1QJfK/D1At8o8M0C3yrw7QLfKfDdAt8r8P0CPyjwwwI/KvDjAj8p8NMCPyvw8wK/KPDLAr8q8OsCvynw2wK/K/D7An8o8McCfyrw5wJ/KfDXAn8r8PcC//h/n6H4V4F/F/hPgf8W+F+BIwscVeDoAscUOLbAISWOU+K4JY5X4vglTlDihCVOVOLEJU5S4tASJy1xshInL3GKEqcscaoSpy5xmhKnLXG6EqcvcYYSZyxxphJnLnGWEmctcbYSZy9xjhLnLHGuEucucZ4S5y1xvhLnL3GBEhcscaESFy5xkRIXLXGxEhcvcYkSlyxxqRIpcekSlylx2RKXK3H5ElcoccUSVypx5RJXKXHVElcrcfUS1yhxzRLXKnHtEtcpcd0S1ytx/RI3KHHDEjcqceMSNylx0xI3K3HzErcoccsStypx6xK3KXHbErcrcfsSdyhxxxJ3KnHnEncpcdcSdytx9xL3KHHPEvcqce8S9ylx3xL3K3H/Eg8o8cASDyrx4BIPKfHQEg8r8fASjyjxyBKPKvHoEo8p8dgSjyvx+BJPKPHEEk8q8eQSLfGUEk8t8bQSTy/xjBLPLPGsEs8u8ZwSzy1xWInnlXh+iReUeGGJF5V4cYmXlHhpiZeVeHmJV5R4ZYlXlTgoMSgxLDEqMS4xKTEtMSsxL7EosSyxKrEusSmxLbErsS/x6hKvKfHaEq8r8foSbyjxxhJvKvHmEm8p8dYSbyvx9hLvKPHOEu8q8e4S7ynx3hLvK/H+Eh8o8cESHyrx4RKHlziixEdKfLTEx0p8vMQnSnyyxKdKfLrEZ0p8tsTnSny+xBdKfLHEl0p8ucRXSny1xNdKfL3EN0p8s8S3Sny7xHdKfLfE90p8v8QPSvywxI9K/LjET0r8tMTPSvy8xC9K/LLEr0r8usRvSvy2xO9K/L7EH0r8scSfSvy5xF9K/LXE30r8vcQ/SvyzxL9K/LvEf0r8t8T/ShxZ4qgSR5c4psSxJQ6pcJwKx61wvArHr3CCCiescKIKJ65wkgqHVjhphZNVOHmFU1Q4ZYVTVTh1hdNUOG2F01U4fYUzVDhjhTNVOHOFs1Q4a4WzVTh7hXNUOGeFc1U4d4XzVDhvhfNVOH+FC1S4YIULVbhwhYtUuGiFi1W4eIVLVLhkhUtVSIVLV7hMhctWuFyFy1e4QoUrVrhShStXuEqFq1a4WoWrV7hGhWtWuFaFa1e4ToXrVrhehetXuEGFG1a4UYUbV7hJhZtWuFmFm1e4RYVbVrhVhVtXuE2F21a4XYXbV7hDhTtWuFOFO1e4S4W7VrhbhbtXuEeFe1a4V4V7V7hPhftWuF+F+1d4QIUHVnhQhQdXeEiFh1Z4WIWHV3hEhUdWeFSFR1d4TIXHVnhchcdXeEKFJ1Z4UoUnV2iFp1R4aoWnVXh6hWdUeGaFZ1V4doXnVHhuhcMqPK/C8yu8oMILK7yowosrvKTCSyu8rMLLK7yiwisrvKrCQYVBhWGFUYVxhUmFaYVZhXmFRYVlhVWFdYVNhW2FXYV9hVdXeE2F11Z4XYXXV3hDhTdWeFOFN1d4S4W3VnhbhbdXeEeFd1Z4V4V3V3hPhfdWeF+F91f4QIUPVvhQhQ9XOLzCERU+UuGjFT5W4eMVPlHhkxU+VeHTFT5T4bMVPlfh8xW+UOGLFb5U4csVvlLhqxW+VuHrFb5R4ZsVvlXh2xW+U+G7Fb5X4fsVflDhhxV+VOHHFX5S4acVflbh5xV+UeGXFX5V4dcVflPhtxV+V+H3Ff5Q4Y8V/lThzxX+UuGvFf5W4e8V/lHhnxX+VeHfFf5T4b8V/lfhyApHVTi6wjEVjq1wSI3j1DhujePVOH6NE9Q4YY0T1ThxjZPUOLTGSWucrMbJa5yixilrnKrGqWucpsZpa5yuxulrnKHGGWucqcaZa5ylxllrnK3G2Wuco8Y5a5yrxrlrnKfGeWucr8b5a1ygxgVrXKjGhWtcpMZFa1ysxsVrXKLGJWtcqkZqXLrGZWpctsblaly+xhVqXLHGlWpcucZValy1xtVqXL3GNWpcs8a1aly7xnVqXLfG9Wpcv8YNatywxo1q3LjGTWrctMbNaty8xi1q3LLGrWrcusZtaty2xu1q3L7GHWrcscadaty5xl1q3LXG3WrcvcY9atyzxr1q3LvGfWrct8b9aty/xgNqPLDGg2o8uMZDajy0xsNqPLzGI2o8ssajajy6xmNqPLbG42o8vsYTajyxxpNqPLlGazylxlNrPK3G02s8o8YzazyrxrNrPKfGc2scVuN5NZ5f4wU1XljjRTVeXOMlNV5a42U1Xl7jFTVeWeNVNQ5qDGoMa4xqjGtMakxrzGrMayxqLGusaqxrbGpsa+xq7Gu8usZrary2xutqvL7GG2q8scabary5xltqvLXG22q8vcY7aryzxrtqvLvGe2q8t8b7ary/xgdqfLDGh2p8uMbhNY6o8ZEaH63xsRofr/GJGp+s8akan67xmRqfrfG5Gp+v8YUaX6zxpRpfrvGVGl+t8bUaX6/xjRrfrPGtGt+u8Z0a363xvRrfr/GDGj+s8aMaP67xkxo/rfGzGj+v8Ysav6zxqxq/rvGbGr+t8bsav6/xhxp/rPGnGn+u8Zcaf63xtxp/r/GPGv+s8a8a/67xnxr/rfG/GkfWOKrG0TWOqXFsjUMaHKfBcRscr8HxG5ygwQkbnKjBiRucpMGhDU7a4GQNTt7gFA1O2eBUDU7d4DQNTtvgdA1O3+AMDc7Y4EwNztzgLA3O2uBsDc7e4BwNztngXA3O3eA8Dc7b4HwNzt/gAg0u2OBCDS7c4CINLtrgYg0u3uASDS7Z4FIN0uDSDS7T4LINLtfg8g2u0OCKDa7U4MoNrtLgqg2u1uDqDa7R4JoNrtXg2g2u0+C6Da7X4PoNbtDghg1u1ODGDW7S4KYNbtbg5g1u0eCWDW7V4NYNbtPgtg1u1+D2De7Q4I4N7tTgzg3u0uCuDe7W4O4N7tHgng3u1eDeDe7T4L4N7tfg/g0e0OCBDR7U4MENHtLgoQ0e1uDhDR7R4JENHtXg0Q0e0+CxDR7X4PENntDgiQ2e1ODJDdrgKQ2e2uBpDZ7e4BkNntngWQ2e3eA5DZ7b4LAGz2vw/AYvaPDCBi9q8OIGL2nw0gYva/DyBq9o8MoGr2pw0GDQYNhg1GDcYNJg2mDWYN5g0WDZYNVg3WDTYNtg12Df4NUNXtPgtQ1e1+D1Dd7Q4I0N3tTgzQ3e0uCtDd7W4O0N3tHgnQ3e1eDdDd7T4L0N3tfg/Q0+0OCDDT7U4MMNDm9wRIOPNPhog481+HiDTzT4ZINPNfh0g880+GyDzzX4fIMvNPhigy81+HKDrzT4aoOvNfh6g280+GaDbzX4doPvNPhug+81+H6DHzT4YYMfNfhxg580+GmDnzX4eYNfNPhlg181+HWD3zT4bYPfNfh9gz80+GODPzX4c4O/NPhrg781+HuDfzT4Z4N/Nfh3g/80+G+D/zU4ssFRDY5ucEyDYxsc0uI4LY7b4ngtjt/iBC1O2OJELU7c4iQtDm1x0hYna3HyFqdoccoWp2px6hanaXHaFqdrcfoWZ2hxxhZnanHmFmdpcdYWZ2tx9hbnaHHOFudqce4W52lx3hbna3H+FhdoccEWF2px4RYXaXHRFhdrcfEWl2hxyRaXapEWl25xmRaXbXG5FpdvcYUWV2xxpRZXbnGVFldtcbUWV29xjRbXbHGtFtducZ0W121xvRbXb3GDFjdscaMWN25xkxY3bXGzFjdvcYsWt2xxqxa3bnGbFrdtcbsWt29xhxZ3bHGnFnducZcWd21xtxZ3b3GPFvdsca8W925xnxb3bXG/Fvdv8YAWD2zxoBYPbvGQFg9t8bAWD2/xiBaPbPGoFo9u8ZgWj23xuBaPb/GEFk9s8aQWT27RFk9p8dQWT2vx9BbPaPHMFs9q8ewWz2nx3BaHtXhei+e3eEGLF7Z4UYsXt3hJi5e2eFmLl7d4RYtXtnhVi4MWgxbDFqMW4xaTFtMWsxbzFosWyxarFusWmxbbFrsW+xavbvGaFq9t8boWr2/xhhZvbPGmFm9u8ZYWb23xthZvb/GOFu9s8a4W727xnhbvbfG+Fu9v8YEWH2zxoRYfbnF4iyNafKTFR1t8rMXHW3yixSdbfKrFp1t8psVnW3yuxedbfKHFF1t8qcWXW3ylxVdbfK3F11t8o8U3W3yrxbdbfKfFd1t8r8X3W/ygxQ9b/KjFj1v8pMVPW/ysxc9b/KLFL1v8qsWvW/ymxW9b/K7F71v8ocUfW/ypxZ9b/KXFX1v8rcXfW/yjxT9b/KvFv1v8p8V/W/yvxZEtjmpxdItjWhzb4pAOx+lw3A7H63D8DifocMIOJ+pw4g4n6XBoh5N2OFmHk3c4RYdTdjhVh1N3OE2H03Y4XYfTdzhDhzN2OFOHM3c4S4ezdjhbh7N3OEeHc3Y4V4dzdzhPh/N2OF+H83e4QIcLdrhQhwt3uEiHi3a4WIeLd7hEh0t2uFSHdLh0h8t0uGyHy3W4fIcrdLhihyt1uHKHq3S4aoerdbh6h2t0uGaHa3W4dofrdLhuh+t1uH6HG3S4YYcbdbhxh5t0uGmHm3W4eYdbdLhlh1t1uHWH23S4bYfbdbh9hzt0uGOHO3W4c4e7dLhrh7t1uHuHe3S4Z4d7dbh3h/t0uG+H+3W4f4cHdHhghwd1eHCHh3R4aIeHdXh4h0d0eGSHR3V4dIfHdHhsh8d1eHyHJ3R4YocndXhyh3Z4Soendnhah6d3eEaHZ3Z4Vodnd3hOh+d2OKzD8zo8v8MLOryww4s6vLjDSzq8tMPLOry8wys6vLLDqzocdBh0GHYYdRh3mHSYdph1mHdYdFh2WHVYd9h02HbYddh3eHWH13R4bYfXdXh9hzd0eGOHN3V4c4e3dHhrh7d1eHuHd3R4Z4d3dXh3h/d0eG+H93V4f4cPdPhghw91+HCHwzsc0eEjHT7a4WMdPt7hEx0+2eFTHT7d4TMdPtvhcx0+3+ELHb7Y4UsdvtzhKx2+2uFrHb7e4RsdvtnhWx2+3eE7Hb7b4Xsdvt/hBx1+2OFHHX7c4ScdftrhZx1+3uEXHX7Z4Vcdft3hNx1+2+F3HX7f4Q8d/tjhTx3+3OEvHf7a4W8d/t7hHx3+2eFfw4b4d4f/dPhvh/91OLLDUR2O7nBMh2M7HNLjOD2O2+N4PY7f4wQ9TtjjRD1O3OMkPQ7tcdIeJ+tx8h6n6HHKHqfqceoep+lx2h6n63H6HmfoccYeZ+px5h5n6XHWHmfrcfYe5+hxzh7n6nHuHufpcd4e5+tx/h4X6HHBHhfqceEeF+lx0R4X63HxHpfocckel+qRHpfucZkel+1xuR6X73GFHlfscaUeV+5xlR5X7XG1HlfvcY0e1+xxrR7X7nGdHtftcb0e1+9xgx437HGjHjfucZMeN+1xsx4373GLHrfscaset+5xmx637XG7HrfvcYced+xxpx537nGXHnftcbced+9xjx737HGvHvfucZ8e9+1xvx737/GAHg/s8aAeD+7xkB4P7fGwHg/v8Ygej+zxqB6P7vGYHo/t8bgej+/xhB5P7PGkHk/u0R5P6fHUHk/r8fQez+jxzB7P6vHsHs/p8dweh/V4Xo/n93hBjxf2eFGPF/d4SY+X9nhZj5f3eEWPV/Z4VY+DHoMewx6jHuMekx7THrMe8x6LHsseqx7rHpse2x67Hvser+7xmh6v7fG6Hq/v8YYeb+zxph5v7vGWHm/t8bYeb+/xjh7v7PGuHu/u8Z4e7+3xvh7v7/GBHh/s8aEeH+5xeI8j+v8juRyb+D4YLZgyTWrbdre2bdu2vbVS28b/Z6NWVNu2bevOM/d8g7Mz+2Jx5ABHDXD0AMcMcOwAHxngowN8bICPD/CJAT45wKcG+PQAnxngswN8boDPD/CFAb44wJcG+PIAXxngqwN8bYCvD/CNAb45wLcG+PYA3xnguwN8b4DvD/CDAX44wI8G+PEAPxngpwP8bICfD/CLAX45wK8G+PUAvxngtwP8boDfD/CHAf44wJ8G+PMAfxngrwP8bYC/D/CPAf45wL8G+PcA/xngvwP8b4BDAhwnwHEDHC/A8QOcIMAJAxwa4EQBDgtweIATBzhJgJMGOFmAkwc4RYBTBjhVgFMHOE2A0wY4XYDTBzhDgDMGOFOAMwc4S4CzBjhbgLMHOEeAcwY4V4BzBzhPgPMGOF+A8we4QIALBrhQgAsHuEiAiwa4WICLB7hEgAS4ZIBLBbh0gMsEuGyAywW4fIArBLhigCsFuHKAqwS4aoCrBbh6gGsEuGaAawW4doDrBLhugOsFuH6AGwS4YYAbBbhxgJsEuGmAmwW4eYBbBLhlgFsFuHWA2wS4bYDbBbh9gDsEuGOAOwW4c4C7BLhrgLsFuHuAewS4Z4B7Bbh3gPsEuG+A+wW4f4AHBHhggAcFeHCAhwR4aICHBXh4gEcEeGSARwV4dIDHBHhsgMcFeHyAJwR4YoAGeFKAJwd4SoCnBnhagKcHeEaAZwZ4VoBnB3hOgCMCPDfA8wI8P8ALArwwwIsCvDjASwK8NMDLArw8wCsCvDLAqwK8OsBrArw2wOsCvD7AGwK8McCbArw5wFsCvDXA2wK8PcA7AhwEGAQYBhgFGAeYBJgGmAWYB1gEWAZYBVgH2ATYBtgF2Ad4Z4B3BXh3gPcEeG+A9wV4f4APBPhggA8F+HCAIwMcFeDoAMcEODbARwJ8NMDHAnw8wCcCfDLApwJ8OsBnAnw2wOcCfD7AFwJ8McCXAnw5wFcCfDXA1wJ8PcA3AnwzwLcCfDvAdwJ8N8D3Anw/wA8C/DDAjwL8OMBPAvw0wM8C/DzALwL8MsCvAvw6wG8C/DbA7wL8PsAfAvwxwJ8C/DnAXwL8NcDfAvw9wD8C/DPAvwL8O8B/Avw3wP+C8RwS4jghjhvieCGOH+IEIU4Y4tAQJwpxWIjDQ5w4xElCnDTEyUKcPMQpQpwyxKlCnDrEaUKcNsTpQpw+xBlCnDHEmUKcOcRZQpw1xNlCnD3EOUKcM8S5Qpw7xHlCnDfE+UKcP8QFQlwwxIVCXDjERUJcNMTFQlw8xCVCJMQlQ1wqxKVDXCbEZUNcLsTlQ1whxBVDXCnElUNcJcRVQ1wtxNVDXCPENUNcK8S1Q1wnxHVDXC/E9UPcIMQNQ9woxI1D3CTETUPcLMTNQ9wixC1D3CrErUPcJsRtQ9wuxO1D3CHEHUPcKcSdQ9wlxF1D3C3E3UPcI8Q9Q9wrxL1D3CfEfUPcL8T9QzwgxANDPCjEg0M8JMRDQzwsxMNDPCLEI0M8KsSjQzwmxGNDPC7E40M8IcQTQzTEk0I8OcRTQjw1xNNCPD3EM0I8M8SzQjw7xHNCHBHiuSGeF+L5IV4Q4oUhXhTixSFeEuKlIV4W4uUhXhHilSFeFeLVIV4T4rUhXhfi9SHeEOKNId4U4s0h3hLirSHeFuLtId4R4iDEIMQwxCjEOMQkxDTELMQ8xCLEMsQqxDrEJsQ2xC7EPsQ7Q7wrxLtDvCfEe0O8L8T7Q3wgxAdDfCjEh0McGeKoEEeHOCbEsSE+EuKjIT4W4uMhPhHikyE+FeLTIT4T4rMhPhfi8yG+EOKLIb4U4sshvhLiqyG+FuLrIb4R4pshvhXi2yG+E+K7Ib4X4vshfhDihyF+FOLHIX4S4qchfhbi5yF+EeKXIX4V4tchfhPityF+F+L3If4Q4o8h/hTizyH+EuKvIf4W4u8h/hHinyH+FeLfIf4T4r8h/hfikAjHiXDcCMeLcPwIJ4hwwgiHRjhRhMMiHB7hxBFOEuGkEU4W4eQRThHhlBFOFeHUEU4T4bQRThfh9BHOEOGMEc4U4cwRzhLhrBHOFuHsEc4R4ZwRzhXh3BHOE+G8Ec4X4fwRLhDhghEuFOHCES4S4aIRLhbh4hEuESERLhnhUhEuHeEyES4b4XIRLh/hChGuGOFKEa4c4SoRrhrhahGuHuEaEa4Z4VoRrh3hOhGuG+F6Ea4f4QYRbhjhRhFuHOEmEW4a4WYRbh7hFhFuGeFWEW4d4TYRbhvhdhFuH+EOEe4Y4U4R7hzhLhHuGuFuEe4e4R4R7hnhXhHuHeE+Ee4b4X4R7h/hAREeGOFBER4c4SERHhrhYREeHuERER4Z4VERHh3hMREeG+FxER4f4QkRnhihEZ4U4ckRnhLhqRGeFuHpEZ4R4ZkRnhXh2RGeE+GICM+N8LwIz4/wgggvjPCiCC+O8JIIL43wsggvj/CKCK+M8KoIr47wmgivjfC6CK+P8IYIb4zwpghvjvCWCG+N8LYIb4/wjggHEQYRhhFGEcYRJhGmEWYR5hEWEZYRVhHWETYRthF2EfYR3hnhXRHeHeE9Ed4b4X0R3h/hAxE+GOFDET4c4cgIR0U4OsIxEY6N8JEIH43wsQgfj/CJCJ+M8KkIn47wmQifjfC5CJ+P8IUIX4zwpQhfjvCVCF+N8LUIX4/wjQjfjPCtCN+O8J0I343wvQjfj/CDCD+M8KMIP47wkwg/jfCzCD+P8IsIv4zwqwi/jvCbCL+N8LsIv4/whwh/jPCnCH+O8JcIf43wtwh/j/CPCP+M8K8I/47wnwj/jfC/CIfEOE6M48Y4XozjxzhBjBPGODTGiWIcFuPwGCeOcZIYJ41xshgnj3GKGKeMcaoYp45xmhinjXG6GKePcYYYZ4xxphhnjnGWGGeNcbYYZ49xjhjnjHGuGOeOcZ4Y541xvhjnj3GBGBeMcaEYF45xkRgXjXGxGBePcYkYiXHJGJeKcekYl4lx2RiXi3H5GFeIccUYV4px5RhXiXHVGFeLcfUY14hxzRjXinHtGNeJcd0Y14tx/Rg3iHHDGDeKceMYNxl3yJD/cdssxs1j3CLGLWPcKsatY9wmxm1j3C7G7WPcIcYdY9wpxp1j3CXGXWPcLcbdY9wjxj1j3CvGvWPcJ8Z9Y9wvxv1jPCDGA2M8KMaDYzwkxkNjPCzGw2M8IsYjYzwqxqNjPCbGY2M8LsbjYzwhxhNjNMaTYjw5xlNiPDXG02I8PcYzYjwzxrNiPDvGc2IcEeO5MZ4X4/kxXhDjhTFeFOPFMV4S46UxXhbj5TFeEeOVMV4V49UxXhPjtTFeF+P1Md4Q440x3hTjzTHeEuOtMd4W4+0x3hHjIMYgxjDGKMY4xiTGNMYsxjzGIsYyxirGOsYmxjbGLsY+xjtjvCvGu2O8J8Z7Y7wvxvtjfCDGB2N8KMaHYxwZ46gYR8c4JsaxMT4S46MxPhbj4zE+EeOTMT4V49MxPhPjszE+F+PzMb4Q44sxvhTjyzG+EuOrMb4W4+sxvhHjmzG+FePbMb4T47sxvhfj+zF+EOOHMX4U48cxfhLjpzF+FuPnMX4R45cxfhXj1zF+E+O3MX4X4/cx/hDjjzH+FOPPMf4S468x/hbj7zH+EeOfMf4V498x/hPjvzH+F+OQBMdJcNwEx0tw/AQnSHDCBIcmOFGCwxIcnuDECU6S4KQJTpbg5AlOkeCUCU6V4NQJTpPgtAlOl+D0Cc6Q4IwJzpTgzAnOkuCsCc6W4OwJzpHgnAnOleDcCc6T4LwJzpfg/AkukOCCCS6U4MIJLpLgogkuluDiCS6RIAkumeBSCS6d4DIJLpvgcgkun+AKCa6Y4EoJrpzgKgmumuBqCa6e4BoJrpngWgmuneA6Ca6b4HoJrp/gBglumOBGCW6c4CYJbprgZglunuAWCW6Z4FYJbp3gNglum+B2CW6f4A4J7pjgTgnunOAuCe6a4G4J7p7gHgnumeBeCe6d4D4J7pvgfgnun+ABCR6Y4EEJHpzgIQkemuBhCR6e4BEJHpngUQkeneAxCR6b4HEJHp/gCQmemKAJnpTgySOGe0qCpyZ4WoKnJ3hGgmcmeFaCZyd4ToIjEjw3wfMSPD/BCxK8MMGLErw4wUsSvDTByxK8PMErErwywasSvDrBaxK8NsHrErw+wRsSvDHBmxK8OcFbErw1wdsSvD3BOxIcJBgkGCYYJRgnmCSYJpglmCdYJFgmWCVYJ9gk2CbYJdgneGeCdyV4d4L3JHhvgvcleH+CDyT4YIIPJfhwgiMTHJXg6ATHJDg2wUcSfDTBxxJ8PMEnEnwywacSfDrBZxJ8NsHnEnw+wRcSfDHBlxJ8OcFXEnw1wdcSfD3BNxJ8M8G3Enw7wXcSfDfB9xJ8P8EPEvwwwY8S/DjBTxL8NMHPEvw8wS8S/DLBrxL8OsFvEvw2we8S/D7BHxL8McGfEvw5wV8S/DXB3xL8PcE/Evwzwb8S/DvBfxL8N8H/EhyS4jgpjpvieCmOn+IEKU6Y4tAUJ0pxWIrDU5w4xUlSnDTFyVKcPMUpUpwyxalSnDrFaVKcNsXpUpw+xRlSnDHFmVKcOcVZUpw1xdlSnD3FOVKcM8W5Upw7xXlSnDfF+VKcP8UFUlwwxYVSXDjFRVJcNMXFUlw8xSVSJMUlU1wqxaVTXCbFZVNcLsXlU1whxRVTXCnFlVNcJcVVU1wtxdVTXCPFNVNcK8W1U1wnxXVTXC/F9VPcIMUNU9woxY1T3CTFTVPcLMXNU9wixS1T3CrFrVPcJsVtU9wuxe1T3CHFHVPcKcWdU9wlxV1T3C3F3VPcI8U9U9wrxb1T3CfFfVPcL8X9UzwgxQNTPCjFg1M8JMVDUzwsxcNTPCLFI1M8KsWjUzwmxWNTPC7F41M8IcUTUzTFk1I8OcVTUjw1xdNSPD3FM1I8M8WzUjw7xXNSHJHiuSmel+L5KV6Q4oUpXpTixSlekuKlKV6W4uUpXpHilSleleLVKV6T4rUpXpfi9SnekOKNKd6U4s0p3pLirSneluLtKd6R4iDFIMUwxSjFOMUkxTTFLMU8xSLFMsUqxTrFJsU2xS7FPsU7U7wrxbtTvCfFe1O8L8X7U3wgxQdTfCjFh1McmeKoFEenOCbFsSk+kuKjKT6W4uMpPpHikyk+leLTKT6T4rMpPpfi8ym+kOKLKb6U4sspvpLiqym+luLrKb6R4pspvpXi2ym+k+K7Kb6X4vspfpDihyl+lOLHKX6S4qcpfpbi5yl+keKXKX6V4tcpfpPityl+l+L3Kf6Q4o8p/pTizyn+kuKvKf6W4u8p/pHinyn+leLfKf6T4r8p/pfikAzHyXDcDMfLcPwMJ8hwwgyHZjhRhsMyHJ7hxBlOkuGkGU6W4eQZTpHhlBlOleHUGU6T4bQZTpfh9BnOkOGMGc6U4cwZzpLhrBnOluHsGc6R4ZwZzpXh3BnOk+G8Gc6X4fwZLpDhghkulOHCGS6S4aIZLpbh4hkukSEZLpnhUhkuneEyGS6b4XIZLp/hChmumOFKGa6c4SoZrprhahmunuEaGa6Z4VoZrp3hOhmum+F6Ga6f4QYZbpjhRhlunOEmGW6a4WYZbp7hFhlumeFWGW6d4TYZbpvhdhlun+EOGe6Y4U4Z7pzhLhnumuFuGe6e4R4Z7pnhXhnuneE+2f8CA/fLcP8MD8jwwAwPyvDgDA/J8NAMD8vw8AyPyPDIDI/K8OgMj8nw2AyPy/D4DE/I8MQMzfCkDE/O8JQMT83wtAxPz/CMDM/M8KwMz87wnAxHZHhuhudleH6GF2R4YYYXZXhxhpdkeGmGl2V4eYZXZHhlhldleHWG12R4bYbXZXh9hjdkeGOGN2V4c4a3ZHhrhrdleHuGd2Q4yDDIMMwwyjDOMMkwzTDLMM+wyLDMsMqwzrDJsM2wy7DP8M4M78rw7gzvyfDeDO/L8P4MH8jwwQwfyvDhDEdmOCrD0RmOyXBsho9k+GiGj2X4eIZPZPhkhk9l+HSGz2T4bIbPZfh8hi9k+GKGL2X4coavZPhqhq9l+HqGb2T4ZoZvZfh2hu9k+G6G72X4foYfZPhhhh9l+HGGn2T4aYafZfh5hl9k+GWGX2X4dYbfZPhtht9l+H2GP2T4Y4Y/Zfhzhr9k+GuGv2X4e4Z/ZPhnhn9l+HeG/2T4b4b/ZTgkx3FyHDfH8XIcP8cJcpwwx6E5TpTjsByH5zhxjpPkOGmOk+U4eY5T5DhljlPlOHWO0+Q4bY7T5Th9jjPkOGOOM+U4c46z5DhrjrPlOHuOc+Q4Z45z5Th3jvPkOG+O8+U4f44L5LhgjgvluHCOi+S4aI6L5bh4jkvkSI5L5rhUjkvnuEyOy+a4XI7L57hCjivmuFKOK+e4So6r5rhajqvnuEaOa+a4Vo5r57hOjuvmuF6O6+e4QY4b5rhRjhvnuEmOm+a4WY6b57hFjlvmuFWOW+e4TY7b5rhdjtvnuEOOO+a4U44757hLjrvmuFuOu+e4R4575rhXjnvnuE+O++a4X47753hAjgfmeFCOB+d4SI6H5nhYjofneESOR+Z4VI5H53hMjsfmeFyOx+d4Qo4n5miOJ+V4co6n5HhqjqfleHqOZ+R4Zo5n5Xh2jufkOCLHc3M8L8fzc7wgxwtzvCjHi3O8JMdLc7wsx8tzvCLHK3O8Kserc7wmx2tzvC7H63O8Iccbc7wpx5tzvCXHW3O8Lcfbc7wjx0GOQY5hjlGOcY5JjmmOWY55jkWOZY5VjnWOTY5tjl2OfY535nhXjnfneE+O9+Z4X4735/hAjg/m+FCOD+c4MsdROY7OcUyOY3N8JMdHc3wsx8dzfCLHJ3N8Ksenc3wmx2dzfC7H53N8IccXc3wpx5dzfCXHV3N8LcfXc3wjxzdzfCvHt3N8J8d3c3wvx/dz/CDHD3P8KMePc/wkx09z/CzHz3P8Iscvc/wqx69z/CbHb3P8Lsfvc/whxx9z/CnHn3P8Jcdfc/wtx99z/CPHP3P8K8e/c/wnx39z/C/HIQWOU+C4BY5X4PgFTlDghAUOLXCiAocVOLzAiQucpMBJC5yswMkLnKLAKQucqsCpC5ymwGkLnK7A6QucocAZC5ypwJkLnKXAWQucrcDZC5yjwDkLnKvAuQucp8B5C5yvwPkLXKDABQtcqMCFC1ykwEULXKzAxQtcokAKXLLApQpcusBlCly2wOUKXL7AFQpcscCVCly5wFUKXLXA1QpcvcA1ClyzwLUKXLvAdQpct8D1Cly/wA0K3LDAjQrcuMBNCty0wM0K3LzALQrcssCtCty6wG0K3LbA7QrcvsAdCtyxwJ0K3LnAXQrctcDdCty9wD0K3LPAvQrcu8B9Cty3wP0K3L/AAwo8sMCDCjy4wEMKPLTAwwo8vMAjCjyywKMKPLrAYwo8tsDjCjy+wBMKPLFACzypwJMLPKXAUws8rcDTCzyjwDMLPKvAsws8p8ARBZ5b4HkFnl/gBQVeWOBFBV5c4CUFXlrgZQVeXuAVBV5Z4FUFXl3gNQVeW+B1BV5f4A0F3ljgTQXeXOAtBd5a4G0F3l7gHQUOCgwKDAuMCowLTApMC8wKzAssCiwLhg4ZMsS6wKbAtsCuwL7AOwu8q8C7C7ynwHsLvK/A+wt8oMAHC3yowIcLHFngqAJHFzimwLEFPlLgowU+VuDjBT5R4JMFPlXg0wU+U+CzBT5X4PMFvlDgiwW+VODLBb5S4KsFvlbg6wW+UeCbBb5V4NsFvlPguwW+V+D7BX5Q4IcFflTgxwV+UuCnBX5W4OcFflHglwV+VeDXBX5T4LcFflfg9wX+UOCPBf5U4M8F/lLgrwX+VuDvBf5R4J8F/lXg3wX+U+C/Bf5X4JASxylx3BLHK3H8EicoccISh5Y4UYnDShxe4sQlTlLipCVOVuLkJU5R4pQlTlXi1CVOU+K0JU5X4vQlzlDijCXOVOLMJc5S4qwlzlbi7CXOUeKcJc5V4twlzlPivCXOV+L8JS5Q4oIlLlTiwiUuUuKiJS5W4uIlLlEiJS5Z4lIlLl3iMiUuW+JyJS5f4golrljiSiWuXOIqJa5a4molrl7iGiWuWeJaJa5d4jolrlvieiWuX+IGJW5Y4kYlblziJiVuWuJmJW5e4hYlblniViVuXeI2JW5b4nYlbl/iDiXuWOJOJe5c4i4l7lribiXuXuIeJe5Z4l4l7l3iPiXuW+J+Je5f4gElHljiQSUeXOIhJR5a4mElHl7iESUeWeJRJR5d4jElHlvicSUeX+IJJZ5YoiWeVOLJJZ5S4qklnlbi6SWeUeKZJZ5V4tklnlPiiBLPLfG8Es8v8YISLyzxohIvLvGSEi8t8bISLy/xihKvLPGqEq8u8ZoSry3xuhKvL/GGEm8s8aYSby7xlhJvLfG2Em8v8Y4SByUGJYYlRiXGJSYlpiVmJeYlFiWWJVYl1iU2JbYldiX2Jd5Z4l0l3l3iPSXeW+J9Jd5f4gMlPljiQyU+XOLIEkeVOLrEMSWOLfGREh8t8bESHy/xiRKfLPGpEp8u8ZkSny3xuRKfL/GFEl8s8aUSXy7xlRJfLfG1El8fNuT/V+JbJb5d4jslvlvieyW+X+IHJX5Y4kclflziJyV+WuJnJX5e4hclflniVyV+XeI3JX5b4nclfl/iDyX+WOJPJf5c4i8l/lribyX+XuIfJf5Z4l8l/l3iPyX+W+J/JQ6pcJwKx61wvArHr3CCCiescGiFE1U4rMLhFU5c4SQVTlrhZBVOXuEUFU5Z4VQVTl3hNBVOW+F0FU5f4QwVzljhTBXOXOEsFc5a4WwVzl7hHBXOWeFcFc5d4TwVzlvhfBXOX+ECFS5Y4UIVLlzhIhUuWuFiFS5e4RIVUuGSFS5V4dIVLlPhshUuV+HyFa5Q4YoVrlThyhWuUuGqFa5W4eoVrlHhmhWuVeHaFa5T4boVrlfh+hVuUOGGFW5U4cYVblLhphVuVuHmFW5R4ZYVblXh1hVuU+G2FW5X4fYV7lDhjhXuVOHOFe5S4a4V7lbh7hXuUeGeFe5V4d4V7lPhvhXuV+H+FR5Q4YEVHlThwRUeUuGhFR5W4eEVHlHhkRUeVeHRFR5T4bEVHlfh8RWeUOGJFVrhSRWeXOEpFZ5a4WkVnl7hGRWeWeFZFZ5d4TkVjqjw3ArPq/D8Ci+o8MIKL6rw4govqfDSCi+r8PIKr6jwygqvqvDqCq+p8NoKr6vw+gpvqPDGCm+q8OYKb6nw1gpvq/D2Cu+ocFBhUGFYYVRhXGFSYVphVmFeYVFhWWFVYV1hU2FbYVdhX+GdFd5V4d0V3lPhvRXeV+H9FT5Q4YMVPlThwxWOrHBUhaMrHFPh2AofqfDRCh+r8PEKn6jwyQqfqvDpCp+p8NkKn6vw+QpfqPDFCl+q8OUKX6nw1Qpfq/D1Ct+o8M0K36rw7QrfqfDdCt+r8P0KP6jwwwo/qvDjCj+p8NMKP6vw8wq/qPDLCr+q8OsKv6nw2wq/q/D7Cn+o8McKf6rw5wp/qfDXCn+r8PcK/6jwzwr/qvDvCv+p8N8K/6twSI3j1DhujePVOH6NE9Q4YY1Da5yoxmE1Dq9x4honqXHSGiercfIap6hxyhqnqnHqGqepcdoap6tx+hpnqHHGGmeqceYaZ6lx1hpnq3H2Gueocc4a56px7hrnqXHeGuercf4aF6hxwRoXqnHhGhepcdEaF6tx8RqXqJEal6xxqRqXrnGZGpetcbkal69xhRpXrHGlGleucZUaV61xtRpXr3GNGtesca0a165xnRrXrXG9GtevcYMaN6xxoxo3rnGTGjetcbMaN69xixq3rHGrGreucZsat61xuxq3r3GHGnescacad65xlxp3rXG3GnevcY8a96xxrxr3rnGfGvetcb8a96/xgBoPrPGgGg+u8ZAaD63xsBoPr/GIGo+s8agaj67xmBqPrfG4Go+v8YQaT6zRGk+q8eQaT6nx1BpPq/H0Gs+o8cwaz6rx7BrPqXFEjefWeF6N59d4QY0X1nhRjRfXeEmNl9Z4WY2X13hFjVfWeFWNV9d4TY3X1nhdjdfXeEONN9Z4U40313hLjbfWeFuNt9d4R42DGoMawxqjGuMakxrTGrMa8xqLGssaqxrrGpsa2xq7Gvsa76zxrhrvrvGeGu+t8b4a76/xgRofrPGhGh+ucWSNo2ocXeOYGsfW+EiNj9b4WI2P1/hEjU/W+FSNT9f4TI3P1vhcjc/X+EKNL9b4Uo0v1/hKja/W+FqNr9f4Ro1v1vhWjW/X+E6N79b4Xo3v1/hBjR/W+FGNH9f4SY2f1vhZjZ/X+EWNX9b4VY1f1/hNjd/W+F2N39f4Q40/1vhTjT/X+EuNv9b4W42/1/hHjX/W+FeNf9f4T43/1vhfjUMaHKfBcRscr8HxG5ygwQkbHNrgRA0Oa3B4gxM3OEmDkzY4WYOTNzhFg1M2OFWDUzc4TYPTNjhdg9M3OEODMzY4U4MzNzhLg7M2OFuDszc4R4NzNjhXg3M3OE+D8zY4X4PzN7hAgws2uFCDCze4SIOLNrhYg4s3uESDNLhkg0s1uHSDyzS4bIPLNbh8gys0uGKDKzW4coOrNLhqg6s1uHqDazS4ZoNrNbh2g+s0uG6D6zW4foMbNLhhgxs1uHGDmzS4aYObNbh5g1s0uGWDWzW4dYPbNLhtg9s1uH2DOzS4Y4M7Nbhzg7s0uGuDuzW4e4N7NLhng3s1uHeD+zS4b4P7Nbh/gwc0eGCDBzV4cIOHNHhog4c1eHiDRzR4ZINHNXh0g8c0eGyDxzV4fIMnNHhigzZ4UoMnN3hKg6c2eFqDpzd4RoNnNnhWg2c3eE6DIxo8t8HzGjy/wQsavLDBixq8uMFLGry0wcsavLzBKxq8ssGrGry6wWsavLbB6xq8vsEbGryxwZsavLnBWxq8tcHbGry9wTsaHDQYNBg2GDUYN5g0mDaYNZg3WDRYNlg1WDfYNNg22DXYN3hng3c1eHeD9zR4b4P3NXh/gw80+GCDDzX4cIMjGxzV4OgGxzQ4tsFHGny0wccafLzBJxp8ssGnGny6wWcafLbB5xp8vsEXGnyxwZcafLnBVxp8tcHXGny9wTcafLPBtxp8u8F3Gny3wfcafL/BDxr8sMGPGvy4wU8a/LTBzxr8vMEvGvyywa8a/LrBbxr8tsHvGvy+wR8a/LHBnxr8ucFfGvy1wd8a/L3BPxr8s8G/Gvy7wX8a/LfB/xoc0uI4LY7b4ngtjt/iBC1O2OLQFidqcViLw1ucuMVJWpy0xclanLzFKVqcssWpWpy6xWlanLbF6VqcvsUZWpyxxZlanLnFWVqctcXZWpy9xTlanLPFuVqcu8V5Wpy3xflanL/FBVpcsMWFWly4xUVaXLTFxVpcvMUlWqTFJVtcqsWlW1ymxWVbXK7F5VtcocUVW1ypxZVbXKXFVVtcrcXVW1yjxTVbXKvFtVtcp8V1W1yvxfVb3KDFDVvcqMWNW9ykxU1b3KzFzVvcosUtW9yqxa1b3KbFbVvcrsXtW9yhxR1b3KnFnVvcpcVdW9ytxd1b3KPFPVvcq8W9W9ynxX1b3K/F/Vs8oMUDWzyoxYNbPKTFQ1s8rMXDWzyixSNbPKrFo1s8psVjWzyuxeNbPKHFE1u0xZNaPLnFU1o8tcXTWjy9xTNaPLPFs1o8u8VzWhzR4rktntfi+S1e0OKFLV7U4sUtXtLipS1e1uLlLV7R4pUtXtXi1S1e0+K1LV7X4vUt3tDijS3e1OLNLd7S4q0t3tbi7S3e0eKgxaDFsMWoxbjFpMW0xazFvMWixbLFqsW6xabFtsWuxb7FO1u8q8W7W7ynxXtbvK/F+1t8oMUHW3yoxYdbHNniqBZHtzimxbEtPtLioy0+1uLjLT7R4pMtPtX+vy/PtPhsi8+1+HyLL7T4Yosvtfhyi6+0+GqLr7X4eotvtPhmi2+1+HaL77T4bovvtfh+ix+0+GGLH7X4cYuftPhpi5+1+HmLX7T4ZYtftfh1i9+0+G2L37X4fYs/tPhjiz+1+HOLv7T4a4u/tfh7i3+0+GeLf7X4d4v/tPhvi//970+H43Q4bofjdTh+hxN0OGGHQzucqMNhHQ7vcOIOJ+lw0g4n63DyDqfocMoOp+pw6g6n6XDaDqfrcPoOZ+hwxg5n6nDmDmfpcNYOZ+tw9g7n6HDODufqcO4O5+lw3g7n63D+DhfocMEOF+pw4Q4X6XDRDhfrcPEOl+iQDpfscKkOl+5wmQ6X7XC5DpfvcIUOV+xwpQ5X7nCVDlftcLUOV+9wjQ7X7HCtDtfucJ0O1+1wvQ7X73CDDjfscKMON+5wkw437XCzDjfvcIsOt+xwqw637nCbDrftcLsOt+9whw537HCnDnfucJcOd+1wtw5373CPDvfscK8O9+5wnw737XC/Dvfv8IAOD+zwoA4P7vCQDg/t8LAOD+/wiA6P7PCoDo/u8JgOj+3wuA6P7/CEDk/s0A5P6vDkDk/p8NQOT+vw9A7P6PDMDs/q8OwOz+lwRIfndnheh+d3eEGHF3Z4UYcXd3hJh5d2eFmHl3d4RYdXdnhVh1d3eE2H13Z4XYfXd3hDhzd2eFOHN3d4S4e3dnhbh7d3eEeHgw6DDsMOow7jDpMO0w6zDvMOiw7LDqsO6w6bDtsOuw77Du/s8K4O7+7wng7v7fC+Du/v8IEOH+zwoQ4f7nBkh6M6HN3hmA7HdvhIh492+FiHj3f4RIdPdvhUh093+EyHz3b4XIfPd/hChy92+FKHL3f4Soevdvhah693+EaHb3b4Vodvd/hOh+92+F6H73f4QYcfdvhRhx93+EmHn3b4WYefd/hFh192+FWHX3f4TYffdvhdh993+EOHP3b4U4c/d/hLh792+FuHv3f4R4d/dvhXh393+E+H/3b4X4dDehynx3F7HK/H8XucoMcJexza40Q9DutxeI8T9zhJj5P2OFmPk/c4RY9T9jhVj1P3OE2P0/Y4XY/T9zhDjzP2OFOPM/c4S4+z9jhbj7P3OEePc/Y4V49z9zhPj/P2OF+P8/e4QI8L9rhQjwv3uEiPi/a4WI+L97hEj/S4ZI9L9bh0j8v0uGyPy/W4fI8r9Lhijyv1uHKPq/S4ao+r9bh6j2v0uGaPa/W4do/r9Lhuj+v1uH6PG/S4YY8b9bhxj5v0uGmPm/W4eY9b9Lhlj1v1uHWP2/S4bY/b9bh9jzv0uGOPO/W4c4+79Lhrj7v1uHuPe/S4Z4979bh3j/v0uG+P+/W4f48H9Hhgjwf1eHCPh/R4aI+H9Xh4j0f0eGSPR/V4dI/H9Hhsj8f1eHyPJ/R4Yo/2eFKPJ/d4So+n9nhaj6f3eEaPZ/Z4Vo9n93hOjyN6PLfH83o8v8cLerywx4t6vLjHS3q8tMfLery8xyt6vLLHq3q8usdrery2x+t6vL7HG3q8scebery5x1t6vLXH23q8vcc7ehz0GPQY9hj1GPeY9Jj2mPWY91j0WPZY9Vj32PTY9tj12Pd4Z4939Xh3j/f0eG+P9/V4f48P9Phgjw/1+HCPI3sc1ePoHsf0OPb/WLTnNr4LQIHiW7Vq2bZdJ9u2bds+2bZte7+vjWwbyzZWre0+97n3vIfz32eATw7wqQE+PcBnBvjsAJ8b4PMDfGGALw7wpQG+PMBXBvjqAF8b4OsDfGOAbw7wrQG+PcB3BvjuAN8b4PsD/GCAHw7wowF+PMBPBjhygJ8O8LMBfj7ALwb45QC/GuDXA/xmgN8O8LsBfj/AHwb44wB/GuDPA/xlgL8O8LcB/j7APwb45wD/GuCoAf49wH8G+O8ARw/wvwGOGeDYAQ4JcGiA4wQ4boDjBTgswPEDnCDACQMcHuBEAU4c4CQBThrgZAFOHuAUAU4Z4FQBTh3gNAFOG+B0AU4f4AwBzhjgTAHOHOAsAc4a4GwBzh7gHAHOGeBcAc4d4DwBzhvgfAHOH+ACAS4Y4EIBLhzgIgEuGuBiAS4e4BIBEuCSAS4V4NIBLhPgsgEuF+DyAa4Q4IoBrhTgygGuEuCqAa4W4OoBrhHgmgGuFeDaAa4T4LoBrhfg+gFuEOCGAW4U4MYBbhLgpgFuFuDmAW4R4JYBbhXg1gFuE+C2AW4X4PYB7hDgjgHuFODOAe4S4K4B7hbg7gHuEeCeAe4V4N4B7hPgvgHuF+D+AR4Q4IEBHhTgwQEeEuChAR4W4OEBHhHgkQEeFeDRAR4T4LEBHhfg8QGeEOCJARrgSQGeHOApAZ4a4GkBnh7gGQGeGeBZAZ4d4DkBnhvgeQGeH+AFAV4Y4EUBXhzgJQFeGuBlAV4e4BUBXhngVQFeHeA1AV4b4HUBXh/gDQHeGOBNAd4c4C0B3hrgbQHeHuAdAd4Z4F0B3h3gPQHeG+B9Ad4f4AMBPhjgQwE+HOAjAT4a4GMBPh7gEwGOCHAQYBBgGGAUYBxgEmAaYBZgHmARYBlgFWAdYBNgG2AXYB/gkwE+FeDTAT4T4LMBPhfg8wG+EOCLAb4U4MsBvhLgqwG+FuDrAb4R4JsBvhXg2wG+E+C7Ab4X4PsBfhDghwF+FODHAX4S4MgAPw3wswA/D/CLAL8M8KsAvw7wmwC/DfC7AL8P8IcAfwzwpwB/DvCXAH8N8LcAfw/wjwD/DPCvAEcF+HeA/wT4b4CjA/wvwDEBjg1wSIhDQxwnxHFDHC/EYSGOH+IEIU4Y4vAQJwpx4hAnCXHSECcLcfIQpwhxyhCnCnHqEKcJcdoQpwtx+hBnCHHGEGcKceYQZwlx1hBnC3H2EOcIcc4Q5wpx7hDnCXHeEOcLcf4QFwhxwRAXCnHhEBcJcdEQFwtx8RCXCJEQlwxxqRCXDnGZEJcNcbkQlw9xhRBXDHGlEFcOcZUQVw1xtRBXD3GNENcMca0Q1w5xnRDXDXG9ENcPcYMQNwxxoxA3DnGTEDcNcbMQNw9xixC3DHGrELcOcZsQtw1xuxC3D3GHEHcMcacQdw5xlxB3DXG3EHcPcY8Q9wxxrxD3DnGfEPcNcb8Q9w/xgBAPDPGgEA8O8ZAQDw3xsBAPD/GIEI8M8agQjw7xmBCPDfG4EI8P8YQQTwzREE8K8eQQTwnx1BBPC/H0EM8I8cwQzwrx7BDPCfHcEM8L8fwQLwjxwhAvCvHiEC8J8dIQLwvx8hCvCPHKEK8K8eoQrwnx2hCvC/H6EG8I8cYQbwrx5hBvCfHWEG8L8fYQ7wjxzhDvCvHuEO8J8d4Q7wvx/hAfCPHBEB8K8eEQHwnx0RAfC/HxEJ8IcUSIgxCDEMMQoxDjEJMQ0xCzEPMQixDLEKsQ6xCbENsQuxD7EJ8M8akQnw7xmRCfDfG5EJ8P8YUQXwzxpRBfDvGVEF8N8bUQXw/xjRDfDPGtEN8O8Z0Q3w3xvRDfD/GDED8M8aMQPw7xkxBHhvhpiJ+F+HmIX4T4ZYhfhfh1iN+E+G2I34X4fYg/hPhjiD+F+HOIv4T4a4i/hfh7iH+E+GeIf4U4KsS/Q/wnxH9DHB3ifyGOCXFsiEMiHBrhOBGOG+F4EQ6LcPwIJ4hwwgiHRzhRhBNHOEmEk0Y4WYSTRzhFhFNGOFWEU0c4TYTTRjhdhNNHOEOEM0Y4U4QzRzhLhLNGOFuEs0c4R4RzRjhXhHNHOE+E80Y4X4TzR7hAhAtGuFCEC0e4SISLRrhYhItHuESERLhkhEtFuHSEy0S4bITLRbh8hCtEuGKEK0W4coSrRLhqhKtFuHqEa0S4ZoRrRbh2hOsM+3+zEeH6EW4Q4YYRbhThxhFuEuGmEW4W4eYRbhHhlhFuFeHWEW4T4bYRbhfh9hHuEOGOEe4U4c4R7hLhrhHuFuHuEe4R4Z4R7hXh3hHuE+G+Ee4X4f4RHhDhgREeFOHBER4S4aERHhbh4REeEeGRER4V4dERHhPhsREeF+HxEZ4Q4YkRGuFJEZ4c4SkRnhrhaRGeHuEZEZ4Z4VkRnh3hORGeG+F5EZ4f4QURXhjhRRFeHOElEV4a4WURXh7hFRFeGeFVEV4d4TURXhvhdRFeH+ENEd4Y4U0R3hzhLRHeGuFtEd4e4R0R3hnhXRHeHeE9Ed4b4X0R3h/hAxE+GOFDET4c4SMRPhrhYxE+HuETEY6IcBBhEGEYYRRhHGESYRphFmEeYRFhGWEVYR1hE2EbYRdhH+GTET4V4dMRPhPhsxE+F+HzEb4Q4YsRvhThyxG+EuGrEb4W4esRvhHhmxG+FeHbEb4T4bsRvhfh+xF+EOGHEX4U4ccRfhLhyAg/jfCzCD+P8IsIv4zwqwi/jvCbCL+N8LsIv4/whwh/jPCnCH+O8JcIf43wtwh/j/CPCP+M8K8IR0X4d4T/RPhvhKMj/C/CMRGOjXBIjENjHCfGcWMcL8ZhMY4fM2rs/+XwGCeKceIYJ4lx0hgni3HyGKeIccoYp4px6hiniXHaGKeLcfoYZ4hxxhhninHmGGeJcdYYZ4tx9hjniHHOGOeKce4Y54lx3hjni3H+GBeIccEYF4px4RgXiXHRGBeLcfEYl4iRGJeMcakYl45xmRiXjXG5GJePcYUYV4xxpRhXjnGVGFeNcbUYV49xjRjXjHGtGNeOcZ0Y141xvRjXj3GDGDeMcaMYN45xkxg3jXGzGDePcYsYt4xxqxi3jnGbGLeNcbsYt49xhxh3jHGnGHeOcZcYd41xtxh3j3GPGPeMca8Y945xnxj3jXG/GPeP8YAYD4zxoBgPjvGQGA+N8bAYD4/xiBiPjPGoGI+O8ZgYj43xuBiPj/GEGE+M0RhPivHkGE+J8dQYT4vx9BjPiPHMGM+K8ewYz4nx3BjPi/H8GC+I8cIYL4rx4hgvifHSGC+L8fIYr4jxyhivivHqGK+J8doYr4vx+hhviPHGGG+K8eYYb4nx1hhvi/H2GO+I8c4Y74rx7hjvifHeGO+L8f4YH4jxwRgfivHhGB+J8dEYH4vx8RifiHFEjIMYgxjDGKMY4xiTGNMYsxjzGIsYyxirGOsYmxjbGLsY+xifjPGpGJ+O8ZkYn43xuRifj/GFGF+M8aUYX47xlRhfjfG1GF+P8Y0Y34zxrRjfjvGdGN+N8b0Y34/xgxg/jPGjGD+O8ZMYR8b4aYyfxfh5jF/E+GWMX8X4dYzfxPhtjN/F+H2MP8T4Y4w/xfhzjL/E+GuMv8X4e4x/xPhnjH/FOCrGv2P8J8Z/Yxwd438xjolxbIxDEhya4DgJjpvgeAkOS3D8BCdIcMIEhyc4UYITJzhJgpMmOFmCkyc4RYJTJjhVglMnOE2C0yY4XYLTJzhDgjMmOFOCMyc4S4KzJjhbgrMnOEeCcyY4V4JzJzhPgvMmOF+C8ye4QIILJrhQggsnuEiCiya4WIKLJ7hEgiS4ZIJLJbh0gsskuGyCyyW4fIIrJLhigisluHKCqyS4aoKrJbh6gmskuGaCayW4doLrJLhugusluH6CGyS4YYIbJbhxgpskuGmCmyW4eYJbJLhlglsluHWC2yS4bYLbJbh9gjskuGOCOyW4c4K7JLhrgrsluHuCeyS4Z4J7Jbh3gvskuG+C+yW4f4IHJHhgggcleHCChyR4aIKHJXh4gkckeGSCRyV4dILHJHhsgscleHyCJyR4YoImeFKCJyd4SoKnJnhagqcneEaCZyZ4VoJnJ3hOgucmeF6C5yd4QYIXJnhRghcneEmClyZ4WYKXJ3hFglcmeFWCVyd4TYLXJnhdgtcneEOCNyZ4U4I3J3hLgrcmeFuCtyd4R4J3JnhXgncneE+C9yZ4X4L3J/hAgg8m+FCCDyf4SIKPJvhYgo8n+ESCIxIcJBgkGCYYJRgnmCSYJpglmCdYJFgmWCVYJ9gk2CbYJdgn+GSCTyX4dILPJPhsgs8l+HyCLyT4YoIvJfhygq8k+GqCryX4eoJvJPhmgm8l+HaC7yT4boLvJfh+gh8k+GGCHyX4cYKfJDgywU8T/CzBzxP8IsEvE/wqwa8T/CbBbxP8LsHvE/whwR8T/CnBnxP8JcFfE/wtwd8T/CPBPxP8K8FRCf6d4D8J/pvg6AT/S3BMgmMTHJLi0BTHSXHcFMdLcViK46c4QYoTpjg8xYlSnDjFSVKcNMXJUpw8xSlSnDLFqVKcOsVpUpw2xelSnD7FGVKcMcWZUpw5xVlSnDXF2VKcPcU5UpwzxblSnDvFeVKcN8X5Upw/xQVSXDDFhVJcOMVFUlw0xcVSXDzFJVIkxSVTXCrFpVNcJsVlU1wuxeVTXCHFFVNcKcWVU1wlxVVTXC3F1VNcI8U1U1wrxbVTXCfFdVNcL8X1U9wgxQ1T3CjFjVPcJMVNU9wsxc1T3CLFLVPcKsWtU9wmxW1T3C7F7VPcIcUdU9wpxZ1T3CXFXVPcLcXdU9wjxT1T3CvFvVPcJ8V9U9wvxf1TPCDFA1M8KMWDUzwkxUNTPCzFw1M8IsUjUzwqxaNTPCbFY1M8LsXjUzwhxRNTNMWTUjw5xVNSPDXF01I8PcUzUjwzxbNSPDvFc1I8N8XzUjw/xQtSvDDFi1K8OMVLUrw0xctSvDzFK1K8MsWrUrw6xWtSvDbF61K8PsUbUrwxxZtSvDnFW1K8NcXbUrw9xTtSvDPFu1K8O8V7Urw3xftSvD/FB1J8MMWHUnw4xUdSfDTFx1J8PMUnUhyR4iDFIMUwxSjFOMUkxTTFLMU8xSLFMsUqxTrFJsU2xS7FPsUnU3wqxadTfCbFZ1N8LsXnU3whxRdTfCnFl1N8JcVXU3wtxddTfCPFN1N8K8W3U3wnxXdTfC/F91P8IMUPU/woxY9T/CTFkSl+muJnKX6e4hcpfpniVyl+neI3KX6b4ncpfp/iDyn+mOJPKf6c4i8p/pribyn+nuIfKf6Z4l8pjkrx7xT/SfHfFEen+F+KY1Icm+KQDIdmOE6G42Y4XobDMhw/wwkynDDD4RlOlOHEGU6S4aQZTpbh5BlOkeGUGU6V4dQZTpPhtBlOl+H0Gc6Q4YwZzpThzBnOkuGsGc6W4ewZzpHhnBnOleHcGc6T4bwZzpfh/BkukOGCGS6U4cIZLpLhohkuluHiGS6RIRkumeFSGS6d4TIZLpvhchkun+EKGa6Y4UoZrpzhKhmumuFqGa6e4RoZrpnhWhmuneE6Ga6b4XoZrp/hBhlumOFGGW6c4SYZbprhZhlunuEWGW6Z4VYZbp3hNhlum+F2GW6f4Q4Z7pjhThnunOEuGe6a4W4Z7p7hHhnumeFeGe6d4T4Z7pvhfhnun+EBGR6Y4UEZHpzhIRkemuFhGR6e4REZHpnhURkeneExGR6b4XEZHp/hCRmemKEZnpThyRmekuGpGZ6W4ekZnpHhmRmeleHZGZ6T4bkZnpfh+RlekOGFGV6U4cUZXpLhpRleluHlGV6R4ZUZXpXh1Rlek+G1GV6X4fUZ3pDhjRnelOHNGd6S4a0Z3pbh7RnekeGdGd6V4d0Z3pPhvRnel+H9GT6Q4YMZPpThwxk+kuGjGT6W4eMZPpHhiAwHGQYZhhlGGcYZJhmmGWYZ5hkWGZYZVhnWGTYZthl2GfYZPpnhUxk+neEzGT6b4XMZPp/hCxm+mOFLGb6c4SsZvprhaxm+nuEbGb6Z4VsZvp3hOxm+m+F7Gb6f4QcZfpjhRxl+nOEnGY7M8NMMP8vw8wy/yPDLDL/K8OsMv8nw2wy/y/D7DH/I8McMf8rw5wx/yfDXDH/L8PcM/8jwzwz/ynBUhn9n+E+G/2Y4OsP/MhyT4dgMh+Q4NMdxchw3x/FyHJbj+DlOkOOEOQ7PcaIcJ85xkhwnzXGyHCfPcYocp8xxqhynznGaHKfNcbocp89xhhxnzHGmHGfOcZYcZ81xthxnz3GOHOfMca4c585xnhznzXG+HOfPcYEcF8xxoRwXznGRHBfNcbEcF89xiRzJcckcl8px6RyXyXHZHJfLcfkcV8hxxRxXynHlHFfJcdUcV8tx9RzXyHHNHNfKce0c18lx3RzXy3H9HDfIccMcN8px4xw3yXHTHDfLcfMct8hxyxy3ynHrHLfJcdsct8tx+xx3yHHHHHfKceccd8lx1xx3y3H3HPfIcc8c98px7xz3yXHfHPfLcf8cD8jxwBwPyvHgHA/J8dAcD8vx8ByPyPHIHI/K8egcj8nx2ByPy/H4HE/I8cQczfGkHE/O8ZQcT83xtBxPz/GMHM/M8awcz87xnBzPzfG8HM/P8YIcL8zxohwvzvGSHC/N8bIcL8/xihyvzPGqHK/O8Zocr83xuhyvz/GGHG/M8aYcb87xlhxvzfG2HG/P8Y4c78zxrhzvzvGeHO/N8b4c78/xgRwfzPGhHB/O8ZEcH83xsRwfz/GJHEfkOMgxyDHMMcoxzjHJMc0xyzHPscixzLHKsc6xybHNscuxHz5kyP8+8VSOT+f4TI7P5vhcjs/n+EKOL+b4Uo4v5/hKjq/m+FqOr+f4Ro5v5vhWjm/n+E6O7+b4Xo7v5/hBjh/m+FGOH+f4SY4jc/w0x89y/DzHL3L8Msevcvw6x29y/DbH73L8Pscfcvwxx59y/DnHX3L8Ncffcvw9xz9y/DPHv3IclePfOf6T4785js7xvxzH5Dg2xyEFDi1wnALHLXC8AocVOH6BExQ4YYHDC5yowIkLnKTASQucrMDJC5yiwCkLnKrAqQucpsBpC5yuwOkLnKHAGQucqcCZC5ylwFkLnK3A2Quco8A5C5yrwLkLnKfAeQucr8D5C1ygwAULXKjAhQtcpMBFC1yswMULXKJAClyywKUKXLrAZQpctsDlCly+wBUKXLHAlQpcucBVCly1wNUKXL3ANQpcs8C1Cly7wHUKXLfA9Qpcv8ANCtywwI0K3LjATQrctMDNCty8wC0K3LLArQrcusBtCty2wO0K3L7AHQrcscCdCty5wF0K3LXA3QrcvcA9CtyzwL0K3LvAfQrct8D9Cty/wAMKPLDAgwo8uMBDCjy0wMMKPLzAIwo8ssCjCjy6wGMKPLbA4wo8vsATCjyxQAs8qcCTCzylwFMLPK3A0ws8o8AzCzyrwLMLPKfAcws8r8DzC7ygwAsLvKjAiwu8pMBLC7yswMsLvKLAKwu8qsCrC7ymwGsLvK7A6wu8ocAbC7ypwJsLvKXAWwu8rcDbC7yjwDsLvKvAuwu8p8B7C7yvwPsLfKDABwt8qMCHC3ykwEcLfKzAxwt8osARBQ4KDAoMC4wKjAtMCkwLzArMCywKLAusCqwLbApsC+wK7At8ssCnCny6wGcKfLbA5wp8vsAXCnyxwJcKfLnAVwp8tcDXCny9wDcKfLPAtwp8u8B3Cny3wPcKfL/ADwr8sMCPCvy4wE8KHFngpwV+VuDnBX5R4JcFflXg1wV+U+C3BX5X4PcF/lDgjwX+VODPBf5S4K8F/lbg7wX+UeCfBf5V4KgC/y7wnwL/LXB0gf8VOKbAsQUOKXFoieOUOG6J45U4rMTxS5ygxAlLHF7iRCVOXOIkJU5a4mQlTl7iFCVOWeJUJU5d4jQlTlvidCVOX+IMJc5Y4kwlzlziLCXOWuJsJc5e4hwlzlniXCXOXeI8Jc5b4nwlzl/iAiUuWOJCJS5c4iIlLlriYiUuXuISJVLikiUuVeLSJS5T4rIlLlfi8iWuUOKKJa5U4solrlLiqiWuVuLqJa5R4polrlXi2iWuU+K6Ja5X4volblDihiVuVOLGJW5S4qYlblbi5iVuUeKWJW5V4tYlblPitiVuV+L2Je5Q4o4l7lTiziXuUuKuJe5W4u4l7lHiniXuVeLeJe5T4r4l7lfi/iUeUOKBJR5U4sElHlLioSUeVuLhJR5R4pElHlXi0SUeU+KxJR5X4vElnlDiiSVa4kklnlziKSWeWuJpJZ5e4hklnlniWSWeXeI5JZ5b4nklnl/iBSVeWOJFJV5c4iUlXlriZSVeXuIVJV5Z4lUlXl3iNSVeW+J1JV5f4g0l3ljiTSXeXOItJd5a4m0l3l7iHSXeWeJdJd5d4j0l3lvifSXeX+IDJT5Y4kMlPlziIyU+WuJjJT5e4hMljihxUGJQYlhiVGJcYlJiWmJWYl5iUWJZYlViXWJTYltiV2Jf4pMlPlXi0yU+U+KzJT5X4vMlvlDiiyW+VOLLJb5S4qslvlbi6yW+UeKbJb5V4tslvlPiuyW+V+L7JX5Q4oclflTixyV+UuLIEj8t8bMSPy/xixK/LPGrEr8u8ZsSvy3xuxK/L/GHEn8s8acSfy7xlxJ/LfG3En8v8Y8S/yzxrxJHlfh3if+U+G+Jo0v8r8QxJY4tcUiFQyscp8JxKxyvwmEVjl/hBBVOWOHwCieqcOIKJ6lw0gonq3DyCqeocMoKp6pw6gqnqXDaCqercPoKZ6hwxgpnqnDmCmepcNYKZ6tw9grnqHDOCueqcO4K56lw3grnq3D+CheocMEKF6pw4QoXqXDRChercPEKl6iQCpescKkKl65wmQqXrXC5CpevcIUKV6xwpQpXrnCVCletcLUKV69wjQrXrHCtCteucJ0K161wvQrXr3CDCjescKMKN65wkwo3rXCzCjevcIsKt6xwqwq3rnCbCretcLsKt69whwp3rHCnCneucJcKd61wtwp3r3CPCvescK8K965wnwr3rXC/Cvev8IAKD6zwoAoPrvCQCg+t8LAKD6/wiAqPrPCoipEjhgzxmAqPrfC4Co+v8IQKT6zQCk+q8OQKT6nw1ApPq/D0Cs+o8MwKz6rw7ArPqfDcCs+r8PwKL6jwwgovqvDiCi+p8NIKL6vw8gqvqPDKCq+q8OoKr6nw2gqvq/D6Cm+o8MYKb6rw5gpvqfDWCm+r8PYK76jwzgrvqvDuCu+p8N4K76vw/gofqPDBCh+q8OEKH6nw0Qofq/DxCp+ocESFgwqDCsMKowrjCpMK0wqzCvMKiwrLCqsK6wqbCtsKuwr7Cp+s8KkKn67wmQqfrfC5Cp+v8IUKX6zwpQpfrvCVCl+t8LUKX6/wjQrfrPCtCt+u8J0K363wvQrfr/CDCj+s8KMKP67wkwpHVvhphZ9V+HmFX1T4ZYVfVfh1hd9U+G2F31X4fYU/VPhjhT9V+HOFv1T4a4W/Vfh7hX9U+GeFf1U4qsK/K/ynwn8rHF3hfxWOqXBshUNqHFrjODWOW+N4NQ6rcfwaJ6hxwhqH1zhRjRPXOEmNk9Y4WY2T1zhFjVPWOFWNU9c4TY3T1jhdjdPXOEONM9Y4U40z1zhLjbPWOFuNs9c4R41z1jhXjXPXOE+N89Y4X43z17hAjQvWuFCNC9e4SI2L1rhYjYvXuESN1LhkjUvVuHSNy9S4bI3L1bh8jSvUuGKNK9W4co2r1LhqjavVuHqNa9S4Zo1r1bh2jevUuG6N69W4fo0b1LhhjRvVuHGNm9S4aY2b1bh5jVvUuGWNW9W4dY3b1LhtjdvVuH2NO9S4Y4071bhzjbvUuGuNu9W4e4171LhnjXvVuHeN+9S4b4371bh/jQfUeGCNB9V4cI2H1HhojYfVeHiNR9R4ZI1H1Xh0jcfUeGyNx9V4fI0n1HhijdZ4Uo0n13hKjafWeFqNp9d4Ro1n1nhWjWfXeE6N59Z4Xo3n13hBjRfWeFGNF9d4SY2X1nhZjZfXeEWNV9Z4VY1X13hNjdfWeF2N19d4Q4031nhTjTfXeEuNt9Z4W42313hHjXfWeFeNd9d4T4331nhfjffX+ECND9b4UI0P1/hIjY/W+FiNj9f4RI0jahzUGNQY1hjVGNeY1JjWmNWY11jUWNZY1VjX2NTY1tjV2Nf4ZI1P1fh0jc/U+GyNz9X4fI0v1PhijS/V+HKNr9T4ao2v1fh6jW/U+GaNb9X4do3v1Phuje/V+H6NH9T4YY0f1fhxjZ/UOLLGT2v8rMbPa/yixi9r/KrGr2v8psZva/yuxu9r/KHGH2v8qcafa/ylxl9r/K3G32v8o8Y/a/yrxlE1/l3jPzX+W+PoGv+rcUyNY2sc0uDQBsdpcNwGx2twWIPjNzhBgxM2OLzBiRqcuMFJGpy0wckanLzBKRqcssGpGpy6wWkanLbB6RqcvsEZGpyxwZkanLnBWRqctcHZGpy9wTkanLPBuRqcu8F5Gpy3wfkanL/BBRpcsMGFGly4wUUaXLTBxRpcvMElGqTBJRtcqsGlG1ymwWUbXK7B5RtcocEVG1ypwZUbXKXBVRtcrcHVG1yjwTUbXKvBtRtcp8F1G1yvwfUb3KDBDRvcqMGNG9ykwU0b3KzBzRvcosEtG9yqwa0b3KbBbRvcrsHtG9yhwR0b3KnBnRvcpcFdG9ytwd0b3KPBPRvcq8G9G9ynwX0b3K/B/Rs8oMEDGzyowYMbPKTBQxs8rMHDGzyiwSMbPKrBoxs8psFjGzyuweMbPKHBExu0wZMaPLnBUxo8tcHTGjy9wTMaPLPBsxo8u8FzGjy3wfMaPL/BCxq8sMGLGry4wUsavLTByxq8vMErGryywasavLrBaxq8tsHrGry+wRsavLHBmxq8ucFbGry1wdsavL3BOxq8s8G7Gry7wXsavLfB+xq8v8EHGnywwYcafLjBRxp8tMHHGny8wScaHNHgoMGgwbDBqMG4waTBtMGswbzBosGywarBusGmwbbBrsG+wScbfKrBpxt8psFnG3yuwecbfKHBFxt8qcGXG3ylwVcbfK3B1xt8o8E3G3yrwbcbfKfBdxt8r8H3G/ygwQ8b/KjBjxv8pMGRDX7a4GcNft7gFw1+2eBXDX7d4DcNftvgdw1+3+APDf7Y4E8N/tzgLw3+2uBvDf7e4B8N/tngXw2OavDvBv9p8N8GRzf4X4NjGhzb4JAWh7Y4Tovjtjhei8NaHL/FCVqcsMXhLU7U4sQtTtLipC1O1uLkLU7R4pQtTtXi1C1O0+K0LU7X4vQtztDijC3O1OLMLc7S4qwtztbi7C3O0eKcLc7V4twtztPivC3O1+L8LS7Q4oItLtTiwi0u0uKiLS7W4uItLtEiLS7Z4lKjh7p0i8u0uGyLy7W4fIsrtLhiiyu1uHKLq7S4aourtbh6i2u0uGaLa7W4dovrtLhui+u1uH6LG7S4YYsbtbhxi5u0uGmLm7W4eYtbtLhli1u1uHWL27S4bYvbtbh9izu0uGOLO7W4c4u7tLhri7u1uHuLe7S4Z4t7tbh3i/u0uG+L+7W4f4sHtHhgiwe1eHCLh7R4aIuHtXh4i0e0eGSLR7V4dIvHtHhsi8e1eHyLJ7R4You2eFKLJ7d4Sountnhai6e3eEaLZ7Z4Votnt3hOi+e2eF6L57d4QYsXtnhRixe3eEmLl7Z4WYuXt3hFi1e2eFWLV7d4TYvXtnhdi9e3eEOLN7Z4U4s3t3hLi7e2eFuLt7d4R4t3tnhXi3e3eE+L97Z4X4v3t/hAiw+2+FCLD7f4SIuPtvhYi4+3+ESLI1octBi0GLYYtRi3mLSYtpi1mLdYtFi2WLVYt9i02LbYtdi3+GSLT7X4dIvPtPhsi8+1+HyLL7T4Yosvtfhyi6+0+GqLr7X4eotvtPhmi2+1+HaL77T4bovvtfh+ix+0+GGLH7X4cYuftDiyxU9b/KzFz1v8osUvW/yqxa9b/KbFb1v8rsXvW/yhxR9b/KnFn1v8pcVfW/ytxd9b/KPFP1v8q8VRLf7d4j8t/tvi6Bb/a3FMi2NbHNLh0A7H6XDcDsfrcFiH43c4QYcTdji8w4k6nLjDSTqctMPJOpy8wyk6nLLDqTqcusNpOpy2w+k6nL7DGTqcscOZOpy5w1k6nLXD2TqcvcM5Opyzw7k6nLvDeTqct8P5Opy/wwU6XLDDhTpcuMNFOly0w8U6XLzDJTqkwyU7XKrDpTtcpsNlO1yuw+U7XKHDFTtcqcOVO1ylw1U7XK3D1Ttco8M1O1yrw7U7XKfDdTtcr8P1O9ygww073KjDjTvcpMNNO9ysw8073KLDLTvcqsOtO9ymw2073K7D7TvcocMdO9ypw5073KXDXTvcrcPdO9yjwz073KvDvTvcp8N9O9yvw/07PKDDAzs8qMODOzykw0M7PKzDwzs8osMjOzyqw6M7PKbDYzs8rsPjOzyhwxM7tMOTOjy5w1M6PLXD0zo8vcMzOjyzw7M6PLvDczo8t8PzOjy/wws6vLDDizq8uMNLOry0w8s6vLzDKzq8ssOrOry6w2s6vLbD6zq8vsMbOryxw5s6vLnDWzq8tcPbOry9wzs6vLPDuzq8u8N7Ory3w/s6vL/DBzp8sMOHOny4w0c6fLTDxzp8vMMnOhzR4aDDoMOww6jDuMOkw7TDrMO8w6LDssOqw7rDpsO2w67DvsMnO3yqw6c7fKbDZzt8rsPnO3yhwxc7fKnDlzt8pcNXO3ytw9c7fKPDNzt8q8O3O3ynw3c7fK/D9zv8oMMPO/yow487/KTDkR1+2uFnHX7e4RcdftnhVx1+3eE3HX7b4Xcdft/hDx3+2OFPHf7c4S8d/trhbx3+3uEfHf7Z4V8djurw7w7/6fDfDkd3+F+HYzoc2+GQHof2OE6P4/Y4Xo/Dehy/xwl6nLDH4T1O1OPEPU7S46Q9Ttbj5D1O0eOUPU7V49Q9TtPjtD1O1+P0Pc7Q44w9ztTjzD3O0uOsPc7W4+w9ztHjnD3O1ePcPc7T47w9ztfj/D0u0OOCPS7U48I9LtLjoj0u1uPiPS7RIz0u2eNSPS7d4zI9Ltvjcj0u3+MKPa7Y40o9rtzjKj2u2uNqPa7e4xo9rtnjWj2u3eM6Pa7b43o9rt/jBj1u2ONGPW7c4yY9btrjZj1u3uMWPW7Z41Y9bt3jNj1u2+N2PW7f4w497tjjTj3u3OMuPe7a42497t7jHj3u2eNePe7d4z497tvjfj3u3+MBPR7Y40E9HtzjIT0e2uNhPR7e4xE9HtnjUT0e3eMxPR7b43E9Ht/jCT2e2KM9ntTjyT2e0uOpPZ7W4+k9ntHjmT2e1ePZPZ7T47k9ntfj+T1e0OOFPV7U48U9XtLjpT1e1uPlPV7R45U9XtXj1T1e0+O1PV7X4/U93tDjjT3e1OPNPd7S46093tbj7T3e0eOdPd7V49093tPjvT3e1+P9PT7Q44M9PtTjwz0+0uOjPT7W4+M9PtHjiB4HPf5PAAAA///mBtvh")
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)

2.955954418s ago: executing program 5 (id=1482):
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@empty, 0xb, 0x1, 0x1, 0xb, 0xfffe, 0xfe}, 0x20)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
ioctl(r0, 0x8b32, &(0x7f0000000040))

2.701980244s ago: executing program 5 (id=1483):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0501ffffffff0a2000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000400080104001e010400cc00090049"], 0x44}, 0x1, 0x0, 0x0, 0x880}, 0x4004050)

2.688815925s ago: executing program 1 (id=1484):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000640)=0x8000)
ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000040)=0x40000)

2.633728196s ago: executing program 3 (id=1485):
socket(0x10, 0x3, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
creat(0x0, 0x175)
mknod(&(0x7f00000000c0)='./bus\x00', 0x8000, 0xd02)
acct(&(0x7f0000000000)='./bus\x00')
acct(0x0)
listen(0xffffffffffffffff, 0x5)
r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140))
r3 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21)
syz_ublk_setup_queues(r3, 0x0, &(0x7f0000000340)={0x0, 0xfb7e, 0x800, 0x2, 0x321, 0x0, r2}, &(0x7f00000007c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd3db, 0x200, 0x1, 0x3de, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9e00, 0x200, 0x1, 0x278, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb60e, 0x1000, 0x1, 0x321, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc9b3, 0x200, 0x3, 0x92}}], 0x4, &(0x7f00000017c0)={0x2e, 0x40, 0x0, r0, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0xf6}, 0x0, 0x0, '\x00', {0x5, 0xc81, 0x0, 0x0}}, 0x0)
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0)
read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020)
sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000640)={0x34, 0x0, 0xb1b, 0x70bd2a, 0x0, {0x2a}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0xd4209235c937efa7}, 0x0)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r4, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20)

1.907302124s ago: executing program 6 (id=1486):
openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x80000000000, 0x0, 0xfffffffffffff30a, 0x5}, &(0x7f0000000000)={0x1f, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffe, 0x9}, 0x0, 0x0, 0x0)

1.64060959s ago: executing program 5 (id=1487):
syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x40)
r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000080)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0)

1.590437662s ago: executing program 3 (id=1488):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r1=>0x0, <r2=>0x0}, &(0x7f0000000440)=0xc)
syz_mount_image$exfat(&(0x7f0000000400), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f0000000540)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r1, @ANYBLOB=',dmask=00000000000000000000152,fmask=00000000000000000000006,gid=', @ANYRESHEX=r2, @ANYBLOB=',uid=', @ANYRESHEX=0xee00, @ANYBLOB="2c646973636172642c00fb278330ab3b4884d36adf6908d11f57832035e96a1513231140da182ca77aeedc492bbc501d94f854a7e26909bde6e698d72a15ec808a86c25d"], 0x81, 0x14f3, &(0x7f0000001580)="$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")
lchown(&(0x7f0000000080)='./file0\x00', 0x0, r2)

1.527710593s ago: executing program 1 (id=1489):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
ftruncate(0xffffffffffffffff, 0xc17a)

1.377968347s ago: executing program 6 (id=1490):
openat$kvm(0xffffff9c, 0x0, 0x800, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0})
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$netlink(r0, &(0x7f0000000200)={0x10, 0x0, 0xffffffff, 0x80065c9}, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_io_uring_setup(0x5ffd, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x1000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1}, 0x48)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d0000001400000011"], 0xa8}}, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r5, 0x1, 0x1000000000000f, &(0x7f0000000180)=0x57bb, 0x3c)
setsockopt$sock_attach_bpf(r5, 0x1, 0x34, &(0x7f00000000c0), 0x4)
sendmsg$NFT_BATCH(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x30, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000)
clock_gettime(0x1, &(0x7f0000000000))
openat$ttynull(0xffffffffffffff9c, 0x0, 0xa0100, 0x0)
clock_settime(0x0, 0x0)

1.282962069s ago: executing program 5 (id=1491):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0xc048aeca, &(0x7f00000000c0)={0x7, 0x0, [{0x9c7, 0x0, 0x8}, {0x2e8, 0x0, 0x40000005}, {0x8be, 0x0, 0x8001}, {0x9b5, 0x0, 0xb}, {0xa8f, 0x0, 0xfffffffffffffffe}, {0x247, 0x0, 0x6}, {0x865, 0x0, 0x100000000}]})

953.966467ms ago: executing program 3 (id=1492):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r0, 0x0)
syz_emit_ethernet(0x62, &(0x7f0000000140)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "cceff5", 0x2c, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x82, 0x2, 0x0, 0x0, {[@mptcp=@ack={0x1e, 0x18, 0x40, 0x1, "50d60e3aeb81410040ffc067904afb6a19790c27"}]}}}}}}}}, 0x0)

93.000778ms ago: executing program 6 (id=1493):
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f0000000280)={[{@max_batch_time={'max_batch_time', 0x3d, 0x3}}]}, 0x82, 0x497, &(0x7f0000000d00)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
munmap(&(0x7f0000001000/0x4000)=nil, 0x4000)
pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)

42.434759ms ago: executing program 3 (id=1494):
openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
setpriority(0x1, 0xffffffffffffffff, 0x3)
r0 = syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, &(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000180))
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2)
socket$nl_route(0x10, 0x3, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002b40), r2)
sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000002c40)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="010023bd70a664dbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000080)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB], 0xfc}}, 0x0)
creat(&(0x7f0000000080)='./bus\x00', 0x0)
mount(&(0x7f0000000240)=@filename='./bus\x00', &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000100)='trans=rdma,')
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$kcm(0xa, 0x7, 0x106)
sendmsg$kcm(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011)
sendmsg$kcm(r5, &(0x7f0000000480)={&(0x7f0000000500)=@xdp={0x2c, 0x7, 0x0, 0x7}, 0x80, 0x0}, 0x4000011)
mbind(&(0x7f0000400000/0xc00000)=nil, 0xc01100, 0x0, 0x0, 0x0, 0x2)
r6 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x40050)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb807e0000000000000000000009fe70ba83a7a66e67a0bae5cfa", @ANYRESHEX, @ANYRESOCT], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0)
socket$nl_sock_diag(0x10, 0x3, 0x4)
io_uring_register$IORING_REGISTER_RING_FDS(r0, 0x14, &(0x7f0000008580)=[{0x4, 0x0, 0x0}, {0x2, 0x0, 0x0}, {0x2, 0x0, 0x0}, {0x5, 0x1, 0x0}, {0x2, 0x0, 0x0}, {0x4, 0x0, 0x0}, {0x8, 0x0, 0x0}, {0x9, 0x1, 0x0}], 0x8)

0s ago: executing program 5 (id=1495):
socket(0x10, 0x3, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
creat(0x0, 0x175)
mknod(&(0x7f00000000c0)='./bus\x00', 0x8000, 0xd02)
acct(&(0x7f0000000000)='./bus\x00')
acct(0x0)
listen(0xffffffffffffffff, 0x5)
r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140))
r3 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21)
syz_ublk_setup_queues(r3, 0x0, &(0x7f0000000340)={0x0, 0xfb7e, 0x800, 0x2, 0x321, 0x0, r2}, &(0x7f00000007c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd3db, 0x200, 0x1, 0x3de, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9e00, 0x200, 0x1, 0x278, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb60e, 0x1000, 0x1, 0x321, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc9b3, 0x200, 0x3, 0x92}}], 0x4, &(0x7f00000017c0)={0x2e, 0x40, 0x0, r0, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0xf6}, 0x0, 0x0, '\x00', {0x5, 0xc81, 0x0, 0x0}}, 0x0)
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
socket$kcm(0xa, 0x5, 0x0)
mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0)
read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r4)
sendmsg$DEVLINK_CMD_RATE_SET(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000640)={0x14, r5, 0xb1b, 0x70bd2a, 0x0, {0x2a}}, 0x14}, 0x1, 0x0, 0x0, 0xd4209235c937efa7}, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r6, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20)
r7 = socket$kcm(0x2, 0x5, 0x0)
sendmsg$inet(r7, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)='\x00', 0xe0}], 0x1}, 0x3e8)

kernel console output (not intermixed with test programs):

EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  454.994955][ T9307] ext4 filesystem being mounted at /265/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  455.249931][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  455.666733][ T9327] loop1: detected capacity change from 0 to 4096
[  455.682458][ T5872] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  455.764802][ T9327] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  455.892613][ T5872] usb 4-1: Using ep0 maxpacket: 32
[  455.916922][ T5872] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  455.943232][ T5872] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  455.992628][ T5872] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  456.016991][ T5872] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  456.054187][ T5872] usb 4-1: config 0 descriptor??
[  456.055621][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  456.175989][ T5843] Process accounting resumed
[  456.775176][ T5872] ft260 0003:0403:6030.0008: item fetching failed at offset 0/2
[  456.779813][ T9318] loop0: detected capacity change from 0 to 32768
[  456.788027][ T5872] ft260 0003:0403:6030.0008: failed to parse HID
[  456.802702][ T5872] ft260: probe of 0003:0403:6030.0008 failed with error -22
[  457.026705][ T9318] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.984 (9318)
[  457.053062][ T5843] usb 4-1: USB disconnect, device number 14
[  457.226398][ T9343] netlink: 12 bytes leftover after parsing attributes in process `syz.4.990'.
[  457.936296][ T9318] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  458.012498][ T9318] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  458.021695][ T9318] BTRFS info (device loop0): setting nodatasum
[  458.062017][ T9318] BTRFS info (device loop0): force zlib compression, level 3
[  458.102416][ T9318] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8)
[  458.150427][ T9318] BTRFS info (device loop0): use lzo compression, level 0
[  458.192490][ T9318] BTRFS info (device loop0): turning on flush-on-commit
[  458.199633][ T9318] BTRFS info (device loop0): enabling auto defrag
[  458.246259][ T9318] BTRFS info (device loop0): max_inline at 4096
[  458.286714][ T9318] BTRFS info (device loop0): using free space tree
[  458.323873][ T9318] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR
[  458.324714][ T9318] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR
[  458.351449][ T9318] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR
[  458.389264][ T9318] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR
[  458.402928][ T5872] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  458.483300][ T9318] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR
[  458.513676][ T9318] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR
[  458.569515][ T9318] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR
[  458.611515][ T9318] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR
[  458.663843][ T9318] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR
[  458.693317][ T9318] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR
[  458.703692][ T5872] usb 2-1: Using ep0 maxpacket: 8
[  458.753640][ T9318] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR
[  458.758781][ T5872] usb 2-1: unable to get BOS descriptor or descriptor too short
[  458.777483][ T9318] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR
[  458.814713][ T9318] BTRFS error (device loop0): open_ctree failed: -12
[  458.852690][ T5872] usb 2-1: config 4 interface 0 has no altsetting 0
[  458.864672][ T5872] usb 2-1: string descriptor 0 read error: -22
[  458.871457][ T5872] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[  458.903682][ T5872] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3
[  459.022171][ T5872] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[  459.077442][ T5872] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  459.164258][ T5872] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[  459.197415][ T5872] usb 2-1: media controller created
[  459.338905][ T5872] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  459.518961][ T6726] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by udevd (6726)
[  459.864499][ T9386] loop4: detected capacity change from 0 to 4096
[  460.522207][ T5872] zl10353_read_register: readreg error (reg=127, ret==0)
[  460.641403][ T9407] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1001'.
[  461.402776][ T5872] usb 2-1: USB disconnect, device number 9
[  461.898409][ T9420] Bluetooth: MGMT ver 1.22
[  461.972515][ T5872] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  462.087557][ T9425] loop0: detected capacity change from 0 to 128
[  462.143833][ T9425] EXT4-fs: Ignoring removed mblk_io_submit option
[  462.239408][ T5872] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  462.326086][ T9425] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  462.342462][ T5872] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  462.416938][ T9432] siw: device registration error -23
[  462.437664][ T9425] ext4 filesystem being mounted at /255/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  462.471544][ T5872] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  462.554498][ T5872] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  462.628846][ T5872] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  462.703636][ T5872] usb 2-1: config 0 descriptor??
[  463.068228][ T5777] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  463.215314][ T5872] plantronics 0003:047F:FFFF.0009: unbalanced collection at end of report description
[  463.281840][ T5872] plantronics 0003:047F:FFFF.0009: parse failed
[  463.450112][ T5872] plantronics: probe of 0003:047F:FFFF.0009 failed with error -22
[  463.470478][ T9453] siw: device registration error -23
[  463.823045][ T5872] usb 2-1: USB disconnect, device number 10
[  464.358222][ T9460] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1012'.
[  465.281647][ T9466] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1014'.
[  465.722502][ T5822] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  465.911551][ T9471] loop1: detected capacity change from 0 to 32768
[  465.959079][ T9471] 
[  465.959079][ T9471]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  465.959079][ T9471] 
[  465.962613][ T5822] usb 5-1: Using ep0 maxpacket: 8
[  466.005914][ T9471] 
[  466.005914][ T9471]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  466.005914][ T9471] 
[  466.018896][ T5822] usb 5-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 6
[  466.019252][ T9471] 
[  466.019252][ T9471]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  466.019252][ T9471] 
[  466.066039][ T9471] 
[  466.066039][ T9471]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  466.066039][ T9471] 
[  466.069423][ T5822] usb 5-1: config 0 interface 0 has no altsetting 0
[  466.100943][ T9471] 
[  466.100943][ T9471]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  466.100943][ T9471] 
[  466.118194][ T5822] usb 5-1: New USB device found, idVendor=17ef, idProduct=60a4, bcdDevice= 0.00
[  466.142349][ T5822] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  466.164878][ T5822] usb 5-1: config 0 descriptor??
[  466.185749][  T113] 
[  466.185749][  T113]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  466.185749][  T113] 
[  466.202546][ T9489] ialloc: diAlloc returned -5!
[  466.369540][ T5776] 
[  466.369540][ T5776]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  466.369540][ T5776] 
[  466.415947][ T5776] 
[  466.415947][ T5776]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  466.415947][ T5776] 
[  466.490558][ T9498] loop0: detected capacity change from 0 to 256
[  466.534251][ T9498] exfat: Deprecated parameter 'utf8'
[  466.563604][ T9498] exfat: Deprecated parameter 'namecase'
[  466.569400][ T9498] exfat: Deprecated parameter 'namecase'
[  466.609751][ T5822] lenovo 0003:17EF:60A4.000A: unknown main item tag 0x4
[  466.644476][ T5822] lenovo 0003:17EF:60A4.000A: unknown main item tag 0xd
[  466.667722][ T5822] lenovo 0003:17EF:60A4.000A: hidraw0: USB HID v0.7f Device [HID 17ef:60a4] on usb-dummy_hcd.4-1/input0
[  466.690504][ T9498] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  467.633084][ T5872] usb 5-1: USB disconnect, device number 2
[  467.932686][ T9516] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1026'.
[  468.213870][ T6638] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  468.416409][ T6638] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  468.432560][ T5822] usb 2-1: new full-speed USB device number 11 using dummy_hcd
[  468.442472][ T6638] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  468.466682][ T6638] usb 4-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00
[  468.496571][ T6638] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  468.520142][   T28] audit: type=1326 audit(1785221115.292:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9536 comm="syz.4.1032" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0c4b59de99 code=0x0
[  468.544579][ T6638] usb 4-1: config 0 descriptor??
[  468.655008][ T5822] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  468.669354][ T5822] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  468.685703][ T5822] usb 2-1: config 0 descriptor??
[  468.704561][ T5822] cp210x 2-1:0.0: cp210x converter detected
[  468.998829][ T6638] hid-led 0003:1D34:000A.000B: unexpected long global item
[  469.012881][ T6638] hid-led: probe of 0003:1D34:000A.000B failed with error -22
[  469.123684][ T5822] usb 2-1: cp210x converter now attached to ttyUSB0
[  469.231191][ T6638] usb 4-1: USB disconnect, device number 15
[  469.308576][ T5822] usb 2-1: USB disconnect, device number 11
[  469.335345][ T5822] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  469.401030][ T5822] cp210x 2-1:0.0: device disconnected
[  470.998821][ T9583] tipc: Started in network mode
[  471.022757][ T9583] tipc: Node identity ff020000000000000000000000000001, cluster identity 4711
[  471.057285][ T9583] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  471.143069][ T5843] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  471.322153][ T9593] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1043'.
[  471.376248][ T5843] usb 2-1: unable to get BOS descriptor or descriptor too short
[  471.399751][ T5843] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  471.421043][ T5843] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  471.572932][ T9599] siw: device registration error -23
[  472.244581][ T5843] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  472.259223][ T5843] usb 2-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40
[  472.269345][ T5843] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  472.277600][ T5843] usb 2-1: Product: syz
[  472.281934][ T5843] usb 2-1: Manufacturer: syz
[  472.287062][ T5843] usb 2-1: SerialNumber: syz
[  472.709663][ T9611] loop3: detected capacity change from 0 to 256
[  472.759983][ T5843] usb 2-1: 1:1: cannot set freq 48000 to ep 0x1
[  473.598062][ T5843] usb 2-1: USB disconnect, device number 12
[  473.613724][ T6638] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  473.753096][ T5778] udevd[5778]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  473.824741][ T6638] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  473.843642][ T6638] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  473.854292][ T6638] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[  473.864327][ T6638] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  473.894047][ T6638] usb 5-1: config 0 descriptor??
[  473.938874][ T9627] comedi comedi1: 8255: I/O port conflict (0xffffffffc0000000,4)
[  473.950184][ T9627] comedi comedi1: 8255: I/O port conflict (0x5,4)
[  473.958109][ T9627] comedi comedi1: 8255: I/O port conflict (0xffffffffffffffff,4)
[  473.967007][ T9627] comedi comedi1: 8255: I/O port conflict (0xe,4)
[  473.974618][ T9627] comedi comedi1: 8255: I/O port conflict (0x800005,4)
[  473.981716][ T9627] comedi comedi1: 8255: I/O port conflict (0x7,4)
[  473.992185][ T9627] comedi comedi1: 8255: I/O port conflict (0x4,4)
[  474.005148][ T9627] comedi comedi1: 8255: I/O port conflict (0xc,4)
[  474.016474][ T9627] comedi comedi1: 8255: I/O port conflict (0xfd,4)
[  474.024048][ T9627] comedi comedi1: 8255: I/O port conflict (0x7fffffff,4)
[  474.032146][ T9627] comedi comedi1: 8255: I/O port conflict (0x1,4)
[  474.046775][ T9627] comedi comedi1: 8255: I/O port conflict (0x1,4)
[  474.055388][ T9627] comedi comedi1: 8255: I/O port conflict (0xfffffffffffffffc,4)
[  474.068104][ T9627] comedi comedi1: 8255: I/O port conflict (0x10000b,4)
[  474.077082][ T9627] comedi comedi1: 8255: I/O port conflict (0x5,4)
[  474.093349][ T9627] comedi comedi1: 8255: I/O port conflict (0x4007a,4)
[  474.106595][ T9627] comedi comedi1: 8255: I/O port conflict (0x3,4)
[  474.120637][ T9627] comedi comedi1: 8255: I/O port conflict (0x1,4)
[  474.127894][ T9627] comedi comedi1: 8255: I/O port conflict (0x89,4)
[  474.134805][ T9627] comedi comedi1: 8255: I/O port conflict (0x12,4)
[  474.142929][ T9627] comedi comedi1: 8255: I/O port conflict (0x7f,4)
[  474.333106][ T6638] playstation 0003:054C:0DF2.000C: unbalanced delimiter at end of report description
[  474.363464][ T6638] playstation 0003:054C:0DF2.000C: Parse failed
[  474.372103][ T6638] playstation: probe of 0003:054C:0DF2.000C failed with error -22
[  474.538009][ T6638] usb 5-1: USB disconnect, device number 3
[  474.630406][ T5843] Process accounting resumed
[  475.791329][ T9651] loop1: detected capacity change from 0 to 4096
[  475.806141][ T9651] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512).
[  475.850758][ T9651] ntfs3: loop1: It is recommened to use chkdsk.
[  476.625610][ T5872] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  476.712626][ T9651] ntfs3: loop1: failed to convert "076c" to maciceland
[  476.870210][ T9651] ntfs3: loop1: ino=5, "/" directory corrupted
[  477.790265][ T5872] usb 4-1: Using ep0 maxpacket: 8
[  477.813713][ T5872] usb 4-1: config 64 interface 0 altsetting 2 endpoint 0x2 has invalid wMaxPacketSize 0
[  477.838757][ T5872] usb 4-1: config 64 interface 0 has no altsetting 0
[  477.850948][ T5872] usb 4-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e
[  477.866536][ T5872] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  477.875173][ T5872] usb 4-1: Product: syz
[  477.879438][ T5872] usb 4-1: Manufacturer: syz
[  477.884592][ T5872] usb 4-1: SerialNumber: syz
[  477.908085][ T5872] snd_usb_toneport 4-1:64.0: Line 6 TonePort UX2 found
[  478.072520][ T5822] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  478.113906][ T6638] Process accounting resumed
[  478.514144][ T5872] snd_usb_toneport 4-1:64.0: cannot get proper max packet size
[  478.592850][ T5872] snd_usb_toneport 4-1:64.0: Line 6 TonePort UX2 now disconnected
[  478.784896][ T5872] snd_usb_toneport: probe of 4-1:64.0 failed with error -22
[  478.908173][ T5872] usb 4-1: USB disconnect, device number 16
[  479.092916][ T5822] usb 2-1: Using ep0 maxpacket: 8
[  479.108058][ T5822] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  479.122822][ T5822] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9
[  479.143609][ T5822] usb 2-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00
[  479.156257][ T5822] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  479.173594][ T5822] usb 2-1: config 0 descriptor??
[  479.518634][ T9698] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  479.526978][ T9698] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  479.641871][ T5822] megaworld 0003:07B5:0312.000D: unknown main item tag 0x7
[  479.650974][ T5822] megaworld 0003:07B5:0312.000D: unknown main item tag 0x0
[  479.664048][ T5822] megaworld 0003:07B5:0312.000D: unknown main item tag 0x0
[  479.676957][ T5822] megaworld 0003:07B5:0312.000D: unknown main item tag 0x0
[  479.686438][ T5822] megaworld 0003:07B5:0312.000D: unknown main item tag 0x0
[  479.699748][ T5822] megaworld 0003:07B5:0312.000D: unknown main item tag 0x0
[  479.709015][ T5822] megaworld 0003:07B5:0312.000D: unknown main item tag 0x0
[  479.720468][ T5822] megaworld 0003:07B5:0312.000D: unknown main item tag 0x0
[  479.731841][ T5822] megaworld 0003:07B5:0312.000D: unknown main item tag 0x0
[  479.743980][ T5822] megaworld 0003:07B5:0312.000D: unknown main item tag 0x0
[  479.755078][ T5822] megaworld 0003:07B5:0312.000D: unknown main item tag 0x0
[  479.768242][ T5822] megaworld 0003:07B5:0312.000D: unknown main item tag 0x0
[  479.780478][ T5822] megaworld 0003:07B5:0312.000D: unknown main item tag 0x0
[  479.788910][ T5822] megaworld 0003:07B5:0312.000D: unknown main item tag 0x0
[  479.797615][ T5822] megaworld 0003:07B5:0312.000D: unknown main item tag 0x0
[  479.805413][ T5822] megaworld 0003:07B5:0312.000D: unknown main item tag 0x0
[  479.815365][ T5822] megaworld 0003:07B5:0312.000D: unknown main item tag 0x0
[  479.822994][ T5822] megaworld 0003:07B5:0312.000D: unknown main item tag 0x0
[  479.830747][ T5822] megaworld 0003:07B5:0312.000D: unknown main item tag 0x0
[  479.862494][ T5822] megaworld 0003:07B5:0312.000D: hidraw0: USB HID v0.81 Device [HID 07b5:0312] on usb-dummy_hcd.1-1/input0
[  479.892918][ T5822] megaworld 0003:07B5:0312.000D: no inputs found
[  479.948453][ T5822] usb 2-1: USB disconnect, device number 13
[  480.055786][ T9701] fido_id[9701]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  480.202171][ T9700] loop3: detected capacity change from 0 to 32768
[  480.264667][ T9700] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  480.460248][ T9712] capability: warning: `syz.4.1075' uses deprecated v2 capabilities in a way that may be insecure
[  480.487658][ T5779] ocfs2: Unmounting device (7,3) on (node local)
[  480.719817][ T9717] loop4: detected capacity change from 0 to 512
[  480.790116][ T9717] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  480.853054][ T9717] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  481.140467][ T8976] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  481.272709][    T8] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  481.477577][    T8] usb 4-1: unable to get BOS descriptor or descriptor too short
[  481.494292][ T9715] loop1: detected capacity change from 0 to 32768
[  481.502156][    T8] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  481.529490][    T8] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  481.553828][    T8] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7
[  481.589705][    T8] usb 4-1: string descriptor 0 read error: -22
[  481.599727][    T8] usb 4-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40
[  481.620494][    T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  481.793106][ T9715] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  481.832094][ T9740] siw: device registration error -23
[  482.589756][   T28] audit: type=1800 audit(1785221129.362:9): pid=9715 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1077" name="file2" dev="loop1" ino=17058 res=0 errno=0
[  482.660141][    T8] usb 4-1: Can't set UAC3 power state to 1 for id 10
[  482.685510][    T8] usb 4-1: 2:0: failed to get current value for ch 0 (-71)
[  482.702833][    T8] usb 4-1: 2:0: cannot get min/max values for control 2 (id 2)
[  482.792448][ T5843] usb 5-1: new full-speed USB device number 4 using dummy_hcd
[  482.833909][    T8] usb 4-1: 2:0: cannot get min/max values for control 2 (id 2)
[  482.874612][    T8] usb 4-1: 2:0: cannot get min/max values for control 2 (id 2)
[  482.886568][ T5776] ocfs2: Unmounting device (7,1) on (node local)
[  482.927752][    T8] usb 4-1: USB disconnect, device number 17
[  483.024988][ T5843] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[  483.062826][ T5843] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  483.125025][ T5843] usb 5-1: config 0 descriptor??
[  483.149307][ T5843] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[  483.224924][ T9728] loop0: detected capacity change from 0 to 32768
[  483.271698][ T9728] JBD2: Ignoring recovery information on journal
[  483.344594][ T5843] gp8psk: usb in 128 operation failed.
[  483.404021][ T9728] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  483.575152][ T5843] gp8psk: usb in 146 operation failed.
[  483.580756][ T5843] gp8psk: failed to get FW version
[  483.599648][ T5843] gp8psk: usb in 149 operation failed.
[  483.623166][ T5843] gp8psk: failed to get FPGA version
[  483.632924][ T5843] gp8psk: usb in 138 operation failed.
[  483.638488][ T5843] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  483.672642][ T5843] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19)
[  483.692582][    T8] usb 2-1: new full-speed USB device number 14 using dummy_hcd
[  483.702250][ T5843] usb 5-1: USB disconnect, device number 4
[  483.775055][ T5777] ocfs2: Unmounting device (7,0) on (node local)
[  483.920729][    T8] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  483.951096][    T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  483.997760][    T8] usb 2-1: Product: syz
[  484.016343][    T8] usb 2-1: Manufacturer: syz
[  484.029980][    T8] usb 2-1: SerialNumber: syz
[  484.289805][    T8] usb 2-1: config 0 descriptor??
[  484.736455][    T8] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  484.844226][ T9771] loop4: detected capacity change from 0 to 164
[  484.902200][ T9771] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  484.981450][ T9771] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  485.014981][ T9771] rock: directory entry would overflow storage
[  485.021353][ T9771] rock: sig=0x4f50, size=4, remaining=3
[  485.056740][ T9771] iso9660: Corrupted directory entry in block 4 of inode 1792
[  485.140348][    T8] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71
[  485.152648][ T5843] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  485.168318][    T8] usb 2-1: USB disconnect, device number 14
[  485.319060][ T9782] loop0: detected capacity change from 0 to 512
[  485.361163][ T9782] EXT4-fs: Ignoring removed nomblk_io_submit option
[  485.382446][ T5843] usb 4-1: Using ep0 maxpacket: 32
[  485.390617][ T9782] EXT4-fs: Ignoring removed nobh option
[  485.419310][ T5843] usb 4-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f
[  485.426280][ T9782] EXT4-fs: Ignoring removed nomblk_io_submit option
[  485.456568][ T5843] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  485.476752][ T9782] EXT4-fs: Ignoring removed bh option
[  485.485917][ T5843] usb 4-1: Product: syz
[  485.508232][ T5843] usb 4-1: Manufacturer: syz
[  485.519871][ T5843] usb 4-1: SerialNumber: syz
[  485.529268][ T9782] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters
[  485.564363][ T5843] usb 4-1: config 0 descriptor??
[  485.589449][ T9782] EXT4-fs (loop0): 1 orphan inode deleted
[  485.599810][ T5843] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state.
[  485.628908][ T9782] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  485.649815][ T5843] dvb-usb: bulk message failed: -22 (4/0)
[  485.660713][ T5843] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  485.718684][ T5843] dvb-usb: bulk message failed: -22 (5/0)
[  485.739332][ T5843] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  485.812801][ T5843] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  485.839353][ T9772] ttusb2: i2c rd len=58 too high
[  485.866424][ T5843] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0)
[  485.888505][ T5843] usb 4-1: media controller created
[  485.942737][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  485.974066][ T5843] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  486.078867][ T5843] usb 4-1: selecting invalid altsetting 3
[  486.094179][ T5843] ttusb2: set interface to alts=3 failed
[  486.339144][ T5843] DVB: Unable to find symbol tda10086_attach()
[  486.356575][ T5843] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0'
[  486.398179][ T5843] dvb-usb: bulk message failed: -22 (4/0)
[  486.412426][ T5843] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  486.452564][ T5843] dvb-usb: bulk message failed: -22 (5/0)
[  486.465705][ T9790] loop4: detected capacity change from 0 to 32768
[  486.479277][ T5843] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  486.500937][ T5843] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected.
[  486.531290][ T5843] usb 4-1: USB disconnect, device number 18
[  486.571535][ T9790] 
[  486.571535][ T9790]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  486.571535][ T9790] 
[  486.665495][ T9812] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3)
[  486.672125][ T9812] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  486.695715][ T5843] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected.
[  486.703355][ T9812] vhci_hcd vhci_hcd.0: Device attached
[  486.838250][ T9790] ERROR: (device loop4): diWrite: ixpxd invalid
[  486.838250][ T9790] 
[  486.907489][ T9790] ERROR: (device loop4): txCommit: 
[  486.907489][ T9790] 
[  486.984616][ T9818] ERROR: (device loop4): diWrite: ixpxd invalid
[  486.984616][ T9818] 
[  487.320130][ T9818] ERROR: (device loop4): txCommit: 
[  487.320130][ T9818] 
[  487.668403][ T8976] 
[  487.668403][ T8976]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  487.668403][ T8976] 
[  487.731832][ T8976] 
[  487.731832][ T8976]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  487.731832][ T8976] 
[  487.833494][    T8] vhci_hcd: vhci_device speed not set
[  487.915735][    T8] usb 33-1: new full-speed USB device number 3 using vhci_hcd
[  488.106729][ T6638] Process accounting resumed
[  488.252467][ T5843] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  489.090001][ T5843] usb 2-1: config 0 has an invalid interface number: 4 but max is 0
[  489.214313][ T9844] siw: device registration error -23
[  489.257174][ T5843] usb 2-1: config 0 has no interface number 0
[  489.404061][ T5843] usb 2-1: config 0 interface 4 has no altsetting 0
[  489.546146][ T5843] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  489.749470][ T5843] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  489.851229][ T5843] usb 2-1: config 0 descriptor??
[  489.896492][ T5843] cp210x 2-1:0.4: cp210x converter detected
[  489.918313][ T9815] vhci_hcd: connection reset by peer
[  489.971509][   T42] vhci_hcd: stop threads
[  490.003027][   T42] vhci_hcd: release socket
[  490.017780][   T42] vhci_hcd: disconnect device
[  490.158932][ T5781] Process accounting resumed
[  490.384590][ T5843] cp210x 2-1:0.4: failed to get vendor val 0x000e size 3: -71
[  490.774305][ T5843] usb 2-1: cp210x converter now attached to ttyUSB0
[  490.985048][ T5843] usb 2-1: USB disconnect, device number 15
[  491.036866][ T5843] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  491.103036][ T5843] cp210x 2-1:0.4: device disconnected
[  491.243079][ T5781] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  491.361646][ T9867] loop0: detected capacity change from 0 to 128
[  491.439795][ T9867] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  491.504168][ T5843] Process accounting resumed
[  491.512582][ T5781] usb 5-1: Using ep0 maxpacket: 8
[  491.568691][ T9867] hpfs: filesystem error: improperly stopped
[  491.670499][ T9867] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  491.785357][ T9867] hpfs: You really don't want any checks? You are crazy...
[  491.890681][ T9867] hpfs: hpfs_map_sector(): read error
[  491.955071][ T9867] hpfs: code page support is disabled
[  491.990727][ T9867] hpfs: hpfs_map_4sectors(): unaligned read
[  492.001133][ T9867] hpfs: hpfs_map_4sectors(): unaligned read
[  492.084054][ T9867] hpfs: filesystem error: unable to find root dir
[  492.181305][ T5781] usb 5-1: config 0 interface 0 has no altsetting 0
[  492.193005][ T5781] usb 5-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00
[  492.204387][ T5781] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  492.215649][ T5781] usb 5-1: config 0 descriptor??
[  492.652029][ T5781] lenovo 0003:17EF:6009.000E: unknown main item tag 0x1
[  492.676902][ T5781] lenovo 0003:17EF:6009.000E: unknown main item tag 0x6
[  492.693062][ T5781] lenovo 0003:17EF:6009.000E: unknown main item tag 0x4
[  492.713682][ T5781] lenovo 0003:17EF:6009.000E: hidraw0: USB HID v10.00 Device [HID 17ef:6009] on usb-dummy_hcd.4-1/input0
[  492.833391][ T6638] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  492.915157][ T5781] usb 5-1: USB disconnect, device number 5
[  493.038199][ T6638] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  493.046971][    T8] vhci_hcd: vhci_device speed not set
[  493.062859][ T6638] usb 2-1: config 0 has no interface number 0
[  493.072713][ T6638] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  493.102565][ T6638] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  493.128445][ T6638] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  493.158317][ T6638] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  493.181697][ T6638] usb 2-1: config 0 descriptor??
[  493.641274][ T6638] uclogic 0003:256C:006D.000F: unknown main item tag 0x0
[  493.665241][ T6638] uclogic 0003:256C:006D.000F: unknown main item tag 0x0
[  493.692609][ T6638] uclogic 0003:256C:006D.000F: unknown main item tag 0x0
[  493.701078][ T6638] uclogic 0003:256C:006D.000F: unknown main item tag 0x0
[  493.729461][ T6638] uclogic 0003:256C:006D.000F: unknown main item tag 0x0
[  493.740541][ T6638] uclogic 0003:256C:006D.000F: No inputs registered, leaving
[  493.767132][ T6638] uclogic 0003:256C:006D.000F: hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.1-1/input1
[  493.863309][ T5843] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  493.885808][ T5822] usb 2-1: USB disconnect, device number 16
[  494.056695][ T5843] usb 5-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice=a4.46
[  494.066078][ T5781] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  494.074896][ T5843] usb 5-1: New USB device strings: Mfr=133, Product=2, SerialNumber=0
[  494.083986][ T5843] usb 5-1: Product: syz
[  494.088860][ T5843] usb 5-1: Manufacturer: syz
[  494.097394][ T5843] usb 5-1: config 0 descriptor??
[  494.120968][ T5843] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected
[  494.133706][ T5843] ftdi_sio ttyUSB0: unknown device type: 0xa446
[  494.273678][ T5781] usb 4-1: too many configurations: 9, using maximum allowed: 8
[  494.284320][ T5781] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  494.298059][ T5781] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  494.310022][ T5781] usb 4-1: config 0 interface 0 has no altsetting 0
[  494.332947][ T5781] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  494.342926][ T5781] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  494.359775][ T5781] usb 4-1: config 0 interface 0 has no altsetting 0
[  494.379011][ T5781] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  494.389452][ T5782] Bluetooth: hci4: Malformed LE Event: 0x0d
[  494.392658][ T5781] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  494.412500][    T8] usb 5-1: USB disconnect, device number 6
[  494.422162][    T8] ftdi_sio 5-1:0.0: device disconnected
[  494.460353][ T5781] usb 4-1: config 0 interface 0 has no altsetting 0
[  494.497090][ T5781] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  494.529260][ T5781] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  494.562971][ T5781] usb 4-1: config 0 interface 0 has no altsetting 0
[  494.576061][ T5781] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  494.598656][ T5781] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  494.615085][ T5781] usb 4-1: config 0 interface 0 has no altsetting 0
[  494.625391][ T5781] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  494.639991][ T5781] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  494.651465][ T5781] usb 4-1: config 0 interface 0 has no altsetting 0
[  494.665617][ T5781] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  494.678083][ T5781] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  494.691735][ T5781] usb 4-1: config 0 interface 0 has no altsetting 0
[  494.711836][ T5781] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  494.725651][ T5781] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  494.754666][ T5781] usb 4-1: config 0 interface 0 has no altsetting 0
[  494.776758][ T5781] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  494.789172][ T5781] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  494.814128][ T5781] usb 4-1: Product: syz
[  494.818377][ T5781] usb 4-1: Manufacturer: syz
[  494.832484][ T5781] usb 4-1: SerialNumber: syz
[  494.845606][ T5781] usb 4-1: config 0 descriptor??
[  494.906580][ T5781] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0
[  495.025212][    T8] Process accounting resumed
[  495.586870][    C1] usb 4-1: yurex_control_callback - control failed: -71
[  495.597394][ T5872] usb 4-1: USB disconnect, device number 19
[  495.797923][ T5872] yurex 4-1:0.0: USB YUREX #0 now disconnected
[  495.940373][ T6638] Process accounting resumed
[  498.112505][ T6638] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  498.201560][ T9963] siw: device registration error -23
[  498.329463][    T8] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  498.357354][ T6638] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  498.483220][ T6638] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  498.605720][ T6638] usb 5-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00
[  498.664821][    T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  498.749253][ T6638] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  498.807518][    T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  498.877598][ T6638] usb 5-1: config 0 descriptor??
[  498.912536][    T8] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[  498.962426][    T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  499.055469][    T8] usb 2-1: config 0 descriptor??
[  499.493166][    T8] hid (null): report_id 0 is invalid
[  499.518113][    T8] hid-steam 0003:28DE:1142.0011: report_id 0 is invalid
[  499.526015][    T8] hid-steam 0003:28DE:1142.0011: item 0 1 1 8 parsing failed
[  499.543816][    T8] hid-steam 0003:28DE:1142.0011: steam_probe:parse of hid interface failed
[  499.553357][    T8] hid-steam: probe of 0003:28DE:1142.0011 failed with error -22
[  499.573883][ T6638] hid-led: probe of 0003:1D34:000A.0010 failed with error -71
[  499.586704][ T6638] usb 5-1: USB disconnect, device number 7
[  499.662527][ T5822] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  499.711317][ T5781] usb 2-1: USB disconnect, device number 17
[  499.858353][ T5822] usb 4-1: Using ep0 maxpacket: 8
[  499.876457][ T5822] usb 4-1: config index 0 descriptor too short (expected 30, got 18)
[  499.898254][ T5822] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  499.917830][ T5822] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  499.927874][ T5822] usb 4-1: Product: syz
[  499.932124][ T5822] usb 4-1: Manufacturer: syz
[  499.951010][ T5822] usb 4-1: SerialNumber: syz
[  499.959748][ T5822] usb 4-1: config 0 descriptor??
[  499.970858][ T5822] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  499.981067][ T5822] usb 4-1: setting power ON
[  499.986924][ T5822] dvb-usb: bulk message failed: -22 (2/0)
[  500.028843][ T5822] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  500.051471][ T5822] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  500.061374][ T5822] usb 4-1: media controller created
[  500.097797][ T5822] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  500.225779][ T5781] Process accounting resumed
[  500.433762][ T5822] usb 4-1: selecting invalid altsetting 6
[  500.534362][ T5822] usb 4-1: digital interface selection failed (-22)
[  500.624472][ T9977] dvb-usb: bulk message failed: -22 (3/0)
[  500.634644][ T5822] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  500.703574][ T9977] cxusb: i2c wr: len=79 is too big!
[  500.703574][ T9977] 
[  500.778496][ T5822] usb 4-1: setting power OFF
[  500.881109][ T5822] dvb-usb: bulk message failed: -22 (2/0)
[  500.979871][ T5822] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  501.023230][ T5822] (NULL device *): no alternate interface
[  501.094895][ T9994] loop4: detected capacity change from 0 to 2048
[  501.324202][ T9994] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  501.644420][ T5822] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  501.944490][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  501.958326][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  502.178882][ T5822] usb 4-1: USB disconnect, device number 20
[  502.354339][ T8976] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  502.364931][T10003] loop0: detected capacity change from 0 to 64
[  503.725304][ T5843] Process accounting resumed
[  505.644736][ T9077] Process accounting resumed
[  506.268791][T10052] loop1: detected capacity change from 0 to 128
[  506.282528][ T6638] usb 4-1: new full-speed USB device number 21 using dummy_hcd
[  506.315427][T10052] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  506.485955][ T6638] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[  506.503094][ T6638] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  506.533680][ T6638] usb 4-1: config 0 descriptor??
[  506.557225][ T6638] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[  506.639194][    T8] Process accounting resumed
[  507.075937][ T6638] gp8psk: usb in 128 operation failed.
[  507.361218][ T6638] gp8psk: FW Version = 0.00.0 (0x0)  Build 2000/00/00
[  507.575851][ T6638] gp8psk: usb in 149 operation failed.
[  507.601863][ T6638] gp8psk: failed to get FPGA version
[  507.623014][ T6638] gp8psk: usb in 138 operation failed.
[  507.638176][ T6638] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  507.675569][ T6638] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19)
[  507.701935][ T6638] usb 4-1: USB disconnect, device number 21
[  507.805260][    T9] Process accounting resumed
[  508.758158][T10074] siw: device registration error -23
[  509.652556][ T9077] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  509.662420][    T9] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  509.852448][ T9077] usb 4-1: Using ep0 maxpacket: 16
[  509.865727][T10084] loop0: detected capacity change from 0 to 32768
[  509.875876][ T9077] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  509.894554][    T9] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 214, changing to 7
[  509.903006][ T9077] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  509.926849][ T9077] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  509.937090][ T9077] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  509.948828][    T9] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 172, changing to 7
[  509.959062][T10084] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  509.973001][    T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  509.983252][ T9077] usb 4-1: Product: syz
[  509.987519][ T9077] usb 4-1: Manufacturer: syz
[  509.992588][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  510.000659][    T9] usb 2-1: Product: syz
[  510.005067][    T9] usb 2-1: Manufacturer: syz
[  510.009725][    T9] usb 2-1: SerialNumber: syz
[  510.032739][ T9077] usb 4-1: SerialNumber: syz
[  510.087232][T10084] XFS (loop0): Ending clean mount
[  510.289465][ T9077] usb 4-1: 0:2 : does not exist
[  510.304782][ T9077] usb 4-1: 5:0: failed to get current value for ch 0 (-22)
[  510.350255][ T9077] usb 4-1: USB disconnect, device number 22
[  510.356807][    T9] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  510.377573][ T5777] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  510.389973][    T9] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  510.429034][    T9] usb 2-1: USB disconnect, device number 18
[  510.556735][ T5794] udevd[5794]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  510.646627][ T6726] udevd[6726]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory
[  510.676930][T10090] loop4: detected capacity change from 0 to 32768
[  510.724424][T10090] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  510.917864][T10090] XFS (loop4): Ending clean mount
[  511.000082][ T9077] Process accounting resumed
[  511.619640][T10090] XFS (loop4): Quotacheck needed: Please wait.
[  511.938856][T10090] XFS (loop4): Quotacheck: Done.
[  512.082425][    T8] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  512.252149][ T8976] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  512.273849][    T8] usb 4-1: too many configurations: 9, using maximum allowed: 8
[  512.309602][    T8] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  512.332565][    T8] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  512.359939][    T8] usb 4-1: config 0 interface 0 has no altsetting 0
[  512.387146][    T8] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  512.402643][    T8] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  512.432426][    T8] usb 4-1: config 0 interface 0 has no altsetting 0
[  512.458298][    T8] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  512.486125][    T8] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  512.532454][    T8] usb 4-1: config 0 interface 0 has no altsetting 0
[  512.571760][    T8] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  512.597146][    T8] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  512.632395][    T8] usb 4-1: config 0 interface 0 has no altsetting 0
[  512.670380][T10115] loop1: detected capacity change from 0 to 32768
[  512.696529][    T8] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  512.711637][    T8] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  512.736935][    T8] usb 4-1: config 0 interface 0 has no altsetting 0
[  512.755420][T10115] JBD2: Ignoring recovery information on journal
[  512.797671][    T8] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  512.830127][    T8] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  512.905669][    T8] usb 4-1: config 0 interface 0 has no altsetting 0
[  512.932455][T10115] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  512.968472][    T8] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  512.988928][T10128] siw: device registration error -23
[  513.004037][    T8] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  513.039297][    T8] usb 4-1: config 0 interface 0 has no altsetting 0
[  513.066851][    T8] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  513.098292][    T8] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  513.158779][   T28] audit: type=1800 audit(1785221159.932:10): pid=10115 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1166" name="file1" dev="loop1" ino=17058 res=0 errno=0
[  513.180256][    T8] usb 4-1: config 0 interface 0 has no altsetting 0
[  513.226947][    T8] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  513.243580][    T8] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  513.276485][    T8] usb 4-1: Product: syz
[  513.298234][    T8] usb 4-1: Manufacturer: syz
[  513.312063][    T8] usb 4-1: SerialNumber: syz
[  513.335481][    T8] usb 4-1: config 0 descriptor??
[  513.401970][    T8] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0
[  513.625941][ T5776] ocfs2: Unmounting device (7,1) on (node local)
[  513.753522][    C0] usb 4-1: yurex_control_callback - control failed: -71
[  513.761223][    T8] usb 4-1: USB disconnect, device number 23
[  513.799979][    T8] yurex 4-1:0.0: USB YUREX #0 now disconnected
[  514.155676][T10142] loop0: detected capacity change from 0 to 256
[  514.166129][T10142] FAT-fs (loop0): Directory bread(block 1285) failed
[  514.175932][T10142] FAT-fs (loop0): Directory bread(block 1286) failed
[  514.187553][T10142] FAT-fs (loop0): Directory bread(block 1287) failed
[  514.197636][T10142] FAT-fs (loop0): Directory bread(block 1288) failed
[  514.240257][T10142] FAT-fs (loop0): Directory bread(block 1285) failed
[  514.251108][T10142] FAT-fs (loop0): Directory bread(block 1286) failed
[  514.262774][T10142] FAT-fs (loop0): Directory bread(block 1287) failed
[  514.269586][T10142] FAT-fs (loop0): Directory bread(block 1288) failed
[  514.302837][ T9077] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  514.364950][ T5777] FAT-fs (loop0): Directory bread(block 1285) failed
[  514.374332][ T5777] FAT-fs (loop0): Directory bread(block 1286) failed
[  514.494746][ T9077] usb 2-1: config 220 has an invalid interface number: 76 but max is 2
[  514.503666][ T5843] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  514.512206][ T9077] usb 2-1: config 220 has an invalid descriptor of length 69, skipping remainder of the config
[  514.523978][ T9077] usb 2-1: config 220 has no interface number 2
[  514.530365][ T9077] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  514.544660][ T9077] usb 2-1: config 220 interface 0 has no altsetting 0
[  514.551682][ T9077] usb 2-1: config 220 interface 76 has no altsetting 0
[  514.567391][ T9077] usb 2-1: config 220 interface 1 has no altsetting 0
[  514.578113][ T9077] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  514.590437][ T9077] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  514.604455][ T9077] usb 2-1: Product: syz
[  514.608708][ T9077] usb 2-1: Manufacturer: syz
[  514.618616][ T9077] usb 2-1: SerialNumber: syz
[  514.703959][ T5843] usb 5-1: Using ep0 maxpacket: 8
[  514.717990][ T5843] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  514.730798][ T5843] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  514.758066][ T5843] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  514.782953][ T5843] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  514.839828][ T5843] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  514.873306][ T5843] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  514.914397][ T9077] uvcvideo 2-1:220.1: Unknown video format 448b07f5-fe05-ffff-ffff-030000ffffff
[  514.942555][ T9077] usb 2-1: Found UVC 7.01 device syz (8086:0b07)
[  514.958446][ T9077] usb 2-1: No valid video chain found.
[  514.975128][ T9077] usb 2-1: selecting invalid altsetting 0
[  514.991072][ T4972] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  515.034926][ T9077] usb 2-1: selecting invalid altsetting 0
[  515.051147][ T9077] usbtest: probe of 2-1:220.1 failed with error -22
[  515.078740][ T9077] usb 2-1: USB disconnect, device number 19
[  515.158249][ T5843] usb 5-1: GET_CAPABILITIES returned 0
[  515.175822][ T5843] usbtmc 5-1:16.0: can't read capabilities
[  515.255922][ T4972] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  515.354415][ T4972] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  515.419337][ T9077] usb 5-1: USB disconnect, device number 8
[  515.700365][ T4972] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  516.593531][ T5792] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  516.620060][ T5792] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  516.636116][ T5792] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  516.653403][ T5792] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  516.671167][ T5792] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  516.681980][ T5792] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  516.704348][T10171] kernel profiling enabled (shift: 0)
[  517.816842][ T4972] tipc: Disabling bearer <eth:geneve1>
[  517.911826][T10176] loop1: detected capacity change from 0 to 4096
[  517.925584][ T4972] tipc: Left network mode
[  517.953715][T10176] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  517.984596][T10166] lo speed is unknown, defaulting to 1000
[  518.159523][T10176] ntfs: volume version 3.1.
[  518.750769][T10171] syz.4.1184: vmalloc error: size 654311424, failed to allocated page array size 1277952, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz4,mems_allowed=0-1
[  518.797493][T10171] CPU: 1 PID: 10171 Comm: syz.4.1184 Not tainted syzkaller #0
[  518.805058][T10171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  518.815229][T10171] Call Trace:
[  518.818575][T10171]  <TASK>
[  518.821571][T10171]  dump_stack_lvl+0x18c/0x250
[  518.826418][T10171]  ? show_regs_print_info+0x20/0x20
[  518.831919][T10171]  ? load_image+0x420/0x420
[  518.836539][T10171]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  518.843117][T10171]  ? cpuset_print_current_mems_allowed+0x2e7/0x360
[  518.849709][T10171]  warn_alloc+0x246/0x340
[  518.854447][T10171]  ? zone_watermark_ok_safe+0x230/0x230
[  518.860774][T10171]  ? _raw_spin_unlock+0x28/0x40
[  518.865830][T10171]  __vmalloc_node_range+0x661/0x1320
[  518.871882][T10171]  ? free_vm_area+0x50/0x50
[  518.877046][T10171]  ? alloc_pages+0x2ff/0x740
[  518.882097][T10171]  ? rcu_is_watching+0x15/0xb0
[  518.888886][T10171]  ? profile_init+0xee/0x130
[  518.895255][T10171]  vzalloc+0x79/0x90
[  518.899852][T10171]  ? profile_init+0xee/0x130
[  518.904548][T10171]  profile_init+0xee/0x130
[  518.910035][T10171]  profiling_store+0x5e/0xc0
[  518.914940][T10171]  ? sysfs_kf_read+0x360/0x360
[  518.919855][T10171]  kernfs_fop_write_iter+0x3a4/0x520
[  518.925249][T10171]  do_iter_write+0x747/0xc50
[  518.930036][T10171]  ? vfs_iter_write+0xa0/0xa0
[  518.934899][T10171]  ? __asan_memset+0x22/0x40
[  518.939739][T10171]  ? iov_iter_bvec+0xd4/0x1b0
[  518.944532][T10171]  ? vfs_iter_write+0x6e/0xa0
[  518.949382][T10171]  iter_file_splice_write+0x6b6/0xcf0
[  518.954886][T10171]  ? splice_from_pipe+0x180/0x180
[  518.960352][T10171]  ? splice_shrink_spd+0xc0/0xc0
[  518.965487][T10171]  ? common_file_perm+0x198/0x1f0
[  518.970785][T10171]  ? splice_from_pipe+0x180/0x180
[  518.976062][T10171]  direct_splice_actor+0xe8/0x130
[  518.981590][T10171]  splice_direct_to_actor+0x30b/0x8e0
[  518.987107][T10171]  ? direct_file_splice_eof+0xb0/0xb0
[  518.992955][T10171]  ? warn_unsupported+0xc0/0xc0
[  518.997876][T10171]  ? fsnotify_perm+0x5d/0x5e0
[  519.002647][T10171]  ? security_file_permission+0x79/0xa0
[  519.008544][T10171]  do_splice_direct+0x1d5/0x2f0
[  519.013476][T10171]  ? splice_direct_to_actor+0x8e0/0x8e0
[  519.019175][T10171]  ? rcu_read_lock_any_held+0xb4/0x140
[  519.024810][T10171]  ? do_splice_direct+0x2f0/0x2f0
[  519.030388][T10171]  vfs_copy_file_range+0xb7d/0x1590
[  519.035724][T10171]  ? generic_copy_file_range+0x1e0/0x1e0
[  519.041635][T10171]  ? __might_fault+0xaa/0x120
[  519.046488][T10171]  ? __might_fault+0xc6/0x120
[  519.051491][T10171]  ? __might_fault+0xaa/0x120
[  519.056255][T10171]  __se_sys_copy_file_range+0x324/0x470
[  519.061935][T10171]  ? __x64_sys_copy_file_range+0xf0/0xf0
[  519.067650][T10171]  ? __x64_sys_copy_file_range+0x21/0xf0
[  519.073375][T10171]  do_syscall_64+0x55/0xb0
[  519.078046][T10171]  ? clear_bhb_loop+0x40/0x90
[  519.082911][T10171]  ? clear_bhb_loop+0x40/0x90
[  519.087767][T10171]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  519.093757][T10171] RIP: 0033:0x7f0c4b59de99
[  519.098258][T10171] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  519.118465][T10171] RSP: 002b:00007f0c4c4fb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000146
[  519.127131][T10171] RAX: ffffffffffffffda RBX: 00007f0c4b825fa0 RCX: 00007f0c4b59de99
[  519.135172][T10171] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000003
[  519.143385][T10171] RBP: 00007f0c4b633eaf R08: 0000000000000002 R09: 0000000000000000
[  519.151420][T10171] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000
[  519.159467][T10171] R13: 00007f0c4b826038 R14: 00007f0c4b825fa0 R15: 00007ffce2933808
[  519.167614][T10171]  </TASK>
[  519.189304][T10171] Mem-Info:
[  519.193016][T10171] active_anon:6965 inactive_anon:0 isolated_anon:0
[  519.193016][T10171]  active_file:11022 inactive_file:40465 isolated_file:0
[  519.193016][T10171]  unevictable:768 dirty:189 writeback:0
[  519.193016][T10171]  slab_reclaimable:11063 slab_unreclaimable:94568
[  519.193016][T10171]  mapped:25342 shmem:1883 pagetables:655
[  519.193016][T10171]  sec_pagetables:0 bounce:0
[  519.193016][T10171]  kernel_misc_reclaimable:0
[  519.193016][T10171]  free:1330542 free_pcp:8707 free_cma:0
[  519.240035][ T5792] Bluetooth: hci1: command tx timeout
[  519.246965][T10171] Node 0 active_anon:27860kB inactive_anon:0kB active_file:44088kB inactive_file:161656kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:101368kB dirty:756kB writeback:0kB shmem:5996kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11000kB pagetables:2620kB sec_pagetables:0kB all_unreclaimable? no
[  519.280145][T10171] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  519.361518][T10171] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  519.620378][T10171] lowmem_reserve[]: 0 2521 2522 2522 2522
[  519.679926][T10171] Node 0 DMA32 free:1399796kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:37468kB inactive_anon:0kB active_file:44088kB inactive_file:160856kB unevictable:1536kB writepending:700kB present:3129332kB managed:2586840kB mlocked:0kB bounce:0kB free_pcp:21268kB local_pcp:16496kB free_cma:0kB
[  520.078568][T10171] lowmem_reserve[]: 0 0 0 0 0
[  520.187111][T10171] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:836kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  520.451578][T10166] chnl_net:caif_netlink_parms(): no params data found
[  520.473259][T10171] lowmem_reserve[]: 0 0 0 0 0
[  520.502140][T10171] Node 1 Normal free:3895924kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:17536kB local_pcp:9280kB free_cma:0kB
[  520.592403][T10171] lowmem_reserve[]: 0 0 0 0 0
[  520.597401][T10171] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  520.634031][T10171] Node 0 DMA32: 619*4kB (UME) 127*8kB (UME) 638*16kB (UME) 420*32kB (UME) 247*64kB (UME) 67*128kB (UM) 43*256kB (UME) 22*512kB (ME) 4*1024kB (ME) 4*2048kB (ME) 326*4096kB (UM) = 1421380kB
[  520.672499][T10171] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  520.704724][T10171] Node 1 Normal: 251*4kB (UME) 63*8kB (UME) 55*16kB (UME) 179*32kB (UME) 35*64kB (UE) 12*128kB (UME) 2*256kB (U) 5*512kB (UM) 2*1024kB (UE) 2*2048kB (UE) 946*4096kB (M) = 3895924kB
[  520.754421][T10171] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  520.789881][T10171] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  520.832447][T10171] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  520.871031][T10171] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  520.892424][T10171] 52797 total pagecache pages
[  520.902469][T10171] 0 pages in swap cache
[  520.912433][T10171] Free swap  = 124996kB
[  520.932740][T10171] Total swap = 124996kB
[  520.952498][T10171] 2097051 pages RAM
[  520.964340][T10171] 0 pages HighMem/MovableOnly
[  520.980751][T10171] 416955 pages reserved
[  521.006220][T10171] 0 pages cma reserved
[  521.283486][ T5792] Bluetooth: hci1: command tx timeout
[  521.495592][T10166] bridge0: port 1(bridge_slave_0) entered blocking state
[  521.522481][T10166] bridge0: port 1(bridge_slave_0) entered disabled state
[  521.529830][T10166] bridge_slave_0: entered allmulticast mode
[  521.553966][T10166] bridge_slave_0: entered promiscuous mode
[  521.988432][T10166] bridge0: port 2(bridge_slave_1) entered blocking state
[  522.006238][T10219] loop3: detected capacity change from 0 to 32768
[  522.016573][T10166] bridge0: port 2(bridge_slave_1) entered disabled state
[  522.044689][T10166] bridge_slave_1: entered allmulticast mode
[  522.055573][T10166] bridge_slave_1: entered promiscuous mode
[  522.117388][T10219] JBD2: Ignoring recovery information on journal
[  522.215871][T10166] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  522.295143][T10219] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  522.304490][T10166] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  522.386243][T10230] kvm: kvm [10229]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010006) = 0x5
[  522.424803][T10234] loop4: detected capacity change from 0 to 256
[  522.799629][T10166] team0: Port device team_slave_0 added
[  522.842709][T10237] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3)
[  522.849435][T10237] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  522.860776][T10166] team0: Port device team_slave_1 added
[  522.879770][T10237] vhci_hcd vhci_hcd.0: Device attached
[  522.986196][ T5779] ocfs2: Unmounting device (7,3) on (node local)
[  523.072575][ T5819] vhci_hcd: vhci_device speed not set
[  523.122570][    T8] usb 2-1: new low-speed USB device number 20 using dummy_hcd
[  523.164161][ T5819] usb 35-1: new full-speed USB device number 4 using vhci_hcd
[  523.257348][T10166] batman_adv: batadv0: Adding interface: batadv_slave_0
[  523.283357][T10166] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  523.328484][T10166] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  523.346829][    T8] usb 2-1: config 0 has no interfaces?
[  523.366105][    T8] usb 2-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e
[  523.376697][ T5792] Bluetooth: hci1: command tx timeout
[  523.398929][ T4972] hsr_slave_0: left promiscuous mode
[  523.402558][    T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  523.435057][    T8] usb 2-1: config 0 descriptor??
[  523.538382][ T4972] hsr_slave_1: left promiscuous mode
[  523.653475][ T4972] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  523.669383][ T4972] batman_adv: batadv0: Removing interface: batadv_slave_0
[  523.738374][ T4972] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  523.753059][T10254] siw: device registration error -23
[  523.779994][T10241] vhci_hcd: unknown pdu 2
[  523.781434][ T9077] usb 2-1: USB disconnect, device number 20
[  523.795278][ T4972] batman_adv: batadv0: Removing interface: batadv_slave_1
[  523.811074][   T67] vhci_hcd: stop threads
[  523.822726][   T67] vhci_hcd: release socket
[  523.835867][ T4972] bridge_slave_1: left allmulticast mode
[  523.841980][   T67] vhci_hcd: disconnect device
[  523.847137][ T4972] bridge_slave_1: left promiscuous mode
[  523.862399][ T5819] vhci_hcd: vhci_device speed not set
[  523.873876][ T4972] bridge0: port 2(bridge_slave_1) entered disabled state
[  523.911827][ T4972] bridge_slave_0: left allmulticast mode
[  523.942627][ T4972] bridge_slave_0: left promiscuous mode
[  523.967297][ T4972] bridge0: port 1(bridge_slave_0) entered disabled state
[  524.072501][ T4972] veth1_macvtap: left promiscuous mode
[  524.081866][ T4972] veth0_macvtap: left promiscuous mode
[  524.095641][ T4972] veth1_vlan: left promiscuous mode
[  524.107874][ T4972] veth0_vlan: left promiscuous mode
[  525.442418][ T5792] Bluetooth: hci1: command tx timeout
[  525.721167][ T4972] bond2 (unregistering): (slave veth0_to_bond): Releasing active interface
[  525.731913][ T4972] bond2 (unregistering): Released all slaves
[  526.137417][ T4972] bond1 (unregistering): Released all slaves
[  526.264950][T10289] loop1: detected capacity change from 0 to 128
[  526.348637][T10289] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  526.381458][T10289] ext4 filesystem being mounted at /315/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  526.579768][ T5776] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  527.840251][ T4972] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  527.935650][ T4972] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  528.495775][ T4972] bond0 (unregistering): Released all slaves
[  528.640658][T10166] batman_adv: batadv0: Adding interface: batadv_slave_1
[  528.648446][T10166] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  528.677836][T10166] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  528.899145][T10166] hsr_slave_0: entered promiscuous mode
[  528.931242][T10166] hsr_slave_1: entered promiscuous mode
[  528.978293][T10166] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  528.991689][T10310] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1213'.
[  528.998028][T10166] Cannot create hsr debugfs directory
[  529.819334][T10166] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  529.864384][T10166] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  529.890964][T10166] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  529.924219][T10332] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1220'.
[  529.944168][T10166] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  530.323580][T10343] netlink: 240 bytes leftover after parsing attributes in process `syz.4.1224'.
[  530.343351][T10166] 8021q: adding VLAN 0 to HW filter on device bond0
[  530.439417][T10166] 8021q: adding VLAN 0 to HW filter on device team0
[  530.587510][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  530.596570][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  531.145527][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  531.153392][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  531.204443][T10352] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1225'.
[  531.836531][ T6638] Process accounting resumed
[  532.986333][T10166] 8021q: adding VLAN 0 to HW filter on device batadv0
[  534.699022][T10166] veth0_vlan: entered promiscuous mode
[  534.728654][T10166] veth1_vlan: entered promiscuous mode
[  534.871500][T10166] veth0_macvtap: entered promiscuous mode
[  534.918111][T10166] veth1_macvtap: entered promiscuous mode
[  534.930149][T10424] loop4: detected capacity change from 0 to 4096
[  534.981181][T10166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  535.021267][T10166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  535.043873][T10166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  535.099762][T10166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  535.142457][T10166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  535.168235][T10166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  535.182551][T10424] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  535.204322][T10166] batman_adv: batadv0: Interface activated: batadv_slave_0
[  535.271545][T10166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  535.305727][T10424] ntfs3: loop4: Failed to load $Extend (-22).
[  535.317581][T10424] ntfs3: loop4: Failed to initialize $Extend.
[  535.323992][T10166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  535.352800][T10166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  535.369448][T10166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  535.396860][T10166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  535.411344][T10166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  535.437550][T10166] batman_adv: batadv0: Interface activated: batadv_slave_1
[  535.475958][T10166] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  535.509173][T10166] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  535.545830][T10166] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  535.565719][T10166] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  536.011753][T10436] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1250'.
[  536.549767][   T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  536.610092][   T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  536.775676][ T5774] Process accounting resumed
[  537.486034][ T1329] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  537.534206][ T1329] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  539.013203][T10468] siw: device registration error -23
[  539.868491][T10495] input: syz1 as /devices/virtual/input/input12
[  540.067269][T10499] loop1: detected capacity change from 0 to 256
[  540.116922][T10499] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  540.222753][   T28] audit: type=1800 audit(1785221186.982:11): pid=10499 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1268" name="file1" dev="loop1" ino=1048636 res=0 errno=0
[  540.349213][T10503] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779264)
[  540.389375][   T28] audit: type=1800 audit(1785221186.982:12): pid=10499 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1268" name="file1" dev="loop1" ino=1048636 res=0 errno=0
[  540.429640][T10503] FAT-fs (loop1): Filesystem has been set read-only
[  540.460894][T10503] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008)
[  540.620781][T10503] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008)
[  541.128459][T10507] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1269'.
[  541.197973][T10479] loop4: detected capacity change from 0 to 32768
[  541.307184][T10479] JBD2: Ignoring recovery information on journal
[  541.427038][T10514] loop5: detected capacity change from 0 to 64
[  541.519126][T10479] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  541.867332][ T5822] Process accounting resumed
[  542.798273][T10531] loop3: detected capacity change from 0 to 512
[  542.799805][ T8976] ocfs2: Unmounting device (7,4) on (node local)
[  542.813462][T10531] EXT4-fs: Ignoring removed nobh option
[  542.838651][T10531] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  542.903907][T10531] EXT4-fs (loop3): 1 truncate cleaned up
[  542.911241][T10531] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  542.912671][T10435] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  542.961377][T10535] loop5: detected capacity change from 0 to 1024
[  543.039800][ T5779] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  543.109802][T10535] syz.5.1274: attempt to access beyond end of device
[  543.109802][T10535] loop5: rw=0, sector=393222, nr_sectors = 2 limit=1024
[  543.133146][T10435] usb 2-1: Using ep0 maxpacket: 16
[  543.147051][T10535] syz.5.1274: attempt to access beyond end of device
[  543.147051][T10535] loop5: rw=2049, sector=5778, nr_sectors = 2 limit=1024
[  543.161783][T10435] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  543.161815][T10435] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  543.168395][T10435] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  543.203051][T10435] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  543.211165][T10435] usb 2-1: Product: syz
[  543.226856][T10535] Buffer I/O error on dev loop5, logical block 2889, lost async page write
[  543.244348][T10435] usb 2-1: Manufacturer: syz
[  543.249050][T10435] usb 2-1: SerialNumber: syz
[  543.274629][T10535] syz.5.1274: attempt to access beyond end of device
[  543.274629][T10535] loop5: rw=2049, sector=393216, nr_sectors = 2 limit=1024
[  543.343195][T10535] Buffer I/O error on dev loop5, logical block 196608, lost async page write
[  543.364149][T10535] syz.5.1274: attempt to access beyond end of device
[  543.364149][T10535] loop5: rw=2049, sector=393218, nr_sectors = 2 limit=1024
[  543.378918][T10535] Buffer I/O error on dev loop5, logical block 196609, lost async page write
[  543.390196][T10535] syz.5.1274: attempt to access beyond end of device
[  543.390196][T10535] loop5: rw=2049, sector=393220, nr_sectors = 2 limit=1024
[  543.405486][T10535] Buffer I/O error on dev loop5, logical block 196610, lost async page write
[  543.449451][T10539] syz.5.1274: attempt to access beyond end of device
[  543.449451][T10539] loop5: rw=2049, sector=5778, nr_sectors = 2 limit=1024
[  543.492544][T10539] Buffer I/O error on dev loop5, logical block 2889, lost async page write
[  543.545340][T10435] usb 2-1: 0:2 : does not exist
[  543.575387][T10435] usb 2-1: 5:0: failed to get current value for ch 0 (-22)
[  543.670466][T10435] usb 2-1: USB disconnect, device number 21
[  543.773779][ T5794] udevd[5794]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  544.211573][T10556] loop3: detected capacity change from 0 to 2048
[  544.312743][T10560] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  544.531033][T10564] loop1: detected capacity change from 0 to 512
[  544.630703][T10564] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  544.698535][T10560] NILFS (loop3): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  544.757170][T10560] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=4)
[  544.841777][T10551] loop5: detected capacity change from 0 to 32768
[  544.849055][T10560] Remounting filesystem read-only
[  544.854549][   T42] NILFS (loop3): discard dirty page: offset=4096, ino=6
[  544.861597][   T42] NILFS (loop3): discard dirty block: blocknr=39, size=1024
[  544.943306][   T42] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[  544.962998][T10551] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  544.987480][   T42] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[  545.040378][   T42] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[  545.076842][   T42] NILFS (loop3): discard dirty page: offset=0, ino=3
[  545.078799][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  545.087083][   T42] NILFS (loop3): discard dirty block: blocknr=42, size=1024
[  545.124373][   T42] NILFS (loop3): discard dirty block: blocknr=43, size=1024
[  545.132109][   T42] NILFS (loop3): discard dirty block: blocknr=44, size=1024
[  545.147912][   T42] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[  545.173300][   T42] NILFS (loop3): discard dirty page: offset=65536, ino=3
[  545.204666][   T42] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[  545.237938][   T42] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[  545.355426][   T42] NILFS (loop3): discard dirty block: blocknr=0, size=1024
[  545.533224][   T42] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[  545.752631][   T42] NILFS (loop3): discard dirty page: offset=196608, ino=3
[  545.962189][   T42] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[  546.068969][   T42] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[  546.152492][   T42] NILFS (loop3): discard dirty block: blocknr=49, size=1024
[  546.183656][   T42] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[  546.217318][   T42] NILFS (loop3): discard dirty page: offset=0, ino=18
[  546.257035][   T42] NILFS (loop3): discard dirty block: blocknr=0, size=1024
[  546.301130][ T5774] Process accounting resumed
[  546.352092][   T42] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[  546.481566][   T42] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[  546.666596][   T42] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[  546.796872][   T42] NILFS (loop3): discard dirty page: offset=0, ino=2
[  546.919637][   T42] NILFS (loop3): discard dirty block: blocknr=18, size=1024
[  546.987620][   T42] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[  546.996750][   T42] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[  547.006124][   T42] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[  547.026055][ T5779] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer
[  547.086263][T10166] ocfs2: Unmounting device (7,5) on (node local)
[  547.093789][ T5779] NILFS (loop3): discard dirty page: offset=0, ino=6
[  547.100614][ T5779] NILFS (loop3): discard dirty block: blocknr=35, size=1024
[  547.152092][ T5779] NILFS (loop3): discard dirty block: blocknr=36, size=1024
[  547.188504][ T5779] NILFS (loop3): discard dirty block: blocknr=37, size=1024
[  547.234048][ T5779] NILFS (loop3): discard dirty block: blocknr=38, size=1024
[  547.268055][ T5779] NILFS (loop3): discard dirty page: offset=0, ino=5
[  547.286775][ T5779] NILFS (loop3): discard dirty block: blocknr=41, size=1024
[  547.307708][ T5779] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[  547.332151][ T5779] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[  547.382606][ T5779] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[  547.402536][ T5779] NILFS (loop3): discard dirty page: offset=0, ino=4
[  547.409663][ T5779] NILFS (loop3): discard dirty block: blocknr=40, size=1024
[  547.453652][ T5779] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[  547.472712][ T5779] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[  547.481659][ T5779] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[  547.555059][ T5774] Process accounting resumed
[  548.382750][T10604] loop3: detected capacity change from 0 to 2048
[  548.454978][T10604] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  550.619760][T10625] loop5: detected capacity change from 0 to 512
[  550.718632][T10625] EXT4-fs error (device loop5): ext4_get_branch:178: inode #11: block 4294967295: comm syz.5.1295: invalid block
[  550.741984][T10625] EXT4-fs (loop5): Remounting filesystem read-only
[  550.762931][T10625] EXT4-fs (loop5): 2 truncates cleaned up
[  550.770137][T10625] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  550.849510][T10166] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  550.936395][T10631] loop3: detected capacity change from 0 to 4096
[  550.955965][T10631] EXT4-fs: inline encryption not supported
[  551.022629][T10631] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  551.048140][T10631] EXT4-fs (loop3): Test dummy encryption mode enabled
[  551.061242][T10641] loop5: detected capacity change from 0 to 256
[  551.101257][T10641] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  551.126782][T10631] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0002]
[  551.150115][T10641] FAT-fs (loop5): error, invalid FAT chain (i_pos 196, last_block 8200)
[  551.163004][T10641] FAT-fs (loop5): Filesystem has been set read-only
[  551.175207][T10641] FAT-fs (loop5): error, invalid FAT chain (i_pos 196, last_block 8200)
[  551.195839][T10631] System zones: 0-5
[  551.272657][T10631] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  551.593042][T10631] fscrypt (loop3): Error allocating 'xts(aes)' transform: -4
[  551.725467][ T5779] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  551.808406][T10659] loop5: detected capacity change from 0 to 4096
[  552.293896][T10670] loop1: detected capacity change from 0 to 4096
[  553.110968][T10676] use of bytesused == 0 is deprecated and will be removed in the future,
[  553.187456][T10676] use the actual size instead.
[  553.590330][T10684] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1311'.
[  553.728576][T10687] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1312'.
[  555.052843][T10701] loop1: detected capacity change from 0 to 4096
[  555.142203][T10707] loop5: detected capacity change from 0 to 256
[  555.219523][    T9] Process accounting resumed
[  555.268935][T10711] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  555.769195][T10678] loop3: detected capacity change from 0 to 32768
[  556.031506][T10678] BTRFS: device fsid 3a375e4e-b156-4d76-a2ad-16e198ce1409 devid 1 transid 8 /dev/loop3 scanned by syz.3.1309 (10678)
[  556.175683][T10678] BTRFS info (device loop3): first mount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409
[  556.236414][T10678] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm
[  556.270262][T10678] BTRFS info (device loop3): using free space tree
[  556.293317][T10678] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR
[  556.294228][T10678] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR
[  556.347062][T10678] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR
[  556.371408][T10723] loop5: detected capacity change from 0 to 256
[  556.393579][T10678] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR
[  556.396378][T10678] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR
[  556.449482][T10678] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR
[  556.486685][T10723] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  556.509611][T10719] loop4: detected capacity change from 0 to 4096
[  556.523478][T10678] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR
[  556.533282][T10678] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR
[  556.581897][T10678] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR
[  556.673269][   T28] audit: type=1800 audit(1785221203.442:13): pid=10723 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1319" name="file1" dev="loop5" ino=1048639 res=0 errno=0
[  556.689270][T10678] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR
[  556.772605][T10735] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  556.784830][T10678] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR
[  556.810020][   T28] audit: type=1800 audit(1785221203.492:14): pid=10723 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1319" name="file1" dev="loop5" ino=1048639 res=0 errno=0
[  556.849655][T10678] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR
[  556.858065][T10678] BTRFS error (device loop3): open_ctree failed: -12
[  556.906318][T10740] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779264)
[  556.914968][T10740] FAT-fs (loop5): Filesystem has been set read-only
[  556.922108][T10740] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008)
[  556.986059][T10740] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008)
[  557.621027][T10746] loop3: detected capacity change from 0 to 8192
[  557.678236][T10746] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  557.736847][T10746] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal
[  557.782970][T10746] REISERFS (device loop3): using ordered data mode
[  557.820222][T10746] reiserfs: using flush barriers
[  557.872890][T10746] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  557.945063][T10746] REISERFS (device loop3): checking transaction log (loop3)
[  557.982530][T10435] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  558.024731][T10746] REISERFS (device loop3): Using r5 hash to sort names
[  558.053828][T10746] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  558.179345][T10757] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1326'.
[  558.204498][T10435] usb 2-1: config 0 has too many interfaces: 253, using maximum allowed: 32
[  558.281185][T10435] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 253
[  558.477831][T10435] usb 2-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac
[  558.701177][T10435] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  558.836196][T10435] usb 2-1: Product: syz
[  558.850967][T10435] usb 2-1: Manufacturer: syz
[  558.891346][T10435] usb 2-1: SerialNumber: syz
[  558.904278][T10435] usb 2-1: config 0 descriptor??
[  558.944990][T10435] gspca_main: sunplus-2.14.0 probing 055f:c630
[  559.239973][ T5781] Process accounting resumed
[  559.511093][T10435] gspca_sunplus: reg_r err -110
[  559.608990][T10435] sunplus: probe of 2-1:0.0 failed with error -110
[  560.110503][ T3508] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  560.315902][ T3508] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  560.495331][ T3508] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  560.532033][T10771] loop5: detected capacity change from 0 to 4096
[  560.694300][ T3508] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  560.834882][ T6638] Process accounting resumed
[  561.568849][ T6638] usb 2-1: USB disconnect, device number 22
[  561.957282][   T28] audit: type=1800 audit(1785221208.732:15): pid=10782 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1332" name="file1" dev="loop5" ino=30 res=0 errno=0
[  562.185401][ T6638] usb 2-1: new full-speed USB device number 23 using dummy_hcd
[  562.432120][ T6638] usb 2-1: config 0 has an invalid interface number: 41 but max is 0
[  562.476480][ T6638] usb 2-1: config 0 has no interface number 0
[  562.545392][T10798] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1336'.
[  562.685005][ T6638] usb 2-1: config 0 interface 41 has no altsetting 0
[  562.765483][ T5782] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  562.784660][ T5782] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  562.801417][ T5782] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  562.832014][ T5782] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  562.850941][ T5782] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  562.878137][ T5782] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  563.072512][ T6638] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  563.114696][ T6638] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  563.168077][ T6638] usb 2-1: Product: syz
[  563.182635][ T6638] usb 2-1: Manufacturer: syz
[  563.222385][ T6638] usb 2-1: SerialNumber: syz
[  563.297341][ T6638] usb 2-1: config 0 descriptor??
[  563.342542][T10795] lo speed is unknown, defaulting to 1000
[  563.380726][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  563.387362][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  563.491559][ T5774] Process accounting resumed
[  564.238651][T10811] loop3: detected capacity change from 0 to 64
[  564.541676][ T6638] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffb9
[  564.618191][ T6638] CoreChips: probe of 2-1:0.41 failed with error -71
[  564.655330][ T6638] usb 2-1: USB disconnect, device number 23
[  564.879231][ T5774] Process accounting resumed
[  564.962622][ T5782] Bluetooth: hci2: command tx timeout
[  565.919750][ T5774] Process accounting resumed
[  566.642107][ T5774] Process accounting resumed
[  566.664629][T10831] loop3: detected capacity change from 0 to 4096
[  567.042925][ T5782] Bluetooth: hci2: command tx timeout
[  567.221730][T10795] chnl_net:caif_netlink_parms(): no params data found
[  567.342414][ T5822] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  567.582427][ T5822] usb 6-1: Using ep0 maxpacket: 32
[  567.657313][ T5822] usb 6-1: config index 0 descriptor too short (expected 35577, got 27)
[  567.850911][ T5822] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  568.078571][ T5822] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92
[  568.217421][ T5822] usb 6-1: config 1 has no interface number 0
[  568.246414][ T5822] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  568.312536][ T5822] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  568.411000][ T5822] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  568.427915][ T5822] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  568.449312][ T5822] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found
[  568.507766][T10864] loop3: detected capacity change from 0 to 64
[  568.564402][ T3508] hsr_slave_0: left promiscuous mode
[  568.574303][ T3508] hsr_slave_1: left promiscuous mode
[  568.609053][ T3508] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  568.643797][T10866] loop1: detected capacity change from 0 to 4096
[  568.650246][ T3508] batman_adv: batadv0: Removing interface: batadv_slave_0
[  568.685072][T10866] EXT4-fs: inline encryption not supported
[  568.703338][T10866] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  568.720137][ T3508] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  568.730525][ T5822] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached
[  568.738095][T10866] EXT4-fs (loop1): Test dummy encryption mode enabled
[  568.752387][ T3508] batman_adv: batadv0: Removing interface: batadv_slave_1
[  568.760098][T10866] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0002]
[  568.790454][ T3508] bridge_slave_1: left allmulticast mode
[  568.805799][T10866] System zones: 0-5
[  568.811802][ T3508] bridge_slave_1: left promiscuous mode
[  568.836303][ T3508] bridge0: port 2(bridge_slave_1) entered disabled state
[  568.845693][T10866] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  568.890193][ T3508] bridge_slave_0: left allmulticast mode
[  568.912353][ T3508] bridge_slave_0: left promiscuous mode
[  568.918573][ T3508] bridge0: port 1(bridge_slave_0) entered disabled state
[  568.999455][T10866] fscrypt: AES-256-XTS using implementation "xts-aes-aesni"
[  569.123221][ T5782] Bluetooth: hci2: command tx timeout
[  569.130278][ T3508] veth1_macvtap: left promiscuous mode
[  569.137446][T10874] syz.3.1353 uses obsolete (PF_INET,SOCK_PACKET)
[  569.144917][ T3508] veth0_macvtap: left promiscuous mode
[  569.150778][ T3508] veth1_vlan: left promiscuous mode
[  569.157853][ T3508] veth0_vlan: left promiscuous mode
[  569.251105][ T5843] usb 6-1: USB disconnect, device number 2
[  569.267353][ T5843] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected
[  569.855609][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  570.100963][T10889] loop1: detected capacity change from 0 to 512
[  570.159419][T10889] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  570.254726][T10889] EXT4-fs error (device loop1): xattr_find_entry:337: inode #15: comm syz.1.1354: corrupted xattr entries
[  570.428261][T10889] EXT4-fs (loop1): 1 truncate cleaned up
[  570.715584][T10889] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  570.983534][T10889] EXT4-fs (loop1): shut down requested (1)
[  571.081009][T10897] loop5: detected capacity change from 0 to 1024
[  571.090296][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  571.203116][ T5782] Bluetooth: hci2: command tx timeout
[  571.214080][T10897] hfsplus: found bad thread record in catalog
[  571.257610][T10897] hfsplus: found bad thread record in catalog
[  571.310750][T10900] hfsplus: bad catalog folder thread
[  571.379043][ T4972] hfsplus: found bad thread record in catalog
[  572.223180][T10909] loop5: detected capacity change from 0 to 32768
[  572.340357][ T3508] team0 (unregistering): Port device team_slave_1 removed
[  572.365843][T10909] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  572.460359][T10909] XFS (loop5): Ending clean mount
[  572.520524][ T3508] team0 (unregistering): Port device team_slave_0 removed
[  572.641469][ T3508] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  572.669690][T10166] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  572.738537][ T3508] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  573.260686][T10923] loop5: detected capacity change from 0 to 512
[  573.314774][T10923] EXT4-fs error (device loop5): ext4_orphan_get:1404: inode #15: comm syz.5.1364: iget: bad i_size value: 38620345925642
[  573.336928][T10923] EXT4-fs error (device loop5): ext4_orphan_get:1409: comm syz.5.1364: couldn't read orphan inode 15 (err -117)
[  573.379904][T10923] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  573.468914][ T1329] EXT4-fs error (device loop5): ext4_validate_block_bitmap:430: comm kworker/u4:6: bg 0: block 5: invalid block bitmap
[  573.508886][ T1329] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28
[  573.534473][ T1329] EXT4-fs (loop5): This should not happen!! Data will be lost
[  573.534473][ T1329] 
[  573.546344][ T1329] EXT4-fs (loop5): Total free blocks count 0
[  573.552857][ T1329] EXT4-fs (loop5): Free/Dirty block details
[  573.559458][ T1329] EXT4-fs (loop5): free_blocks=0
[  573.567656][ T1329] EXT4-fs (loop5): dirty_blocks=1
[  573.574375][ T1329] EXT4-fs (loop5): Block reservation details
[  573.580530][ T1329] EXT4-fs (loop5): i_reserved_data_blocks=1
[  573.600282][T10166] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  573.986343][ T3508] bond0 (unregistering): Released all slaves
[  574.722201][T10902] pimreg1: tun_chr_ioctl cmd 1074025677
[  574.728340][T10902] pimreg1: linktype set to 825
[  574.868377][T10795] bridge0: port 1(bridge_slave_0) entered blocking state
[  574.898854][T10934] loop3: detected capacity change from 0 to 512
[  574.914956][T10795] bridge0: port 1(bridge_slave_0) entered disabled state
[  574.927330][T10795] bridge_slave_0: entered allmulticast mode
[  574.937892][T10795] bridge_slave_0: entered promiscuous mode
[  574.950775][T10795] bridge0: port 2(bridge_slave_1) entered blocking state
[  574.993086][T10934] EXT4-fs (loop3): Test dummy encryption mode enabled
[  574.996213][T10795] bridge0: port 2(bridge_slave_1) entered disabled state
[  574.999972][T10934] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  575.073740][T10795] bridge_slave_1: entered allmulticast mode
[  575.110628][T10795] bridge_slave_1: entered promiscuous mode
[  575.124687][T10934] EXT4-fs error (device loop3): ext4_iget_extra_inode:4740: inode #17: comm syz.3.1367: corrupted in-inode xattr: invalid ea_ino
[  575.238934][T10934] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.1367: couldn't read orphan inode 17 (err -117)
[  575.283756][T10934] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  575.337185][T10795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  575.370532][ T6638] kernel write not supported for file /94/attr/prev (pid: 6638 comm: kworker/0:6)
[  575.406935][T10795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  575.482764][T10934] EXT4-fs (loop3): shut down requested (1)
[  575.506761][T10934] EXT4-fs warning (device loop3): ext4_empty_dir:3156: inode #2: comm syz.3.1367: directory missing '..'
[  575.658316][T10795] team0: Port device team_slave_0 added
[  575.666506][ T5779] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  575.688423][T10795] team0: Port device team_slave_1 added
[  575.787092][T10795] batman_adv: batadv0: Adding interface: batadv_slave_0
[  575.819519][T10795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  575.917568][T10795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  575.977002][T10795] batman_adv: batadv0: Adding interface: batadv_slave_1
[  576.012369][T10795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  576.084347][T10795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  576.381590][T10795] hsr_slave_0: entered promiscuous mode
[  576.397708][T10795] hsr_slave_1: entered promiscuous mode
[  576.410438][T10795] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  576.468261][T10795] Cannot create hsr debugfs directory
[  577.175780][ T6638] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  577.372828][ T6638] usb 2-1: Using ep0 maxpacket: 8
[  577.380475][ T6638] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  577.412481][ T6638] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  577.452330][ T6638] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  577.479256][ T6638] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  577.532514][ T6638] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  577.541832][ T6638] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  577.818404][ T6638] usb 2-1: GET_CAPABILITIES returned 0
[  577.836651][T10795] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  577.842633][ T6638] usbtmc 2-1:16.0: can't read capabilities
[  577.864434][T10795] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  577.911323][T10795] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  577.954507][T10795] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  578.100277][ T5843] usb 2-1: USB disconnect, device number 24
[  578.127311][T10987] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  578.228752][T10795] 8021q: adding VLAN 0 to HW filter on device bond0
[  578.299051][T10795] 8021q: adding VLAN 0 to HW filter on device team0
[  578.346467][   T42] bridge0: port 1(bridge_slave_0) entered blocking state
[  578.353747][   T42] bridge0: port 1(bridge_slave_0) entered forwarding state
[  578.390364][ T3508] bridge0: port 2(bridge_slave_1) entered blocking state
[  578.397644][ T3508] bridge0: port 2(bridge_slave_1) entered forwarding state
[  580.156617][T10795] 8021q: adding VLAN 0 to HW filter on device batadv0
[  580.346433][T10991] loop5: detected capacity change from 0 to 40427
[  580.393210][T10991] F2FS-fs (loop5): Invalid SB checksum offset: 0
[  580.409151][T10991] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[  580.447271][T10991] F2FS-fs (loop5): invalid crc_offset: 1
[  580.851736][T10991] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0
[  580.876471][T10991] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  581.085719][T11040] loop3: detected capacity change from 0 to 8
[  581.140826][T11040] squashfs: Unknown parameter 'ÿÿ'
[  581.197059][ T5782] Bluetooth: hci3: Invalid handle: 0xff00 > 0x0eff
[  582.057427][T11049] loop3: detected capacity change from 0 to 1024
[  582.076527][T10795] veth0_vlan: entered promiscuous mode
[  582.126427][T11049] hfsplus: xattr exists yet
[  582.193340][T10795] veth1_vlan: entered promiscuous mode
[  582.336561][T10166] syz-executor: attempt to access beyond end of device
[  582.336561][T10166] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  582.414630][T10166] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  583.080961][T10795] veth0_macvtap: entered promiscuous mode
[  583.178043][T10795] veth1_macvtap: entered promiscuous mode
[  583.309278][T10795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  583.331216][T10795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  583.382626][T10795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  583.414136][T10795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  583.426384][T10795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  583.488540][T10795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  583.541863][T10795] batman_adv: batadv0: Interface activated: batadv_slave_0
[  583.659016][T10795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  583.732379][T10795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  583.759356][T10795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  583.781853][T10795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  583.793804][T11073] loop3: detected capacity change from 0 to 2048
[  583.801537][T10795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  583.815802][T10795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  583.828050][T10795] batman_adv: batadv0: Interface activated: batadv_slave_1
[  583.870853][T11073] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  583.889288][T10795] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  583.911227][T11073] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4
[  583.917034][T10795] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  583.952705][T10795] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  583.972229][T10795] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  584.002990][T11073] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  584.022496][ T7206] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  584.232558][ T7206] usb 2-1: Using ep0 maxpacket: 8
[  584.245260][ T7206] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  584.257580][ T7206] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  584.294853][ T7206] usb 2-1: Product: syz
[  584.299104][ T7206] usb 2-1: Manufacturer: syz
[  584.324540][ T4972] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  584.352893][ T7206] usb 2-1: SerialNumber: syz
[  584.373363][ T4972] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  584.394710][ T7206] usb 2-1: config 0 descriptor??
[  584.416009][ T7206] gspca_main: se401-2.14.0 probing 047d:5003
[  584.444380][T11080] loop5: detected capacity change from 0 to 512
[  584.475516][T11080] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  584.491214][   T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  584.508123][   T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  584.533223][T11080] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  584.593988][T11080] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002]
[  584.610748][T11080] System zones: 1-12
[  584.694605][T11080] EXT4-fs (loop5): 1 truncate cleaned up
[  584.760525][T11080] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  584.907275][T11093] loop3: detected capacity change from 0 to 512
[  585.004538][T11093] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  585.033411][ T7206] input: se401 as /devices/platform/dummy_hcd.1/usb2/2-1/input/input13
[  585.079984][T10166] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  585.314001][T11104] siw: device registration error -23
[  585.403891][ T5779] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  585.424083][ T5781] usb 2-1: USB disconnect, device number 25
[  586.197246][T10435] Process accounting resumed
[  586.916995][T10435] Process accounting resumed
[  587.157416][T11135] loop3: detected capacity change from 0 to 16
[  587.223516][T11135] erofs: (device loop3): mounted with root inode @ nid 36.
[  587.266242][T11135] erofs: (device loop3): z_erofs_readahead: readahead error at folio 3 @ nid 89
[  587.301889][T11135] syz.3.1408: attempt to access beyond end of device
[  587.301889][T11135] loop3: rw=524288, sector=34359738360, nr_sectors = 8 limit=16
[  587.347151][T11135] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -5 in[46, 4050] out[4096]
[  587.380994][   T28] audit: type=1800 audit(1785221234.152:16): pid=11135 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1408" name="file2" dev="loop3" ino=89 res=0 errno=0
[  587.636284][T11147] loop3: detected capacity change from 0 to 4096
[  587.651156][T11147] ntfs: (device loop3): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1.
[  587.745151][T11147] ntfs: volume version 3.1.
[  587.760082][T11147] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Corrupt directory.  Aborting lookup.
[  587.779241][T11147] ntfs: (device loop3): load_and_init_quota(): Failed to find inode number for $Quota.
[  587.790074][T11147] ntfs: (device loop3): load_system_files(): Failed to load $Quota.  Mounting read-only.  Run chkdsk.
[  587.814430][T11147] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Corrupt directory.  Aborting lookup.
[  587.846690][T11147] ntfs: (device loop3): load_and_init_usnjrnl(): Failed to find inode number for $UsnJrnl.
[  587.882050][T11147] ntfs: (device loop3): load_system_files(): Failed to load $UsnJrnl.  Will not be able to remount read-write.  Run chkdsk.
[  588.039055][T11154] loop6: detected capacity change from 0 to 128
[  588.065208][T11147] ntfs: (device loop3): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set cp865.  You might want to try to use the mount option nls=utf8.
[  588.092165][T11154] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256
[  588.125851][T11147] ntfs: (device loop3): ntfs_filldir(): Skipping unrepresentable inode 0x4.
[  588.152824][T11154] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  588.212454][ T7206] usb 6-1: new full-speed USB device number 3 using dummy_hcd
[  588.452422][ T7206] usb 6-1: not running at top speed; connect to a high speed hub
[  588.477315][ T7206] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[  588.505375][ T7206] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.00
[  588.550764][ T7206] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  588.594823][ T7206] garmin_gps 6-1:1.0: Garmin GPS usb/tty converter detected
[  588.637759][ T7206] usb 6-1: Garmin GPS usb/tty converter now attached to ttyUSB0
[  588.868520][ T5781] usb 6-1: USB disconnect, device number 3
[  588.903905][ T5781] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0
[  588.937592][T11169] loop3: detected capacity change from 0 to 4096
[  588.956486][ T5781] garmin_gps 6-1:1.0: device disconnected
[  588.995540][T11172] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  589.007953][T11169] NILFS error (device loop3): nilfs_bmap_lookup_at_level: broken bmap (inode number=6)
[  589.038293][T10435] usb 7-1: new low-speed USB device number 2 using dummy_hcd
[  589.067491][T11169] NILFS (loop3): mounting fs with errors
[  589.248466][T10435] usb 7-1: config 0 has an invalid interface number: 1 but max is 0
[  589.298819][T10435] usb 7-1: config 0 has no interface number 0
[  589.342611][T10435] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  589.411749][T10435] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[  589.476681][T10435] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  589.539580][T10435] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  589.736441][T10435] usb 7-1: config 0 descriptor??
[  589.745380][T11167] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[  589.882962][T10435] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  590.356951][T11174] loop1: detected capacity change from 0 to 131072
[  590.374129][T11174] F2FS-fs (loop1): Wrong CP boundary, start(512) end(1536) blocks(0)
[  590.382380][T11174] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  590.394414][T11174] F2FS-fs (loop1): invalid crc value
[  590.422953][T11174] F2FS-fs (loop1): Found nat_bits in checkpoint
[  590.455638][ T5781] usb 7-1: USB disconnect, device number 2
[  590.461603][    C1] iowarrior 7-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19
[  590.509476][T11174] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  590.516888][T11174] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  590.766899][T11195] loop5: detected capacity change from 0 to 2048
[  590.860760][T11195] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found
[  590.892342][T11195] UDF-fs: Scanning with blocksize 512 failed
[  590.991380][T11195] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  591.583587][ T5781] Process accounting resumed
[  592.596580][T11214] loop5: detected capacity change from 0 to 8192
[  592.653380][T11214] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  592.743121][T11214] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal
[  592.761856][T11215] loop3: detected capacity change from 0 to 32768
[  592.809638][T11214] REISERFS (device loop5): using ordered data mode
[  592.818604][T11215] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  592.847996][T11214] reiserfs: using flush barriers
[  592.894737][T11214] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  592.967344][T11215] XFS (loop3): Ending clean mount
[  593.003397][T11214] REISERFS (device loop5): checking transaction log (loop5)
[  593.056187][T11215] XFS (loop3): Quotacheck needed: Please wait.
[  593.289514][T11215] XFS (loop3): Quotacheck: Done.
[  593.493413][T11214] REISERFS (device loop5): Using tea hash to sort names
[  593.523629][T11214] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage.
[  593.544082][T10435] Process accounting resumed
[  594.353731][ T5779] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  594.450616][   T28] audit: type=1804 audit(1785221241.222:17): pid=11214 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.1426" name="/newroot/43/file6/file0" dev="loop5" ino=4 res=1 errno=0
[  596.020834][T11260] siw: device registration error -23
[  596.374188][T11268] loop3: detected capacity change from 0 to 4096
[  596.416931][T11268] NILFS (loop3): invalid segment: Checksum error in segment payload
[  596.464181][T11268] NILFS (loop3): trying rollback from an earlier position
[  596.528415][T11268] NILFS (loop3): recovery complete
[  596.540832][T11277] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  596.830466][ T7206] Process accounting resumed
[  597.760689][ T7206] Process accounting resumed
[  598.886050][ T5781] Process accounting resumed
[  599.849118][T11304] loop1: detected capacity change from 0 to 1024
[  600.587864][T11304] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  600.914262][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  600.989422][T11317] loop5: detected capacity change from 0 to 256
[  600.989736][T11315] loop3: detected capacity change from 0 to 512
[  601.050221][T11315] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  601.126185][T11315] EXT4-fs error (device loop3): ext4_orphan_get:1430: comm syz.3.1446: bad orphan inode 131083
[  601.150090][T11317] FAT-fs (loop5): Directory bread(block 64) failed
[  601.214906][T11317] FAT-fs (loop5): Directory bread(block 65) failed
[  601.244699][T11315] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  601.294004][T11317] FAT-fs (loop5): Directory bread(block 66) failed
[  601.300729][T11317] FAT-fs (loop5): Directory bread(block 67) failed
[  601.350066][T11317] FAT-fs (loop5): Directory bread(block 68) failed
[  601.367073][   T28] audit: type=1800 audit(1785221248.142:18): pid=11315 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1446" name="bus" dev="loop3" ino=18 res=0 errno=0
[  601.382597][T11317] FAT-fs (loop5): Directory bread(block 69) failed
[  601.429701][T11317] FAT-fs (loop5): Directory bread(block 70) failed
[  601.458818][T11317] FAT-fs (loop5): Directory bread(block 71) failed
[  601.472612][T11317] FAT-fs (loop5): Directory bread(block 72) failed
[  601.479245][T11317] FAT-fs (loop5): Directory bread(block 73) failed
[  601.479451][ T5781] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  601.685517][ T5781] usb 2-1: config 220 has an invalid interface number: 76 but max is 2
[  601.707318][ T5781] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  601.799820][ T5781] usb 2-1: config 220 has no interface number 2
[  601.821371][ T5781] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  601.896003][ T5781] usb 2-1: config 220 interface 0 has no altsetting 0
[  601.932059][ T5781] usb 2-1: config 220 interface 76 has no altsetting 0
[  601.980798][ T5781] usb 2-1: config 220 interface 1 has no altsetting 0
[  602.034312][ T5781] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  602.045296][ T5779] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  602.080154][ T5781] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  602.194836][ T5781] usb 2-1: Product: syz
[  602.210399][ T5781] usb 2-1: Manufacturer: syz
[  602.243258][ T5781] usb 2-1: SerialNumber: syz
[  602.492099][    T8] Process accounting resumed
[  603.285667][ T5781] usb 2-1: selecting invalid altsetting 0
[  603.307041][ T5781] usb 2-1: Found UVC 7.01 device syz (8086:0b07)
[  603.314113][ T5781] usb 2-1: No valid video chain found.
[  603.339013][ T5781] usb 2-1: selecting invalid altsetting 0
[  603.351867][ T5781] usbtest: probe of 2-1:220.1 failed with error -22
[  603.362868][ T5781] usb 2-1: USB disconnect, device number 26
[  603.793072][T11359] loop6: detected capacity change from 0 to 1024
[  603.907982][T11359] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  604.682882][T11372] loop3: detected capacity change from 0 to 256
[  604.748521][T10795] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  604.762427][T11369] siw: device registration error -23
[  604.771234][T11372] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x2806b865, utbl_chksum : 0xe619d30d)
[  605.024756][T11379] loop6: detected capacity change from 0 to 512
[  605.077799][T11379] EXT4-fs: Ignoring removed oldalloc option
[  605.140148][T11382] loop5: detected capacity change from 0 to 512
[  605.173491][T11379] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  605.263726][T11382] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  605.338104][ T5822] Process accounting resumed
[  605.439613][T11382] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  606.131170][T10795] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  606.429788][T10166] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  606.544958][T11410] loop5: detected capacity change from 0 to 128
[  607.062567][    T8] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  607.202639][ T5872] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  607.270678][    T8] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc
[  607.297516][    T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  607.331130][    T8] usb 2-1: Product: syz
[  607.342154][    T8] usb 2-1: Manufacturer: syz
[  607.351478][    T8] usb 2-1: SerialNumber: syz
[  607.363009][   T42] wlan1: Trigger new scan to find an IBSS to join
[  607.401362][    T8] usb 2-1: config 0 descriptor??
[  607.427856][    T8] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 027
[  607.436054][ T5872] usb 6-1: Using ep0 maxpacket: 8
[  607.463427][ T5872] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  607.479377][ T5872] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  607.539343][ T5872] pvrusb2: Hardware description: Terratec Grabster AV400
[  607.556778][ T5872] pvrusb2: **********
[  607.560902][ T5872] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  607.601111][T11426] lo speed is unknown, defaulting to 1000
[  607.603126][ T5872] pvrusb2: Important functionality might not be entirely working.
[  607.649092][ T5872] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  607.688072][ T5872] pvrusb2: **********
[  607.711230][T11413] loop3: detected capacity change from 0 to 40427
[  607.731779][T11413] F2FS-fs (loop3): build fault injection attr: rate: 14, type: 0x7ffff
[  607.749348][T11413] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0xe4
[  607.773357][ T2323] pvrusb2: Invalid write control endpoint
[  607.791962][T11413] F2FS-fs (loop3): invalid crc value
[  607.819785][T11413] F2FS-fs (loop3): Found nat_bits in checkpoint
[  607.863797][    T8]  (null): failure reading functionality
[  607.899689][    T8] i2c i2c-1: connected i2c-tiny-usb device
[  607.956653][T11413] F2FS-fs (loop3): inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x665/0x970
[  608.014766][T11413] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  608.075826][ T2323] pvrusb2: Invalid write control endpoint
[  608.124613][ T2323] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  608.176809][T11419] i2c i2c-1: failure writing data
[  608.176965][T10435] usb 2-1: USB disconnect, device number 27
[  608.201045][ T5872] usb 6-1: USB disconnect, device number 4
[  608.218172][ T2323] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  608.240617][T11413] F2FS-fs (loop3): inject alloc nid in f2fs_alloc_nid of f2fs_get_dnode_of_data+0x885/0x1a80
[  608.253099][ T2323] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  608.328083][ T2323] pvrusb2: Device being rendered inoperable
[  608.339422][ T2323] cx25840 2-0044: Unable to detect h/w, assuming cx23887
[  608.348727][ T2323] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  608.441953][T11413] F2FS-fs (loop3): inject alloc nid in f2fs_alloc_nid of f2fs_new_inode+0x10d/0x1030
[  608.455285][ T2323] pvrusb2: Attached sub-driver cx25840
[  608.475155][ T2323] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  608.492444][ T2323] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  608.637262][ T5779] syz-executor: attempt to access beyond end of device
[  608.637262][ T5779] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  608.690070][ T5779] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  608.948870][T11451] loop5: detected capacity change from 0 to 256
[  608.972642][T11451] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  609.002858][T11451] exFAT-fs (loop5): Medium has reported failures. Some data may be lost.
[  609.047940][T11451] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  609.112391][    T8] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  609.357848][    T8] usb 7-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  609.384126][    T8] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  609.411910][    T8] usb 7-1: Product: syz
[  609.419668][    T8] usb 7-1: Manufacturer: syz
[  609.450402][    T8] usb 7-1: SerialNumber: syz
[  609.478737][    T8] usb 7-1: config 0 descriptor??
[  609.827159][    T8] usb 7-1: USB disconnect, device number 3
[  609.875789][T11466] loop1: detected capacity change from 0 to 128
[  609.908412][T11466] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  609.943880][T11466] hpfs: filesystem error: improperly stopped
[  609.950741][T11466] hpfs: You really don't want any checks? You are crazy...
[  609.981216][T11466] hpfs: hpfs_map_sector(): read error
[  610.005869][T11466] hpfs: code page support is disabled
[  610.018790][T11466] hpfs: hpfs_map_4sectors(): unaligned read
[  610.042731][T11466] hpfs: hpfs_map_4sectors(): unaligned read
[  610.048810][T11466] hpfs: filesystem error: unable to find root dir
[  610.441038][T11479] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1483'.
[  610.524920][    T8] Process accounting resumed
[  611.292926][   T42] wlan1: Trigger new scan to find an IBSS to join
[  611.550000][T11493] loop3: detected capacity change from 0 to 256
[  611.627808][T11493] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d)
[  612.322517][ T4972] wlan1: Trigger new scan to find an IBSS to join
[  612.916144][T11512] loop6: detected capacity change from 0 to 512
[  613.016139][T11512] EXT4-fs (loop6): 1 truncate cleaned up
[  613.104639][T11512] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  613.279517][ T5822] Process accounting resumed
[  613.429246][T11524] siw: device registration error -23
[  613.442706][T11512] 
[  613.445177][T11512] ======================================================
[  613.452463][T11512] WARNING: possible circular locking dependency detected
[  613.459527][T11512] syzkaller #0 Not tainted
[  613.464031][T11512] ------------------------------------------------------
[  613.471085][T11512] syz.6.1493/11512 is trying to acquire lock:
[  613.477283][T11512] ffff888077fc46c8 (&ei->xattr_sem){++++}-{3:3}, at: ext4_destroy_inline_data+0x28/0xe0
[  613.487112][T11512] 
[  613.487112][T11512] but task is already holding lock:
[  613.494509][T11512] ffff8880211a0c58 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1a4/0x350
[  613.504662][T11512] 
[  613.504662][T11512] which lock already depends on the new lock.
[  613.504662][T11512] 
[  613.515126][T11512] 
[  613.515126][T11512] the existing dependency chain (in reverse order) is:
[  613.523101][T11515] EXT4-fs error (device loop6): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 465: padding at end of block bitmap is not set
[  613.524342][T11512] 
[  613.524342][T11512] -> #1 (&sbi->s_writepages_rwsem){++++}-{0:0}:
[  613.547483][T11512]        percpu_down_read+0x44/0x1a0
[  613.552960][T11512]        ext4_writepages+0x1a4/0x350
[  613.558338][T11512]        do_writepages+0x351/0x590
[  613.563556][T11512]        __writeback_single_inode+0x14e/0xee0
[  613.569700][T11512]        writeback_single_inode+0x21f/0x760
[  613.575721][T11512]        write_inode_now+0x183/0x210
[  613.581092][T11512]        iput+0x58f/0x900
[  613.585489][T11512]        ext4_xattr_block_set+0x2228/0x2fe0
[  613.591453][T11512]        ext4_expand_extra_isize_ea+0x128f/0x1e70
[  613.598056][T11512]        __ext4_expand_extra_isize+0x306/0x400
[  613.604388][T11512]        __ext4_mark_inode_dirty+0x458/0x6d0
[  613.610492][T11512]        ext4_evict_inode+0x7dd/0xe70
[  613.615945][T11512]        evict+0x4b7/0x8a0
[  613.620433][T11512]        ext4_orphan_cleanup+0xc33/0x1470
[  613.626209][T11512]        ext4_fill_super+0x5fb5/0x6870
[  613.631902][T11512]        get_tree_bdev+0x3e5/0x520
[  613.637160][T11512]        vfs_get_tree+0x8c/0x280
[  613.642159][T11512]        do_new_mount+0x24a/0xa40
[  613.647244][T11512]        __se_sys_mount+0x2e7/0x3d0
[  613.652500][T11512]        do_syscall_64+0x55/0xb0
[  613.657542][T11512]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  613.664024][T11512] 
[  613.664024][T11512] -> #0 (&ei->xattr_sem){++++}-{3:3}:
[  613.672506][T11512]        __lock_acquire+0x37ef/0x7d80
[  613.677998][T11512]        lock_acquire+0x19e/0x420
[  613.683095][T11512]        down_write+0x97/0x200
[  613.687951][T11512]        ext4_destroy_inline_data+0x28/0xe0
[  613.693910][T11512]        ext4_do_writepages+0x4f2/0x3990
[  613.699593][T11512]        ext4_writepages+0x1dd/0x350
[  613.704945][T11512]        do_writepages+0x351/0x590
[  613.710177][T11512]        filemap_fdatawrite_wbc+0x122/0x180
[  613.716126][T11512]        file_write_and_wait_range+0x197/0x280
[  613.722435][T11512]        generic_buffers_fsync_noflush+0x6f/0x160
[  613.729018][T11512]        ext4_sync_file+0x460/0xd50
[  613.734280][T11512]        ext4_buffered_write_iter+0x2c0/0x350
[  613.740407][T11512]        ext4_file_write_iter+0x1e7/0x1980
[  613.746271][T11512]        vfs_write+0x474/0x9a0
[  613.751143][T11512]        __x64_sys_pwrite64+0x198/0x220
[  613.756841][T11512]        do_syscall_64+0x55/0xb0
[  613.761912][T11512]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  613.768561][T11512] 
[  613.768561][T11512] other info that might help us debug this:
[  613.768561][T11512] 
[  613.778829][T11512]  Possible unsafe locking scenario:
[  613.778829][T11512] 
[  613.786403][T11512]        CPU0                    CPU1
[  613.792037][T11512]        ----                    ----
[  613.797463][T11512]   rlock(&sbi->s_writepages_rwsem);
[  613.802803][T11512]                                lock(&ei->xattr_sem);
[  613.809702][T11512]                                lock(&sbi->s_writepages_rwsem);
[  613.817563][T11512]   lock(&ei->xattr_sem);
[  613.822027][T11512] 
[  613.822027][T11512]  *** DEADLOCK ***
[  613.822027][T11512] 
[  613.830300][T11512] 2 locks held by syz.6.1493/11512:
[  613.835547][T11512]  #0: ffff88805bc12418 (sb_writers#4){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0
[  613.844614][T11512]  #1: ffff8880211a0c58 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1a4/0x350
[  613.855501][T11512] 
[  613.855501][T11512] stack backtrace:
[  613.861435][T11512] CPU: 1 PID: 11512 Comm: syz.6.1493 Not tainted syzkaller #0
[  613.869049][T11512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  613.880573][T11512] Call Trace:
[  613.883960][T11512]  <TASK>
[  613.886935][T11512]  dump_stack_lvl+0x18c/0x250
[  613.891766][T11512]  ? load_image+0x420/0x420
[  613.896349][T11512]  ? show_regs_print_info+0x20/0x20
[  613.901648][T11512]  ? print_circular_bug+0x12b/0x1a0
[  613.906914][T11512]  check_noncircular+0x2fc/0x400
[  613.911933][T11512]  ? print_deadlock_bug+0x5d0/0x5d0
[  613.917365][T11512]  ? lockdep_lock+0xf5/0x230
[  613.922036][T11512]  ? _find_first_zero_bit+0xd6/0x100
[  613.927495][T11512]  __lock_acquire+0x37ef/0x7d80
[  613.932446][T11512]  ? verify_lock_unused+0x140/0x140
[  613.937740][T11512]  lock_acquire+0x19e/0x420
[  613.942317][T11512]  ? ext4_destroy_inline_data+0x28/0xe0
[  613.948208][T11512]  ? __might_sleep+0xe0/0xe0
[  613.952871][T11512]  ? read_lock_is_recursive+0x20/0x20
[  613.958390][T11512]  ? raw_spin_rq_unlock_irq+0x11/0x90
[  613.963829][T11512]  ? __might_sleep+0xe0/0xe0
[  613.968497][T11512]  ? __schedule+0x1805/0x4660
[  613.973402][T11512]  down_write+0x97/0x200
[  613.977884][T11512]  ? ext4_destroy_inline_data+0x28/0xe0
[  613.983607][T11512]  ? down_read_killable+0x340/0x340
[  613.989242][T11512]  ? ext4_journal_check_start+0x178/0x250
[  613.995068][T11512]  ext4_destroy_inline_data+0x28/0xe0
[  614.000961][T11512]  ext4_do_writepages+0x4f2/0x3990
[  614.006147][T11512]  ? mark_lock+0x94/0x320
[  614.010910][T11512]  ? lock_chain_count+0x20/0x20
[  614.016674][T11512]  ? __lock_acquire+0x1336/0x7d80
[  614.021771][T11512]  ? asm_sysvec_reschedule_ipi+0x1a/0x20
[  614.027844][T11512]  ? lockdep_hardirqs_on+0x98/0x150
[  614.033126][T11512]  ? asm_sysvec_reschedule_ipi+0x1a/0x20
[  614.038831][T11512]  ? ext4_normal_submit_inode_data_buffers+0x240/0x240
[  614.045829][T11512]  ? lock_acquire+0x208/0x420
[  614.050652][T11512]  ? rcu_read_lock_any_held+0xb4/0x140
[  614.056259][T11512]  ext4_writepages+0x1dd/0x350
[  614.061877][T11512]  ? ext4_read_folio+0x2f0/0x2f0
[  614.067136][T11512]  ? __rwlock_init+0x150/0x150
[  614.071956][T11512]  ? do_raw_spin_unlock+0x121/0x230
[  614.077207][T11512]  ? ext4_read_folio+0x2f0/0x2f0
[  614.082230][T11512]  do_writepages+0x351/0x590
[  614.086924][T11512]  ? folio_clear_dirty_for_io+0xca0/0xca0
[  614.092708][T11512]  ? __lock_acquire+0x7d80/0x7d80
[  614.097884][T11512]  ? __rwlock_init+0x150/0x150
[  614.102713][T11512]  ? do_raw_spin_unlock+0x121/0x230
[  614.107986][T11512]  filemap_fdatawrite_wbc+0x122/0x180
[  614.113454][T11512]  file_write_and_wait_range+0x197/0x280
[  614.119137][T11512]  ? lockdep_hardirqs_on+0x98/0x150
[  614.124657][T11512]  ? __filemap_set_wb_err+0x1b0/0x1b0
[  614.130105][T11512]  ? fault_in_readable+0xcb/0x150
[  614.135190][T11512]  ? fault_in_readable+0x13d/0x150
[  614.140446][T11512]  ? fault_in_readable+0x142/0x150
[  614.145614][T11512]  generic_buffers_fsync_noflush+0x6f/0x160
[  614.151573][T11512]  ext4_sync_file+0x460/0xd50
[  614.156354][T11512]  ? trace_ext4_fsmap_mapping+0x210/0x210
[  614.162140][T11512]  ? vfs_fsync_range+0xc3/0x1a0
[  614.167128][T11512]  ext4_buffered_write_iter+0x2c0/0x350
[  614.172822][T11512]  ext4_file_write_iter+0x1e7/0x1980
[  614.178193][T11512]  ? rcu_read_lock_any_held+0xb4/0x140
[  614.183708][T11512]  ? ext4_file_read_iter+0x660/0x660
[  614.189065][T11512]  vfs_write+0x474/0x9a0
[  614.193373][T11512]  ? file_end_write+0x250/0x250
[  614.198540][T11512]  ? __fget_files+0x3fc/0x460
[  614.203372][T11512]  ? __fdget+0x180/0x210
[  614.207861][T11512]  ? __x64_sys_pwrite64+0xf7/0x220
[  614.213222][T11512]  __x64_sys_pwrite64+0x198/0x220
[  614.218331][T11512]  ? ksys_pwrite64+0x1c0/0x1c0
[  614.223165][T11512]  ? lockdep_hardirqs_on+0x98/0x150
[  614.228554][T11512]  do_syscall_64+0x55/0xb0
[  614.233044][T11512]  ? clear_bhb_loop+0x40/0x90
[  614.237824][T11512]  ? clear_bhb_loop+0x40/0x90
[  614.242701][T11512]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  614.248644][T11512] RIP: 0033:0x7f4ad999de99
[  614.253134][T11512] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  614.272898][T11512] RSP: 002b:00007f4ada86d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000012
[  614.281359][T11512] RAX: ffffffffffffffda RBX: 00007f4ad9c25fa0 RCX: 00007f4ad999de99
[  614.289469][T11512] RDX: 00000000200000c1 RSI: 00002000000000c0 RDI: 0000000000000004
[  614.297490][T11512] RBP: 00007f4ad9a33eaf R08: 0000000000000000 R09: 0000000000000000
[  614.305815][T11512] R10: 0000000000009000 R11: 0000000000000246 R12: 0000000000000000
[  614.313922][T11512] R13: 00007f4ad9c26038 R14: 00007f4ad9c25fa0 R15: 00007ffc2ede2f18
[  614.321957][T11512]  </TASK>
[  614.372289][   T49] wlan1: Trigger new scan to find an IBSS to join
[  614.402951][T11512] EXT4-fs error (device loop6): ext4_validate_block_bitmap:439: comm syz.6.1493: bg 0: block 465: padding at end of block bitmap is not set
[  614.490561][T11512] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 36 with max blocks 4 with error 117
[  614.516195][T11512] EXT4-fs (loop6): This should not happen!! Data will be lost
[  614.516195][T11512] 
[  614.574553][ T3508] wlan1: Creating new IBSS network, BSSID ca:0f:8f:1b:53:e3
[  614.629907][ T3508] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  614.652677][ T3508] EXT4-fs (loop6): This should not happen!! Data will be lost
[  614.652677][ T3508] 
[  614.663456][ T3508] EXT4-fs (loop6): Total free blocks count 0
[  614.669682][ T3508] EXT4-fs (loop6): Free/Dirty block details
[  614.676490][ T3508] EXT4-fs (loop6): free_blocks=0
[  614.681577][ T3508] EXT4-fs (loop6): dirty_blocks=4
[  614.687386][ T3508] EXT4-fs (loop6): Block reservation details
[  617.362637][   T42] wlan1: Creating new IBSS network, BSSID d6:78:91:20:2f:04