last executing test programs:

1m49.740357678s ago: executing program 4 (id=38):
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x224})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3})
syz_io_uring_setup(0x400048ba, &(0x7f0000000340)={0x0, 0xfffffffd, 0x20, 0xfffffff7, 0x182}, &(0x7f0000000300), &(0x7f0000ff4000), &(0x7f0000000000))
read(r0, &(0x7f0000001300)=""/4096, 0x1000)
ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000280)={{&(0x7f0000ff0000/0xd000)=nil, 0xd000}})

1m48.491769616s ago: executing program 4 (id=40):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"/2574], &(0x7f0000000140)='GPL\x00'}, 0x48)
r1 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r1, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20008811)
r2 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r1, r0})
recvmsg(r1, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x2)

1m48.022675688s ago: executing program 4 (id=41):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x6a, 0x4)
bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000180)=0xb27, 0x4)
connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10)
sendmmsg(r0, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000280)='\"', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)="92dba7cc4e4fe50a93d5de1baaf50bbbf2eabd1d9a34aa9072af6fee1096e10f7d3457909b2d05533e04734c882101a130479f1f2fb09b39bb384f5d03b064388215c1f38cd1e8e12bdb765610e6cc54c60abc2b594784cd1396f265db0c", 0x5e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000c80)="eff38aa2e3f2", 0x6}], 0x1}}], 0x3, 0x4080)

1m47.846001242s ago: executing program 4 (id=43):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2004de, &(0x7f0000000100), 0x3, 0x460, &(0x7f0000000380)="$eJzs3M9vFFUcAPDvzHaLBLAV8Qc/1CoaG3+0FFA5eFCjiQdMTPSgx6YtBFmooTURQhSMwZMxJt6NR/8FT3oxxpOJV70bEmK4AJ7WzO4M3d3uLrDsstD9fJJp35sffe+7b97Om3m7DWBkTWU/koitEfFXREzUs807TNV/Xb18duHa5bMLSVSr7/2b1Pa7cvnsQrFrcdyWPDOdRqRfJrG7Tbkrp88cn69Ulk7l+dnVEx/Prpw+8+KxE/NHl44undx/6NDBA3OvvLz/pb7EmdXpyq7PlvfsfPvDb985/HVT/C1x9MlUt43PVKt9Lm64tjWkk7EhVoRbUoqIrLnKtf4/EaVYa7yJeOuLoVYOGKhqtVrd0nnzuSqwgSXRnNflYVQUF/rs/rdYWgcBrw1u+DF0l16v3wBlcV/Nl/qWsUjzfcot97f9NBURH5z77/tsicE8hwAAaPJzNv55od34L42HG/a7P58bmoyIByJie0Q8GBE7IuKhiNq+j0TEo7dYfuskyfrxT3qxp8BuUjb+ezWf22oe/xWjv5gs5blttfjLyZFjlaV9+WsyHeVNWX6uSxm/vPnnN522NY7/siUrvxgL5vW4OLap+ZjF+dX524m50aXzEbvG2sWfXJ8JSCJiZ0Ts6rGMY8/9uKfTthvH30Uf5pmqP0Q8W2//c9ESfyHpPj85e19UlvbNFmfFer//ceHdTuXfVvx9cOl8FGfXuvbPTSaN87Urt17Ghb+/6nhP0+v5P568X0uP5+s+nV9dPTUXMZ4crle6cf3+tWOLfLF/dv5P723f/7fH2iuxOyKyk/ixiHg8Ip7I6/5kRDwVEXu7xP/bG09/1Hv8g5XFv9j2/a9T+68lxqN1TftE6fivPzUVOrku/mvd2/9gLTWdr7mZ97+bqVdvZzMAAADce9KI2BpJOnM9naYzM/XPy++ISCvLK6vPH1n+5ORi/TsCk1FOiyddEw3PQ+fy2/p6/nxE1D9aUGw/kD83/q60uZafWViuLA47eBhxWzr0/8w/pWHXDhg439eC0aX/w+jS/2F06f8wutr0/83DqAdw57W7/n8+hHoAd15L/zftByOj7P4fRljH/r+R//MPUNPD9T8ZRD2AO2plc9z4S/JdE8Vf6vHwDZuI8l1RjdtPVJO2jRvpsCt240Rxlbpb6nMvJYb3ngQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANBP/wcAAP//vQDabw==")
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
chdir(&(0x7f0000000300)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0)
fadvise64(r0, 0x9, 0x400000000000008, 0x1)

1m46.916031534s ago: executing program 4 (id=49):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x2, 0x0, @ioapic={0x8000000, 0xe, 0x3, 0xfffffffe, 0x0, [{0x2, 0x4, 0x7, '\x00', 0x8}, {0x9, 0x8, 0x40, '\x00', 0xb}, {0xff, 0x7f, 0x9, '\x00', 0x67}, {0x0, 0x5, 0xd4, '\x00', 0xf}, {0x7, 0x10, 0xc, '\x00', 0x5}, {0x0, 0x4, 0x54, '\x00', 0xff}, {0x71, 0xd5, 0xf1, '\x00', 0x7b}, {0x3, 0x4, 0xc}, {0x7f, 0xd, 0x5, '\x00', 0xb}, {0xd7, 0xd, 0x8, '\x00', 0x6}, {0x0, 0x28, 0x5, '\x00', 0xdc}, {0xff, 0x1, 0xfe, '\x00', 0x1}, {0xfe, 0x7, 0x26}, {0xcf, 0x3, 0x1, '\x00', 0x6}, {0xf, 0xee, 0x7, '\x00', 0x3}, {0x39, 0x2, 0x2, '\x00', 0xb}, {0xc7, 0x6, 0x2, '\x00', 0x8}, {0x5, 0x9, 0x5, '\x00', 0xc}, {0x7, 0xc1, 0x7, '\x00', 0xc2}, {0x0, 0x80, 0xe, '\x00', 0x7f}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x6, 0x3, '\x00', 0x10}, {0x1, 0x23, 0xf3, '\x00', 0x4}, {0x7, 0x5, 0x4, '\x00', 0x23}]}})
ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000200)={0x8, 0xdc})

1m46.191088481s ago: executing program 4 (id=53):
r0 = memfd_create(&(0x7f0000000480)='[+\xdbX\xae[5\xa9\x90\xffc\x1f\x1a\xa9\xfd\xfa\xad\xd1md\xe7\xe2\x7f\x9b\xd5R\x10\xf3\xb6\xffT\xbf\xd1\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\x9fc\xda\xa9\x83r\xd8\x98\x00\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9', 0x3)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
creat(&(0x7f0000000140)='./file0\x00', 0xd931d3864d39dcd1)
open(&(0x7f0000000080)='./file0\x00', 0x20002, 0x1a9)
r1 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0)
execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)

1m45.975579296s ago: executing program 32 (id=53):
r0 = memfd_create(&(0x7f0000000480)='[+\xdbX\xae[5\xa9\x90\xffc\x1f\x1a\xa9\xfd\xfa\xad\xd1md\xe7\xe2\x7f\x9b\xd5R\x10\xf3\xb6\xffT\xbf\xd1\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\x9fc\xda\xa9\x83r\xd8\x98\x00\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9', 0x3)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
creat(&(0x7f0000000140)='./file0\x00', 0xd931d3864d39dcd1)
open(&(0x7f0000000080)='./file0\x00', 0x20002, 0x1a9)
r1 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0)
execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)

17.073808828s ago: executing program 1 (id=738):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x8, @remote, 0xb}, 0x1c)
socket$tipc(0x1e, 0x2, 0x0)
syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010000641100fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e200e22"], 0x0)
syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[], 0x0)

16.97841358s ago: executing program 1 (id=739):
syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x4028, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000300)='./file0\x00', 0x400, &(0x7f0000000200)=ANY=[@ANYBLOB="61636c2c757365725f78617474722c6e6f61636c2c63616368655f73747261746567793d64697361626c65642c6e6f757365725f78617474722c6e6f61636c2c00d4a87b439fa421753f060fe37a330d2dfca47c4e52e78d71fc65b972e2bb306bb4a29b1fe3019842462c5fee84a2e6eb90d57b8725e3a2eff0b0b471dac5c01bee53cd8d"], 0x0, 0x184, &(0x7f0000000500)="$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")
mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0)
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x1018}, './file0\x00'})

16.528826601s ago: executing program 1 (id=745):
userfaultfd(0x80801)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=""/91, 0x5b}, 0x4}], 0x1, 0x2, 0x0)
setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000180)=0x6, 0x4)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0x2e, &(0x7f0000000500)={@broadcast, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0)

16.319062286s ago: executing program 1 (id=749):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x210000, &(0x7f0000000140)={[{@nodelalloc}, {@dioread_lock}, {@jqfmt_vfsv1}, {@abort}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x7}}, {@bh}, {@auto_da_alloc}]}, 0x1, 0x56f, &(0x7f0000003780)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x3, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x42, 0xc0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58)

15.157429143s ago: executing program 1 (id=764):
r0 = syz_open_procfs(0x0, &(0x7f0000000480)='mounts\x00')
lseek(r0, 0x3c, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000140)='mounts\x00')
sendfile(r1, r2, 0x0, 0x4)
read$FUSE(r2, &(0x7f00000031c0)={0x2020}, 0x2020)

11.827373901s ago: executing program 1 (id=797):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000440)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000d00)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write$binfmt_misc(r3, &(0x7f00000000c0)="24340f12c4", 0x5)
splice(r2, 0x0, r1, 0x0, 0x3ffffffffd, 0x3)

11.702857765s ago: executing program 33 (id=797):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000440)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000d00)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write$binfmt_misc(r3, &(0x7f00000000c0)="24340f12c4", 0x5)
splice(r2, 0x0, r1, 0x0, 0x3ffffffffd, 0x3)

7.805224556s ago: executing program 5 (id=828):
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07})
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r2 = dup3(r0, r1, 0x0)
read$FUSE(r2, &(0x7f00000024c0)={0x2020}, 0x2020)

7.596723831s ago: executing program 5 (id=831):
syz_mount_image$xfs(&(0x7f00000000c0), &(0x7f0000009640)='./file0\x00', 0x8004, &(0x7f0000000100)={[{@grpquota}, {@filestreams}]}, 0x1, 0x9761, &(0x7f0000033240)="$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")
creat(&(0x7f0000000100)='./bus\x00', 0x1b)
r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x3000)
fallocate(r0, 0x0, 0x80000, 0x4)
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)

7.280421509s ago: executing program 3 (id=837):
syz_mount_image$hfsplus(&(0x7f0000000c00), &(0x7f0000000100)='./file1\x00', 0x8, &(0x7f00000002c0)=ANY=[@ANYRES8=0x0, @ANYRESOCT, @ANYRES8, @ANYBLOB="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", @ANYRESOCT, @ANYRES8], 0xfb, 0x6b4, &(0x7f00000013c0)="$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")
setxattr$security_capability(&(0x7f0000000100)='./file1\x00', &(0x7f0000000240), &(0x7f00000001c0)=@v3={0x3000000, [{0x1116c3fb, 0x1001}, {0xb, 0xffffffd1}]}, 0x18, 0x0)
truncate(&(0x7f0000000000)='./file1\x00', 0xf0ffff)
ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, &(0x7f0000001000)={0x1, 0x9})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x183042, 0x15)
pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c)

6.827339589s ago: executing program 3 (id=839):
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0)
open(0x0, 0x101040, 0x0)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="00100c"], 0x0, 0x0, 0x0}, 0x0)

6.35668825s ago: executing program 2 (id=842):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
bind$bt_l2cap(r0, &(0x7f0000000000), 0xe)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
bind$bt_l2cap(r1, &(0x7f0000000400)={0x1f, 0xffff}, 0xe)
listen(r1, 0x0)
listen(r0, 0x0)

6.263961932s ago: executing program 2 (id=843):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x80800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000000600)=""/87, 0x57}, {&(0x7f0000000540)=""/95, 0x5f}, {&(0x7f0000000680)=""/209, 0xd1}, {&(0x7f0000001500)=""/4096, 0x1000}], 0x4}, 0x0)

6.081948977s ago: executing program 2 (id=844):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000780)={0xfc78, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x20, 0x1, 0x1, 0x1}, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000140)={0x20, 0x3, 0x1, "8f"}, 0x0, 0x0})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$EVIOCGMASK(r1, 0x5b03, 0x0)

5.233027697s ago: executing program 5 (id=845):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000180), 0x2, 0x786, &(0x7f0000000f80)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8080c61)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff)
sendfile(r1, r1, 0x0, 0xfffe80)
truncate(&(0x7f00000000c0)='./file1\x00', 0x1)

4.539342533s ago: executing program 3 (id=847):
syz_mount_image$exfat(&(0x7f0000006c00), &(0x7f0000001b40)='./file1\x00', 0x208008de, &(0x7f0000000b40)=ANY=[], 0x80, 0x150a, &(0x7f0000002080)="$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")
r0 = syz_open_procfs(0x0, &(0x7f00000024c0)='mountstats\x00')
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0)
read$FUSE(r1, &(0x7f0000000200)={0x2020}, 0x2020)
mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000180)='devtmpfs\x00', 0x2200892, 0x0)
pread64(r0, &(0x7f0000002240)=""/237, 0xed, 0x4eb)

4.24467832s ago: executing program 3 (id=848):
r0 = syz_open_dev$sg(&(0x7f0000000140), 0xa, 0x28102)
ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f00000001c0)=0x2001)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$FUSE_ATTR(r1, &(0x7f0000000380)={0x78, 0x0, 0x0, {0x7fffffff, 0xfffffffc, 0x0, {0x1, 0xa, 0xffffffffffff936a, 0x40, 0x6, 0x6, 0x357, 0x2, 0x6, 0x0, 0x562a, 0xee00, 0x0, 0x8bfffffd, 0x223b8fb9}}}, 0x78)
memfd_create(&(0x7f0000000000)='\xff\x00l\x1e\xa0</\x00\x8e._\x14zC\x9a\xe8\xe0u\xe0\xff\xf1\xb2\xfd\xf6nz\x05-\xe2\xc7\xd3\xe6M^\x98\x85x\x14\t\xe9Q1\x1dK\x9a\x045\xd3\x17\xb22\x00D(\xd2\xdd\xa0\xff\x1f\x00\x00\n\x00\x00\x00v\n\xd8?]k\x14N\x18\xf4\xc2j\xe36g\xfd\xd2\xd4\xe3\x1f\xa6\xc6\xe2\xa6!\x9aE<2`]<\xf2R?8\xb8\xa3\xbf\xc3\x18s\xf7!~0\xc7y\xe2\xb2VP\xbd\xb0\x96\x90\x91k\x86\x1a\x10\xd2\xf5\x8b\xfc\xf4\xd0[\x12\xf5+\x1aS\x02/Yxm\x96\xbfS\x97\x9c/\x1f5i\xc6\x861\x8a\xff\xc3\xe7\xbfU\xd5\xac\xccB=\x8f\xfd26<Z|U6\r\xd7\x18\xad\x1d`\x06\xcfN\a\xf9\xd7 \x1a\xd8\xef\xb6\x9e8Z\t:#r\xa2\xb1h\xc0\xc0a\xa9\xc46A\x01\xac\xe6\xbf !5I\xc9<\x19{)\xa4\xad\v\x923\b\x9d\xbd>,\xc1\x8d\\Rxt\'\xb6\xbf\xc8*\n\xaf\x1b\xec\xfd\xbbY\x99\xb3\x06c\xd6\xf6\xb0\xcd=\xf3\x03`\x93\xff\x05e\xaa$\x00\xeaw\xd9\x10\x0f\x1d\x888\x8cS\x12?R\x99\xda7\xce)\x8f\xcc\x87\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd32J\xd7\x9f\xea:=\xcc\x17(|L\xda\xc3\x1ca\xe8s\xb6\xebw\xc7\xabS\xd7pJ\xd2\xa1\xcf\xae\x1f2\x9f\x98\xa80\r\x85\xb4\x86\xbc\xd0\xea\xbf\xb1Z\xb7e$\xcf<\ra\x9b\xa5\xdc\v\x1e\xfd\xc7\x91\xf22\xcf\x96\x99\xc1\xbb\xa1j\xe5\xa8\x7f\a\xa9\xa7G\xad\xa3\x8b\xf1\xdb\\]R\x8cf\xac1\xd7V\xaf\xb5\x8e\x10\x95\x9f=2\xd0-\xe1K:\xc3b\x89\x15OS\xa5\x98Ky\x12\xe7Qt#\xeb\x99\a\x10\x1c\xb3N\x85\xeb\x80\x05\x82_\x15\xdc\xbc\xf93\xdd\xf5g\x98\xd4\x8az\xe4`\xa5\x00\x00\x00\x00\xcd\x13\xfc+\xac\xe5\x8bI\f\xd6\x89\xc7HY\xcf\x00O\x88\xe6\x8b\x8bF/\x82u\xffCnG\x02\x82\xfc\xe9Od\x92\x06\xdeg@y\xa6=4\xb1}\xa8Yr\xad9\xb9b)\xec}\x87=\x91:IV\xab\xdf\xa2\xba+6D\x1fuf\xdeJYw$L\xa1\x83NH\xe3\xf2\x91\x8cW\xb7\b\x04\x12\x8b\x8bV\x19\xf1\r\xcb\x94\xa3\xf4\xe4\x97$\x99c\rG\xd7#\xe2\xfd\x80\xadR\x83\xdc\xb8d\x15|\xac\xb8g$\x0f@\xca3\x9f\xb1\xea\xc6vQ\x1b\xdb#\xa3\"\x9f\x9e\xd8\xba\x13d\x9bx\x9a\xbf\xee\xf2kQ\xe0\xc4/~7\xcd\xd1\x06\xe5\x17\x9b\bW|\xbc\x86D\x05\xaf<\xdfy,I2f\xa7G\xe3Qp<\'6 x\n\x94f\xf8\xa2\xea\xf4\xa5\x9eY\xf80C\x91\x7f\x16u\x8c(Xl\x90\xd2\x9f\xa9\xb9kJy[\x93\xfe{\xe5\x1a\xe9\xb7T\x19;\xb9\t\xe7\x0ei\xfaZ\xfbS:\x9b\xc1r\xcbM.\xf8\xb8wR\xb3p~b\xcb\v1-\a-\x8a#\xaa1\xa9\x9a\x88\a\xc5\xb9*\xd3?\xac\n\x9c\xcd\xe2\xc9\xbd\xeb\xb3\xf65\xbdaP\t\xd6\x06\x1c\xeeNg\x92>\x92>\xaf\b3\x05\xfdM\xd2F\v\xbd\xeb\x83 \x9d\x90S\x11w\xefg\\\xca\xe2\xfc~w\xbe\xefh#\x96\xa5h\xec\xbfr\xc8Bi\x90\"(\xf2\xc6\xcc\xfbX\x14{\x9e5\x87\x91\xe2\x9b\xd4\xc6\xc2whk+\x0f\x82\xca\xc1@\xcb~P\xe4\x18\xf9E\'\xab\xc7z\xd7\x05V{\xa1X\xa3\x10\x13.]tlz\x12\xde\xf2\xa43\xee#\x92J~\xda \x9b\xc4\xc0V\xb3\x9dCO\x1fu\x1c4\x1d\v}\x1b\xe5>w\xfbsm\xa3\fI|\x96-p\x86\xd3O\xfa\x9a\x8f\xb2\x8e\x88qGEG', 0x6)
readv(r1, &(0x7f0000000180)=[{&(0x7f0000000200)=""/132, 0x3f}], 0x1)

4.058081444s ago: executing program 3 (id=850):
r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000075f84c1071042703a461000000010902120001000000000904"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000100)={0x2c, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000100000011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)

3.257960103s ago: executing program 2 (id=853):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f00000002c0)=0x10)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r3=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000100)={r3, 0x405}, &(0x7f0000000300)=0x8)

2.855306093s ago: executing program 5 (id=854):
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r0)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
r1 = gettid()
r2 = syz_open_procfs(r1, &(0x7f0000000040)='timerslack_ns\x00')
readv(r2, &(0x7f0000001440)=[{&(0x7f0000000180)=""/112, 0x70}], 0x1)

2.353137834s ago: executing program 5 (id=860):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x210000, &(0x7f0000000140)={[{@nodelalloc}, {@dioread_lock}, {@jqfmt_vfsv1}, {@abort}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x7}}, {@bh}, {@auto_da_alloc}]}, 0x1, 0x56f, &(0x7f0000003780)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x3, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x42, 0xc0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58)

2.266734406s ago: executing program 2 (id=861):
syz_mount_image$xfs(&(0x7f0000009740), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000140)={[{@bsdgroups}]}, 0x1, 0x97f6, &(0x7f000001c700)="$eJzs3QeYHXXhcP8NIbSAIKAiWBBQEJUu1UITRIpSBQXpTWkCKiBVUAQUUCyIIiBSld5777333nvv7f+EJIrxEPX//t4Xf5xzniebvXNnZme/nzszuzu79y6/0NLzDwyMMzC8KQdG7bE5zthg04eXGHTEySs/Pu2iE849YvKIBSYbcXOyQSP+H2NgYGCMEesZMW3og8ceN8bAmG9O/3tDxx1v0AQDA7OMuDnviP/nGP7fJA+NnO+NURp1Qwf97eagnYf/e7MJh32IYe/MtueL8w0MDEz0luWHLTLTP32i0pafb+GF/m71N7dhVkNGvP/Wf2MN/zfJPQMDk9w5wI+Pt8476B34lIZ9zIluum6LGd6Bj/2/ruXnW3iRUfyH7YuDR0ybY9g+Puo+aGzUx/kJhxz+5IghfPPxNjAw7BD3D/vK/4qWn2+hxQbe/jg/cPGcLz/xxpvHzaFPDgwMfWpgYOjTAwNDnxkYGPrswMDQ595pl/o/a775Z51/2P4+8vYI9pGP5YlGPi5efMvj4vl5Pn7cwMDA2MPnGfr68PPF+FOOPCdUVVXVf3fzzT/rAnD+H2fU8/9bvy58+Lrdn+n8X1VV9b+3Reabf9Zh5/FRzv/jj+78P/UOQxYe/rP/eecYvtTr7+wnUVVVVf9RCy2C5/+JRnf+X+u2wTt1/q+qqvrf21KLv3n+H3+U8/+kozv/D5ligrtHzDfy64bX3rLKN39/bMT0V94yffBbpr/8lulD3rKet84/1lumv/iW6eMMDAx9cMT0V/8+eeiTw5b55/UMff7vv48z2Zhvmf7CW6aP9ZbpL47YpmHTx37L9NfeMv84f58+/rA3U474uC+NZqirqqr+a1pq1oUWGHjL79mPmDzyF/vx90LPf2OZ59+p7a2qqqqqqqqq/7zXHzv59L//zfdHBt7yt6t/+xvWET8XGHTkmVde+Y5t6H9Hg/755yHbvtPb9H/aMOdxDp1yYGCDZd/pTal3oP81f6te/1fK313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zFvc31/7/9/f+OFy3/pRGzznX2YWMs+vclJxtYd8R7j81xxgbrvgPb/g70br3+P7DuoIGBEb4TDbNcYr6llpluYGBg0TEOO3v2gb/dN+ew++aZePCbf8w5MDDdm2+HTPY2ax7xKgtvvrjDpH9bx5Fvrn+RN/YbPGiUjXhL7z3+gAPWWf6F2Ub9f9q3/zz+9voSL0xywJQj/5ZljFFmGudtFh65/pGfy6jOI7Z9umHbPuOm62804yabb/GZdddfde01115zg1lnmWOWOeeYaa65Zp1xrXXXW3Om4W/fZsyGv3TF4H9nzMYfdcwem++tYzbq5/Z2Y/bPr+rxD6t4c40HzTHVhSPHbMz/cMwGj37Mplx3xAeabGDIwCpvDs2ggYHJxhwysNmwGzOPPTAw2ZAR8042bN7PTTzGwMDuf/9EB414stHh8wzadtg8/2WvWzLXiBHZauR8oz7P+qgb+q9et+SW+Q+eapTXLfm/1f+v8/8/ec056G8DNfIFEEbMM9zrHX6diX/a3inHfPMk93bbO5rnxXkzenyNOeecW/9PPS8Obe/4o9ne0TyP39tu73yrfuHI4av6H9veUY51iw2/89851g2M/lg3mJZf87IPj3qsW/TtN/Ef9uORYzT2KDO93bHuxiVP3HbY+gdGf6xbbN0RTx7w92PdGAMDkw0eeawbduAba8jA7sNuzDLsxthDBg4edmPWN2+MO3DmsBszrL7hemsMevNpBkasd6Zh65134kFvum87/fR7vLHHG2+MOWJbnh/6j9s64vEx5VvP5/NNPHwwRy47cr3DZh253pm2GH7fWCPW+8J/sN6Ry9L2vrji8PvGHrHeF0dZ75DRrHfksv+0P0w36B9+URWON+/o6xrR/jvOaLZ3NM/DjY+3YdP22XS3y/4Hnod70Ntt75ij3963e92Qt93e7feae5f/qecNp8fZjdMOf6yMM+Jx9tp/8Pgdueyox7HhTwQy/LA/zr9zHJvyn45j2w0eY5TBfktv9zXbGjD/8Pcn+9vabtvhyk+OHPsho6z3X33N9pbPZRAcxyYa5fu5QdvsOzCIxnz3vQat9vq/GPMhA//4vcXIMR+57OjGfOx/Z8w/NPox/3e/Tp5u6uH3Dxll+9865gcMzH7KyDEfa5T1/qsxH3v0545/HvOBgSE05k/eO3zcRnc8fbsxH7nsyDEf9nHmmXjMgWHf5E8zYszH+nfGfLL/mcf5eDD/8PfX/NukeR686/SRYz7qGP+rMR/rPxzzre/82+N8mjfvm2qMgbHGGths1U033Xjm4W9H3pxl+Fs+Fp14wfBxHt259O2MRi47uv1izH/HaKJ/y2jQvzKafMy3M/r7rnXeXoue9v/3WDTmf2p0Jh+LNjt6+LiN7uuitxvzkcvSeXDStyw/6veho3n+LPychk1bb4oV9hu5yhGLvZPPnzXy+93/lc+fNfJnkuuOepCvf7d+/u8uf3f5u8vfXf7i3ub6/5Qjr//fu+vSK434pnPIg8tNeNc7vb3vcO/q6/8jfP/h+v9dEy734LBvrUbcN9rrs8Pn+a+8PjvH8P8meWjkfKNeHxx1Q//V9dkXbvnyrP+Prs/+/2rkvvpvfF/c8d9d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eUv7m2u/8808vcApl789EVHXAgdsuCWy+7xTm/vO9y7+vr/CN9/uP6/x7JbLjjGwN/uG+31/+HzOK7/7zx4gf3/m6//j9xXu/5f/6L83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y1/c21z/n3fk7wFcM+N+B478fYADH5xhmXd6e9/h3q3X/3v9f28d/93l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7iRlz/HxjlZRK/1uMCg+v//7t7G/8l88cs/kvlj1n8l84fs/gvkz9m8V82f8ziv1z+mMX/6/ljFv/l88cs/ivkj1n8v5E/ZvH/Zv6YxX/F/DGL/0r5Yxb/b+WPWfxXzh+z+K+SP2bxXzV/zOK/Wv6YxX/1/DGL/xr5Yxb/NfPHLP5r5Y9Z/NfOH7P4r5M/ZvFfN3/M4v/t/DGL/3fyxyz+6+WPWfzXzx+z+G+QP2bx3zB/zOK/Uf6Yxf+7+WMW/43zxyz+m+SPWfw3zR+z+H8vf8zi//38MYv/D4z+Q/71LBb/zYz+/0YW/83zxyz+W+SPWfx/mD9m8d8yf8ziv1X+mMV/6/wxi/82+WMW/23zxyz+2+WPWfx/lD9m8d8+f8ziv0P+mMX/x/ljFv+f5I9Z/HfMH7P4/zR/zOK/U/6YxX/n/DGL/y75Yxb/n+WPWfx/nj9m8d81f8ziv1v+mMV/9/wxi/8v8scs/r/MH7P475E/ZvH/Vf6Yxf/X+WMW/9/kj1n8f5s/ZvHfM3/M4v+7/DGL/175Yxb/3+ePWfz/kD9m8d87f8zi/8f8MYv/PvljFv9988cs/vvlj1n8/5Q/ZvHfP3/M4v/n/DGL/wH5Yxb/A/PHLP4H5Y9Z/A/OH7P4H5I/ZvE/NH/M4v+X/DGL/1/zxyz+h+WPWfwPzx+z+B+RP2bxPzJ/zOJ/VP6Yxf/o/DGL/zH5Yxb/Y/PHLP7H5Y9Z/I/PH7P4n5A/ZvE/MX/M4n9S/pjF/+T8MYv/KfljFv9T88cs/qflj1n8T88fs/ifkT9m8T8zf8zif1b+mMX/7Pwxi/85+WMW/3Pzxyz+5+WPWfzPzx+z+F+QP2bxvzB/zOJ/Uf6Yxf/i/DGL/yX5Yxb/S/PHLP6X5Y9Z/C/PH7P4X5E/ZvG/Mn/M4n9V/pjF/+r8MYv/NfljFv9r88cs/tflj1n8r88fs/jfkD9m8b8xf8zif1P+mMX/5vwxi/8t+WMW/1vzxyz+t+WPWfxvzx+z+N+RP2bxvzN/zOJ/V/6Yxf/u/DGL/z35Yxb/e/PHLP735Y9Z/O/PH7P4P5A/ZvF/MH/M4v9Q/pjF/+H8MYv/I/ljFv9H88cs/o/lj1n8H88fs/g/kT9m8X8yf8zi/1T+mMX/6fxHbeTwKPyfyR+z7P/P5o9Z/J/LH7P4P58/ZvF/IX/M4v9i/pjF/6X8MYv/y/ljFv9X8scs/q/mj1n8X8sfs/i/nj9m8X8jf0ziP2ggf8ziPyh/zOI/Rv6YxX9w/pjFf8z8MYv/kPwxi/9Y+WMW/7Hzxyz+4+SPWfzHzR+z+I+XP2bxH5o/ZvEfP3/M4j9B/pjF/z35Yxb/CfPHLP4T5Y9Z/N+bP2bxnzh/zOI/Sf6YxX/S/DGL//vyxyz+788fs/h/IH/M4j9Z/pjF/4P5Yxb/yfPHLP5T5I9Z/D+UP2bx/3D+mMX/I/ljFv+P5o9Z/KfMH7P4fyx/zOI/Vf6YxX/q/DGL/zT5Yxb/j+ePWfw/kT9m8Z82f8ziP13+mMX/k/ljFv/p88cs/p/KH7P4fzp/zOL/mfwxi/8M+WMW/xnzxyz+M+WPWfxnzh+z+M+SP2bxnzV/zOI/W/6Yxf+z+WMW/9nzxyz+c+SPWfznzB+z+M+VP2bxnzt/zOI/T/6Yxf9z+WMW/8/nj1n8v5A/ZvH/Yv6YxX/e/DGL/3z5Yxb/+fPHLP4L5I9Z/BfMH7P4fyl/zOK/UP6YxX/h/DGL/5fzxyz+i+SPWfy/kj9m8V80f8ziv1j+mMV/8fwxi/8S+WMW/6/mj1n8v5Y/ZvFfMn/M4r9U/pjFf+n8MYv/MvljFv9l88cs/svlj1n8v54/ZvFfPn/M4r9C/pjF/xv5Yxb/b+aPWfxXzB+z+K+UP2bx/1b+mMV/5fwxi/8q+WMW/1Xzxyz+q+WPWfxXzx+z+K+RP2bxXzN/zOK/Vv6YxX/t/DGL/zr5Yxb/dfPHLP7fzh+z+H8nf8ziv17+mMV//fwxi/8G+WMW/w3zxyz+G+WPWfy/mz9m8d84f8ziv0n+mMV/0/wxi//38scs/t/PH7P4/yB/zOK/Wf6YxX/z/DGL/xb5Yxb/H+aPWfy3zB+z+G+VP2bx3zp/zOK/Tf6YxX/b/DGL/3b5Yxb/H+WPWfy3zx+z+O+QP2bx/3H+mMX/J/ljFv8d88cs/j/NH7P475Q/ZvHfOX/M4r9L/pjF/2f5Yxb/n+ePWfx3zR+z+O+WP2bx3z1/zOL/i/wxi/8v88cs/nvkj1n8f5U/ZvH/df6Yxf83+WMW/9/mj1n898wfs/j/Ln/M4r9X/pjF//f5Yxb/P+SPWfz3zh+z+P8xf8ziv4/U/403Rn+/xX9fqf+/yuK/X/6Yxf9P+WMW//3zxyz+f84fs/gfkD9m8T8wf8zif1D+mMX/4Pwxi/8h+WMW/0Pzxyz+f8kfs/j/NX/M4n9Y/pjF//D8MYv/EfljFv8j88cs/kflj1n8j84fs/gfkz9m8T82f8zif1z+mMX/+Pwxi/8J+WMW/xPzxyz+J+WPWfxPzh+z+J+SP2bxPzV/zOJ/Wv6Yxf/0/DGL/xn5Yxb/M/PHLP5n5Y9Z/M/OH7P4n5M/ZvE/N3/M4n9e/pjF//z8MYv/BfljFv8L88cs/hflj1n8L84fs/hfkj9m8b80f8zif1n+mMX/8vwxi/8V+WMW/yvzxyz+V+WPWfyvzh+z+F+TP2bxvzZ/zOJ/Xf6Yxf/6/DGL/w35Yxb/G/PHLP435Y9Z/G/OH7P435I/ZvG/NX/M4n9b/pjF//b8MYv/HfljFv8788cs/nflj1n8784fs/jfkz9m8b83f8zif1/+mMX//vwxi/8D+WMW/wfzxyz+D+WPWfwfzh+z+D+SP2bxfzR/zOL/WP6Yxf/x/DGL/xP5Yxb/J/PHLP5P5Y9Z/J/OH7P4P5M/ZvF/Nn/M4v9c/pjF//n8MYv/C/ljFv8X88cs/i/lj1n8X84fs/i/kj9m8X81f8zi/1r+mMX/9fwxi/8b+WMS/zffzf+fs/gPyh+z+I+RP2bxH5w/ZvEfc7j/3mO8U9v1X5rFf0j7P2bxHyt/zOI/dv6YxX+c/DGL/7j5Yxb/8fLHLP5D88cs/uPnj1n8J8gfs/i/J3/M4j9h/pjFf6L8MYv/e/PHLP4T549Z/CfJH7P4T5o/ZvF/X/6Yxf/9+WMW/w/kj1n8J8sfs/h/MH/M4j95/pjFf4r8MYv/h/LHLP4fzh+z+H8kf8zi/9H8MYv/lPljFv+P5Y9Z/KfKH7P4T50/ZvGfJn/M4v/x/DGL/yfyxyz+0+aPWfynG43/5P8vtuu/NIv/J9v/MYv/9PljFv9P5Y9Z/D+dP2bx/0z+mMV/hvwxi/+M+WMW/5nyxyz+M+ePWfxnyR+z+M+aP2bxny1/zOL/2fwxi//s+WMW/znyxyz+c+aPWfznyh+z+M+dP2bxnyd/zOL/ufwxi//n88cs/l/IH7P4fzF/zOI/b/6YxX++/DGL//z5Yxb/BfLHLP4L5o9Z/L+UP2bxXyh/zOK/cP6Yxf/L+WMW/0Xyxyz+X8kfs/gvmj9m8V8sf8ziv3j+mMV/ifwxi/9X88cs/l/LH7P4L5k/ZvFfKn/M4r90/pjFf5n8MYv/svljFv/l8scs/l/PH7P4L58/ZvFfIX/M4v+N/DGL/zfzxyz+K+aPWfxXyh+z+H8rf8ziv3L+mMV/lfwxi/+q+WMW/9Xyxyz+q+ePWfzXyB+z+K+ZP2bxXyt/zOK/dv6YxX+d/DGL/7r5Yxb/b+ePWfy/kz9m8V8vf8ziv37+mMV/g/wxi/+G+WMW/43yxyz+380fs/hvnD9m8d8kf8ziv2n+mMX/e/ljFv/v549Z/H+QP2bx3yx/zOK/ef6YxX+L/DGL/w/zxyz+W+aPWfy3yh+z+G+dP2bx3yZ/zOK/bf6YxX+7/DGL/4/yxyz+2+ePWfx3yB+z+P84f8zi/5P8MYv/jvljFv+f5o9Z/HfKH7P475w/ZvHfJX/M4v+z/DGL/8/zxyz+u+aPWfx3yx+z+O+eP2bx/0X+mMX/l/ljFv898scs/r/KH7P4/zp/zOL/m/wxi/9v88cs/nvmj1n8f5c/ZvHfK3/M4v/7/DGL/x/yxyz+e+ePWfz/mD9m8d8nf8ziv2/+mMV/v/wxi/+f8scs/vvnj1n8/5w/ZvE/IH/M4n9g/pjF/6D8MYv/wfljFv9D8scs/ofmj1n8/5I/ZvH/a/6Yxf+w/DGL/+H5Yxb/I/LHLP5H5o9Z/I/KH7P4H50/ZvE/Jn/M4n9s/pjF/7j8MYv/8fljFv8T8scs/ifmj1n8T8ofs/ifnD9m8T8lf8zif2r+mMX/tPwxi//p+WMW/zPyxyz+Z+aPWfzPyh+z+J+dP2bxPyd/zOJ/bv6Yxf+8/DGL//n5Yxb/C/LHLP4X5o9Z/C/KH7P4X5w/ZvG/JH/M4n9p/pjF/7L8MYv/5fljFv8r8scs/lfmj1n8r8ofs/hfnT9m8b8mf8zif23+2KDHBgYM/tflj426/w9+pzfo/7S38b8+f8xy/L8hf8zif2P+mMX/pvwxi//N+WMW/1vyxyz+t+aPWfxvyx+z+N+eP2bxvyN/zOJ/Z/6Yxf+u/DGL/935Yxb/e/LHLP735o9Z/O/LH7P4358/ZvF/IH/M4v9g/pjF/6H8MYv/w/ljFv9H8scs/o/mj1n8H8sfs/g/nj9m8X8if8zi/2T+mMX/qfwxi//T+WMW/2fyxyz+z+aPWfyfyx+z+D+fP2bxfyF/zOL/Yv6Yxf+l/DGL/8v5Yxb/V/LHLP6v5o9Z/F/LH7P4v54/ZvF/I39M4v/m05rm/89Z/Aflj1n8x8gfs/gPzh+z+I+ZP2bxH5I/ZvEfK3/M4j92/pjFf5z8MYv/uPljFv/x8scs/kPzxyz+4+ePWfwnyB+z+L8nf8ziP2H+mMV/ovwxi/9788cs/hPnj1n8J8kfs/hPmj9m8X9f/pjF//35Yxb/D+SPWfwnyx+z+H8wf8ziP3n+mMV/ivwxi/+H8scs/h/OH7P4fyR/zOL/0fwxi/+U+WMW/4/lj1n8p8ofs/hPnT9m8Z8mf8zi//H8MYv/J/LHLP7T5o9Z/KfLH7P4fzJ/zOI/ff6Yxf9T+WMW/0/nj1n8P5M/ZvGfIX/M4j9j/pjFf6b8MYv/zPljFv9Z8scs/rPmj1n8Z8sfs/h/Nn/M4j97/pjFf478MYv/nPljFv+58scs/nPnj1n858kfs/h/Ln/M4v/5/DGL/xfyxyz+X8wfs/jPmz9m8Z8vf8ziP3/+mMV/gfwxi/+C+WMW/y/lj1n8F8ofs/gvnD9m8f9y/pjFf5H8MYv/V/LHLP6L5o9Z/BfLH7P4L54/ZvFfIn/M4v/V/DGL/9fyxyz+S+aPWfyXyh+z+C+dP2bxXyZ/zOK/bP6YxX+5/DGL/9fzxyz+y+ePWfxXyB+z+H8jf8zi/838MYv/ivljFv+V8scs/t/KH7P4r5w/ZvFfJX/M4r9q/pjFf7X8MYv/6vljFv818scs/mvmj1n818ofs/ivnT9m8V8nf8ziv27+mMX/2/ljFv/v5I9Z/NfLH7P4r58/ZvHfIH/M4r9h/pjFf6P8MYv/d/PHLP4b549Z/DfJH7P4b5o/ZvH/Xv6Yxf/7+WMW/x/kj1n8N8sfs/hvnj9m8d8if8zi/8P8MYv/lvljFv+t8scs/lvnj1n8t8kfs/hvmz9m8d8uf8zi/6P8MYv/9vljFv8d8scs/j/OH7P4/yR/zOK/Y/6Yxf+n+WMW/53yxyz+O+ePWfx3yR+z+P8sf8zi//P8MYv/rvljFv/d8scs/rvnj1n8f5E/ZvH/Zf6YxX+P/DGL/6/yxyz+v84fs/j/Jn/M4v/b/DGL/575Yxb/3+WPWfz3yh+z+P8+f8zi/4f8MYv/3vljFv8/5o9Z/PfJH7P475s/ZvHfL3/M4v+n/DGL//75Yxb/P+ePWfwPyB+z+B+YP2bxPyh/zOJ/cP6Yxf+Q/DGL/6H5Yxb/v+SPWfz/mj9m8T8sf8zif3j+mMX/iPwxi/+R+WMW/6Pyxyz+R+ePWfyPyR+z+B+bP2bxPy5/zOJ/fP6Yxf+E/DGL/4n5Yxb/k/LHLP4n549Z/E/JH7P4n5o/ZvE/LX/M4n96/pjF/4z8MYv/mfljFv+z8scs/mfnj1n8z8kfs/ifmz9m8T8vf8zif37+mMX/gvwxi/+F+WMW/4vyH6Uhb761+F+cP2bxvyR/zOJ/af6Yxf+y/DGL/+X5Yxb/K/LHLP5X5o9Z/K/KH7P4X50/ZvG/Jn/M4n9t/ti71n/Mf5g6+Lr8sXet/yj7//X5Yxb/G/LHLP435o9Z/G/KH7P435w/ZvG/JX/M4n9r/pjF/7b8MYv/7fljFv878scs/nfmj1n878ofs/jfnT9m8b8nf8zif2/+mMX/vvwxi//9+WMW/wfyxyz+D+aPWfwfyh+z+D+cP2bxfyR/zOL/aP6Yxf+x/DGL/+P5Yxb/J/LHLP5P5o9Z/J/KH7P4P50/ZvF/Jn/M4v9s/pjF/7n8MYv/8/ljFv8X8scs/i/mj1n8X8ofs/i/nD9m8X8lf8zi/2r+mMX/tfwxi//r+WMW/zfyxyT+bz4bbP7/nMV/UP6YxX+M/DGL/+D8MYv/mPljFv8h+WMW/7Hyxyz+Y+ePWfzHyR+z+I+bP2bxHy9/zOI/NH/M4j9+/pjFf4L8MYv/e/LHLP4T5o9Z/CfKH7P4v/df+UsfHBb/ib3Eo83iP0n+mMV/0vwxi//78scs/u/PH7P4fyB/zOI/Wf6Yxf+D+WMW/8nzxyz+U+SPWfw/lD9m8f9w/pjF/yP5Yxb/j+aPWfynzB+z+H8sf8ziP1X+mMV/6vwxi/80+WMW/4/nj1n8P5E/ZvGfNn/M4j9d/pjF/5P5Yxb/6fPHLP6fyh+z+H86f8zi/5n8MYv/DPljFv8Z88cs/jPlj1n8Z84fs/jPkj9m8Z81f8ziP1v+mMX/s/ljFv/Z88cs/nPkj1n858wfs/jPlT9m8Z87f8ziP0/+mMX/c/ljFv/P549Z/L+QP2bx/2L+mMV/3vwxi/98+WMW//nzxyz+C+SPWfwXzB+z+H8pf8ziv1D+mMV/4fwxi/+X88cs/ovkj1n8v5I/ZvFfNH/M4r9Y/pjFf/H8MYv/EvljFv+v5o9Z/L+WP2bxXzJ/zOK/VP6YxX/p/DGL/zL5Yxb/ZfPHLP7L5Y9Z/L+eP2bxXz5/zOK/Qv6Yxf8b+WMW/2/mj1n8V8wfs/ivlD9m8f9W/pjFf+X8MYv/KvljFv9V88cs/qvlj1n8V88fs/ivkT9m8V8zf8ziv1b+mMV/7fwxi/86+WMW/3Xzxyz+384fs/h/J3/M4r9e/pjFf/38sXev/7z/4L9B/ti71/8f9/8N88cs/hvlj1n8v5s/ZvHfOH/M4r9J/pjFf9P8MYv/9/LHLP7fzx+z+P8gf8ziv1n+mMV/8/wxi/8W+WMW/x/mj1n8t8wfs/hvlT9m8d86f8ziv03+mMV/2/wxi/92+WMW/x/lj1n8t88fs/jvkD9m8f9x/pjF/yf5Yxb/HfPHLP4/zR+z+O+UP2bx3zl/zOK/S/6Yxf9n+WMW/5/nj1n8d80fs/jvlj9m8d89f8zi/4v8MYv/L/PHLP575I9Z/H+VP2bx/3X+mMX/N/ljFv/f5o9Z/PfMH7P4/y5/zOK/V/6Yxf/3+WMW/z/kj1n8984fs/j/MX/M4r9P/pjFf9/8MYv/fvljFv8/5Y9Z/PfPH7P4/zl/zOJ/QP6Yxf/A/DGL/0H5Yxb/g/PHLP6H5I9Z/A/NH7P4/yV/zOL/1/wxi/9h+WMW/8Pzxyz+R+SPWfyPzB+z+B+VP2bxPzp/zOJ/TP6Yxf/Y/DGL/3H5Yxb/4/PHLP4n5I9Z/E9U+n96zn81h8X/JKX/v87if3L+mMX/lPwxi/+p+WMW/9Pyxyz+p+ePWfzPyB+z+J+ZP2bxPyt/zOJ/dv6Yxf+c/DGL/7n5Yxb/8/LHLP7n549Z/C/IH7P4X5g/ZvG/KH/M4n9x/pjF/5L8MYv/pfljFv/L8scs/pfnj1n8r8gfs/hfmT9m8b8qf8zif3X+mMX/mvwxi/+1+WMW/+vyxyz+1+ePWfxvyB+z+N+YP2bxvyl/zOJ/c/6Yxf+W/DGL/635Yxb/2/LHLP63549Z/O/IH7P435k/ZvG/K3/M4n93/pjF/578MYv/vfljFv/78scs/vfnj1n8H8gfs/g/mD9m8X8of8zi/3D+mMX/kfwxi/+j+WMW/8fyxyz+j+ePWfyfyB+z+D+ZP2bxfyp/zOL/dP6Yxf+Z/DGL/7P5Yxb/5/LHLP7P549Z/F/IH7P4v5g/ZvF/KX/M4v9y/pjF/5X8MYv/q/ljFv/X8scs/q/nj1n838gfk/gPGcgfs/gPyh+z+I+RP2bxH5w/ZvEfM3/M4j8kf8ziP1b+mMV/7Pwxi/84+WMW/3Hzxyz+4+WPWfyH5o9Z/MfPH7P4T5A/ZvF/T/6YxX/C/DGL/0T5Yxb/9+aPWfwnzh+z+E+SP2bxnzR/zOL/vvwxi//788cs/h/IH7P4T5Y/ZvH/YP6YxX/y/DGL/xT5Yxb/D+WPWfw/nD9m8f9I/pjF/6P5Yxb/KfPHLP4fyx+z+E+VP2bxnzp/zOI/Tf6Yxf/j+WMW/0/kj1n8p80fs/hPlz9m8f9k/pjFf/r8MYv/p/LHLP6fzh+z+H8mf8ziP0P+mMV/xvwxi/9M+WMW/5nzxyz+s+SPWfxnzR+z+M+WP2bx/2z+mMV/9vwxi/8c+WMW/znzxyz+c+WPWfznzh+z+M+TP2bx/1z+mMX/8/ljFv8v5I9Z/L+YP2bxnzd/zOI/X/6YxX/+/DGL/wL5Yxb/BfPHLP5fyh+z+C+UP2bxXzh/zOL/5fwxi/8i+WMW/6/kj1n8F80fs/gvlj9m8V88f8ziv0T+mMX/q/ljFv+v5Y9Z/JfMH7P4L5U/ZvFfOn/M4r9M/pjFf9n8MYv/cvljFv+v549Z/JfPH7P4r5A/ZvH/Rv6Yxf+b+WMW/xXzxyz+K+WPWfy/lT9m8V85f8ziv0r+mMV/1fwxi/9q+WMW/9Xzxyz+a+SPWfzXzB+z+K+VP2bxXzt/zOK/Tv6YxX/d/DGL/7fzxyz+38kfs/ivlz9m8V8/f8ziv0H+mMV/w/wxi/9G+WMW/+/mj1n8N84fs/hvkj9m8d80f8zi/738MYv/9/PHLP4/yB+z+G+WP2bx3zx/zOK/Rf6Yxf+H+WMW/y3zxyz+W+WPWfy3zh+z+G+TP2bx3zZ/zOK/Xf6Yxf9H+WMW/+3zxyz+O+SPWfx/nD9m8f9J/pjFf8f8MYv/T/PHLP475Y9Z/HfOH7P475I/ZvH/Wf6Yxf/n+WMW/13zxyz+u+WPWfx3zx+z+P8if8zi/8v8MYv/HvljFv9f5Y9Z/H+dP2bx/03+mMX/t/ljFv8988cs/r/LH7P475U/ZvH/ff6Yxf8P+WMW/73zxyz+f8wfs/jvkz9m8d83f8ziv1/+mMX/T/ljFv/988cs/n/OH7P4H5A/ZvE/MH/M4n9Q/pjF/+D8MYv/IfljFv9D88cs/n/JH7P4/zV/zOJ/WP6Yxf/w/DGL/xH5Yxb/I/PHLP5H5Y9Z/I/OH7P4H5M/ZvE/Nn/M4n9c/pjF//j8MYv/CfljFv8T88cs/iflj1n8T84fs/ifkj9m8T81f8zif1r+mMX/9Pwxi/8Z+WMW/zPzxyz+Z+WPWfzPzh+z+J+TP2bxPzd/zOJ/Xv6Yxf/8/DGL/wX5Yxb/C/PHLP4X5Y9Z/C/OH7P4X5I/ZvG/NH/M4n9Z/pjF//L8MYv/FfljFv8r88cs/lflj1n8r84fs/hfkz9m8b82f8zif13+mMX/+vwxi/8NIv8x/oN5Lf43ivz/kyz+N+WPWfxvzh+z+N+SP2bxvzV/zOJ/W/6Yxf/2/DGL/x35Yxb/O/PHLP535Y9Z/O/OH7P435M/ZvG/N3/M4n9f/pjF//78MYv/A/ljFv8H88cs/g/lj1n8H84fs/g/kj9m8X80f8zi/1j+mMX/8fwxi/8T+WMW/yfzxyz+T+WPWfyfzh+z+D+TP2bxfzZ/zOL/XP6Yxf/5/DGL/wv5Yxb/F/PHLP4v5Y9Z/F/OH7P4v5I/ZvF/NX/M4v9a/pjF//X8MYv/G/ljEv+xBvLHLP6D8scs/mPkj1n8B+ePWfzHzB+z+A/JH7P4j5U/ZvEfO3/M4j9O/pjFf9z8MYv/ePljFv+h+WMW//Hzxyz+E+SPWfzfkz9m8Z8wf8ziP1H+mMX/vfljFv+J88cs/pPkj1n8J80fs/i/L3/M4v/+/DGL/wfyxyz+k+WPWfw/mD9m8Z88f8ziP0X+mMX/Q/ljFv8P549Z/D+SP2bx/2j+mMV/yvwxi//H8scs/lPlj1n8p84fs/hPkz9m8f94/pjF/xP5Yxb/afPHLP7T5Y9Z/D+ZP2bxnz5/zOL/qfwxi/+n88cs/p/JH7P4z5A/ZvGfMX/M4j9T/pjFf+b8MYv/LPljFv9Z88cs/rPlj1n8P5s/ZvGfPX/M4j9H/pjFf878MYv/XPljFv+588cs/vPkj1n8P5c/ZvH/fP6Yxf8L+WMW/y/mj1n8580fs/jPlz9m8Z8/f8ziv0D+mMV/wfwxi/+X8scs/gvlj1n8F84fs/h/OX/M4r9I/pjF/yv5Yxb/RfPHLP6L5Y9Z/BfPH7P4L5E/ZvH/av6Yxf9r+WMW/yXzxyz+S+WPWfyXzh+z+C+TP2bxXzZ/zOK/XP6Yxf/r+WMW/+Xzxyz+K+SPWfy/kT9m8f9m/pjFf8X8MYv/SvljFv9v5Y9Z/FfOH7P4r5I/ZvFfNX/M4r9a/pjFf/X8MYv/GvljFv8188cs/mvlj1n8184fs/ivkz9m8V83f8zi/+38MYv/d/LHLP7r5Y9Z/NfPH7P4b5A/ZvHfMH/M4r9R/pjF/7v5Yxb/jfPHLP6b5I9Z/DfNH7P4fy9/zOL//fwxi/8P8scs/pvlj1n8N88fs/hvkT9m8f9h/pjFf8v8MYv/VvljFv+t88cs/tvkj1n8t80fs/hvlz9m8f9R/pjFf/v8MYv/DvljFv8f549Z/H+SP2bx3zF/zOL/0/wxi/9O+WMW/53zxyz+u+SPWfx/lj9m8f95/pjFf9f8MYv/bvljFv/d88cs/r/IH7P4/zJ/zOK/R/6Yxf9X+WMW/1/nj1n8f5M/ZvH/bf6YxX/P/DGL/+/yxyz+e+WPWfx/nz9m8f9D/pjFf+/8MYv/H/PHLP775I9Z/PfNH7P475c/ZvH/U/6YxX///DGL/5/zxyz+B+SPWfwPzB+z+B+UP2bxPzh/zOJ/SP6Yxf/Q/DGL/1/yxyz+f80fs/gflj9m8T88f8zif0T+mMX/yPwxi/9R+WMW/6Pzxyz+x+SPWfyPzR+z+B+XP2bxPz5/zOJ/Qv6Yxf/E/DGL/0n5Yxb/k/PHLP6n5I9Z/E/NH7P4n5Y/ZvE/PX/M4n9G/pjF/8z8MYv/WfljFv+z88cs/ufkj1n8z80fs/iflz9m8T8/f8zif0H+mMX/wvwxi/9F+WMW/4vzxyz+l+SPWfwvzR+z+F+WP2bxvzx/zOJ/Rf6Yxf/K/DGL/1X5Yxb/q/PHLP7X5I9Z/K/NH7P4X5c/ZvG/Pn/M4n9D/pjF/8b8MYv/TfljFv+b88cs/rfkj1n8b80fs/jflj9m8b89f8zif0f+mMX/zvwxi/9d+WMW/7vzxyz+9+SPWfzvzR+z+N+XP2bxvz9/zOL/QP6Yxf/B/DGL/0P5Yxb/h/PHLP6P5I9Z/B/NH7P4P5Y/ZvF/PH/M4v9E/pjF/8n8MYv/U/ljFv+n88cs/s/kj1n8n80fs/g/lz9m8X8+f8zi/0L+mMX/xfwxi/9L+WMW/5fzxyz+r+SPWfxfzR+z+L+WP2bxfz1/zOL/Rv6YxH/sgfwxi/+g/DGL/xj5Yxb/wfljFv8x88cs/kPyxyz+Y+WPWfzHzh+z+I+TP2bxHzd/zOI/Xv6YxX9o/pjFf/z8MYv/BPljFv/35I9Z/CfMH7P4T5Q/ZvF/b/6YxX/i/DGL/yT5Yxb/SfPHLP7vyx+z+L8/f8zi/4H8MYv/ZPljFv8P5o9Z/CfPH7P4T5E/ZvH/UP6Yxf/D+WMW/4/kj1n8P5o/ZvGfMn/M4v+x/DGL/1T5Yxb/qfPHLP7T5I9Z/D+eP2bx/0T+mMV/2vwxi/90+WMW/0/mj1n8p88fs/h/Kn/M4v/p/DGL/2fyxyz+M+SPWfxnzB+z+M+UP2bxnzl/zOI/S/6YxX/W/DGL/2z5Yxb/z+aPWfxnzx+z+M+RP2bxnzN/zOI/V/6YxX/u/DGL/zz5Yxb/z+WPWfw/nz9m8f9C/pjF/4v5Yxb/efPHLP7z5Y9Z/OfPH7P4L5A/ZvFfMH/M4v+l/DGL/0L5Yxb/hfPHLP5fzh+z+C+SP2bx/0r+mMV/0fwxi/9i+WMW/8Xzxyz+S+SPWfy/mj9m8f9a/pjFf8n8MYv/UvljFv+l88cs/svkj1n8l80fs/gvlz9m8f96/pjFf/n8MYv/CvljFv9v5I9Z/L+ZP2bxXzF/zOK/Uv6Yxf9b+WMW/5Xzxyz+q+SPWfxXzR+z+K+WP2bxXz1/zOK/Rv6YxX/N/DGL/1r5Yxb/tfPHLP7r5I9Z/NfNH7P4fzt/zOL/nfwxi/96+WMW//Xzxyz+G+SPWfw3zB+z+G+UP2bx/27+mMV/4/wxi/8m+WMW/03zxyz+38sfs/h/P3/M4v+D/DGL/2b5Yxb/zfPHLP5b5I9Z/H+YP2bx3zJ/zOK/Vf6YxX/r/DGL/zb5Yxb/bfPHLP7b5Y9Z/H+UP2bx3z5/zOK/Q/6Yxf/H+WMW/5/kj1n8d8wfs/j/NH/M4r9T/pjFf+f8MYv/LvljFv+f5Y9Z/H+eP2bx3zV/zOK/W/6YxX/3/DGL/y/yxyz+v8wfs/jvkT9m8f9V/pjF/9f5Yxb/3+SPWfx/mz9m8d8zf8zi/7v8MYv/XvljFv/f549Z/P+QP2bx3zt/zOL/x/wxi/8++WMW/33zxyz+++WPWfz/lD9m8d8/f8zi/+f8MYv/AfljFv8D7f6DebLF/yC7/9tk8T84f8zif0j+mMX/0Pwxi/9f8scs/n/NH7P4H5Y/ZvE/PH/M4n9E/pjF/8j8MYv/UfljFv+j88cs/sfkj1n8j80fs/gflz9m8T8+f8zif0L+mMX/xPwxi/9J+WMW/5Pzxyz+p+SPWfxPzR+z+J+WP2bxPz1/zOJ/Rv6Yxf/M/DGL/1n5Yxb/s/PHLP7n5I9Z/M/NH7P4n5c/ZvE/P3/M4n9B/pjF/8L8MYv/RfljFv+L88cs/pfkj1n8L80fs/hflj9m8b88f8zif0X+mMX/yvwxi/9V+WMW/6vzxyz+1+SPWfyvzR+z+F+XP2bxvz5/zOJ/Q/6Yxf/G/DGL/035Yxb/m/PHLP635I9Z/G/NH7P435Y/ZvG/PX/M4n9H/pjF/878MYv/XfljFv+788cs/vfkj1n8780fs/jflz9m8b8/f8zi/0D+mMX/wfxHNOQfbln8H8ofs/g/nD9m8X8kf8zi/2j+mMX/sfwxi//j+WMW/yfyxyz+T+aPWfyfyh+z+D+dP2bxfyZ/zOL/bP6Yxf+5/DGL//P5Yxb/F/LHLP4v5o9Z/F/KH7P4v5w/ZvF/JX/M4v9q/pjF/7X8MYv/6/ljFv838sck/uMM5I9Z/Aflj1n8x8gfs/gPzh+z+I+ZP2bxH5I/ZvEfK3/M4j92/pjFf5z8MYv/uPljFv/x8scs/kPzxyz+4+ePWfwnyB+z+L8nf8ziP2H+mMV/ovwxi/9788cs/hPnj1n8J8kfs/hPmj/2LvQfi/zflz/2LvTH/f/9+WMW/w/kj1n8Jxut/xuD/+9v2H9nFv8Ptv9jFv/J88cs/lPkj1n8P5Q/ZvH/cP6Yxf8j+WMW/4/mj1n8p8wfs/h/LH/M4j9V/pjFf+r8MYv/NPljFv+P549Z/D+RP2bxnzZ/zOI/Xf6Yxf+T+WMW/+nzxyz+n8ofs/h/On/M4v+Z/DGL/wz5Yxb/GfPHLP4z5Y9Z/GfOH7P4z5I/ZvGfNX/M4j9b/pjF/7P5Yxb/2fPHLP5z5I9Z/OfMH7P4z5U/ZvGfO3/M4j9P/pjF/3P5Yxb/z+ePWfy/kD9m8f9i/pjFf978MYv/fPljFv/588cs/gvkj1n8F8wfs/h/KX/M4r9Q/pjFf+H8MYv/l/PHLP6L5I9Z/L+SP2bxXzR/zOK/WP6YxX/x/DGL/xL5Yxb/r+aPWfy/lj9m8V8yf8ziv1T+mMV/6fwxi/8y+WMW/2Xzxyz+y+WPWfy/nj9m8V8+f8ziv0L+mMX/G/ljFv9v5o9Z/FfMH7P4r5Q/ZvH/Vv6YxX/l/DGL/yr5Yxb/VfPHLP6r5Y9Z/FfPH7P4r5E/ZvFfM3/M4r9W/pjFf+38MYv/OvljFv9188cs/t/OH7P4fyd/zOK/Xv6YxX/9/DGL/wb5Yxb/DfPHLP4b5Y9Z/L+bP2bx3zh/zOK/Sf6YxX/T/DGL//fyxyz+388fs/j/IH/M4r9Z/pjFf/P8MYv/FvljFv8f5o9Z/LfMH7P4b5U/ZvHfOn/M4r9N/pjFf9v8MYv/dvljFv8f5Y9Z/LfPH7P475A/ZvH/cf6Yxf8n+WMW/x3zxyz+P80fs/jvlD9m8d85f8ziv0v+mMX/Z/ljFv+f549Z/HfNH7P475Y/ZvHfPX/M4v+L/DGL/y/zxyz+e+SPWfx/lT9m8f91/pjF/zf5Yxb/3+aPWfz3zB+z+P8uf8ziv1f+mMX/9/ljFv8/5I9Z/PfOH7P4/zF/zOK/T/6YxX/f/DGL/375Yxb/P+WPvfv8/678Vv/988feff68//85f8zif0D+mMX/wPwxi/9B+WMW/4Pzxyz+h+SPWfwPzR+z+P8lf8zi/9f8MYv/YfljFv/D88cs/kfkj1n8j8wfs/gflT9m8T86f8zif0z+mMX/2Pwxi/9x+WMW/+Pzxyz+J+SPWfxPzB+z+J+UP2bxPzl/zOJ/Sv6Yxf/U/DGL/2n5Yxb/0/PHLP5n5I9Z/M/MH7P4n5U/ZvE/O3/M4n9O/pjF/9z8MYv/efljFv/z88cs/hfkj1n8L8wfs/hflD9m8b84f8zif0n+mMX/0vwxi/9l+WMW/8vzxyz+V+SPWfyvzB+z+F+VP2bxvzp/zOJ/Tf6Yxf/a/DGL/3X5Yxb/6/PHLP435I9Z/G/MH7P435Q/ZvG/OX/M4n9L/pjF/9b8MYv/bfljFv/b88cs/nfkj1n878wfs/jflT9m8b87f8zif0/+mMX/3vwxi/99+WMW//vzxyz+D+SPWfwfzB+z+D+UP2bxfzh/zOL/SP6Yxf/R/DGL/2P5Yxb/x/PHLP5P5I9Z/J/MH7P4P5U/ZvF/On/M4v9M/pjF/9n8MYv/c/ljFv/n88cs/i/kj1n8X8wfs/i/lD9m8X85f8zi/0r+mMX/1fwxi/9r+WMW/9fzxyz+b+SPSfzHHcgfs/gPyh+z+I+RP2bxH5w/ZvEfM3/M4j8kf8ziP1b+mMV/7Pwxi/84+WMW/3Hzxyz+4+WPWfyH5o9Z/MfPH7P4T5A/ZvF/T/6YxX/C/DGL/0TkP87/w+36L83i/972f8ziP3H+mMV/kvwxi/+k+WMW//flj1n8358/ZvH/QP6YxX+y/DGL/wfzxyz+k+ePWfynyB+z+H8of8zi/+H8MYv/R/LHLP4fzR+z+E+ZP2bx/1j+mMV/qvwxi//U+WMW/2nyxyz+H88fs/h/In/M4j9t/pjFf7r8MYv/J/PHLP7T549Z/D+VP2bx/3T+mMX/M/ljFv8Z8scs/jPmj1n8Z8ofs/jPnD9m8Z8lf8ziP2v+mMV/tvwxi/9n88cs/rPnj1n858gfs/jPmT9m8Z8rf8ziP3f+mMV/nvwxi//n8scs/p/PH7P4fyF/zOL/xfwxi/+8+WMW//nyxyz+8+ePWfwXyB+z+C+YP2bx/1L+mMV/ofwxi//C+WMW/y/nj1n8F8kfs/h/JX/M4r9o/pjFf7H8MYv/4vljFv8l8scs/l/NH7P4fy1/zOK/ZP6YxX+p/DGL/9L5Yxb/ZfLHLP7L5o9Z/JfLH7P4fz1/zOK/fP6YxX+F/DGL/zfyxyz+38wfs/ivmD9m8V8pf8zi/638MYv/yvljFv9V8scs/qvmj1n8V8sfs/ivnj9m8V8jf8ziv2b+mMV/rfwxi//a+WMW/3Xyxyz+6+aPWfy/nT9m8f9O/pjFf738MYv/+vljFv8N8scs/hvmj1n8N8ofs/h/N3/M4r9x/pjFf5P8MYv/pvljFv/v5Y9Z/L+fP2bx/0H+mMV/s/wxi//m+WMW/y3yxyz+P8wfs/hvmT9m8d8qf8ziv3X+mMV/m/wxi/+2+WMW/+3yxyz+P8ofs/hvnz9m8d8hf8zi/+P8MYv/T/LHLP475o9Z/H+aP2bx3yl/zOK/c/6YxX+X/DGL/8/yxyz+P88fs/jvmj9m8d8tf8ziv3v+mMX/F/ljFv9f5o9Z/PfIH7P4/yp/zOL/6/wxi/9v8scs/r/NH7P475k/ZvH/Xf6YxX+v/DGL/+/zxyz+f8gfs/jvnT9m8f9j/pjFf5/8MYv/vvljFv/98scs/n/KH7P4758/ZvH/c/6Yxf+A/DGL/4H5Yxb/g/LHLP4H549Z/A/JH7P4H5o/ZvH/S/6Yxf+v+WMW/8Pyxyz+h+ePWfyPyB+z+B+ZP2bxPyp/zOJ/dP6Yxf+Y/DGL/7H5Yxb/4/LHLP7H549Z/E/IH7P4n5g/ZvE/KX/M4n9y/pjF/5T8MYv/qfljFv/T8scs/qfnj1n8z8gfs/ifmT9m8T8rf8zif3b+mMX/nPwxi/+5+WMW//Pyxyz+5+ePWfwvyB+z+F+YP2bxvyh/zOJ/cf6Yxf+S/DGL/6X5Yxb/y/LHLP6X549Z/K/IH7P4X5k/ZvG/Kn/M4n91/pjF/5r8MYv/tfljFv/r8scs/tfnj1n8b8gfs/jfmD9m8b8pf8zif3P+mMX/lvwxi/+t+WMW/9vyxyz+t+ePWfzvyB+z+N+ZP2bxvyt/zOJ/d/6Yxf+e/DGL/735Yxb/+/LHLP73549Z/B/IH7P4P5g/ZvF/KH/M4v9w/pjF/5H8MYv/o/ljFv/H8scs/o/nj1n8n8gfs/g/mT9m8X8qf8zi/3T+mMX/mfwxi/+z+WMW/+fyxyz+z+ePWfxfyB+z+L+YP2bxfyl/zOL/cv6Yxf+V/DGL/6v5Yxb/1/LHLP6v549Z/N/IH5P4jzeQP2bxH5Q/ZvEfI3/M4j84f8ziP2b+mMV/SP6YxX+s/DGL/9j5Yxb/cfLHLP7j5o9Z/MfLH7P4D80fs/iPnz9m8Z8gf8zi/578MYv/hPljFv+J8scs/u/NH7P4T5w/ZvGfJH/M4j9p/pjF/335Yxb/9+ePWfw/kD9m8Z8sf8zi/8H8MYv/5PljFv8p8scs/h/KH7P4fzh/zOL/kfwxi/9H88cs/lPmj1n8P5Y/ZvGfKn/M4j91/pjFf5r8MYv/x/PHLP6fyB+z+E+bP2bxny5/zOL/yfwxi//0+WMW/0/lj1n8P50/ZvH/TP6YxX+G/DGL/4z5Yxb/mfLHLP4z549Z/GfJH7P4z5o/ZvGfLX/M4v/Z/DGL/+z5Yxb/OfLHLP5z5o9Z/OfKH7P4z50/ZvGfJ3/M4v+5/DGL/+fzxyz+X8gfs/h/MX/M4j9v/pjFf778MYv//PljFv8F8scs/gvmj1n8v5Q/ZvFfKH/M4r9w/pjF/8v5Yxb/RfLHLP5fyR+z+C+aP2bxXyx/zOK/eP6YxX+J/DGL/1fzxyz+X8sfs/gvmT9m8V8qf8ziv3T+mMV/mfwxi/+y+WMW/+Xyxyz+X88fs/gvnz9m8V8hf8zi/438MYv/N/PHLP4r5o9Z/FfKH7P4fyt/zOK/cv6YxX+V/DGL/6r5Yxb/1fLHLP6r549Z/NfIH7P4r5k/ZvFfK3/M4r92/pjFf538MYv/uvljFv9v549Z/L+TP2bxXy9/zOK/fv6YxX+D/DGL/4b5Yxb/jfLHLP7fzR+z+G+cP2bx3yR/zOK/af6Yxf97+WMW/+/nj1n8f5A/ZvHfLH/M4r95/pjFf4v8MYv/D/PHLP5b5o9Z/LfKH7P4b50/ZvHfJn/M4r9t/pjFf7v8MYv/j/LHLP7b549Z/HfIH7P4/zh/zOL/k/wxi/+O+WMW/5/mj1n8d8ofs/jvnD9m8d8lf8zi/7P8MYv/z/PHLP675o9Z/HfLH7P4754/ZvH/Rf6Yxf+X+WMW/z3yxyz+v8ofs/j/On/M4v+b/DGL/2/zxyz+e+aPWfx/lz9m8d8rf8zi//v8MYv/H/LHLP57549Z/P+YP2bx3yd/zOK/b/6YxX+//DGL/5/yxyz+++ePWfz/nD9m8T8gf8zif2D+mMX/oPwxi//B+WMW/0Pyxyz+h+aPWfz/kj9m8f9r/pjF/7D8MYv/4fljFv8j8scs/kfmj1n8j8ofs/gfnT9m8T8mf8zif2z+mMX/uPwxi//x+WMW/xPyxyz+J+aPWfxPyh+z+J+cP2bxPyV/zOJ/av6Yxf+0/DGL/+n5Yxb/M/LHLP5n5o9Z/M/KH7P4n50/ZvE/J3/M4n9u/pjF/7z8MYv/+fljFv8L8scs/hfmj1n8L8ofs/hfnD9m8b8kf8zif2n+mMX/svwxi//l+WMW/yvyxyz+V+aPWfyvyh+z+F+dP2bxvyZ/zOJ/bf6Yxf+6/DGL//X5Yxb/G/LHLP435o9Z/G/KH7P435w/ZvG/JX/M4n9r/pjF/7b8MYv/7V7/cUd3p8X/Dq//aLP435k/ZvG/K3/M4n93/pjF/578MYv/vfljFv/78scs/vfnj1n8H8gfs/g/mD9m8X8of8zi/3D+mMX/kfwxi/+j+WMW/8fyxyz+j+ePWfyfyB+z+D+ZP2bxfyp/zOL/dP6Yxf+Z/DGL/7P5Yxb/5/LHLP7P549Z/F/IH7P4v5g/ZvF/KX/M4v9y/pjF/5X8MYv/q/ljFv/X8scs/q/nj1n838gfk/gPHcgfs/gPyh+z+I+RP2bxH5w/ZvEfM3/M4j8kf8ziP1b+mMV/7Pwxi/84+WMW/3Hzxyz+4+WPWfyH5o9Z/MfPH7P4T5A/ZvF/T/6YxX/C/DGL/0T5Yxb/9+aPWfwnzh+z+E+SP2bxnzR/zOL/vvwxi//788cs/h/IH7P4T5Y/ZvH/YP6YxX/y/DGL/xT5Yxb/D+WPWfw/nD9m8f9I/pjF/6P5Yxb/KfPHLP4fyx+z+E+VP2bxnzp/zOI/Tf6Yxf/j+WMW/0/kj1n8p80fs/hPlz9m8f9k/pjFf/r8MYv/p/LHLP6fzh+z+H8mf8ziP0P+mMV/xvwxi/9M+WMW/5nzxyz+s+SPWfxnzR+z+M+WP2bx/2z+mMV/9vwxi/8c+WMW/znzxyz+c+WPWfznzh+z+M+TP2bx/1z+mMX/8/ljFv8v5I9Z/L+YP2bxnzd/zOI/X/6YxX/+/DGL/wL5Yxb/BfPHLP5fyh+z+C+UP2bxXzh/zOL/5fwxi/8i+WMW/6/kj1n8F80fs/gvlj9m8V88f8ziv0T+mMX/q/ljFv+v5Y9Z/JfMH7P4L5U/ZvFfOn/M4r9M/pjFf9n8MYv/cvljFv+v549Z/JfPH7P4r5A/ZvH/Rv6Yxf+b+WMW/xXzxyz+K+WPWfy/lT9m8V85f8ziv0r+mMV/1fwxi/9q+WMW/9Xzxyz+a+SPWfzXzB+z+K+VP2bxXzt/zOK/Tv6YxX/d/DGL/7fzxyz+38kfs/ivlz9m8V8/f8ziv0H+mMV/w/wxi/9G+WMW/+/mj1n8N84fs/hvkj9m8d80f8zi/738MYv/9/PHLP4/yB+z+G+WP2bx3zx/zOK/Rf6Yxf+H+WMW/y3zxyz+W+WPWfy3zh+z+G+TP2bx3zZ/zOK/Xf6Yxf9H+WMW/+3zxyz+O+SPWfx/nD9m8f9J/pjFf8f8MYv/T/PHLP475Y9Z/HfOH7P475I/ZvH/Wf6Yxf/n+WMW/13zxyz+u+WPWfx3zx97t/uPNP9F/ti73X9EQ3+ZP2bx3yN/zOL/q/wxi/+v88cs/r/JH7P4/zZ/zOK/Z/6Yxf93+WMW/73yxyz+v88fs/j/IX/M4r93/pjF/4/5Yxb/ffLHLP775o9Z/PfLH7P4/yl/zOK/f/6Yxf/P+WMW/wPyxyz+B+aPWfwPyh+z+B+cP2bxPyR/zOJ/aP6Yxf8v+WMW/7/mj1n8D8sfs/gfnj9m8T8if8zif2T+mMX/qPwxi//R+WMW/2Pyxyz+x+aPWfyPyx+z+B+fP2bxPyF/zOJ/Yv6Yxf+k/DGL/8n5Yxb/U/LHLP6n5o9Z/E/LH7P4n54/ZvE/I3/M4n9m/pjF/6z8MYv/2fljFv9z8scs/ufmj1n8z8sfs/ifnz9m8b8gf8zif2H+mMX/ovwxi//F+WMW/0vyxyz+l+aPWfwvyx+z+F+eP2bxvyJ/zOJ/Zf6Yxf+q/DGL/9X5Yxb/a/LHLP7X5o9Z/K/LH7P4X58/ZvG/IX/M4n9j/pjF/6b8MYv/zfljFv9b8scs/rfmj1n8b8sfs/jfnj9m8b8jf8zif2f+mMX/rvwxi//d+WMW/3vyxyz+9+aPWfzvyx+z+N+fP2bxfyB/zOL/YP6Yxf+h/DGL/8P5Yxb/R/LHLP6P5o9Z/B/LH7P4P54/ZvF/In/M4v9k/pjF/6n8MYv/0/ljFv9n8scs/s/mj1n8n8sfs/g/nz9m8X8hf8zi/2L+mMX/pfwxi//L+WMW/1fyxyz+r+aPWfxfyx+z+L+eP2bxfyN/TOI//kD+mMV/UP6YxX+M/DGL/+D8MYv/mPljFv8h+WMW/7Hyxyz+Y+ePWfzHyR+z+I+bP2bxHy9/zOI/NH/M4j9+/pjFf4L8MYv/e/LHLP4T5o9Z/CfKH7P4vzd/zOI/cf6YxX+S/DGL/6T5Yxb/9+WPWfzfnz9m8f9A/pjFf7L8MYv/B/PHLP6T549Z/KfIH7P4fyh/zOL/4fwxi/9H8scs/h/NH7P4T5k/ZvH/WP6YxX+q/DGL/9T5Yxb/afLHLP4fzx+z+H8if8ziP23+mMV/uvwxi/8n88cs/tPnj1n8P5U/ZvH/dP6Yxf8z+WMW/xnyxyz+M+aPWfxnyh+z+M+cP2bxnyV/zOI/a/6YxX+2/DGL/2fzxyz+s+ePWfznyB+z+M+ZP2bxnyt/zOI/d/6YxX+e/DGL/+fyxyz+n88fs/h/IX/M4v/F/DGL/7z5Yxb/+fLHLP7z549Z/BfIH7P4L5g/ZvH/Uv6YxX+h/DGL/8L5Yxb/L+ePWfwXyR+z+H8lf8ziv2j+mMV/sfwxi//i+WMW/yXyxyz+X80fs/h/LX/M4r9k/pjFf6n8MYv/0vljFv9l8scs/svmj1n8l8sfs/h/PX/M4r98/pjFf4X8sb/7j/Ou9v9G/phl//9m/pjFf8X8MYv/SvljFv9v5Y9Z/FfOH7P4r5I/ZvFfNX/M4r9a/pjFf/X8MYv/GvljFv8188cs/mvlj1n8184fs/ivkz9m8V83f8zi/+38MYv/d/LHLP7r5Y9Z/NfPH7P4b5A/ZvHfMH/M4r9R/pjF/7v5Yxb/jfPHLP6b5I9Z/DfNH7P4fy9/zOL//fwxi/8P8scs/pvlj1n8N88fs/hvkT9m8f9h/pjFf8v8sXe1/5C/TR1/q/yxd7X/36eOv3X+mMV/m/wxi/+2+WMW/+3yxyz+P8ofs/hvnz9m8d8hf8zi/+P8MYv/T/LHLP475o9Z/H+aP2bx3yl/zOK/c/6YxX+X/DGL/8/yxyz+P88fs/jvmj9m8d8tf8ziv3v+mMX/F/ljFv9f5o9Z/PfIH7P4/yp/zOL/6/wxi/9v8scs/r/NH7P475k/ZvH/Xf6YxX+v/DGL/+/zxyz+f8gfs/jvnT9m8f9j/pjFf5/8MYv/vvljFv/98scs/n/KH7P4758/ZvH/c/6Yxf+A/DGL/4H5Yxb/g/LHLP4H549Z/A/JH7P4H5o/ZvH/S/6Yxf+v+WMW/8Pyxyz+h+ePWfyPyB+z+B+ZP2bxPyp/zOJ/dP6Yxf+Y/DGL/7H5Yxb/4/LHLP7H549Z/E/IH7P4n5g/ZvE/KX/M4n9y/pjF/5T8MYv/qfljFv/T8scs/qfnj1n8z8gfs/ifmT9m8T8rf8zif3b+mMX/nPwxi/+5+WMW//Pyxyz+5+ePWfwvyB+z+F+YP2bxvyh/zOJ/cf6Yxf+S/DGL/6X5Yxb/y/LHLP6X549Z/K/IH7P4X5k/ZvG/Kn/M4n91/pjF/5r8MYv/tfljFv/r8scs/tfnj1n8b8gfs/jfmD9m8b8pf8zif3P+mMX/lvwxi/+t+WMW/9vyxyz+t+ePWfzvyB+z+N+ZP2bxvyt/zOJ/d/6Yxf+e/DGL/735Yxb/+/LHLP73549Z/B/IH7P4P5g/ZvF/KH/M4v9w/pjF/5H8MYv/o/ljFv/H8scs/o/nj1n8n8gfs/g/mT9m8X8qf8zi/3T+mMX/mfwxi/+z+WMW/+fyxyz+z+ePWfxfyB+z+L+YP2bxfyl/zOL/cv6Yxf+V/DGL/6v5Yxb/1/LHLP6v549Z/N/IH5P4TzCQP2bxH5Q/ZvEfI3/M4j84f8ziP2b+mMV/SP6YxX+s/DGL/9j5Yxb/cfLHLP7j5o9Z/MfLH7P4D80fs/iPnz9m8Z8gf8zi/578MYv/hPljFv+J8scs/u/NH7P4T5w/ZvGfJH/M4j9p/pjF/335Yxb/9+ePWfw/kD9m8Z8sf8zi/8H8MYv/5PljFv8p8scs/h/KH7P4fzh/zOL/kfwxi/9H88cs/lPmj1n8P5Y/ZvGfKn/M4j91/pjFf5r8MYv/x/PHLP6fyB+z+E+bP2bxny5/zOL/yfwxi//0+WMW/0/lj1n8P50/ZvH/TP6YxX+G/DGL/4z5Yxb/mfLHLP4z549Z/GfJH7P4z5o/ZvGfLX/M4v/Z/DGL/+z5Yxb/OfLHLP5z5o9Z/OfKH7P4z50/ZvGfJ3/M4v+5/DGL/+fzxyz+X8gfs/h/MX/M4j9v/pjFf778MYv//PljFv8F8scs/gvmj1n8v5Q/ZvFfKH/M4r9w/pjF/8v5Yxb/RfLHLP5fyR+z+C+aP2bxXyx/zOK/eP6YxX+J/DGL/1fzxyz+X8sfs/gvmT9m8V8qf8ziv3T+mMV/mfwxi/+y+WMW/+Xyxyz+X88fs/gvnz9m8V8hf8zi/41/9l9t3P+nG/bfmcX/m+3/mMV/xfwxi/9K+WMW/2/lj1n8V84fs/ivkj9m8V81f8ziv1r+mMV/9fwxi/8a+WMW/zXzxyz+a+WPWfzXzh+z+K+TP2bxXzd/zOL/7fwxi/938scs/uvlj1n8188fs/hvkD9m8d8wf8ziv1H+mMX/u/ljFv+N88cs/pvkj1n8N80fs/h/L3/M4v/9/DGL/w/yxyz+m+WPWfw3zx+z+G+RP2bx/2H+mMV/y/wxi/9W+WMW/63zxyz+2+SPWfy3zR+z+G+XP2bx/1H+mMV/+/wxi/8O+WMW/x/nj1n8f5I/ZvHfMX/M4v/T/DGL/075Yxb/nfPHLP675I9Z/H+WP2bx/3n+mMV/1/wxi/9u+WMW/93zxyz+v8gfs/j/Mn/M4r9H/pjF/1f5Yxb/X+ePWfx/kz9m8f9t/pjFf8/8MYv/7/LHLP575Y9Z/H+fP2bx/0P+mMV/7/wxi/8f88cs/vvkj1n8980fs/jvlz9m8f9T/pjFf//8MYv/n/PHLP4H5I9Z/A/MH7P4H5Q/ZvE/OH/M4n9I/pjF/9D8MYv/X/LHLP5/zR+z+B+WP2bxPzx/zOJ/RP6Yxf/I/DGL/1H5Yxb/o/PHLP7H5I9Z/I/NH7P4H5c/ZvE/Pn/M4n9C/pjF/8T8MYv/SfljFv+T88cs/qfkj1n8T80fs/iflj9m8T89f8zif0b+mMX/zPwxi/9Z+WMW/7Pzxyz+5+SPWfzPzR+z+J+XP2bxPz9/zOJ/Qf6Yxf/C/DGL/0X5Yxb/i/PHLP6X5I9Z/C/NH7P4X5Y/ZvG/PH/M4n9F/pjF/8r8MYv/VfljFv+r88cs/tfkj1n8r80fs/hflz9m8b8+f8zif0P+mMX/xvwxi/9N+WMW/5vzxyz+t+SPWfxvzR+z+N+WP2bxvz1/zOJ/R/6Yxf/O/DGL/135Yxb/u/PHLP735I9Z/O/NH7P435c/ZvG/P3/M4v9A/pjF/8H8MYv/Q/ljFv+H88cs/o/kj1n8H80fs/g/lj9m8X88f8zi/0T+mMX/yfwxi/9T+WMW/6fzxyz+z+SPWfyfzR+z+D+XP2bxfz5/zOL/Qv6Yxf/F/DGL/0v5Yxb/l/PHLP6v5I9Z/F/NH7P4v5Y/ZvF/PX/M4v9G/pjE/z0D+WMW/0H5Yxb/MfLHLP6D88cs/mPmj1n8h+SPWfzHyh+z+I+dP2bxHyd/zOI/bv6YxX+8/DGL/9D8MYv/+PljFv8J8scs/u/JH7P4T5g/ZvGfKH/M4v/e/DGL/8T5Yxb/SfLHLP6T5o9Z/N+XP2bxf3/+mMX/A/ljFv/J8scs/h/MH7P4T54/ZvGfIn/M4v+h/DGL/4fzxyz+H8kfs/h/NH/M4j9l/pjF/2P5Yxb/qfLHLP5T549Z/KfJH7P4fzx/zOL/ifwxi/+0+WMW/+nyxyz+n8wfs/hPnz9m8f9U/pjF/9P5Yxb/z+SPWfxnyB+z+M+YP2bxnyl/zOI/c/6YxX+W/DGL/6z5Yxb/2fLHLP6fzR+z+M+eP2bxnyN/zOI/Z/6YxX+u/DGL/9z5Yxb/efLHLP6fyx+z+H8+f8zi/4X8MYv/F/PHLP7z5o9Z/OfLH7P4z58/ZvFfIH/M4r9g/pjF/0v5Yxb/hfLHLP4L549Z/L+cP2bxXyR/zOL/lfwxi/+i+WMW/8Xyxyz+i+ePWfyXyB+z+H81f8zi/7X8MYv/kvljFv+l8scs/kvnj1n8l8kfs/gvmz9m8V8uf8zi//X8MYv/8vljFv8V8scs/t/IH7P4fzN/zOK/Yv6YxX+l/DGL/7fyxyz+K+ePWfxXyR+z+K+aP2bxXy1/zOK/ev6YxX+N/DGL/5r5Yxb/tfLHLP5r549Z/NfJH7P4r5s/ZvH/dv6Yxf87+WMW//Xyxyz+6+ePWfw3yB+z+G+YP2bx3yh/zOL/3fwxi//G+WMW/03yxyz+m+aPWfy/lz9m8f9+/pjF/wf5Yxb/zfLHLP6b549Z/LfIH7P4/zB/zOK/Zf6YxX+r/DGL/9b5Yxb/bfLHLP7b5o9Z/LfLH7P4/yh/zOK/ff6YxX+H/DGL/4/zxyz+P8kfs/jvmD9m8f9p/pjFf6f8MYv/zvljFv9d8scs/j/LH7P4/zx/zOK/a/6YxX+3/DGL/+75Yxb/X+SPWfx/mT9m8d8jf8zi/6v8MYv/r/PHLP6/yR+z+P82f8ziv2f+mMX/d/ljFv+98scs/r/PH7P4/yF/zOK/d/6Yxf+P+WMW/33yxyz+++aPWfz3yx+z+P8pf8ziv3/+mMX/z/ljFv8D8scs/gfmj1n8D8ofs/gfnD9m8T8kf8zif2j+mMX/L/ljFv+/5o9Z/A/LH7P4H54/ZvE/In/M4n9k/pjF/6j8MYv/0fljFv9j8scs/sfmj1n8j8sfs/gfnz9m8T8hf8zif2L+mMX/pPwxi//J+WMW/1Pyxyz+p+aPWfxPyx+z+J+eP2bxPyN/zOJ/Zv6Yxf+s/DGL/9n5Yxb/c/LHLP7n5o9Z/M/LH7P4n58/ZvG/IH/M4n9h/pjF/6L8MYv/xfljFv9L8scs/pfmj1n8L8sfs/hfnj9m8b8if8zif2X+mMX/qvwxi//V+WMW/2vyxyz+1+aPWfyvyx+z+F9v8h80MLDtvzurxP8Gk/9/kMX/xvwxi/9N+WMW/5vzxyz+t+SP/aP/kHd6c/7Pexv/W/PHLPv/bfljFv/b88cs/nfkj1n878wfs/jflT9m8b87f8zif0/+mMX/3vwxi/99+WMW//vzxyz+D+SPWfwfzB+z+D+UP2bxfzh/zOL/SP6Yxf/R/DGL/2P5Yxb/x/PHLP5P5I9Z/J/MH7P4P5U/ZvF/On/M4v9M/pjF/9n8MYv/c/ljFv/n88cs/i/kj1n8X8wfs/i/lD9m8X85f8zi/0r+mMX/1fwxi/9r+WMW/9fzxyz+b+SPSfwnHMgfs/gPyh+z+I+RP2bxH5w/ZvEfM3/M4j8kf8ziP1b+mMV/7Pwxi/84+WMW/3Hzxyz+4+WPWfyH5o9Z/P8/9ujBABTEgAJYza/2bNu2bdu2bdu2bdu2bds2FngT3EtWyAD/Ucv/QP9Ry/8g/1HL/2D/Ucv/EP9Ry////Ect///3H7X8D+U/avkf2n/U8j+M/6jlf1j/Ucv/cP6jlv/h/Uct/yP4j1r+R/QftfyP5D9q+R/Zf9TyP4r/qOV/VP9Ry/9o/qOW/9H9Ry3/Y/iPWv7H9B+1/I/lP2r5H9t/1PI/jv+o5X9c/1HL/3j+o5b/8f1HLf8T+I9a/if0H7X8T+Q/avmf2H/U8j+J/6jlf1L/Ucv/ZP6jlv/J/Uct/1P4j1r+p/QftfxP5T9q+Z/af9TyP43/qOV/Wv9Ry/90/qOW/+n9Ry3/M/iPWv5n9B+1/M/kP2r5n9l/1PI/i/+o5X9W/1HL/2z+o5b/2f1HLf9z+I9a/uf0H7X8z+U/avmf23/U8j+P/6jlf17/Ucv/fP6jlv/5/Uct/wv4j1r+F/Qftfwv5D9q+V/Yf9Tyv4j/qOV/Uf9Ry/9i/qOW/8X9Ry3/S/iPWv6X9B+1/C/lP2r5X9p/1PK/jP+o5X9Z/1HL/3L+o5b/5f1HLf8r+I9a/lf0H7X8r+Q/avlf2X/U8r+K/6jlf1X/Ucv/av6jlv/V/Uct/2v4j1r+1/Qftfyv5T9q+V/bf9Tyv47/qOV/Xf9Ry/96/qOW//X9Ry3/G/iPWv439B+1/G/kP2r539h/1PK/if+o5X9T/1HL/2b+o5b/zf1HLf9b+I9a/rf0H7X8b+U/avnf2n/U8r+N/6jlf1v/Ucv/dv6jlv/t/Uct/zv4j1r+d/Qftfzv5D9q+d/Zf9Tyv4v/qOV/V/9Ry/9u/qOW/939Ry3/e/iPWv739B+1/O/lP2r539t/1PK/j/+o5X9f/1HL/37+o5b//f1HLf8H+I9a/g/0H7X8H+Q/avk/2H/U8n+I/6jl/1D/Ucv/Yf6jlv/D/Uct/0f4j1r+j/Qftfwf5T9q+T/af9Tyf4z/qOX/WP9Ry/9x/qOW/+P9Ry3/J/iPWv5P9B+1/J/kP2r5P9l/1PJ/iv+o5f9U/1HL/2n+o5b/0/1HLf9n+I9a/s/0H7X8n+U/avk/23/U8n+O/6jl/1z/Ucv/ef6jlv/z/Uct/xf4j1r+L/Qftfxf5D9q+b/Yf9Tyf4n/qOX/Uv9Ry/9l/qOW/8v9Ry3/V/iPWv6v9B+1/F/lP2r5v9p/1PJ/jf+o5f9a/1HL/3X+o5b/6/1HLf83+I9a/m/0H7X83+Q/avm/2X/U8n+L/6jl/1b/Ucv/bf6jlv/b/Uct/3f4j1r+7/Qftfzf5T9q+b/bf9Tyf4//qOX/Xv9Ry/99/qOW//v9Ry3/D/iPWv4f9B+1/D/kP2r5f9h/1PL/iP+o5f9R/1HL/2P+o5b/x/1HLf9P+I9a/p/0H7X8P+U/avl/2n/U8v+M/6jl/1n/Ucv/c/6jlv/n/Uct/y/4j1r+X/Qftfy/5D9q+X/Zf9Ty/4r/qOX/Vf9Ry/9r/qOW/9f9Ry3/b/iPWv7f9B+1/L/lP2r5f9t/1PL/jv+o5f9d/1HL/3v+o5b/9/1HLf8f+I9a/j/0H7X8f+Q/avn/2H/U8v+J/6jl/1P/Ucv/Z/6jlv/P/Uct/1/4j1r+v/Qftfx/5T9q+f/af9Ty/43/qOX/W/9Ry/93/qOW/+/9Ry3/P/iPWv5/9B+1/P/kP2r5/9l/1PL/i/+o5f9X/1HL/2/+o5L/IX/yH7X8/9l/1PL/F/9Ry/9f/Uct/3/zH7X8/91/1PL/D/9Ry/8//Uct///yH7X8/9t/1PL/H/9Ry/9//Uct/wP8Ry3/A/1HLf+D/Ect/4P9R3+4fwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgd/btP8bruoDj+Od+IliAQvqW4kdQHmpw/DCOHyWzVuNkHSNd07UUBidqoAa34ofRsWnrDzZxsWZNJ63dzBZrTOdIorR0MTemm7TSskk5YzictoX2Y137ct/vcff1uPF9X+83f/B4/HH3/XyO1+eA7cnnc+MOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEhp05atX129fn3nRi+88MKL/hfn+l8mILXT0Z/r3wkAAAAAAAAAAAAAAHAmOX6c6Fz/GQEAAAAA4HzT3nHtiYa6QacaBh5MPtx56v3V7954W0/PkxdV3pc/vHyIS9YPPOjt7e3dceDNZeXDUUVRlD7b+PLxBdXj0vW796/8Q99RKE60/erOruMddT976pa3WpaPW9x06mxTserW29d3zqkvitDQVGwuHcytK4rQ3FTsKh3MKx2Maip+XDqYf+pgdPF06WD2mrvWry2deN+nhvNOe0d30TCo2GLQvwYD++/e/8h7lffDXLJytcai3P+ln39mV9XHKs7Qf+X6oa66/5r/gMAZ1db/492V98Nc8n33/4l/3X7dUB87c/+V64d6/UM6Qzz/D2q0+rm/6vl/2hCX7N8fmt72aKn/bQ8//1D5VOPZPP+fvn5oqO6/ftDzf+k5vrHy/D+qKELTCP864LzS3rHjxHD3/+H7b5xUtakb2P/B5T94rtT/1I6JjeVTTTX23zjM/b9u+9ODf69Abdo7fthbdf+vof+iZYhL9vc/rWfCu6X+rxn/79cHfKyW/puq+2/t2nB366YtW2fdvmH1us51nXfOn9c2b2HbnEWL5reeeiToezvCvxU4P4zs/l+MqdrUFUVn//6XR48tKfW/6cixzeVTF9TYf/Ow9//X3P9hSNPri+bmYvPqrq6Nc/veVg7n9b3t+2VD9F/D1/8zZpZ/WeXr7tIX5P37AwuKnlL/O1+5YUv5VHON/Y8arv9vnf68QIQR3v/XVm0G9X/Fi/e+Wup/39tvXl8+VevX/xcM2/8e938YifaOqm/4+T8r9X/y5MHIb7YJo/3/H6QzsP+pCa5f6v+V+p8+GbcOY/QP6eS4/z9wz6ihvk/gLIQL9Q/p5Oh/00NrXohbhw/oH9LJ0f/Cvxy6KW4dPqh/SCdH/xMveflvceswVv+QTo7+b7lt49fi1mGc/iGdHP0fu/fZe+LWYbz+IZ0c/f/oX3cdj1uHi/QP6eTo//6x22+IW4eL9Q/p5Oj/2bt/9+u4dZigf0gnR/+X79o3K24dJuof0snR/4a3Jh2IW4cP6R/SydH/tZMujPw53XCJ/iGdHP2PWbvnu3HrcKn+IZ0c/Xftnf3nuHUI+od0zrb/0ZHXL/W/9KX7lsWtw2X6h3Ry3P8ntOw+GbcOk/QP6eTo/8ablq6KW4cP6x/SydH/Uz//8v1x6/AR/UM6Ofp/57dvXxa3DpP1D+nk6P/V+UcfjVuHKfqHdHL0/70vXDc3bh2m6h/SydH/48d3/iJuHabpH9LJ0f97u1uujFuHj+of0snR/5FVC3bHrcN0/UM6Ofp/ZMrD9XHrMEP/kE6O/r/533+eiFuHj+kf0snR/4LuL26LW4eP6x/SydH/pK7PPhe3DpfrH9LJ0f/KMceuj1uHFv1DOjn6b/3NrVPi1mGm/iGdHP2vPXj4O3HrcIX+IZ0c/S9r/9OCuHW4Uv+QTo7+G9q+sSduHa7SP6STo/+jv5+wIm4dPqF/SCdH/z95bP/LceswS/+QTo7+v/2Vx9bFrcNs/UM6Ofo/PKP+nbh1aNU/pJOj/60vPPGfuHWYo39IJ0f/c/dNvSNuHebqH9LJ0f/kz409ErcO8/QP6eTo/0tLej4Ttw7z9Q/p5Oj/iT8+szduHa7WP6STo//enjuWxK3DJ/UP6eTo/6WV2+6LW4cF+od0cvT/YOuLE+LWoU3/kE6O/t944+ab49Zhof4hnRz9733wH4fi1mGR/iGdHP3vWP/61+PWYbH+IZ0c/T9/8YrX4tZhif4hnRz9z/z7VePi1uFT+od0cvS/Zmf39+PW4dP6h3Ry9L9i8wMtcetwjf4hnRz9NzYv3he3Dkv1DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPA/duBAAAAAAADI/7URqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrADBzIAAAAAwvyt82g/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/BQAAP//XKRfbg==")
syz_mount_image$exfat(0x0, &(0x7f0000002240)='./bus\x00', 0x184d800, 0x0, 0xff, 0x0, &(0x7f0000002380))
chdir(&(0x7f00000003c0)='./bus\x00')
r0 = open(&(0x7f0000000100)='./file2\x00', 0x167842, 0x1fb)
syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140))
read$FUSE(r0, 0x0, 0x0)

2.255303347s ago: executing program 6 (id=862):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000004240)=0xc3, 0x4)
recvmmsg(r0, &(0x7f000000b7c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f000000b780)=""/23, 0x17}, 0x10001}], 0x1, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c)

2.178980018s ago: executing program 0 (id=863):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x3}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xb0}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x3fd}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x90}, 0x40c0)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10040003}, 0x0)

2.018122753s ago: executing program 6 (id=864):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="000005"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000bc0)={0x24, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0003120000001203666d"], 0x0, 0x0}, 0x0)

1.941626714s ago: executing program 0 (id=865):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0x2, 0x3b}, 0x1c)
mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140))

1.65845069s ago: executing program 0 (id=866):
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x30040a9, 0x0, 0xf, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@uuid_off}]})
symlinkat(&(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00')
linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000)
lgetxattr(&(0x7f0000000040)='./file0/file2\x00', 0x0, 0x0, 0x0)

1.605162382s ago: executing program 5 (id=867):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd(0x3)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0xf006, 0x8000000, 0x0, r2})
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x7c, 0x3000, 0x0, r2})
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0xb03, 0x3000, 0x4, r2})

1.521446604s ago: executing program 0 (id=868):
syz_mount_image$udf(&(0x7f0000000180), &(0x7f0000000100)='./bus\x00', 0x1014494, &(0x7f00000001c0)=ANY=[@ANYBLOB="696f636861727365743d63703933322c706172746974696f6e3d30303030303030303030303030303030303030332c6769643d666f726765742c6769643d666f726765742c6e6f6164696e6963622c756e64656c6574652c7569643d666f726765742c00fb5ebc1bbec00aea8217b7375ace1f91cad4e856ac3ce827902dd91a9a936650ca99205dc1adee73bc464ab6ea2dad7091eea47594f5ef5227a72684b2ed98640aa52eba3e04c81c829036f312ecb1c7483575d32ed9eef652c6b7284dc45cecea6a0ae3a01c5cd7b60af90431eddc00"/225], 0xfe, 0xc24, &(0x7f0000002180)="$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")
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x12e1013, 0x0, 0xfc, 0x0, &(0x7f00000000c0))
rename(&(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000480)='./bus\x00')
r0 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'netdevsim0\x00'})
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x2014)

1.418444776s ago: executing program 3 (id=869):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x20040084)
r1 = syz_open_dev$hiddev(&(0x7f0000000000), 0x0, 0x0)
ioctl$HIDIOCGUSAGE(r1, 0xd01c4813, &(0x7f0000000100)={0x2, 0x100, 0x0, 0x2, 0x0, 0x42})

1.299308639s ago: executing program 6 (id=870):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup(r1)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r0, &(0x7f0000000040)={@val={0x0, 0x6003}, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x3ffd, 0x2000, 0x3, 0x2f, 0x0, @private=0x1fe1, @multicast1}, {0xa000, 0x6558, 0x8}}}}}}, 0x2e)

1.065949355s ago: executing program 0 (id=871):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r0, 0x400448ca, 0x0)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000040), 0x6)
ioctl$sock_bt_hci(r1, 0x400448dc, 0x0)

909.864579ms ago: executing program 6 (id=872):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101901, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x971})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000c80)={0x1, 0x0, [{0x2, 0x2, 0x0, 0x0, @irqchip={0x5, 0x4}}]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

815.30992ms ago: executing program 6 (id=873):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x80)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x1214040, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80)
getdents64(r0, &(0x7f0000000240)=""/241, 0xf1)

803.270921ms ago: executing program 6 (id=874):
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000100)='./file1\x00', 0x800810, &(0x7f00000003c0)={[{@usebackuproot}, {@thread_pool={'thread_pool', 0x3d, 0x9c}}, {@ssd_spread}, {@compress_algo={'compress', 0x3d, 'no'}}, {@nobarrier}, {@treelog}, {@notreelog}, {@nodiscard}]}, 0xfb, 0x50f9, &(0x7f0000005140)="$eJzs3U+IVWUfB/Dnzp1x5lVw7isEtsoikGrh4CYioqtMUFF0y8VgBE4tgnThJEi0EMQW/Vt4S4paSK6kFsksjKA2LqQwArehYS7cKAaSi3Yac8957pz7HO+5d0ZtTD8fmTnnOb/zPOe5l7O43+uccwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACEEF74/bNDVfVT16bPnJtp7jywZebyvul1p0OodbbX8vqOrc++8ua2HS9OxA6zL2fLRqPfkFnX81ljVc/GhX69P6+HEMaSAer58pk1pVGLq3vKA1a6fnH30U17mxuPH27Xr146e7L80lkwsdITWCn5eXVh8Vxqdn6PJHt024VTr9Zzimb90xPuX3kRAMCSTLU6i+7H0fwjbre9P60n7WbSbift+AmhXWwsRzbuqn7z3JDWV2iezSwqjPedZ1LP3/9uu5X2T9pJ1FjCPHt3zSPNRL95ziX1lZonAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJ3kkbdHH6qqn7o2febcTHPngS0zl/dNrzsdQqOzvZaVa6vfP9z869utxw78uPmr4xeef6ye94vL0cLO4be48sRkCG8UKhfisBfXhtDqLXSa4cty4a3OynOxAAAAwN3k/s7vkW47i4NjPe1aJ03WOv+iLCxev7j76Ka9zY3HD7frVy+dPbn88Vp9xmvecLxuu7H4UysE4xh/0/EW63HXPaVxqqUjpnn+8fNTf1f1L+X/RnX+j++c/A8AAMDNkP/TcaoNyv/fvfbHJ1X9S/l/Q88hS/k/zjjm/5GwvPwPAAAAd7Lbnf+bpXGqDcr/4y+NfV3Vv5T/p4bL/6PFaceNv8YJ75oMYWrQ1AEAAIA+4v+7L361EPN69s1BmtefevTguarxSvm/OVz+H7ulrwoAAAC4GUe+2P5wVb2U/1vD5f/x2zprAAAAYCne+XDig6p6Kf/PDpf/V+fL/MqHrNNP8a8QDk2GMLGwMpcVfg7tp7sFAAAA4BaJOf3PT3f+ULVfKf/PVd//P97pIF7/33P/v9L1/4VCdte/J90YAAAAgHtR+Xr+eHv87MkF/Z6/P+z1/w/87+CrVccv5f/9w+X/enF5K5//BwAAAMvwX3v+3/bSONUG3f//vo/e/aWqfyn/t4fL/3G5pvjyTtRq2fvz3mQI6xdW8rsJfhMPtyspzI8VCh2tpMe22CMvzI8XCh1zSY/NkyE8uLCyPyn8PxbaSeHK2rxwJCmcjoX8fOgWjiWFE/FM+3xtPt208H0s5BdYzMcrKNZ0L4lIelzt12OhcMMeZ7sHBwAAuKfE8Jxn2bHeZkij7Hxt0A6rB+0wMmiH+qAdRpMd0h37bQ+zvYW4vX1m49Ke/39kuPwf34pV2aLf9f8hXv+fP9ewe/3/bCw0ksJ8LLTSOwa04jGysPtxPEajlfe4sr5bAAAAgLta/F6gvsLzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP5h715j5KruA4CffY734d2FpAqhUbJJahw38Xptk4daqqwpVSPSNOuGBlURxcZek8ULdmxTYhQiYxPRCEFpg5R8KMIoimo+QK1ARFJAuEhxhMojoioKIFBoDVEQKSWJSBOkUM3ee2bvnLvz8GONl/5+knfOzP887zw859475wIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwP8Ph75y1d82iz/82/Oefu7Cicv2rrvw5WvOO/3xECZnH+/Iwh3919868fM7z71r731rbrvnyPkf7M3L5fEwUP3Tmd+5LtZ6ZGkI93aE0J0GVg5mgZ78/mCs712DIZwW5gK1ElP9WYm04fD9vhD2h7lArarv9YUwWAhc8MRDD95YTdzSF8KyEEIlbePZStZGXxo4qzcL9KeBbd1Z4FdvZGqB73ZmAThu8c1Qe9EfnKzPMDJ/uQavv54T1rE3Vzq8rpgYaZzvZ+sWuFMFvekDk8f1tJWqY0GU3h6HvNsWwbuttJ1v9rQVv0jl31DemAtVQufmqS0br5zZFR/pDGNjXY1qWqDn+alXv7TpaNKL5nUYOzByQl6HNz227M6uFZ969J6Vy1488KF9Lx1vN39U2KTF9EKrhPw1t2iex2jC58kiePuVviWN+tIVQtjy+d/7dLN4af4/0nz+H1/O8bazLnes9fWhbG4eHxmMiVeGsrk5AAAALBqLYa/ptrEHPlYoPlxJ6ivN/0fbO/4fD/nnk/lstIdCmJhN7BsO4YzZx7PAHbG5S4ZDeO9sarI+sC4JHArhnbOJFbWqkhJLYonRJPCToTwwkQQOx8BkEvhWDNycBK6LgYNJYFMMHEoC58ZAmK4fx+8P5eNoO9AXAxuyjXgwnoXwi6HYWrKtnqlVBQAAcILks8Oe+ruFcx2ON0OcXh7sa5UhnoHdMEMlqSGdwdamVQ1r6G5VQ2erGmrj3tN8+KWaO1rVXDoNo6M+w62//JvPhCZK8//x5vP/yjwd6Sgd/w9h/ezfmLszj8zU4hsm6zIAAAAAx2Hgf5//ZrN4af4/0d75/3GfSFchc3gk7obYOhzCeH0gq/YPy4HsqPdAHgAAAIDFoHY8vnYsfDq/zU7RTufT5fyTR5k/HvifmDd/76H7NzTrb2n+P9ne+f/99bdZJw7HXnxtOIQlhcAPYi+rgVmjMfDjj9cH8vEfjhvghlhVfmJCraobYokNMTCeBPY3KvHDWokz6gP5k1VrfF9tHNN5iUIAAAAATrq4OyAel4/n/7/vN2uualauNP/fcHTn/8/Og0un988MhLCqO4Su9IcBj/RnCwPGwGBHnnigP6urK63q2v4QzqkOLK3q+Xz9/+50jcEn+rKqYuCM9x149axq4pt9IawqBp783O0friZ2JYFa43/ZF8J7qqNNG//OkqzxnrTxry8J4d2FQK2qS5aEUG2sN63qoUp+HYO0qn+uhPC2QqBW1UcqIewOACxS8b/SzcUHd+6+euvGmZmpHQuYiPvw+8KW6ZmpsU3bZjZXGvRpc9LnumWMri2Pqd0r3zyTL1H02bvXD7aTrv1OcLzYVr4fv3TiYH4/fhfqmR3nmp66u2vTIX/g/eUmQuGbVKMhdy7wkPuLlcw9iaX6Y/7eMBCWXLlzasfYFzfu2rVjdfa33exrsr/xMFO2rVan26p/vr618fJouFpW4li31fJiJat2Xb591c7dV6+cvnzjpVOXTl2x+iNrxs8eXzv+0bNXVUc1nv1tMdTl81WdDPWN29sc1wkc6pndhUpOxqeGhITEYktsG1je9P/k0vx/e/P5f/zUiZ/8+foMjY7/j8TD/Nnjc4f5N8TA/naP/480OppfOzFgNAnsiYE9DvMDAADw1hAn+XFvZtwr/dMV33mxWbnS/H9Pe7//P0Hr/9eWrj+/0TL/K2KJ8Ubr/6fL/NfW/9/TaP3/dJn/2vr/+9+E9f+vrAWSTfIL6/8DAABvBSdv/f+Wy/unFwgoZWi5vH96gYBShpbL+Ld7gYCjXv//2f/8q/8OTZTm/ze3N/+3cD8AAACcOr78Z1f9TrN4af6/v735/8lf/y80Ov9/tFFgstHCgNb/AwAAYJFqtP7fyPX9FzcrV5r/H2xv/h9Pu+isyx1rfX0oW9MupGvavTJU+8kAAAAALA6dYWysp828dSujrjv2Np/KlwJtli56/k+OHN35/4fam//X/S7jpseW3dm14lOPvn7PymUvHvjQvpfmjv8DAAAAC6fd/RIAAAAAAAAAAAAAAMCb7/n/2Lu2Wbz0+/+wfvbxRr//j9f9i78veHtd7lhr6/X/8vsXfPKu3bNLFj4yFML7i4Gte7eeFvJr8y8vBh68aMU7qom9aYn7nzv3hWri4jTwiZWnv1ZNnJMENsRFEt+ZBuJVFV9bmgTi8or/ngbi9jiYBnrzwFeXZuPoSLfVTwezbdWRbqunB0MYLgRq2+rewayNjnSAtySB2gC/kAbiAP88D3SmvbprIOtVDAzGorcNZL0CAOCUFb8F9oQt0zNT4/ErfLw9s7v+NqpbsuzacrUdbTb/TL402WfvXj/YTror/S46d63xnlCpDmF16etqMUvH7ChPTC0tNt3bGwy51WpvnQ3KpY520/U2HlFfNqKxTdtmNve0HPja1lnWdLfMsro02Slm6ZzdpG3U0kZf2hhRm9umjS7H+51hbKwryfUHMTgS6rR6RbT7e/3iOn+NXgXFPFcc2ferZvWV5v8j7c3/K8VxvZZfDGBPvLLe3w1b5h8AAAAW1lfX/fob8d9nrn/4yWZ5S/P/0fbm/3EPVn4oONvbcShe/3/fcAizl9YfyQJ3xOYuGQ7hvbOpyVgiu6D++bHEeBa4I+4wWRFLbJisr2pJDBxMAj8ZygOHksDhGMj3UhwI+a6cvx8K4cOzqfX1JbbHEiNJ4NMxMJoExmJgPAksjYGJJPDy0jwwmQT+LQbCdP22untpvq0AAACORj7P6qm/G9J53sHuVhk6WmXob5Whs1WGSqsMjUYR7387ZuhJTl7pKGTqSWvtS2opZYgXwz/qfpUyhB/W50wLlpqO5x/UzjfoqM9w38e6K6GJ0vx/vL35f3/9bdb64Tj/n7v+Xxb4Qeze1+Kp46Mx8OOP1wfyHQOH42T3hlpVk3mJfNJ+QywxEQOjSWB7DEwkgQ3r88D+d9QH8pl2rfF9tcan8xKFAAAAAJx0cQdB3E0T5/+37fzKQLNypfn/RHvz/9jeQLGx62KtR5aGcG/HXG9qgZWDWSDuxxiMP49/12AIpxV2cNRKTPVnJXqThsP3+7JfqPemVX2vL/vxQbx/wRMPPXhjNXFLXwjLCntfam08W8na6EsDZ/Vmgf40sK07C8Q9P7XAdzuzABy32l7B+ILKT3WpGZm/XIPX31vlmqDp8Er7QOfJN99vrhZKaYdrvk+15uietqb7bzlhSm+PQ95ti/HdNuLdVvwilX9DeWMuVAmdm6e2bLxyZld8pPhL1pIFep6Lv1JtJ30CXod7jr23rVXSDownHx/j85eb/3XYEau76bFld3at+NSj96xc9uKBD+17qe1uNBB/KPzQNf86+KPC5l1olZC/5hbd58mkz5NF8d9A8u4e9bSFENa//PUbmsVL8//J9ub/3cntrF/HjblzOIQPFDbuI3Hz//Fw9jlYCGSfkm8rB7JD7v811PCTEwAAAE602u6O2v6C6fw2OyE8nSeX808eZf64v2Ji3vzt9rv/ry9a1ixemv9vaD7/X5J00/F/x/9ZII7/z+tU3xW9JH1gz3Htii5Vx4Jw/H9ep/q7zfH/eTn+7/j/fBz/b8Hx/3md6k9b6VvSdl+6Qggv/tEDTzeLl+b/29ub/1v/b/5F+2rr/21otP7f9kbr/+2x/h8AALCgGiw0l87zSqv3lTKkq/eVMrRcILDlEoPW/zvq9f9eOPPZ34QmSvP/Pe3N/+PLYaDY+mJZ/290fYOqbo6B7RYGBAAA4FTUaAcBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAb677/uF/NjeLP/zb855+7sKJy/auu/Dla847/fEQpmcf78jCHf3X3zrx8zvPvWvvfWtuu+fI+R+s5OV68tvfrcsda319KIT9hUcGY+KVoeqducAFn7xrd3c18chQCO8vBrbu3XpaNfGtoRCWFwMPXrTiHdXE3rTE/c+d+0I1cXEa+MTK01+rJs7JAx1pd/9xadbdjrS7Ny4NYbgQqHX3sqX1VdXa+NM80Jm28U+DWRsxMBiLfmMwayMGZmKJ6SUhrOoOoSut6uFKVlVXWtW/VLKqutKqvlwJ4ZwQQnda1XO9WVXd6cgf782qioEz3nfg1bOqif29IawqBp783O0fria+kARqjf9Fbwjvqb5k0sa/3ZM13pM2fktPCO8OIfSmJX7ZnZXoTUs83x3C2wqBWuOf7w5hd+AtIX741H2i7dx99daNMzNTOxYw0Zu31Re2TM9MjW3aNrO5kvSpkY5C+o1rj33sz7z6pU3V28/evX6wnXR3Xq5ntstreururj3Vex/71V+sZO75KNUf8/eGgbDkyp1TO8a+uHHXrh2rs7/tZl+T/e3Ko9m2Wr1YttXyYiWrdl2+fdXO3VevnL5846VTl05dsfoja8bPHl87/tGzV1VHNZ79PRFDvf3kD/XM7kIlJ+MDQEJCYrElOus+3cZP9Q/y0hf9uY72hMrsB3RpWlHM0jE7yhMx6HXHOOJj+Z7SckSrSxOHUpY182S5tj7L2tJkYq6WvizL7Pe60uSw2Fjn7CaN9zvD2FhXo+0wUn+3uHl/dhyb96l807WbBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4P/YgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwg4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRV24FgAAAAAQJi/dRg9GwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHApAAD//7IeJCA=")
r0 = open$dir(&(0x7f0000000480)='./file1\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000000)={0x50d001, 0x0, '\x00', 0x0, 0x0})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
sendfile(r1, r2, 0x0, 0xfffe82)

770.34µs ago: executing program 2 (id=875):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x3}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xb0}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x3fd}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x90}, 0x40c0)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10040003}, 0x0)

0s ago: executing program 0 (id=885):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000500)="e7216f983693aa736f71d4", 0xb)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0)

kernel console output (not intermixed with test programs):

 idProduct=a4a1, bcdDevice= 0.40
[  117.414254][ T4436] XFS (loop5): Unmounting Filesystem
[  117.419787][   T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  117.428753][   T21] usb 4-1: Product: syz
[  117.434051][   T21] usb 4-1: Manufacturer: syz
[  117.440134][   T21] usb 4-1: SerialNumber: syz
[  117.677159][ T4196] input: PS/2 Generic Mouse as /devices/serio2/input/input8
[  117.700578][ T4869] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  117.893225][ T4196] psmouse serio2: Failed to enable mouse on 
[  118.438608][ T4942] netlink: 8 bytes leftover after parsing attributes in process `syz.1.189'.
[  118.488657][ T4942] netlink: 12 bytes leftover after parsing attributes in process `syz.1.189'.
[  118.550199][ T4942] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  118.559992][ T4942] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  118.569145][ T4942] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  118.577962][ T4942] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  118.585296][ T4869] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  118.651288][ T4936] loop0: detected capacity change from 0 to 32768
[  118.674525][ T4942] netlink: 8 bytes leftover after parsing attributes in process `syz.1.189'.
[  118.684767][ T4942] netlink: 12 bytes leftover after parsing attributes in process `syz.1.189'.
[  118.739373][ T4936] XFS (loop0): Mounting V5 Filesystem
[  118.811040][ T4953] loop5: detected capacity change from 0 to 1024
[  118.831776][ T4936] XFS (loop0): Ending clean mount
[  118.837695][   T21] cdc_ncm 4-1:1.0: bind() failure
[  118.858217][ T4936] XFS (loop0): Quotacheck needed: Please wait.
[  118.893941][   T21] cdc_ncm: probe of 4-1:1.1 failed with error -71
[  118.974527][   T21] cdc_mbim: probe of 4-1:1.1 failed with error -71
[  118.984830][ T4953] EXT4-fs (loop5): mounted filesystem without journal. Opts: noinit_itable,,errors=continue. Quota mode: writeback.
[  119.014099][   T21] usbtest: probe of 4-1:1.1 failed with error -71
[  119.026802][ T4936] XFS (loop0): Quotacheck: Done.
[  119.065963][   T21] usb 4-1: USB disconnect, device number 5
[  119.193122][ T4196] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  119.249893][   T26] audit: type=1800 audit(1787168485.783:11): pid=4936 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.186" name="file1" dev="loop0" ino=9286 res=0 errno=0
[  119.290670][ T4936] XFS (loop0): User initiated shutdown received.
[  119.322050][ T4936] XFS (loop0): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:495).  Shutting down filesystem.
[  119.416179][ T4963] loop2: detected capacity change from 0 to 4096
[  119.446969][ T4936] XFS (loop0): Please unmount the filesystem and rectify the problem(s)
[  119.473739][ T4196] usb 2-1: Using ep0 maxpacket: 32
[  119.614724][ T4196] usb 2-1: config 0 has no interfaces?
[  119.673337][ T4191] XFS (loop0): Unmounting Filesystem
[  119.805911][ T4196] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  119.892629][ T4196] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  119.951003][ T4196] usb 2-1: Product: syz
[  119.971234][ T4196] usb 2-1: Manufacturer: syz
[  119.985261][ T4975] ehci-platform pcspkr: IRQ index 0 not found
[  120.023234][ T4196] usb 2-1: SerialNumber: syz
[  120.054158][ T4196] usb 2-1: config 0 descriptor??
[  120.385587][ T4278] usb 2-1: USB disconnect, device number 5
[  120.573303][    T7] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  120.653345][ T4196] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  120.853376][    T7] usb 6-1: Using ep0 maxpacket: 16
[  120.934049][ T5007] loop2: detected capacity change from 0 to 256
[  121.002929][ T5007] exfat: Deprecated parameter 'utf8'
[  121.009582][ T5007] exfat: Deprecated parameter 'utf8'
[  121.020713][   T26] audit: type=1326 audit(1787168487.553:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5009 comm="syz.3.205" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe6166d90d9 code=0x0
[  121.045516][    T7] usb 6-1: unable to get BOS descriptor or descriptor too short
[  121.065613][ T5007] exfat: Deprecated parameter 'utf8'
[  121.095036][ T5007] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xc70f51ff, utbl_chksum : 0xe619d30d)
[  121.126222][ T4196] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  121.150230][ T4196] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  121.163189][    T7] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  121.183690][    T7] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  121.204782][ T4196] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  121.222247][    T7] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  121.266483][ T5016] loop1: detected capacity change from 0 to 1024
[  121.293579][ T5016] EXT4-fs (loop1): Ignoring removed bh option
[  121.349323][ T5016] EXT4-fs (loop1): Ignoring removed bh option
[  121.395095][ T5016] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,barrier=0x0000000000000004,nolazytime,bh,min_batch_time=0x0000000000000008,errors=remount-ro,stripe=0x0000000000000005,bh,init_itable,. Quota mode: none.
[  121.433486][ T4196] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  121.444868][    T7] usb 6-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40
[  121.469113][ T4196] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  121.493630][    T7] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  121.513079][ T4196] usb 1-1: Product: syz
[  121.520730][ T4196] usb 1-1: Manufacturer: syz
[  121.527870][ T4278] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  121.538222][    T7] usb 6-1: Product: syz
[  121.545959][    T7] usb 6-1: Manufacturer: syz
[  121.551359][    T7] usb 6-1: SerialNumber: syz
[  121.556383][ T4196] usb 1-1: SerialNumber: syz
[  121.803318][ T4278] usb 3-1: Using ep0 maxpacket: 8
[  121.860396][ T4196] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  121.874625][    T7] usb 6-1: Audio class v2/v3 interfaces need an interface association
[  121.889125][    T7] snd-usb-audio: probe of 6-1:1.0 failed with error -22
[  121.943492][ T4278] usb 3-1: config 0 has an invalid interface number: 168 but max is 0
[  121.963229][ T4278] usb 3-1: config 0 has no interface number 0
[  121.971593][ T4278] usb 3-1: config 0 interface 168 altsetting 248 bulk endpoint 0xD has invalid maxpacket 32
[  122.018656][ T5028] loop1: detected capacity change from 0 to 1024
[  122.028560][ T4278] usb 3-1: config 0 interface 168 has no altsetting 0
[  122.108197][   T23] usb 1-1: USB disconnect, device number 7
[  122.132460][   T23] usblp0: removed
[  122.223432][ T4278] usb 3-1: New USB device found, idVendor=0f0d, idProduct=0065, bcdDevice=37.ed
[  122.252063][ T4278] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  122.270331][ T4278] usb 3-1: Product: syz
[  122.288008][ T4278] usb 3-1: Manufacturer: syz
[  122.292722][ T4278] usb 3-1: SerialNumber: syz
[  122.306226][ T4278] usb 3-1: config 0 descriptor??
[  122.323423][    T7] usb 6-1: 2:1 : invalid Cluster Descriptor size
[  122.359749][ T5007] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  122.406377][  T144] hfsplus: b-tree write err: -5, ino 3
[  122.431311][ T4193] hfsplus: node 4:3 still has 1 user(s)!
[  122.555327][ T4179] usb 6-1: USB disconnect, device number 2
[  122.714247][ T5044] netlink: 12 bytes leftover after parsing attributes in process `syz.0.219'.
[  122.742326][ T4278] usb 3-1: USB disconnect, device number 6
[  122.799631][ T5047] loop3: detected capacity change from 0 to 256
[  122.813720][ T4247] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  122.846657][ T5047] exfat: Deprecated parameter 'namecase'
[  122.881629][ T5047] exfat: Deprecated parameter 'utf8'
[  122.937741][ T5047] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xea424414, utbl_chksum : 0xe619d30d)
[  123.057919][ T5052] netlink: 144 bytes leftover after parsing attributes in process `syz.0.221'.
[  123.083113][ T4247] usb 2-1: Using ep0 maxpacket: 32
[  123.223338][ T4247] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  123.267842][ T5059] loop0: detected capacity change from 0 to 256
[  123.279870][ T4247] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  123.326426][ T4247] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  123.380771][ T4247] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  123.408598][ T5063] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  123.448338][ T4247] usb 2-1: config 0 descriptor??
[  123.700027][ T5073] loop0: detected capacity change from 0 to 2048
[  123.758424][ T5073] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found!
[  123.856793][ T5073] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  123.946377][ T4247] ft260 0003:0403:6030.0006: unknown main item tag 0x0
[  123.963079][ T4247] ft260 0003:0403:6030.0006: unknown main item tag 0x0
[  124.005119][ T4247] ft260 0003:0403:6030.0006: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.1-1/input0
[  124.177707][ T4247] ft260 0003:0403:6030.0006: chip code: 0000 0000
[  124.492145][ T5101] device syzkaller1 entered promiscuous mode
[  124.613576][ T4244] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  124.732045][ T5108] netlink: 'syz.0.237': attribute type 8 has an invalid length.
[  124.823531][ T4247] ft260 0003:0403:6030.0006: failed to reset I2C controller: -71
[  124.850889][ T5071] loop3: detected capacity change from 0 to 40427
[  124.872295][ T4247] usb 2-1: USB disconnect, device number 6
[  124.959500][ T5071] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  125.010624][ T5071] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  125.014243][ T4244] usb 3-1: config 0 has an invalid interface number: 8 but max is 0
[  125.045299][ T4244] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  125.060785][ T4244] usb 3-1: config 0 has no interface number 0
[  125.068799][ T4244] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  125.095341][ T5071] F2FS-fs (loop3): invalid crc value
[  125.107845][ T4244] usb 3-1: config 0 interface 8 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0
[  125.144863][ T4244] usb 3-1: New USB device found, idVendor=0582, idProduct=b9d5, bcdDevice=73.f7
[  125.181338][ T5071] F2FS-fs (loop3): Found nat_bits in checkpoint
[  125.201982][ T5118] loop5: detected capacity change from 0 to 1024
[  125.212054][ T4244] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  125.274717][ T4244] usb 3-1: config 0 descriptor??
[  125.325279][ T5118] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option
[  125.381613][ T5116] fido_id[5116]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  125.474300][ T5118] EXT4-fs (loop5): mounted filesystem without journal. Opts: nomblk_io_submit,nodioread_nolock,noquota,barrier,discard,nodioread_nolock,errors=remount-ro,. Quota mode: none.
[  125.535771][ T5118] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  125.601251][ T4360] udevd[4360]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  125.619749][ T5071] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  125.630504][ T5071] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  125.643412][ T5127] loop0: detected capacity change from 0 to 2048
[  125.672365][ T4278] usb 3-1: USB disconnect, device number 7
[  125.815068][ T5127] EXT4-fs (loop0): mounted filesystem without journal. Opts: block_validity,bsddf,,errors=continue. Quota mode: none.
[  126.307420][ T5129] loop1: detected capacity change from 0 to 32768
[  126.500372][ T5141] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability
[  126.564080][ T5129] XFS (loop1): Mounting V5 Filesystem
[  126.835207][ T5129] XFS (loop1): Ending clean mount
[  126.844245][ T5129] XFS (loop1): Quotacheck needed: Please wait.
[  127.076883][ T5129] XFS (loop1): Quotacheck: Done.
[  127.365882][ T5184] loop0: detected capacity change from 0 to 1024
[  127.406358][ T5188] loop3: detected capacity change from 0 to 8
[  127.515048][ T4193] XFS (loop1): Unmounting Filesystem
[  127.584694][ T5184] EXT4-fs (loop0): Ignoring removed bh option
[  127.610599][ T5184] EXT4-fs (loop0): Ignoring removed bh option
[  127.709835][ T5188] SQUASHFS error: Failed to read block 0x730: -5
[  127.751315][ T5184] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,barrier=0x0000000000000004,nolazytime,bh,min_batch_time=0x0000000000000008,errors=remount-ro,stripe=0x0000000000000005,bh,init_itable,. Quota mode: none.
[  127.788461][ T5194] SQUASHFS error: Unable to read metadata cache entry [72e]
[  127.803946][ T5188] SQUASHFS error: Unable to read metadata cache entry [72e]
[  128.027919][ T5204] netlink: 8 bytes leftover after parsing attributes in process `syz.5.261'.
[  128.149808][ T5184] EXT4-fs (loop0): re-mounted. Opts: (null). Quota mode: none.
[  128.164357][ T5204] netlink: 'syz.5.261': attribute type 1 has an invalid length.
[  128.208831][ T5204] netlink: 'syz.5.261': attribute type 2 has an invalid length.
[  128.447823][ T5219] loop3: detected capacity change from 0 to 64
[  128.448639][ T4191] EXT4-fs error (device loop0): ext4_read_inline_dir:1626: inode #12: block 7: comm syz-executor: path /45/control/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[  128.665448][ T4191] EXT4-fs error (device loop0): ext4_read_inline_dir:1626: inode #12: block 7: comm syz-executor: path /45/control/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[  128.695589][    C0] vkms_vblank_simulate: vblank timer overrun
[  128.794836][ T4244] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  128.998584][ T4179] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  129.197981][ T4244] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  129.218114][ T4244] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  129.250280][ T4244] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[  129.269626][ T4244] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  129.292051][ T4179] usb 6-1: Using ep0 maxpacket: 32
[  129.423654][ T4244] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  129.441140][ T4244] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  129.459275][   T23] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  129.469615][ T4179] usb 6-1: unable to get BOS descriptor or descriptor too short
[  129.503495][ T4244] usb 3-1: Product: syz
[  129.508989][ T4244] usb 3-1: Manufacturer: syz
[  129.573565][ T4179] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  129.595591][ T4244] cdc_wdm 3-1:1.0: skipping garbage
[  129.613461][ T4244] cdc_wdm 3-1:1.0: skipping garbage
[  129.623540][ T4179] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  129.668571][ T5228] loop1: detected capacity change from 0 to 32768
[  129.684570][ T4244] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[  129.692442][ T4244] cdc_wdm 3-1:1.0: Unknown control protocol
[  129.734175][   T23] usb 4-1: Using ep0 maxpacket: 8
[  129.839714][ T5221] udc-core: couldn't find an available UDC or it's busy
[  129.853530][   T23] usb 4-1: config 179 has an invalid interface number: 65 but max is 0
[  129.875080][ T4179] usb 6-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40
[  129.909107][   T23] usb 4-1: config 179 has no interface number 0
[  129.923426][ T4179] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  129.942212][ T5221] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  129.961115][   T23] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  129.990227][ T4179] usb 6-1: Product: syz
[  130.004266][   T23] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  130.034538][    C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  130.043012][    C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  130.052047][ T4179] usb 6-1: Manufacturer: syz
[  130.058042][    C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  130.058109][    C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  130.073407][    C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  130.073436][    C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  130.092137][   T23] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  130.103786][    C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  130.103817][    C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  130.120375][ T4179] usb 6-1: SerialNumber: syz
[  130.125869][    C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  130.125899][    C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  130.143070][    C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  130.151125][    C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  130.163053][    C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  130.170698][    C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  130.178508][   T23] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  130.192855][    C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  130.192881][    C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  130.207058][    C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  130.207146][    C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  130.223756][    C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  130.231400][    C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  130.244425][   T23] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  130.326723][   T23] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  130.361663][   T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  130.424907][ T4244] usb 3-1: USB disconnect, device number 8
[  130.443039][    C1] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  130.457287][ T5234] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[  130.579680][ T4179] usb 6-1: unit 0 not found!
[  130.737695][ T5273] loop0: detected capacity change from 0 to 512
[  130.804605][ T4247] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input9
[  130.848950][ T5273] EXT4-fs (loop0): Ignoring removed mblk_io_submit option
[  130.909720][ T5273] EXT4-fs (loop0): Ignoring removed bh option
[  131.001984][ T5273] EXT4-fs error (device loop0): ext4_iget_extra_inode:4573: inode #15: comm syz.0.278: corrupted in-inode xattr
[  131.040866][ T4247] usb 6-1: USB disconnect, device number 3
[  131.052776][ T4278] usb 4-1: USB disconnect, device number 6
[  131.053259][    C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  131.068484][    C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  131.134955][ T5284] loop2: detected capacity change from 0 to 64
[  131.185141][ T5273] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.278: couldn't read orphan inode 15 (err -117)
[  131.206166][ T4278] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  131.375538][ T5273] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,inode_readahead_blks=0x0000000000000400,abort,noload,delalloc,mblk_io_submit,commit=0x0000000000000000,grpquota,bh,init_itable=0x0000000000000fff,,errors=continue. Quota mode: writeback.
[  132.033152][ T4278] usb 1-1: new full-speed USB device number 8 using dummy_hcd
[  132.110355][ T5319] loop2: detected capacity change from 0 to 1024
[  132.178126][ T5319] EXT4-fs (loop2): Test dummy encryption mode enabled
[  132.223152][ T5319] EXT4-fs (loop2): Unrecognized mount option "smackfstransmute=\^" or missing value
[  132.443800][ T4278] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  132.496552][ T4278] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  132.527756][ T4278] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  132.554864][ T4278] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  132.583206][ T4196] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  132.636920][ T4278] hub 1-1:4.0: USB hub found
[  132.740720][ T5302] loop3: detected capacity change from 0 to 32768
[  132.863360][ T4278] hub 1-1:4.0: 14 ports detected
[  132.871665][ T4278] usb 1-1: selecting invalid altsetting 1
[  132.881116][ T4278] hub 1-1:4.0: Using single TT (err -22)
[  132.919965][ T4278] hub 1-1:4.0: insufficient power available to use all downstream ports
[  132.920244][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  132.962263][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  133.013237][ T4196] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  133.058490][ T4196] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  133.079221][ T4196] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  133.107352][ T4278] hub 1-1:4.0: hub_hub_status failed (err = -71)
[  133.124616][ T4278] hub 1-1:4.0: config failed, can't get hub status (err -71)
[  133.143380][    T7] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  133.189440][ T5302] XFS (loop3): Mounting V5 Filesystem
[  133.217372][ T4278] usb 1-1: USB disconnect, device number 8
[  133.298070][ T5302] XFS (loop3): Ending clean mount
[  133.304127][ T4196] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  133.314505][ T4196] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  133.330605][ T4196] usb 6-1: Product: syz
[  133.335468][ T4196] usb 6-1: Manufacturer: syz
[  133.340301][ T4196] usb 6-1: SerialNumber: syz
[  133.487586][ T4192] XFS (loop3): Unmounting Filesystem
[  133.591677][    T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  133.603418][    T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  133.614460][    T7] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[  133.625050][    T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  133.635948][    T7] usb 2-1: config 0 descriptor??
[  133.674104][ T4196] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  133.903869][ T4247] usb 6-1: USB disconnect, device number 4
[  133.937251][ T4247] usblp0: removed
[  134.050314][ T5375] loop3: detected capacity change from 0 to 1024
[  134.064073][ T5375] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  134.108679][ T5375] EXT4-fs (loop3): mounted filesystem without journal. Opts: user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x0000000000000020,bsdgroups,barrier=0x0000000000000005,user_xattr,noinit_itable,,errors=continue. Quota mode: none.
[  134.153750][    T7] pyra 0003:1E7D:2CF6.0007: unknown main item tag 0x0
[  134.162441][    T7] pyra 0003:1E7D:2CF6.0007: unknown main item tag 0x0
[  134.176024][    T7] pyra 0003:1E7D:2CF6.0007: unknown main item tag 0x0
[  134.185913][    T7] pyra 0003:1E7D:2CF6.0007: unknown main item tag 0x0
[  134.197518][    T7] pyra 0003:1E7D:2CF6.0007: unknown main item tag 0x0
[  134.204571][    T7] pyra 0003:1E7D:2CF6.0007: unknown main item tag 0x0
[  134.212206][    T7] pyra 0003:1E7D:2CF6.0007: unknown main item tag 0x0
[  134.221790][    T7] pyra 0003:1E7D:2CF6.0007: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.1-1/input0
[  134.806035][ T5397] i2c i2c-0: new_device: Instantiated device hd3ss3220 at 0x04
[  134.839143][ T5397] i2c i2c-0: delete_device: Can't find device in list
[  135.004965][ T5404] device syzkaller1 entered promiscuous mode
[  135.033419][    T7] pyra 0003:1E7D:2CF6.0007: couldn't init struct pyra_device
[  135.049433][    T7] pyra 0003:1E7D:2CF6.0007: couldn't install mouse
[  135.069270][    T7] pyra: probe of 0003:1E7D:2CF6.0007 failed with error -71
[  135.104923][    T7] usb 2-1: USB disconnect, device number 7
[  135.196730][ T5405] fido_id[5405]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  135.522819][ T5417] loop3: detected capacity change from 0 to 128
[  135.550831][ T5417] FAT-fs (loop3): bogus number of FAT structure
[  135.603223][ T5417] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; no bootstrapping code
[  135.657589][ T5417] FAT-fs (loop3): Can't find a valid FAT filesystem
[  135.944517][    T7] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  135.978952][ T5431] device veth0 entered promiscuous mode
[  135.989666][ T5430] device veth0 left promiscuous mode
[  136.048209][ T5433] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xc138fd30
[  136.057347][   T23] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  136.172637][ T5435] loop0: detected capacity change from 0 to 512
[  136.233191][    T7] usb 2-1: Using ep0 maxpacket: 8
[  136.263498][ T5435] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  136.323227][   T23] usb 4-1: Using ep0 maxpacket: 16
[  136.333375][ T5435] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.328: invalid indirect mapped block 9 (level 0)
[  136.383653][    T7] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  136.399678][    T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  136.414299][    T7] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  136.432183][    T7] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  136.445786][    T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  136.465468][    T7] usb 2-1: config 0 descriptor??
[  136.471439][ T5435] EXT4-fs (loop0): 1 truncate cleaned up
[  136.480162][ T5435] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable,inode_readahead_blks=0x0000000008000000,nodiscard,,errors=continue. Quota mode: none.
[  136.587718][ T5435] EXT4-fs error (device loop0): ext4_find_dest_de:2115: inode #2: block 13: comm syz.0.328: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[  136.611485][ T5447] loop2: detected capacity change from 0 to 128
[  136.643363][   T23] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  136.663244][   T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  136.679524][   T23] usb 4-1: Product: syz
[  136.711726][ T5447] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  136.749325][   T23] usb 4-1: Manufacturer: syz
[  136.787492][ T5447] ext4 filesystem being mounted at /67/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  136.794064][   T23] usb 4-1: SerialNumber: syz
[  136.837121][    T7] usb 2-1: USB disconnect, device number 8
[  136.903759][   T23] r8152-cfgselector 4-1: config 0 descriptor??
[  136.918711][ T5453] loop0: detected capacity change from 0 to 512
[  137.066479][ T5453] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters
[  137.084608][ T5453] EXT4-fs (loop0): Remounting filesystem read-only
[  137.092215][ T5453] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.333: invalid indirect mapped block 4278190080 (level 0)
[  137.108154][ T5453] EXT4-fs (loop0): Remounting filesystem read-only
[  137.115898][ T5453] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.333: invalid indirect mapped block 1 (level 1)
[  137.130527][ T5453] EXT4-fs (loop0): Remounting filesystem read-only
[  137.137851][    C1] vkms_vblank_simulate: vblank timer overrun
[  137.138940][ T5453] EXT4-fs (loop0): 1 truncate cleaned up
[  137.150432][ T5453] EXT4-fs (loop0): mounted filesystem without journal. Opts: abort,errors=continue,inode_readahead_blks=0x0000000000000040,errors=remount-ro,barrier=0x0000000000000ffc,resgid=0x0000000000000000,nolazytime,noquota,auto_da_alloc=0x0000000000000006,data=journal,init_itable=0x000000000000. Quota mode: none.
[  137.163858][   T23] r8152-cfgselector 4-1: Unknown version 0x0000
[  137.203646][ T5453] EXT4-fs (loop0): shut down requested (1)
[  137.520010][ T5472] loop0: detected capacity change from 0 to 128
[  137.543366][   T23] r8152-cfgselector 4-1: Unknown version 0x0000
[  137.566036][   T23] r8152-cfgselector 4-1: USB disconnect, device number 7
[  137.664995][ T5472] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  137.739589][ T5472] hpfs: filesystem error: improperly stopped
[  137.780635][ T5472] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  137.799803][ T5472] hpfs: You really don't want any checks? You are crazy...
[  137.833132][ T5472] hpfs: Code page index out of array
[  137.880623][ T5472] hpfs: code page support is disabled
[  137.904600][ T5472] hpfs: hpfs_map_4sectors(): unaligned read
[  137.911766][ T5472] hpfs: hpfs_map_4sectors(): unaligned read
[  137.961490][ T5472] hpfs: filesystem error: unable to find root dir
[  138.747395][ T5514] loop5: detected capacity change from 0 to 256
[  138.929291][ T5486] loop1: detected capacity change from 0 to 32768
[  139.233272][    T7] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  139.259443][ T5486] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  139.518424][ T5522] loop3: detected capacity change from 0 to 32768
[  139.526769][ T5528] loop5: detected capacity change from 0 to 2048
[  139.610719][ T5530] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  139.654424][ T5522] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop3 scanned by syz.3.360 (5522)
[  139.672950][    T7] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  139.688825][ T5528] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  139.711268][    T7] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[  139.733367][    T7] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  139.769157][ T5486] syz.1.346 (5486) used greatest stack depth: 18304 bytes left
[  139.861426][ T5522] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[  139.893258][ T5522] BTRFS info (device loop3): using free space tree
[  139.912004][ T5522] BTRFS info (device loop3): has skinny extents
[  139.936351][    T7] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01
[  139.993130][    T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  140.073129][    T7] usb 3-1: Product: syz
[  140.093203][    T7] usb 3-1: Manufacturer: syz
[  140.113988][ T4193] ocfs2: Unmounting device (7,1) on (node local)
[  140.158931][ T5520] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  140.204998][    T7] garmin_gps 3-1:1.0: Garmin GPS usb/tty converter detected
[  140.294945][    T7] usb 3-1: Garmin GPS usb/tty converter now attached to ttyUSB0
[  140.407507][ T5522] BTRFS info (device loop3): enabling ssd optimizations
[  140.524007][ T4243] usb 3-1: USB disconnect, device number 9
[  140.566551][ T4243] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0
[  140.633500][ T4243] garmin_gps 3-1:1.0: device disconnected
[  140.810375][ T5562] netlink: 8 bytes leftover after parsing attributes in process `syz.1.365'.
[  141.623586][ T5581] input: syz0 as /devices/virtual/input/input10
[  142.029592][ T5587] loop2: detected capacity change from 0 to 4096
[  142.067963][ T5587] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512)
[  142.425102][ T5585] loop5: detected capacity change from 0 to 32768
[  142.453930][   T26] audit: type=1800 audit(1787168508.993:13): pid=5587 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.380" name="file1" dev="loop2" ino=30 res=0 errno=0
[  142.520149][ T5602] netlink: 12 bytes leftover after parsing attributes in process `syz.0.381'.
[  142.552871][ T5585] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.378 (5585)
[  142.630017][ T5585] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm
[  142.722113][ T5585] BTRFS info (device loop5): force clearing of disk cache
[  142.817503][ T5585] BTRFS info (device loop5): enabling ssd optimizations
[  142.857386][ T5585] BTRFS info (device loop5): using spread ssd allocation scheme
[  142.894217][ T5585] BTRFS info (device loop5): metadata ratio 0
[  142.921171][ T5585] BTRFS info (device loop5): using free space tree
[  142.961860][ T5585] BTRFS info (device loop5): has skinny extents
[  143.013745][ T5590] loop1: detected capacity change from 0 to 32768
[  143.108259][ T5590] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.382 (5590)
[  143.162072][ T5621] netlink: 'syz.3.387': attribute type 4 has an invalid length.
[  143.194445][ T5590] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  143.243823][ T5590] BTRFS info (device loop1): setting nodatasum
[  143.250725][ T5590] BTRFS info (device loop1): force zlib compression, level 3
[  143.338666][ T5590] BTRFS info (device loop1): turning on flush-on-commit
[  143.367243][ T5585] BTRFS info (device loop5): clearing free space tree
[  143.388788][ T5590] BTRFS info (device loop1): max_inline at 4096
[  143.400302][ T5590] BTRFS info (device loop1): using free space tree
[  143.416078][ T5590] BTRFS info (device loop1): has skinny extents
[  143.418583][ T5627] netlink: 'syz.3.387': attribute type 4 has an invalid length.
[  143.461255][ T5585] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  143.489629][ T5585] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  143.590190][ T5585] BTRFS info (device loop5): creating free space tree
[  143.652032][ T5585] BTRFS info (device loop5): setting compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  143.662463][ T5585] BTRFS info (device loop5): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  143.807613][ T5590] BTRFS info (device loop1): enabling ssd optimizations
[  143.821870][ T5661] netlink: 8 bytes leftover after parsing attributes in process `syz.2.389'.
[  143.972723][   T26] audit: type=1800 audit(1787168510.503:14): pid=5590 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.382" name="file1" dev="loop1" ino=260 res=0 errno=0
[  144.071806][ T5669] loop0: detected capacity change from 0 to 1024
[  144.221875][ T5669] EXT4-fs (loop0): Ignoring removed oldalloc option
[  144.271736][ T5669] EXT4-fs (loop0): Ignoring removed oldalloc option
[  144.310060][ T5669] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  144.425819][ T5669] EXT4-fs (loop0): mounted filesystem without journal. Opts: stripe=0x0000000000000004,bsddf,sysvgroups,norecovery,dioread_nolock,oldalloc,oldalloc,sysvgroups,nobarrier,,errors=continue. Quota mode: none.
[  144.533552][ T4242] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  144.783306][ T4242] usb 3-1: Using ep0 maxpacket: 8
[  144.807222][   T26] audit: type=1804 audit(1787168511.343:15): pid=5681 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.392" name="/newroot/73/file1/file1" dev="loop0" ino=15 res=1 errno=0
[  145.054257][ T4242] usb 3-1: unable to get BOS descriptor or descriptor too short
[  145.080868][ T5665] loop3: detected capacity change from 0 to 40427
[  145.143386][ T4242] usb 3-1: unable to read config index 0 descriptor/start: -71
[  145.158311][ T5665] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  145.174565][ T4242] usb 3-1: can't read configurations, error -71
[  145.199067][ T5665] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  145.349287][ T5665] F2FS-fs (loop3): invalid crc value
[  145.409378][ T5665] F2FS-fs (loop3): Found nat_bits in checkpoint
[  145.603318][ T5708] loop2: detected capacity change from 0 to 256
[  145.624248][ T5665] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  145.631361][ T5665] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  145.721775][   T26] audit: type=1800 audit(1787168512.253:16): pid=5708 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.400" name="file2" dev="loop2" ino=1048603 res=0 errno=0
[  145.753765][ T5678] libceph: connect (1)[c::]:6789 error -101
[  145.763702][ T5678] libceph: mon0 (1)[c::]:6789 connect error
[  145.996451][ T5715] loop5: detected capacity change from 0 to 512
[  146.063410][ T4262] libceph: connect (1)[c::]:6789 error -101
[  146.088453][ T4262] libceph: mon0 (1)[c::]:6789 connect error
[  146.180902][ T5715] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  146.183427][ T5696] ceph: No mds server is up or the cluster is laggy
[  146.226506][ T5715] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002]
[  146.247344][ T5715] EXT4-fs (loop5): orphan cleanup on readonly fs
[  146.286646][ T5715] EXT4-fs error (device loop5): ext4_orphan_get:1432: comm syz.5.403: bad orphan inode 3
[  146.374142][ T5715] EXT4-fs (loop5): Remounting filesystem read-only
[  146.402240][ T5715] EXT4-fs (loop5): mounted filesystem without journal. Opts: nojournal_checksum,noblock_validity,discard,errors=remount-ro,data=writeback. Quota mode: none.
[  146.424169][  T559] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  146.460949][  T559] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[  146.781388][ T5717] loop2: detected capacity change from 0 to 32768
[  146.806891][ T5727] loop5: detected capacity change from 0 to 128
[  146.879774][ T5717] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.402 (5717)
[  146.903783][ T5727] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  146.953122][ T5727] hpfs: filesystem error: improperly stopped
[  146.959204][ T5727] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  147.001562][ T5717] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  147.014559][ T5727] hpfs: You really don't want any checks? You are crazy...
[  147.043309][ T5727] hpfs: Code page index out of array
[  147.053693][ T5717] BTRFS info (device loop2): using free space tree
[  147.061401][ T5727] hpfs: code page support is disabled
[  147.081199][ T5717] BTRFS info (device loop2): has skinny extents
[  147.088310][ T5727] hpfs: hpfs_map_4sectors(): unaligned read
[  147.109747][ T5727] hpfs: hpfs_map_4sectors(): unaligned read
[  147.131070][ T5727] hpfs: filesystem error: unable to find root dir
[  147.362481][ T5717] BTRFS info (device loop2): enabling ssd optimizations
[  147.490308][ T5729] loop0: detected capacity change from 0 to 32768
[  147.621559][ T5729] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  147.811696][ T5769] netlink: 8 bytes leftover after parsing attributes in process `syz.3.416'.
[  147.887029][ T4191] ocfs2: Unmounting device (7,0) on (node local)
[  147.899851][ T5769] netlink: 8 bytes leftover after parsing attributes in process `syz.3.416'.
[  147.984136][ T4242] usb 2-1: new full-speed USB device number 9 using dummy_hcd
[  148.185627][ T5778] loop3: detected capacity change from 0 to 128
[  148.351146][ T4242] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  148.372536][ T4242] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  148.410701][ T4242] usb 2-1: config 0 interface 0 has no altsetting 0
[  148.435317][ T4242] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  148.482112][ T4242] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  148.523333][ T4242] usb 2-1: config 0 descriptor??
[  148.983536][ T5796] Invalid argument reading file caps for ./file0
[  148.995229][ T4242] elan 0003:04F3:0755.0008: unknown main item tag 0x3
[  149.002147][ T4242] elan 0003:04F3:0755.0008: unknown main item tag 0x3
[  149.032184][ T4242] elan 0003:04F3:0755.0008: unknown main item tag 0x2
[  149.057093][ T4242] elan 0003:04F3:0755.0008: unknown main item tag 0x0
[  149.081655][ T4242] elan 0003:04F3:0755.0008: item 0 0 0 11 parsing failed
[  149.103076][ T4242] elan 0003:04F3:0755.0008: Hid Parse failed
[  149.119341][ T4242] elan: probe of 0003:04F3:0755.0008 failed with error -22
[  149.274786][ T4242] usb 2-1: USB disconnect, device number 9
[  149.899248][ T5817] netlink: 8 bytes leftover after parsing attributes in process `syz.1.431'.
[  149.983155][ T5818] netlink: 8 bytes leftover after parsing attributes in process `syz.1.431'.
[  150.005858][ T5820] loop3: detected capacity change from 0 to 512
[  150.074730][ T5820] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters
[  150.102041][ T5820] EXT4-fs (loop3): Remounting filesystem read-only
[  150.119675][ T5820] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.433: invalid indirect mapped block 4278190080 (level 0)
[  150.208002][ T5820] EXT4-fs (loop3): Remounting filesystem read-only
[  150.214938][ T5820] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.433: invalid indirect mapped block 1 (level 1)
[  150.239528][ T5820] EXT4-fs (loop3): Remounting filesystem read-only
[  150.255838][ T5820] EXT4-fs (loop3): 1 truncate cleaned up
[  150.262012][ T5820] EXT4-fs (loop3): mounted filesystem without journal. Opts: abort,errors=continue,inode_readahead_blks=0x0000000000000040,errors=remount-ro,barrier=0x0000000000000ffc,resgid=0x0000000000000000,nolazytime,noquota,auto_da_alloc=0x0000000000000006,data=journal,init_itable=0x000000000000. Quota mode: none.
[  150.428874][ T5820] EXT4-fs (loop3): shut down requested (1)
[  150.705186][ T5840] loop0: detected capacity change from 0 to 256
[  151.245800][ T5860] Invalid argument reading file caps for ./file0
[  151.339402][ T5863] loop1: detected capacity change from 0 to 128
[  151.601116][ T5867] loop5: detected capacity change from 0 to 512
[  151.696683][ T5867] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters
[  151.860091][ T5867] EXT4-fs (loop5): Remounting filesystem read-only
[  151.884591][ T5878] netlink: 8 bytes leftover after parsing attributes in process `syz.2.455'.
[  151.895419][ T5867] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.452: invalid indirect mapped block 4278190080 (level 0)
[  151.911811][ T5878] netlink: 'syz.2.455': attribute type 20 has an invalid length.
[  151.952543][ T5867] EXT4-fs (loop5): Remounting filesystem read-only
[  151.952731][ T5878] netlink: 'syz.2.455': attribute type 21 has an invalid length.
[  151.968824][ T5867] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.452: invalid indirect mapped block 1 (level 1)
[  152.000413][ T5867] EXT4-fs (loop5): Remounting filesystem read-only
[  152.010976][ T5867] EXT4-fs (loop5): 1 truncate cleaned up
[  152.011445][ T5883] netlink: 'syz.3.457': attribute type 39 has an invalid length.
[  152.053423][ T5867] EXT4-fs (loop5): mounted filesystem without journal. Opts: abort,errors=continue,inode_readahead_blks=0x0000000000000040,errors=remount-ro,barrier=0x0000000000000ffc,resgid=0x0000000000000000,nolazytime,noquota,auto_da_alloc=0x0000000000000006,data=journal,init_itable=0x000000000000. Quota mode: none.
[  152.197759][ T5885] device syzkaller1 entered promiscuous mode
[  152.219298][ T5887] netlink: 4 bytes leftover after parsing attributes in process `syz.2.459'.
[  152.242135][ T5867] EXT4-fs (loop5): shut down requested (1)
[  152.417875][ T5891] input: syz0 as /devices/virtual/input/input11
[  152.978912][ T5913] lvs 9-0:1.0: Bind LVS driver with SS root Hub only
[  153.001064][ T5913] lvs: probe of 9-0:1.0 failed with error -22
[  153.484192][ T5925] netlink: 8 bytes leftover after parsing attributes in process `syz.1.477'.
[  153.913264][ T5680] usb 4-1: new full-speed USB device number 8 using dummy_hcd
[  154.043186][ T5786] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  154.319459][ T5680] usb 4-1: config 0 has an invalid interface number: 41 but max is 0
[  154.338593][ T5680] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  154.359465][ T5680] usb 4-1: config 0 has no interface number 0
[  154.380424][ T5680] usb 4-1: config 0 interface 41 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  154.394489][ T1111] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  154.414832][ T5680] usb 4-1: config 0 interface 41 has no altsetting 0
[  154.593431][ T5786] usb 1-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice= 1.00
[  154.594101][ T5680] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  154.622403][ T5786] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  154.641683][ T5786] usb 1-1: Product: syz
[  154.651871][ T5786] usb 1-1: Manufacturer: syz
[  154.653283][ T5680] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  154.683323][ T5680] usb 4-1: Product: syz
[  154.687563][ T5680] usb 4-1: Manufacturer: syz
[  154.692674][ T5680] usb 4-1: SerialNumber: syz
[  154.694520][ T5786] usb 1-1: SerialNumber: syz
[  154.718843][ T5680] usb 4-1: config 0 descriptor??
[  154.784412][ T5680] CoreChips: probe of 4-1:0.41 failed with error -22
[  154.823595][ T1111] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  154.850317][ T1111] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  154.879711][ T1111] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  154.920363][ T1111] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  154.949381][ T1111] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  154.980956][ T1111] usb 2-1: config 0 descriptor??
[  155.067498][ T5964] gadgetfs: bound to dummy_udc driver
[  155.213423][ T5786] dvbdev: DVB: registering new adapter (DEC3000-s)
[  155.245772][ T5786] usb 1-1: DVB: registering adapter 1 frontend 0 (TechnoTrend/Hauppauge DEC3000-s Frontend)...
[  155.377265][ T5958] loop2: detected capacity change from 0 to 32768
[  155.403122][ T5786] ttusb_dec_send_command: command bulk message failed: error -71
[  155.455437][ T5786] usb 1-1: USB disconnect, device number 9
[  155.491643][ T5958] XFS (loop2): Mounting V5 Filesystem
[  155.506570][ T1111] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving
[  155.519652][ T1111] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.00 Joystick [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  155.675271][ T5958] XFS (loop2): Ending clean mount
[  155.814067][ T4208] XFS (loop2): Unmounting Filesystem
[  156.464680][ T5997] loop5: detected capacity change from 0 to 40427
[  156.529674][ T5997] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  156.542680][ T5997] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  156.558168][ T5997] F2FS-fs (loop5): invalid crc value
[  156.569368][ T5997] F2FS-fs (loop5): Found nat_bits in checkpoint
[  156.632115][ T5600] usb 4-1: USB disconnect, device number 8
[  156.729732][ T5997] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  156.740878][ T5997] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  157.022634][  T559] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  157.042835][  T559] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[  157.293106][ T1111] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  157.573048][ T1111] usb 3-1: Using ep0 maxpacket: 16
[  157.603481][ T6038] netlink: 12 bytes leftover after parsing attributes in process `syz.3.499'.
[  157.753345][ T1111] usb 3-1: unable to get BOS descriptor or descriptor too short
[  157.780761][ T5680] usb 2-1: USB disconnect, device number 10
[  157.853305][ T1111] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  157.879182][ T1111] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  157.930119][ T1111] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  157.960484][ T6055] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  158.041475][ T6057] loop3: detected capacity change from 0 to 128
[  158.061856][ T6027] loop0: detected capacity change from 0 to 40427
[  158.120484][ T6027] F2FS-fs (loop0): invalid crc value
[  158.143348][ T6057] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  158.173315][ T1111] usb 3-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40
[  158.184072][ T6057] hpfs: filesystem error: improperly stopped
[  158.190133][ T6057] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  158.208725][ T1111] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  158.223448][ T6027] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  158.243055][ T1111] usb 3-1: Product: syz
[  158.257573][ T1111] usb 3-1: Manufacturer: syz
[  158.262242][ T1111] usb 3-1: SerialNumber: syz
[  158.267722][ T6057] hpfs: You really don't want any checks? You are crazy...
[  158.298136][ T6057] hpfs: Code page index out of array
[  158.318418][ T6057] hpfs: code page support is disabled
[  158.338758][ T6057] hpfs: hpfs_map_4sectors(): unaligned read
[  158.369165][ T6057] hpfs: hpfs_map_4sectors(): unaligned read
[  158.412522][ T6057] hpfs: filesystem error: unable to find root dir
[  158.420159][ T6064] loop5: detected capacity change from 0 to 4096
[  158.500601][ T6027] F2FS-fs (loop0): Start checkpoint disabled!
[  158.513297][ T5600] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  158.572535][ T6027] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e7
[  158.583986][ T1111] usb 3-1: Audio class v2/v3 interfaces need an interface association
[  158.592544][ T1111] snd-usb-audio: probe of 3-1:1.0 failed with error -22
[  158.838821][ T6027] attempt to access beyond end of device
[  158.838821][ T6027] loop0: rw=2049, want=45104, limit=40427
[  158.878412][ T6027] attempt to access beyond end of device
[  158.878412][ T6027] loop0: rw=0, want=45104, limit=40427
[  158.891054][ T5600] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  158.918244][ T5600] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  158.958882][ T5600] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  159.044915][ T4358] attempt to access beyond end of device
[  159.044915][ T4358] loop0: rw=2049, want=45112, limit=40427
[  159.056394][ T1111] usb 3-1: 2:1 : invalid Cluster Descriptor size
[  159.123981][ T6084] loop5: detected capacity change from 0 to 256
[  159.157190][ T5600] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  159.186905][ T5600] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  159.217624][ T5600] usb 2-1: Product: syz
[  159.221864][ T5600] usb 2-1: Manufacturer: syz
[  159.250571][ T5600] usb 2-1: SerialNumber: syz
[  159.284754][ T6084] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d)
[  159.316857][ T1111] usb 3-1: USB disconnect, device number 12
[  159.556391][ T5600] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 11 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  159.616870][ T6094] gadgetfs: bound to dummy_udc driver
[  159.634308][ T6092] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[  159.696635][ T6092] overlayfs: overlapping lowerdir path
[  159.814251][ T4242] usb 2-1: USB disconnect, device number 11
[  159.839402][ T4242] usblp0: removed
[  160.263259][ T1111] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  160.414928][ T6125] netlink: 104 bytes leftover after parsing attributes in process `syz.2.526'.
[  160.457427][ T6130] gadgetfs: bound to dummy_udc driver
[  160.548597][ T1111] usb 1-1: Using ep0 maxpacket: 8
[  160.575040][ T6136] loop3: detected capacity change from 0 to 512
[  160.643167][ T4242] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  160.699465][ T6136] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  160.750175][ T1111] usb 1-1: unable to get BOS descriptor or descriptor too short
[  160.785994][ T6136] EXT4-fs (loop3): 1 truncate cleaned up
[  160.797785][ T6136] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  160.829045][ T1111] usb 1-1: unable to read config index 0 descriptor/start: -71
[  160.845439][ T1111] usb 1-1: can't read configurations, error -71
[  160.883051][ T4242] usb 6-1: Using ep0 maxpacket: 32
[  161.004293][ T4242] usb 6-1: config 0 has no interfaces?
[  161.163291][ T4242] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  161.173161][ T4242] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  161.181276][ T4242] usb 6-1: Product: syz
[  161.187568][ T4242] usb 6-1: Manufacturer: syz
[  161.192254][ T4242] usb 6-1: SerialNumber: syz
[  161.205467][ T4242] usb 6-1: config 0 descriptor??
[  161.320367][ T6142] netlink: 'syz.0.535': attribute type 1 has an invalid length.
[  161.338830][ T6142] netlink: 'syz.0.535': attribute type 2 has an invalid length.
[  161.487182][ T5786] usb 6-1: USB disconnect, device number 5
[  161.529482][ T6135] loop1: detected capacity change from 0 to 32768
[  161.560589][ T6135] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.532 (6135)
[  161.621898][ T6135] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  161.673241][ T6135] BTRFS info (device loop1): force clearing of disk cache
[  161.696324][ T6135] BTRFS info (device loop1): enabling ssd optimizations
[  161.723098][ T6135] BTRFS info (device loop1): using spread ssd allocation scheme
[  161.751412][ T6135] BTRFS info (device loop1): metadata ratio 0
[  161.797988][ T6135] BTRFS info (device loop1): using free space tree
[  161.830089][ T6135] BTRFS info (device loop1): has skinny extents
[  162.188308][ T6135] BTRFS info (device loop1): clearing free space tree
[  162.202929][ T6135] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  162.223933][ T6135] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  162.259254][ T6135] BTRFS info (device loop1): creating free space tree
[  162.284678][ T6135] BTRFS info (device loop1): setting compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  162.317806][ T6135] BTRFS info (device loop1): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  162.872218][ T6189] loop2: detected capacity change from 0 to 65536
[  162.898566][ T4300] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 12 /dev/loop1 scanned by udevd (4300)
[  163.077302][ T6189] XFS (loop2): Mounting V5 Filesystem
[  163.357283][ T6189] XFS (loop2): Ending clean mount
[  163.367415][ T6189] XFS (loop2): Quotacheck needed: Please wait.
[  163.459037][ T4278] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  163.490130][ T6189] XFS (loop2): Quotacheck: Done.
[  163.615416][ T5710] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  163.646005][ T4208] XFS (loop2): Unmounting Filesystem
[  163.864058][ T4278] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  163.894840][ T6226] input: syz1 as /devices/virtual/input/input12
[  163.910041][ T4278] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  163.924718][ T5710] usb 1-1: Using ep0 maxpacket: 32
[  163.930081][ T4278] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  163.952250][ T4278] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  163.962009][ T4278] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  164.004654][ T4278] usb 6-1: config 0 descriptor??
[  164.079359][ T5710] usb 1-1: config 0 has no interfaces?
[  164.155736][ T6230] device batadv_slave_1 entered promiscuous mode
[  164.174926][ T6230] netlink: 112 bytes leftover after parsing attributes in process `syz.1.562'.
[  164.258686][ T5710] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  164.277639][ T5710] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  164.299943][ T6228] device batadv_slave_1 left promiscuous mode
[  164.306321][ T5710] usb 1-1: Product: syz
[  164.320834][ T5710] usb 1-1: Manufacturer: syz
[  164.336579][ T5710] usb 1-1: SerialNumber: syz
[  164.354258][ T5710] usb 1-1: config 0 descriptor??
[  164.525542][ T4278] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving
[  164.550091][ T4278] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.00 Joystick [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[  164.624982][ T4278] usb 1-1: USB disconnect, device number 12
[  164.692106][ T6237] loop1: detected capacity change from 0 to 4096
[  164.846242][ T6243] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  164.890543][   T26] audit: type=1800 audit(1787168531.423:17): pid=6237 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.566" name="file1" dev="loop1" ino=15 res=0 errno=0
[  166.175849][ T6254] loop1: detected capacity change from 0 to 65536
[  166.208256][ T5678] usb 6-1: USB disconnect, device number 6
[  166.360726][ T6254] XFS (loop1): Mounting V5 Filesystem
[  166.448590][ T6254] XFS (loop1): Ending clean mount
[  166.456846][ T6254] XFS (loop1): Quotacheck needed: Please wait.
[  166.592275][ T6254] XFS (loop1): Quotacheck: Done.
[  166.620226][ T6271] ehci-platform pcspkr: IRQ index 0 not found
[  166.723362][ T4193] XFS (loop1): Unmounting Filesystem
[  167.103141][ T5600] usb 3-1: new full-speed USB device number 13 using dummy_hcd
[  167.405623][ T5600] usb 3-1: too many configurations: 253, using maximum allowed: 8
[  167.435626][ T6273] loop5: detected capacity change from 0 to 32768
[  167.503309][ T5600] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  167.527960][ T5600] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  167.614198][ T6273] XFS (loop5): Mounting V5 Filesystem
[  167.636395][ T5600] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  167.654474][ T5600] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  167.773280][ T5600] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  167.779895][ T6273] XFS (loop5): Ending clean mount
[  167.797469][ T5600] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  167.845019][ T6297] loop1: detected capacity change from 0 to 256
[  167.860995][ T6273] XFS (loop5): Quotacheck needed: Please wait.
[  167.883983][ T6297] exfat: Deprecated parameter 'namecase'
[  167.889731][ T6297] exfat: Deprecated parameter 'utf8'
[  167.933327][ T5600] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  167.957159][ T6297] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xea424414, utbl_chksum : 0xe619d30d)
[  167.969930][ T5600] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  168.061353][ T6273] XFS (loop5): Quotacheck: Done.
[  168.093444][ T5600] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  168.118303][ T5600] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  168.165300][ T6299] loop3: detected capacity change from 0 to 8192
[  168.181240][   T26] audit: type=1800 audit(1787168534.713:18): pid=6273 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.586" name="file1" dev="loop5" ino=9286 res=0 errno=0
[  168.210554][ T6273] XFS (loop5): User initiated shutdown received.
[  168.217705][ T6273] XFS (loop5): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:495).  Shutting down filesystem.
[  168.237412][ T5600] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  168.249463][ T5600] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  168.271339][ T6273] XFS (loop5): Please unmount the filesystem and rectify the problem(s)
[  168.310600][ T6299] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal
[  168.343397][ T6299] REISERFS (device loop3): using ordered data mode
[  168.349979][ T6299] reiserfs: using flush barriers
[  168.355558][ T5600] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  168.408660][ T4436] XFS (loop5): Unmounting Filesystem
[  168.418623][ T5600] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  168.450492][ T6299] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  168.467649][ T6299] REISERFS (device loop3): checking transaction log (loop3)
[  168.573420][ T5600] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  168.622451][ T5600] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  168.671996][ T5600] usb 3-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00
[  168.711701][ T6299] REISERFS (device loop3): Using rupasov hash to sort names
[  168.722148][ T5600] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  168.732295][ T6299] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  168.767686][ T5600] usb 3-1: config 0 descriptor??
[  168.950574][   T26] audit: type=1804 audit(1787168535.483:19): pid=6299 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.581" name="/newroot/122/file0/file0" dev="loop3" ino=4 res=1 errno=0
[  169.053178][ T4278] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  169.110415][ T5600] usb 3-1: USB disconnect, device number 13
[  169.343142][ T4278] usb 1-1: Using ep0 maxpacket: 8
[  169.483450][ T4278] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  169.513123][ T4278] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  169.553259][ T4278] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  169.578328][ T4278] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  169.610433][ T6321] loop3: detected capacity change from 0 to 4096
[  169.617097][ T4278] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  169.635873][ T4278] usb 1-1: config 0 descriptor??
[  169.759142][ T6327] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  169.825270][   T26] audit: type=1800 audit(1787168536.363:20): pid=6321 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.591" name="file1" dev="loop3" ino=15 res=0 errno=0
[  169.971663][ T6332] loop2: detected capacity change from 0 to 1024
[  169.995805][ T5600] usb 1-1: USB disconnect, device number 13
[  170.053453][ T6332] EXT4-fs (loop2): Ignoring removed oldalloc option
[  170.093839][ T6332] EXT4-fs (loop2): Ignoring removed oldalloc option
[  170.105019][ T6332] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  170.146120][ T6315] loop5: detected capacity change from 0 to 32768
[  170.211737][ T6332] EXT4-fs (loop2): mounted filesystem without journal. Opts: stripe=0x0000000000000004,bsddf,sysvgroups,norecovery,dioread_nolock,oldalloc,oldalloc,sysvgroups,nobarrier,,errors=continue. Quota mode: none.
[  170.247578][ T6315] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.590 (6315)
[  170.344863][ T6337] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  170.358562][   T26] audit: type=1804 audit(1787168536.893:21): pid=6332 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.594" name="/newroot/111/file1/file1" dev="loop2" ino=15 res=1 errno=0
[  170.401325][ T6315] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm
[  170.413972][ T6315] BTRFS info (device loop5): setting nodatasum
[  170.420202][ T6315] BTRFS info (device loop5): force zlib compression, level 3
[  170.435567][ T6315] BTRFS info (device loop5): turning on flush-on-commit
[  170.470385][ T6315] BTRFS info (device loop5): max_inline at 4096
[  170.481003][ T6315] BTRFS info (device loop5): using free space tree
[  170.488973][ T6315] BTRFS info (device loop5): has skinny extents
[  170.772693][ T6315] BTRFS info (device loop5): enabling ssd optimizations
[  170.870325][   T26] audit: type=1800 audit(1787168537.403:22): pid=6315 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.590" name="file1" dev="loop5" ino=260 res=0 errno=0
[  170.956588][ T6357] loop0: detected capacity change from 0 to 4096
[  171.071492][ T6369] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  171.141228][   T26] audit: type=1800 audit(1787168537.673:23): pid=6357 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.609" name="file1" dev="loop0" ino=15 res=0 errno=0
[  172.086340][ T6385] netlink: 'syz.3.606': attribute type 1 has an invalid length.
[  172.121830][ T6385] netlink: 'syz.3.606': attribute type 2 has an invalid length.
[  172.256955][ T6391] loop3: detected capacity change from 0 to 1024
[  172.372569][ T6391] EXT4-fs (loop3): Ignoring removed oldalloc option
[  172.382308][ T6391] EXT4-fs (loop3): Ignoring removed oldalloc option
[  172.400211][ T6391] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  172.534604][ T6391] EXT4-fs (loop3): mounted filesystem without journal. Opts: stripe=0x0000000000000004,bsddf,sysvgroups,norecovery,dioread_nolock,oldalloc,oldalloc,sysvgroups,nobarrier,,errors=continue. Quota mode: none.
[  172.644401][ T6383] loop0: detected capacity change from 0 to 40427
[  172.662372][   T26] audit: type=1804 audit(1787168539.193:24): pid=6391 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.608" name="/newroot/128/file1/file1" dev="loop3" ino=15 res=1 errno=0
[  172.731170][ T6383] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  172.760076][ T6383] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  172.809561][ T6383] F2FS-fs (loop0): invalid crc value
[  172.842769][ T6383] F2FS-fs (loop0): Found nat_bits in checkpoint
[  172.983654][ T6417] netlink: 'syz.5.617': attribute type 8 has an invalid length.
[  173.027937][ T6418] loop2: detected capacity change from 0 to 4096
[  173.044207][ T6383] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  173.057124][ T6383] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  173.215402][ T6421] loop3: detected capacity change from 0 to 1024
[  173.245584][ T6422] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  173.343079][   T26] audit: type=1800 audit(1787168539.873:25): pid=6418 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.615" name="file1" dev="loop2" ino=15 res=0 errno=0
[  173.397973][ T6421] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option
[  173.452141][ T6421] EXT4-fs (loop3): mounted filesystem without journal. Opts: nomblk_io_submit,nodioread_nolock,noquota,barrier,discard,nodioread_nolock,errors=remount-ro,. Quota mode: none.
[  173.503233][ T6421] ext4 filesystem being mounted at /130/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  174.030170][ T6442] loop1: detected capacity change from 0 to 1024
[  174.247778][ T6442] EXT4-fs (loop1): Ignoring removed oldalloc option
[  174.263076][ T6442] EXT4-fs (loop1): Ignoring removed oldalloc option
[  174.287693][ T6442] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  174.331215][ T6451] device syzkaller1 entered promiscuous mode
[  174.409685][ T6442] EXT4-fs (loop1): mounted filesystem without journal. Opts: stripe=0x0000000000000004,bsddf,sysvgroups,norecovery,dioread_nolock,oldalloc,oldalloc,sysvgroups,nobarrier,,errors=continue. Quota mode: none.
[  174.571349][   T26] audit: type=1804 audit(1787168541.103:26): pid=6442 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.626" name="/newroot/121/file1/file1" dev="loop1" ino=15 res=1 errno=0
[  174.798830][ T6460] user requested TSC rate below hardware speed
[  174.882550][ T6441] loop3: detected capacity change from 0 to 32768
[  174.993836][ T6441] XFS (loop3): Mounting V5 Filesystem
[  175.073611][ T6441] XFS (loop3): Ending clean mount
[  175.286842][ T6483] loop1: detected capacity change from 0 to 1024
[  175.323223][ T4192] XFS (loop3): Unmounting Filesystem
[  175.420304][ T6483] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option
[  175.522170][ T6483] EXT4-fs (loop1): mounted filesystem without journal. Opts: nomblk_io_submit,nodioread_nolock,noquota,barrier,discard,nodioread_nolock,errors=remount-ro,. Quota mode: none.
[  175.635460][ T6483] ext4 filesystem being mounted at /123/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  176.141759][ T6508] Mass Storage Function, version: 2009/09/11
[  176.161649][ T6508] LUN: removable file: (no medium)
[  176.186594][   T26] audit: type=1800 audit(1787168542.723:27): pid=6508 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.652" name="cdrom" dev="configfs" ino=40619 res=0 errno=0
[  177.343055][ T4244] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  177.517712][ T6539] mmap: syz.1.657 (6539) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst.
[  177.593109][ T4244] usb 4-1: Using ep0 maxpacket: 32
[  177.723306][ T4244] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  177.756921][ T4244] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  177.777860][ T4244] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  177.791716][ T4244] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  177.833778][ T4244] usb 4-1: config 0 descriptor??
[  178.328674][ T4244] ft260 0003:0403:6030.000B: unknown main item tag 0x0
[  178.346015][ T4244] ft260 0003:0403:6030.000B: unknown main item tag 0x0
[  178.362170][ T4244] ft260 0003:0403:6030.000B: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.3-1/input0
[  178.533181][ T4244] ft260 0003:0403:6030.000B: chip code: 0000 0000
[  178.908417][ T6568] device syzkaller1 entered promiscuous mode
[  179.145035][ T6575] loop5: detected capacity change from 0 to 256
[  179.197742][ T4244] ft260 0003:0403:6030.000B: failed to reset I2C controller: -71
[  179.213677][ T6575] exfat: Deprecated parameter 'utf8'
[  179.219199][ T6575] exfat: Deprecated parameter 'utf8'
[  179.232214][ T4244] usb 4-1: USB disconnect, device number 9
[  179.235403][ T6575] exfat: Deprecated parameter 'utf8'
[  179.340414][ T6575] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xc70f51ff, utbl_chksum : 0xe619d30d)
[  179.441264][ T6579] fido_id[6579]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  179.644805][ T6562] loop0: detected capacity change from 0 to 32768
[  179.743036][   T21] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  179.799440][ T6562] XFS (loop0): Mounting V5 Filesystem
[  179.908240][ T6562] XFS (loop0): Ending clean mount
[  179.969687][   T26] audit: type=1800 audit(1787168546.503:28): pid=6562 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.675" name="file2" dev="loop0" ino=6154 res=0 errno=0
[  179.990585][   T21] usb 6-1: Using ep0 maxpacket: 8
[  180.020578][ T5595] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x3a/0xd0, xfs_bnobt block 0x4 
[  180.083924][ T6593] gadgetfs: bound to dummy_udc driver
[  180.095280][ T5595] XFS (loop0): Unmount and run xfs_repair
[  180.101080][ T5595] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  180.123491][   T21] usb 6-1: config 0 has an invalid interface number: 168 but max is 0
[  180.139604][   T21] usb 6-1: config 0 has no interface number 0
[  180.157745][ T6595] loop3: detected capacity change from 0 to 64
[  180.163764][   T21] usb 6-1: config 0 interface 168 altsetting 248 bulk endpoint 0xD has invalid maxpacket 32
[  180.175953][ T5595] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff  AB3B............
[  180.197011][ T5595] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10  ................
[  180.206459][   T21] usb 6-1: config 0 interface 168 has no altsetting 0
[  180.235302][ T5595] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a  .7.nt.N..._.'K.:
[  180.269714][ T5595] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01  .....;%.........
[  180.299814][ T5595] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0  ........... ....
[  180.321234][ T5595] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  180.336405][ T5595] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  180.347072][ T5595] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  180.361300][ T6562] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x1db/0x2d0" at daddr 0x4 len 4 error 74
[  180.374919][ T4278] usb 1-1: new full-speed USB device number 14 using dummy_hcd
[  180.394016][   T21] usb 6-1: New USB device found, idVendor=0f0d, idProduct=0065, bcdDevice=37.ed
[  180.409194][ T6562] XFS (loop0): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x515/0x8b0 (fs/xfs/xfs_trans_buf.c:296).  Shutting down filesystem.
[  180.413241][    C0] gadgetfs: connected
[  180.424100][   T21] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  180.437220][ T4278] gadgetfs: disconnected
[  180.445358][   T21] usb 6-1: Product: syz
[  180.449858][   T21] usb 6-1: Manufacturer: syz
[  180.461784][ T6591] loop2: detected capacity change from 0 to 32768
[  180.469016][ T6562] XFS (loop0): Please unmount the filesystem and rectify the problem(s)
[  180.498209][   T21] usb 6-1: SerialNumber: syz
[  180.521732][ T4191] XFS (loop0): Unmounting Filesystem
[  180.533494][ T6591] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop2 scanned by syz.2.676 (6591)
[  180.548826][   T21] usb 6-1: config 0 descriptor??
[  180.595537][ T6575] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  180.614322][ T6591] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  180.627647][ T6591] BTRFS info (device loop2): using free space tree
[  180.648098][ T6591] BTRFS info (device loop2): has skinny extents
[  180.682977][    C0] gadgetfs: connected
[  180.813122][ T4278] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[  180.827525][ T4278] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00
[  180.863081][ T4278] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  180.902990][    C0] gadgetfs: configuration #1
[  180.914183][ T6593] gadgetfs: suspended from state 3
[  180.919902][ T6593] gadgetfs: disconnected
[  180.925609][ T4278] usb 1-1: USB disconnect, device number 14
[  180.951671][   T21] usb 6-1: USB disconnect, device number 7
[  181.027194][   T26] audit: type=1800 audit(1787168547.563:29): pid=6620 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.681" name="cdrom" dev="configfs" ino=40825 res=0 errno=0
[  181.068042][ T6591] BTRFS info (device loop2): enabling ssd optimizations
[  181.174106][   T26] audit: type=1800 audit(1787168547.713:30): pid=6591 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.676" name="file1" dev="loop2" ino=260 res=0 errno=0
[  181.563734][ T6633] i2c i2c-0: Failed to register i2c client hd3ss3220 at 0x04 (-16)
[  181.603277][ T6633] i2c i2c-0: delete_device: Can't find device in list
[  182.243258][ T6660] loop0: detected capacity change from 0 to 512
[  182.313394][ T6660] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled
[  182.363371][ T6660] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  182.470557][ T6660] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodiscard,jqfmt=vfsv1,mb_optimize_scan=0x0000000000000001,dioread_nolock,data_err=ignore,,errors=continue. Quota mode: writeback.
[  182.601956][ T6650] loop3: detected capacity change from 0 to 40427
[  182.605808][ T6660] ext4 filesystem being mounted at /137/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  182.681734][ T6650] F2FS-fs (loop3): invalid crc value
[  182.729908][ T6650] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  182.754042][ T6660] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #2: comm syz.0.694: corrupted inode contents
[  182.853036][ T6660] EXT4-fs error (device loop0): ext4_dirty_inode:6077: inode #2: comm syz.0.694: mark_inode_dirty error
[  182.915722][ T6660] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #2: comm syz.0.694: corrupted inode contents
[  182.951399][ T6684] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #2: comm syz.0.694: corrupted inode contents
[  182.971535][ T6650] F2FS-fs (loop3): Cannot turn on quotas: -2 on 0
[  183.039470][ T6684] EXT4-fs error (device loop0): ext4_dirty_inode:6077: inode #2: comm syz.0.694: mark_inode_dirty error
[  183.053450][ T6684] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #2: comm syz.0.694: corrupted inode contents
[  183.076790][ T6650] F2FS-fs (loop3): Inconsistent segment (8) type [1, 0] in SSA and SIT
[  183.101337][ T6684] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #2: comm syz.0.694: mark_inode_dirty error
[  183.123736][ T6684] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #2: comm syz.0.694: corrupted inode contents
[  183.137747][ T6688] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found
[  183.154700][ T6684] EXT4-fs error (device loop0): ext4_dirty_inode:6077: inode #2: comm syz.0.694: mark_inode_dirty error
[  183.193984][ T6681] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #2: comm syz.0.694: corrupted inode contents
[  183.543363][ T6701] netlink: 'syz.5.711': attribute type 1 has an invalid length.
[  183.558041][ T6704] loop2: detected capacity change from 0 to 512
[  183.591204][ T6701] netlink: 'syz.5.711': attribute type 22 has an invalid length.
[  183.638016][ T6701] bridge0: port 2(bridge_slave_1) entered disabled state
[  183.648330][ T6701] bridge0: port 1(bridge_slave_0) entered disabled state
[  183.661251][ T6704] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  183.731581][ T6705] loop0: detected capacity change from 0 to 8
[  183.793539][ T6705] SQUASHFS error: Failed to read block 0xe000000000001ea: -5
[  183.831727][ T6704] EXT4-fs error (device loop2): xattr_find_entry:297: inode #15: comm syz.2.712: corrupted xattr entries
[  183.874053][ T6712] ip_tables: iptables: counters copy to user failed while replacing table
[  183.882799][ T6705] unable to read xattr id index table
[  183.932652][ T6704] EXT4-fs (loop2): Remounting filesystem read-only
[  183.964563][ T6704] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  184.040922][ T6704] EXT4-fs (loop2): 1 truncate cleaned up
[  184.049920][ T6704] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,errors=remount-ro,debug_want_extra_isize=0x000000000000006c,lazytime,nodioread_nolock,minixdf,. Quota mode: none.
[  184.165188][ T6704] EXT4-fs (loop2): shut down requested (2)
[  184.426061][ T6650] CacheFiles: Failed to register: -95
[  184.518068][ T6730] loop1: detected capacity change from 0 to 128
[  184.584926][ T6730] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  184.606526][ T6730] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  184.751408][ T6738] 9pnet_virtio: no channels available for device syz
[  184.814578][ T4358] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  184.855384][ T6738] loop3: detected capacity change from 0 to 2048
[  184.945208][ T6738]  loop3: p1 p2 p3 p4
[  184.945208][ T6738]  p1: <minix: p5 p6 >
[  184.977278][ T6738] loop3: p1 size 67110656 extends beyond EOD, truncated
[  185.021878][ T6745] loop1: detected capacity change from 0 to 2048
[  185.041216][ T6738] loop3: p3 size 134217728 extends beyond EOD, truncated
[  185.071454][ T6745] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  185.091753][ T6738] loop3: p4 size 4278190080 extends beyond EOD, truncated
[  185.100038][ T6745] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4
[  185.117908][ T6738] loop3: p5 size 67110656 extends beyond EOD, truncated
[  185.132221][ T6745] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  185.149489][ T6738] loop3: p6 size 134217728 extends beyond EOD, truncated
[  185.316608][   T26] audit: type=1800 audit(1787168551.853:31): pid=6751 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.732" name="is_nonrot" dev="configfs" ino=42235 res=0 errno=0
[  185.396913][ T4300] udevd[4300]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory
[  185.410052][ T4360] udevd[4360]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory
[  185.410381][ T4298] udevd[4298]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[  185.430483][ T4494] udevd[4494]: inotify_add_watch(7, /dev/loop3p6, 10) failed: No such file or directory
[  185.440684][ T4277] udevd[4277]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory
[  185.465076][ T4960] udevd[4960]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[  185.600124][ T4298] udevd[4298]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[  185.601554][ T4360] udevd[4360]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory
[  185.619736][ T4300] udevd[4300]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory
[  185.637551][ T4960] udevd[4960]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[  185.651286][ T4277] udevd[4277]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory
[  185.747174][ T6743] loop2: detected capacity change from 0 to 32768
[  185.779465][ T6743] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.729 (6743)
[  185.810182][ T4300] udevd[4300]: inotify_add_watch(7, /dev/loop3p6, 10) failed: No such file or directory
[  185.899625][ T6743] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  185.931809][ T6762] loop0: detected capacity change from 0 to 1024
[  185.945349][ T6743] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  185.973077][ T6743] BTRFS info (device loop2): trying to use backup root at mount time
[  185.981381][ T6743] BTRFS info (device loop2): using free space tree
[  186.017853][ T6762] hfsplus: invalid length 32517 has been corrected to 255
[  186.033740][ T6743] BTRFS info (device loop2): has skinny extents
[  186.082784][ T6767] loop1: detected capacity change from 0 to 16
[  186.130733][   T26] audit: type=1800 audit(1787168552.663:32): pid=6762 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.737" name="file1" dev="loop0" ino=20 res=0 errno=0
[  186.273241][ T6767] erofs: (device loop1): erofs_superblock_csum_verify: invalid checksum 0x3f3bd8e3, 0x7bbbea8c expected
[  186.298409][ T4360] udevd[4360]: incorrect erofs checksum on /dev/loop1
[  186.389904][ T6762] hfsplus: b-tree write err: -5, ino 20
[  186.401628][    T9] BTRFS warning (device loop2): checksum verify failed on 5332992 wanted 0x0a5e5d25 found 0xb6f08ecb level 0
[  186.457090][ T6793] Set syz1 is full, maxelem 1021 reached
[  186.464186][ T6743] BTRFS warning (device loop2): couldn't read tree root
[  186.548720][ T6743] BTRFS info (device loop2): enabling ssd optimizations
[  186.573393][ T6743] BTRFS info (device loop2): clearing free space tree
[  186.583313][ T6743] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  186.617018][ T6743] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  186.651949][ T6807] using random self ethernet address
[  186.667682][ T6807] using random host ethernet address
[  186.712764][ T6743] BTRFS info (device loop2): creating free space tree
[  186.739235][ T6743] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  186.769569][ T6743] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  186.806626][ T6810] loop1: detected capacity change from 0 to 1024
[  186.838984][ T6743] BTRFS info (device loop2): checking UUID tree
[  186.905082][ T6810] EXT4-fs (loop1): Ignoring removed bh option
[  186.957820][ T1267] hfsplus: b-tree write err: -5, ino 20
[  187.065855][ T6810] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,jqfmt=vfsv1,abort,debug_want_extra_isize=0x0000000000000008,lazytime,errors=remount-ro,stripe=0x0000000000000007,bh,auto_da_alloc,. Quota mode: none.
[  187.102537][ T6821] device gretap0 entered promiscuous mode
[  187.178622][ T6821] netlink: 40 bytes leftover after parsing attributes in process `syz.5.754'.
[  187.294206][ T6810] EXT4-fs error (device loop1): ext4_find_dest_de:2115: inode #12: block 7: comm syz.1.749: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0
[  187.465854][ T6810] EXT4-fs (loop1): Remounting filesystem read-only
[  187.479714][ T6835] EXT4-fs error (device loop1): ext4_find_dest_de:2115: inode #12: block 7: comm syz.1.749: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0
[  187.603827][ T6835] EXT4-fs (loop1): Remounting filesystem read-only
[  187.881507][ T4193] EXT4-fs error (device loop1): ext4_read_inline_dir:1626: inode #12: block 7: comm syz-executor: path /158/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[  187.940771][ T6846] loop3: detected capacity change from 0 to 2048
[  187.976897][ T6848] loop2: detected capacity change from 0 to 512
[  187.983841][ T4193] EXT4-fs (loop1): Remounting filesystem read-only
[  188.009984][ T6846] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found!
[  188.021130][ T4193] EXT4-fs error (device loop1): ext4_read_inline_dir:1626: inode #12: block 7: comm syz-executor: path /158/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[  188.071463][ T6846] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  188.113597][ T4193] EXT4-fs (loop1): Remounting filesystem read-only
[  188.120720][ T4193] EXT4-fs error (device loop1): empty_inline_dir:1881: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0
[  188.177417][ T6848] FAT-fs (loop2): error, corrupted file size (i_pos 0, 8960)
[  188.234043][ T6848] FAT-fs (loop2): error, corrupted file size (i_pos 0, 8960)
[  188.267685][ T4193] EXT4-fs (loop1): Remounting filesystem read-only
[  188.305262][ T4193] EXT4-fs warning (device loop1): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  188.406495][ T4193] EXT4-fs error (device loop1): ext4_read_inline_dir:1626: inode #12: block 7: comm syz-executor: path /158/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[  188.483710][ T4193] EXT4-fs (loop1): Remounting filesystem read-only
[  188.493263][ T4193] EXT4-fs error (device loop1): ext4_read_inline_dir:1626: inode #12: block 7: comm syz-executor: path /158/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[  188.616988][ T4193] EXT4-fs (loop1): Remounting filesystem read-only
[  188.683684][ T4193] EXT4-fs error (device loop1): empty_inline_dir:1881: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0
[  188.788735][ T4193] EXT4-fs (loop1): Remounting filesystem read-only
[  188.816142][ T4193] EXT4-fs warning (device loop1): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  188.881179][ T4193] EXT4-fs error (device loop1): ext4_read_inline_dir:1626: inode #12: block 7: comm syz-executor: path /158/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[  188.909012][ T6844] loop5: detected capacity change from 0 to 32768
[  188.935680][ T4193] EXT4-fs (loop1): Remounting filesystem read-only
[  188.942347][ T4193] EXT4-fs error (device loop1): ext4_read_inline_dir:1626: inode #12: block 7: comm syz-executor: path /158/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[  189.001262][ T6844] (syz.5.762,6844,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  189.066386][ T6844] (syz.5.762,6844,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  189.107810][ T4193] EXT4-fs (loop1): Remounting filesystem read-only
[  189.140900][ T4193] EXT4-fs warning (device loop1): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  189.162124][ T6881] Illegal XDP return value 4294967282, expect packet loss!
[  189.204087][ T6844] JBD2: Ignoring recovery information on journal
[  189.363467][ T4193] EXT4-fs warning (device loop1): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  189.436046][ T4193] EXT4-fs warning (device loop1): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  189.464262][ T6844] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  189.509140][ T4193] EXT4-fs warning (device loop1): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  189.626834][ T4193] EXT4-fs warning (device loop1): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  189.755046][ T4193] EXT4-fs warning (device loop1): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  189.818116][ T4193] EXT4-fs warning (device loop1): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  189.891695][ T4193] EXT4-fs warning (device loop1): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  190.141066][ T1267] bond0: (slave bond_slave_0): interface is now down
[  190.189552][ T1267] bond0: (slave bond_slave_1): interface is now down
[  190.220459][ T1267] bond0: now running without any active interface!
[  190.268882][ T4436] ocfs2: Unmounting device (7,5) on (node local)
[  190.388621][   T26] audit: type=1800 audit(1787168556.923:33): pid=6915 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.785" name="is_nonrot" dev="configfs" ino=42438 res=0 errno=0
[  191.308190][ T6955] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  191.410203][ T6955] bond1: (slave lo): Enslaving as an active interface with an up link
[  191.462208][ T6955] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  191.489836][ T6924] loop3: detected capacity change from 0 to 32768
[  191.686788][ T6969] loop2: detected capacity change from 0 to 512
[  191.827453][ T6969] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled
[  191.873308][ T6969] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  191.930221][ T6979] netlink: 'syz.3.804': attribute type 1 has an invalid length.
[  191.971799][ T6979] netlink: 'syz.3.804': attribute type 22 has an invalid length.
[  192.030682][ T6979] bridge0: port 2(bridge_slave_1) entered disabled state
[  192.040509][ T6979] bridge0: port 1(bridge_slave_0) entered disabled state
[  192.094748][ T6969] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodiscard,jqfmt=vfsv1,mb_optimize_scan=0x0000000000000001,dioread_nolock,data_err=ignore,,errors=continue. Quota mode: writeback.
[  192.162863][ T6969] ext4 filesystem being mounted at /157/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  192.200173][ T6969] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #2: comm syz.2.803: corrupted inode contents
[  192.230737][ T6986] netlink: 12 bytes leftover after parsing attributes in process `syz.0.807'.
[  192.244096][ T6969] EXT4-fs error (device loop2): ext4_dirty_inode:6077: inode #2: comm syz.2.803: mark_inode_dirty error
[  192.275653][ T6969] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #2: comm syz.2.803: corrupted inode contents
[  192.289752][ T6989] loop5: detected capacity change from 0 to 64
[  192.320889][ T6990] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #2: comm syz.2.803: corrupted inode contents
[  192.408325][ T6990] EXT4-fs error (device loop2): ext4_dirty_inode:6077: inode #2: comm syz.2.803: mark_inode_dirty error
[  192.450573][ T6990] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #2: comm syz.2.803: corrupted inode contents
[  192.471863][ T6990] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #2: comm syz.2.803: mark_inode_dirty error
[  192.490908][ T6990] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #2: comm syz.2.803: corrupted inode contents
[  192.550760][ T6965] chnl_net:caif_netlink_parms(): no params data found
[  192.564233][ T5678] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  192.613123][ T6990] EXT4-fs error (device loop2): ext4_dirty_inode:6077: inode #2: comm syz.2.803: mark_inode_dirty error
[  192.725775][ T6992] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #2: comm syz.2.803: corrupted inode contents
[  192.758937][ T7001] netlink: 8 bytes leftover after parsing attributes in process `syz.0.810'.
[  192.784187][ T6965] bridge0: port 1(bridge_slave_0) entered blocking state
[  192.797324][ T6965] bridge0: port 1(bridge_slave_0) entered disabled state
[  192.818805][ T6965] device bridge_slave_0 entered promiscuous mode
[  192.853897][ T7001] device ip6erspan0 entered promiscuous mode
[  192.881502][ T6965] bridge0: port 2(bridge_slave_1) entered blocking state
[  192.897645][ T6965] bridge0: port 2(bridge_slave_1) entered disabled state
[  192.910287][ T6965] device bridge_slave_1 entered promiscuous mode
[  192.942218][ T6965] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  192.956362][ T6965] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  192.993821][ T5678] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  193.016242][ T5678] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  193.032283][ T5678] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00
[  193.046784][ T6965] team0: Port device team_slave_0 added
[  193.052769][ T5678] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  193.099654][ T6965] team0: Port device team_slave_1 added
[  193.112030][ T5678] usb 4-1: config 0 descriptor??
[  193.193623][ T6965] batman_adv: batadv0: Adding interface: batadv_slave_0
[  193.200641][ T6965] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  193.246744][ T7005] loop2: detected capacity change from 0 to 1024
[  193.279465][ T6965] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  193.315188][ T6965] batman_adv: batadv0: Adding interface: batadv_slave_1
[  193.318385][ T7005] EXT4-fs (loop2): Ignoring removed bh option
[  193.322236][ T6965] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  193.322319][ T6965] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  193.379155][ T1267] attempt to access beyond end of device
[  193.379155][ T1267] loop5: rw=1, want=162, limit=64
[  193.404133][ T7005] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  193.418375][ T1267] Buffer I/O error on dev loop5, logical block 161, lost async page write
[  193.427732][ T1267] attempt to access beyond end of device
[  193.427732][ T1267] loop5: rw=1, want=163, limit=64
[  193.440771][ T1267] Buffer I/O error on dev loop5, logical block 162, lost async page write
[  193.450168][ T1267] attempt to access beyond end of device
[  193.450168][ T1267] loop5: rw=1, want=164, limit=64
[  193.460824][ T1267] Buffer I/O error on dev loop5, logical block 163, lost async page write
[  193.469631][ T1267] attempt to access beyond end of device
[  193.469631][ T1267] loop5: rw=1, want=168, limit=64
[  193.481296][ T1267] Buffer I/O error on dev loop5, logical block 167, lost async page write
[  193.485295][ T7005] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobarrier,dioread_lock,dioread_nolock,resgid=0x0000000000000000,noblock_validity,nobarrier,journal_ioprio=0x0000000000000005,abort,bh,init_itable,,errors=continue. Quota mode: none.
[  193.490439][ T1267] attempt to access beyond end of device
[  193.490439][ T1267] loop5: rw=1, want=170, limit=64
[  193.524468][ T1267] Buffer I/O error on dev loop5, logical block 169, lost async page write
[  193.533192][ T1267] attempt to access beyond end of device
[  193.533192][ T1267] loop5: rw=1, want=172, limit=64
[  193.543841][ T1267] Buffer I/O error on dev loop5, logical block 171, lost async page write
[  193.552435][ T1267] attempt to access beyond end of device
[  193.552435][ T1267] loop5: rw=1, want=173, limit=64
[  193.563068][ T1267] Buffer I/O error on dev loop5, logical block 172, lost async page write
[  193.571661][ T1267] attempt to access beyond end of device
[  193.571661][ T1267] loop5: rw=1, want=174, limit=64
[  193.583366][ T1267] Buffer I/O error on dev loop5, logical block 173, lost async page write
[  193.592041][ T1267] attempt to access beyond end of device
[  193.592041][ T1267] loop5: rw=1, want=175, limit=64
[  193.611523][ T1267] Buffer I/O error on dev loop5, logical block 174, lost async page write
[  193.620294][ T1267] attempt to access beyond end of device
[  193.620294][ T1267] loop5: rw=1, want=176, limit=64
[  193.646752][ T6965] device hsr_slave_0 entered promiscuous mode
[  193.672287][ T6965] device hsr_slave_1 entered promiscuous mode
[  193.696918][ T1267] Buffer I/O error on dev loop5, logical block 175, lost async page write
[  193.706134][ T4244] Bluetooth: hci3: command 0x0409 tx timeout
[  193.719012][ T6965] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  193.746041][ T6965] Cannot create hsr debugfs directory
[  194.042290][ T5678] hid-led 0003:27B8:01ED.000C: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.3-1/input0
[  194.139682][ T5678] hid-led 0003:27B8:01ED.000C: ThingM blink(1) initialized
[  194.166950][ T6965] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  194.264632][   T21] usb 4-1: USB disconnect, device number 10
[  194.275152][ T6965] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  194.301931][ T7020] loop2: detected capacity change from 0 to 1024
[  194.334726][ T6965] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  194.351110][ T7016] fido_id[7016]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory
[  194.368703][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  194.368755][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  194.387338][ T6965] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  194.434310][ T7020] EXT4-fs (loop2): Test dummy encryption mode enabled
[  194.441240][ T7020] EXT4-fs (loop2): Ignoring removed oldalloc option
[  194.497168][ T7020] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,errors=continue,noblock_validity,commit=0x0000000000000005,noinit_itable,max_batch_time=0x0000000000000000,abort,auto_da_alloc,oldalloc,noauto_da_alloc,block_validity,,errors=continue. Quota mode: writeback.
[  194.656885][ T6965] 8021q: adding VLAN 0 to HW filter on device bond0
[  194.673449][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  194.690651][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  194.739139][ T6965] 8021q: adding VLAN 0 to HW filter on device team0
[  194.752281][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  194.776003][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  194.796933][  T144] bridge0: port 1(bridge_slave_0) entered blocking state
[  194.804213][  T144] bridge0: port 1(bridge_slave_0) entered forwarding state
[  194.879726][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  194.903762][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  194.941480][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  194.971473][  T144] bridge0: port 2(bridge_slave_1) entered blocking state
[  194.978654][  T144] bridge0: port 2(bridge_slave_1) entered forwarding state
[  195.011051][ T7020] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[  195.054399][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  195.104272][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  195.145162][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  195.227735][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  195.270678][ T6965] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  195.312083][ T6965] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  195.374676][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  195.388163][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  195.426021][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  195.443900][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  195.504202][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  195.572037][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  195.581329][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  195.596948][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  195.793766][ T4243] Bluetooth: hci3: command 0x041b tx timeout
[  195.814282][ T7074] loop3: detected capacity change from 0 to 1024
[  196.025307][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  196.063281][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  196.099081][ T6965] 8021q: adding VLAN 0 to HW filter on device batadv0
[  196.140119][ T1267] hfsplus: b-tree write err: -5, ino 8
[  196.493160][ T7090] input: syz1 as /devices/virtual/input/input13
[  196.587317][ T4243] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  196.620421][ T7067] loop5: detected capacity change from 0 to 32768
[  196.712066][ T7078] loop0: detected capacity change from 0 to 32768
[  196.744812][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  196.781384][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  196.801310][ T7078] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.838 (7078)
[  196.832107][ T7067] XFS (loop5): Mounting V5 Filesystem
[  196.842500][ T7078] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  196.864794][ T7078] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  196.875765][ T4243] usb 4-1: Using ep0 maxpacket: 32
[  196.877586][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  196.881172][ T7078] BTRFS info (device loop0): trying to use backup root at mount time
[  196.919063][ T7078] BTRFS info (device loop0): using free space tree
[  196.928092][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  196.938254][ T6965] device veth0_vlan entered promiscuous mode
[  196.947028][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  196.955915][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  196.970860][ T6965] device veth1_vlan entered promiscuous mode
[  197.003409][ T4243] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  197.016044][ T7078] BTRFS info (device loop0): has skinny extents
[  197.025905][ T4243] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  197.039564][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  197.057769][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  197.098973][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  197.112006][ T7067] XFS (loop5): Ending clean mount
[  197.122751][ T7067] XFS (loop5): Quotacheck needed: Please wait.
[  197.134007][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  197.163971][ T6965] device veth0_macvtap entered promiscuous mode
[  197.172003][ T4243] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  197.192254][ T4243] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  197.211760][ T6965] device veth1_macvtap entered promiscuous mode
[  197.219981][ T4243] usb 4-1: Product: syz
[  197.233919][    T9] BTRFS warning (device loop0): checksum verify failed on 5332992 wanted 0x0a5e5d25 found 0xb6f08ecb level 0
[  197.243257][ T5594] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  197.263248][ T4243] usb 4-1: Manufacturer: syz
[  197.270870][ T7078] BTRFS warning (device loop0): couldn't read tree root
[  197.290182][ T6965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  197.317589][ T6965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  197.332828][ T6965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  197.336457][ T7078] BTRFS info (device loop0): enabling ssd optimizations
[  197.352224][ T4243] hub 4-1:4.0: USB hub found
[  197.358575][ T6965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  197.368898][ T6965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  197.388738][ T6965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  197.403883][ T7078] BTRFS info (device loop0): clearing free space tree
[  197.410869][ T7078] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  197.421805][ T6965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  197.422212][ T7067] XFS (loop5): Quotacheck: Done.
[  197.437554][ T6965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  197.447608][ T6965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  197.458430][ T6965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  197.470835][ T6965] batman_adv: batadv0: Interface activated: batadv_slave_0
[  197.479243][ T7078] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  197.495137][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  197.503363][ T5594] usb 3-1: Using ep0 maxpacket: 8
[  197.525118][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  197.535778][ T7078] BTRFS info (device loop0): creating free space tree
[  197.564884][ T7078] BTRFS info (device loop0): setting compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  197.585725][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  197.597318][ T7078] BTRFS info (device loop0): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  197.623297][ T5594] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[  197.633290][ T7078] BTRFS info (device loop0): checking UUID tree
[  197.639719][ T4243] hub 4-1:4.0: config failed, hub doesn't have any ports! (err -19)
[  197.648305][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  197.656748][ T5594] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  197.695757][ T6965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  197.704031][ T5594] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  197.722377][ T6965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  197.755577][ T5594] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  197.767327][ T6965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  197.778056][ T5594] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  197.778110][ T5594] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  197.778137][ T5594] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  197.813885][ T6965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  197.824116][ T6965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  197.844353][ T6965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  197.862983][ T6965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  197.874784][ T5678] Bluetooth: hci3: command 0x040f tx timeout
[  197.886922][ T6965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  197.902772][ T6965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  197.922204][ T6965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  197.937280][ T4436] XFS (loop5): Unmounting Filesystem
[  197.944035][ T6965] batman_adv: batadv0: Interface activated: batadv_slave_1
[  197.954689][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  197.971864][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  197.981117][   T21] usb 4-1: USB disconnect, device number 11
[  197.991810][ T6965] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  198.027790][ T6965] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  198.047857][ T6965] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  198.056833][ T5594] usb 3-1: usb_control_msg returned -32
[  198.062462][ T5594] usbtmc 3-1:16.0: can't read capabilities
[  198.073558][ T6965] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  198.294779][ T4279] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  198.302653][ T4279] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  198.342273][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  198.405126][  T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  198.414061][  T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  198.421676][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  198.479146][ T7132] loop3: detected capacity change from 0 to 256
[  198.590038][ T7132] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d)
[  198.725919][ T4279] bond0: (slave bond_slave_0): interface is now down
[  198.739624][ T4279] bond0: (slave bond_slave_1): interface is now down
[  198.796701][ T4279] bond0: now running without any active interface!
[  199.149722][    T7] usb 3-1: USB disconnect, device number 14
[  199.233172][ T5594] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  199.494799][ T5594] usb 4-1: Using ep0 maxpacket: 16
[  199.624118][ T5594] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[  199.636643][ T5594] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  199.646767][ T5594] usb 4-1: config 0 descriptor??
[  199.667498][ T7165] loop5: detected capacity change from 0 to 2048
[  199.695447][ T5594] gspca_main: sonixj-2.14.0 probing 0471:0327
[  199.774476][ T7165] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  199.953510][ T5679] Bluetooth: hci3: command 0x0419 tx timeout
[  200.173092][  T154] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters
[  200.280405][  T154] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  200.314693][  T154] EXT4-fs (loop5): This should not happen!! Data will be lost
[  200.314693][  T154] 
[  200.333045][  T154] EXT4-fs (loop5): Total free blocks count 0
[  200.351389][  T154] EXT4-fs (loop5): Free/Dirty block details
[  200.375572][  T154] EXT4-fs (loop5): free_blocks=4096
[  200.382373][  T154] EXT4-fs (loop5): dirty_blocks=0
[  200.403256][  T154] EXT4-fs (loop5): Block reservation details
[  200.416414][  T154] EXT4-fs (loop5): i_reserved_data_blocks=0
[  200.718268][ T7206] bond0: ARP target 192.168.1.1 is already present
[  200.752887][ T7210] loop5: detected capacity change from 0 to 1024
[  200.759895][ T7206] bond0: option arp_ip_target: invalid value (+192.168.1.1)
[  200.783325][  T154] bond0: (slave bond_slave_0): interface is now down
[  200.794126][  T154] bond0: (slave bond_slave_1): interface is now down
[  200.827129][ T7217] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  200.845944][ T7210] EXT4-fs (loop5): Ignoring removed bh option
[  200.856176][  T154] bond0: now running without any active interface!
[  200.946443][ T7219] Set syz1 is full, maxelem 1021 reached
[  200.962381][ T7210] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,jqfmt=vfsv1,abort,debug_want_extra_isize=0x0000000000000008,lazytime,errors=remount-ro,stripe=0x0000000000000007,bh,auto_da_alloc,. Quota mode: none.
[  201.023981][ T5594] gspca_sonixj: reg_w1 err -71
[  201.054797][ T5594] sonixj: probe of 4-1:0.0 failed with error -71
[  201.100573][ T5594] usb 4-1: USB disconnect, device number 12
[  201.168981][ T7210] EXT4-fs error (device loop5): ext4_find_dest_de:2115: inode #12: block 7: comm syz.5.860: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0
[  201.250259][ T7210] EXT4-fs (loop5): Remounting filesystem read-only
[  201.270617][ T7225] EXT4-fs error (device loop5): ext4_find_dest_de:2115: inode #12: block 7: comm syz.5.860: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0
[  201.301654][ T7225] EXT4-fs (loop5): Remounting filesystem read-only
[  201.394608][ T4436] EXT4-fs error (device loop5): ext4_read_inline_dir:1626: inode #12: block 7: comm syz-executor: path /155/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[  201.453694][ T4436] EXT4-fs (loop5): Remounting filesystem read-only
[  201.481435][ T4436] EXT4-fs error (device loop5): ext4_read_inline_dir:1626: inode #12: block 7: comm syz-executor: path /155/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[  201.554412][ T4436] EXT4-fs (loop5): Remounting filesystem read-only
[  201.583740][ T4436] EXT4-fs error (device loop5): empty_inline_dir:1881: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0
[  201.604486][ T7237] loop0: detected capacity change from 0 to 2048
[  201.672825][ T7237] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  201.690153][ T4436] EXT4-fs (loop5): Remounting filesystem read-only
[  201.707276][ T4436] EXT4-fs warning (device loop5): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  201.730216][ T7216] loop2: detected capacity change from 0 to 32768
[  201.747742][ T7237] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4
[  201.766655][ T7237] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  201.779402][ T4436] EXT4-fs error (device loop5): ext4_read_inline_dir:1626: inode #12: block 7: comm syz-executor: path /155/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[  201.850525][ T4436] EXT4-fs (loop5): Remounting filesystem read-only
[  201.857603][ T4436] EXT4-fs error (device loop5): ext4_read_inline_dir:1626: inode #12: block 7: comm syz-executor: path /155/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[  201.873434][ T4244] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  201.956370][ T7216] XFS (loop2): Mounting V5 Filesystem
[  202.003883][ T4436] EXT4-fs (loop5): Remounting filesystem read-only
[  202.011933][ T4436] EXT4-fs error (device loop5): empty_inline_dir:1881: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0
[  202.036641][ T4436] EXT4-fs (loop5): Remounting filesystem read-only
[  202.101574][ T4436] EXT4-fs warning (device loop5): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  202.146020][ T7265] overlayfs: failed to clone lowerpath
[  202.155601][ T7265] overlayfs: failed to clone lowerpath
[  202.218922][ T4436] EXT4-fs error (device loop5): ext4_read_inline_dir:1626: inode #12: block 7: comm syz-executor: path /155/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[  202.253176][ T7216] XFS (loop2): Ending clean mount
[  202.273239][ T4244] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  202.331136][ T4244] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  202.334682][ T4436] EXT4-fs (loop5): Remounting filesystem read-only
[  202.355937][   T26] audit: type=1800 audit(1787168568.893:34): pid=7216 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.861" name="file2" dev="loop2" ino=6154 res=0 errno=0
[  202.378345][ T4244] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  202.391812][ T4278] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x3a/0xd0, xfs_bnobt block 0x4 
[  202.418605][ T4278] XFS (loop2): Unmount and run xfs_repair
[  202.425083][ T4436] EXT4-fs error (device loop5): ext4_read_inline_dir:1626: inode #12: block 7: comm syz-executor: path /155/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[  202.453077][ T4244] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  202.480160][ T4278] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[  202.488107][ T4244] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  202.489140][ T4278] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff  AB3B............
[  202.513906][ T4436] EXT4-fs (loop5): Remounting filesystem read-only
[  202.522006][ T4278] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10  ................
[  202.532268][ T4244] usb 4-1: config 0 descriptor??
[  202.541573][ T4436] EXT4-fs warning (device loop5): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  202.562842][ T4278] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a  .7.nt.N..._.'K.:
[  202.585180][ T4278] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01  .....;%.........
[  202.600823][ T4436] EXT4-fs warning (device loop5): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  202.621916][ T4278] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0  ........... ....
[  202.641799][ T4436] EXT4-fs warning (device loop5): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  202.663101][ T4278] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  202.672018][ T4278] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  202.687121][ T4436] EXT4-fs warning (device loop5): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  202.708043][ T4278] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  202.718576][ T7216] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x1db/0x2d0" at daddr 0x4 len 4 error 74
[  202.728768][ T4436] EXT4-fs warning (device loop5): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  202.758636][ T7216] XFS (loop2): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x515/0x8b0 (fs/xfs/xfs_trans_buf.c:296).  Shutting down filesystem.
[  202.762916][ T4436] EXT4-fs warning (device loop5): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  202.796522][ T4436] EXT4-fs warning (device loop5): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  202.817329][ T4436] EXT4-fs warning (device loop5): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  202.821798][ T7216] XFS (loop2): Please unmount the filesystem and rectify the problem(s)
[  202.977019][ T4208] XFS (loop2): Unmounting Filesystem
[  203.035470][ T4244] plantronics 0003:047F:FFFF.000D: unknown main item tag 0xd
[  203.075517][ T4244] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving
[  203.093406][ T7258] ==================================================================
[  203.102118][ T7258] BUG: KASAN: use-after-free in xfs_iflush_cluster+0xc6/0x1230
[  203.109730][ T7258] Read of size 8 at addr ffff888074b35050 by task xfsaild/loop2/7258
[  203.117930][ T7258] 
[  203.120293][ T7258] CPU: 1 PID: 7258 Comm: xfsaild/loop2 Not tainted syzkaller #0
[  203.127975][ T7258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  203.138099][ T7258] Call Trace:
[  203.141422][ T7258]  <TASK>
[  203.144388][ T7258]  dump_stack_lvl+0x188/0x250
[  203.149131][ T7258]  ? show_regs_print_info+0x20/0x20
[  203.154395][ T7258]  ? load_image+0x410/0x410
[  203.158950][ T7258]  ? _raw_spin_lock_irqsave+0xbc/0x100
[  203.164469][ T7258]  ? lockdep_hardirqs_on+0x94/0x140
[  203.169726][ T7258]  print_address_description+0x60/0x2d0
[  203.175324][ T7258]  ? xfs_iflush_cluster+0xc6/0x1230
[  203.180583][ T7258]  kasan_report+0xdf/0x130
[  203.185072][ T7258]  ? xfs_iflush_cluster+0xc6/0x1230
[  203.190328][ T7258]  xfs_iflush_cluster+0xc6/0x1230
[  203.195422][ T7258]  xfs_inode_item_push+0x1c3/0x2a0
[  203.200595][ T7258]  xfsaild+0xd04/0x26f0
[  203.204839][ T7258]  ? xfs_trans_ail_init+0x230/0x230
[  203.210100][ T7258]  ? _raw_spin_unlock_irqrestore+0xbc/0x120
[  203.216068][ T7258]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  203.222030][ T7258]  ? __kthread_parkme+0x14e/0x1b0
[  203.227123][ T7258]  kthread+0x42e/0x520
[  203.231246][ T7258]  ? xfs_trans_ail_init+0x230/0x230
[  203.236496][ T7258]  ? kthread_blkcg+0xd0/0xd0
[  203.241137][ T7258]  ret_from_fork+0x1f/0x30
[  203.245629][ T7258]  </TASK>
[  203.248690][ T7258] 
[  203.251096][ T7258] Allocated by task 7216:
[  203.255459][ T7258]  __kasan_slab_alloc+0x92/0xc0
[  203.260353][ T7258]  slab_post_alloc_hook+0x4c/0x380
[  203.265505][ T7258]  kmem_cache_alloc+0x15d/0x280
[  203.270399][ T7258]  xfs_inode_item_init+0x2f/0xc0
[  203.275506][ T7258]  xfs_trans_ijoin+0xb2/0xe0
[  203.280144][ T7258]  xfs_init_new_inode+0xa98/0xde0
[  203.285216][ T7258]  xfs_create+0x751/0xe80
[  203.289593][ T7258]  xfs_generic_create+0x363/0xa50
[  203.294666][ T7258]  vfs_mkdir+0x386/0x570
[  203.298946][ T7258]  do_mkdirat+0x1dd/0x5c0
[  203.303375][ T7258]  __x64_sys_mkdirat+0x85/0x90
[  203.308175][ T7258]  do_syscall_64+0x4c/0xa0
[  203.312619][ T7258]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  203.318547][ T7258] 
[  203.320888][ T7258] Freed by task 14:
[  203.324711][ T7258]  kasan_set_track+0x4b/0x70
[  203.329328][ T7258]  kasan_set_free_info+0x1f/0x40
[  203.334293][ T7258]  ____kasan_slab_free+0xd5/0x110
[  203.339342][ T7258]  slab_free_freelist_hook+0xec/0x170
[  203.344735][ T7258]  kmem_cache_free+0x8f/0x210
[  203.349522][ T7258]  xfs_inode_free_callback+0x1bc/0x230
[  203.355003][ T7258]  rcu_core+0x96e/0x1650
[  203.359266][ T7258]  handle_softirqs+0x336/0x830
[  203.364249][ T7258]  run_ksoftirqd+0xa4/0x100
[  203.368775][ T7258]  smpboot_thread_fn+0x520/0x990
[  203.373728][ T7258]  kthread+0x42e/0x520
[  203.377816][ T7258]  ret_from_fork+0x1f/0x30
[  203.382252][ T7258] 
[  203.384598][ T7258] The buggy address belongs to the object at ffff888074b35000
[  203.384598][ T7258]  which belongs to the cache xfs_ili of size 256
[  203.398315][ T7258] The buggy address is located 80 bytes inside of
[  203.398315][ T7258]  256-byte region [ffff888074b35000, ffff888074b35100)
[  203.411518][ T7258] The buggy address belongs to the page:
[  203.417165][ T7258] page:ffffea0001d2cd40 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888074b35a00 pfn:0x74b35
[  203.428639][ T7258] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff)
[  203.436228][ T7258] raw: 00fff00000000200 0000000000000000 dead000000000122 ffff88801e728000
[  203.444915][ T7258] raw: ffff888074b35a00 00000000800c0008 00000001ffffffff 0000000000000000
[  203.453512][ T7258] page dumped because: kasan: bad access detected
[  203.459949][ T7258] page_owner tracks the page as allocated
[  203.465678][ T7258] page last allocated via order 0, migratetype Reclaimable, gfp_mask 0x112c50(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_HARDWALL|__GFP_RECLAIMABLE), pid 4301, ts 91339136340, free_ts 28127844303
[  203.484719][ T7258]  get_page_from_freelist+0x24f6/0x2670
[  203.490301][ T7258]  __alloc_pages+0x1ee/0x480
[  203.494934][ T7258]  new_slab+0xc0/0x4b0
[  203.499036][ T7258]  ___slab_alloc+0x807/0xdd0
[  203.503645][ T7258]  kmem_cache_alloc+0xf0/0x280
[  203.508433][ T7258]  xfs_inode_item_init+0x2f/0xc0
[  203.513411][ T7258]  xfs_trans_ijoin+0xb2/0xe0
[  203.518031][ T7258]  xfs_init_new_inode+0xa98/0xde0
[  203.523161][ T7258]  xfs_qm_qino_alloc+0x498/0x990
[  203.528117][ T7258]  xfs_qm_init_quotainos+0x4b3/0x6b0
[  203.533424][ T7258]  xfs_qm_init_quotainfo+0xa3/0x9a0
[  203.538645][ T7258]  xfs_qm_mount_quotas+0x95/0x5f0
[  203.543691][ T7258]  xfs_mountfs+0x144a/0x1ae0
[  203.548332][ T7258]  xfs_fs_fill_super+0x119b/0x13e0
[  203.553460][ T7258]  get_tree_bdev+0x3e6/0x610
[  203.558066][ T7258]  vfs_get_tree+0x88/0x270
[  203.562500][ T7258] page last free stack trace:
[  203.567183][ T7258]  free_unref_page_prepare+0x637/0x6c0
[  203.572667][ T7258]  free_unref_page+0x8f/0x2a0
[  203.577362][ T7258]  free_contig_range+0x96/0xf0
[  203.582148][ T7258]  destroy_args+0xef/0xa00
[  203.586585][ T7258]  debug_vm_pgtable+0x321/0x380
[  203.591456][ T7258]  do_one_initcall+0x272/0x730
[  203.596238][ T7258]  do_initcall_level+0x13d/0x1f0
[  203.601201][ T7258]  do_initcalls+0x4b/0x90
[  203.605552][ T7258]  kernel_init_freeable+0x3d5/0x560
[  203.610791][ T7258]  kernel_init+0x19/0x1b0
[  203.615138][ T7258]  ret_from_fork+0x1f/0x30
[  203.619579][ T7258] 
[  203.621921][ T7258] Memory state around the buggy address:
[  203.627563][ T7258]  ffff888074b34f00: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc
[  203.635773][ T7258]  ffff888074b34f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  203.643854][ T7258] >ffff888074b35000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  203.651949][ T7258]                                                  ^
[  203.658642][ T7258]  ffff888074b35080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  203.666718][ T7258]  ffff888074b35100: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb
[  203.674826][ T7258] ==================================================================
[  203.682896][ T7258] Disabling lock debugging due to kernel taint
[  203.692728][ T7258] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  203.699964][ T7258] CPU: 0 PID: 7258 Comm: xfsaild/loop2 Tainted: G    B             syzkaller #0
[  203.709012][ T7258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  203.719095][ T7258] Call Trace:
[  203.722404][ T7258]  <TASK>
[  203.725363][ T7258]  dump_stack_lvl+0x188/0x250
[  203.730091][ T7258]  ? show_regs_print_info+0x20/0x20
[  203.735334][ T7258]  ? load_image+0x410/0x410
[  203.739889][ T7258]  panic+0x2f8/0x850
[  203.743823][ T7258]  ? bpf_jit_dump+0xd0/0xd0
[  203.748543][ T7258]  ? _raw_spin_unlock_irqrestore+0x10d/0x120
[  203.754583][ T7258]  ? _raw_spin_unlock+0x40/0x40
[  203.759471][ T7258]  ? xfs_iflush_cluster+0xc6/0x1230
[  203.764713][ T7258]  check_panic_on_warn+0x80/0xa0
[  203.769693][ T7258]  ? xfs_iflush_cluster+0xc6/0x1230
[  203.774934][ T7258]  end_report+0x6d/0xf0
[  203.779124][ T7258]  kasan_report+0x102/0x130
[  203.783678][ T7258]  ? xfs_iflush_cluster+0xc6/0x1230
[  203.788911][ T7258]  xfs_iflush_cluster+0xc6/0x1230
[  203.788928][ T4244] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  203.794000][ T7258]  xfs_inode_item_push+0x1c3/0x2a0
[  203.794027][ T7258]  xfsaild+0xd04/0x26f0
[  203.794063][ T7258]  ? xfs_trans_ail_init+0x230/0x230
[  203.820963][ T7258]  ? _raw_spin_unlock_irqrestore+0xbc/0x120
[  203.826901][ T7258]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  203.832844][ T7258]  ? __kthread_parkme+0x14e/0x1b0
[  203.837914][ T7258]  kthread+0x42e/0x520
[  203.842021][ T7258]  ? xfs_trans_ail_init+0x230/0x230
[  203.847260][ T7258]  ? kthread_blkcg+0xd0/0xd0
[  203.851880][ T7258]  ret_from_fork+0x1f/0x30
[  203.856341][ T7258]  </TASK>
[  203.859678][ T7258] Kernel Offset: disabled
[  203.864141][ T7258] Rebooting in 86400 seconds..