last executing test programs:

5.659942965s ago: executing program 4 (id=776):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0902000000000000000001000000050002000a00000014000700ff00000000000000000000000000000108000b00", @ANYRES32], 0x38}}, 0x0)

5.430229444s ago: executing program 1 (id=777):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000a80)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x1c, {0x2, 0xfffc, @remote}, 'team_slave_0\x00'})
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00')
ioctl$sock_inet_sctp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
sched_setscheduler(0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
io_submit(0x0, 0x0, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000200)=""/218, 0xda}], 0x1, 0xffff, 0x0)

5.393117777s ago: executing program 2 (id=778):
syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b"], 0x0)
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r0, 0x0, 0x300)

4.860166801s ago: executing program 1 (id=780):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xb8, 0xc0, 0x7d, 0x40, 0xc45, 0x8001, 0x900a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x80, 0x82, 0x99}}]}}]}}, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f00000001c0)={0x0, 0x0, 0x1, "7f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@gettaction={0xa0, 0x32, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x6}, @action_gd=@TCA_ACT_TAB={0x6c, 0x1, [{0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x14, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x6}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20000810}, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f00000039c0)={{0x12, 0x1, 0x0, 0xe3, 0xa2, 0xde, 0x10, 0x5ac, 0x243, 0x81d0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0xb8, 0x2}}]}}]}}, 0x0)
r2 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c)
listen(r2, 0x80080400)
r3 = socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(r3, &(0x7f00000000c0)={0x2, 0x4e20, @remote}, 0x10)
prlimit64(0x0, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x0, 0x0)
r4 = gettid()
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
read(r5, &(0x7f0000000200)=""/209, 0xd1)
socket$inet_udplite(0x2, 0x2, 0x88)
setuid(0x0)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000300)={0x0, 0x0, 0x0, 'queue1\x00'})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r5, 0xc08c5334, &(0x7f0000000400))
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x402c5342, &(0x7f00000000c0))
tkill(r4, 0x7)
ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0x0)
getsockopt$inet_int(r3, 0x10d, 0xd5, &(0x7f0000000000), &(0x7f0000000080)=0x4)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_NAME_TABLE_GET(r2, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0x98, r6, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xdf24}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xb739aba}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2e}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x40}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffff2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x400}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4001}, 0x0)
syz_usb_control_io$printer(r0, &(0x7f0000000000)={0x14, &(0x7f00000000c0)={0x20, 0x8, 0xaf, {0xaf, 0x8, "f7853896865c501bd0b6b95e600c6b2368a5989921c3e7f2f4d9cab0913f1dcc6884513eb9e97a08087595ed9238a0f6071fd7fc1c84de96c2bd6460c3ab189967006e8ea5746f1a13f77f7fdc0cfcc25fce5c8723f3caf90757f05f5a6e2394591d6faaed6a981d1f58a5d5c96ccd5e26d28ff4cae3fcf2d461cf5cd443ef7f7692393efcf2ae0136a56877c18baa940db0df14e0894ddcb7e5ef767330280127fe7c435d92e04418fcb64aa2"}}, &(0x7f0000000200)={0x0, 0x3, 0x93, @string={0x93, 0x3, "2236e274e212f0577d6740fcd906162f2b0f8cc232e6b9b3322ede940be4fac607c9a32ecd508c3d26eb86403eba949554b35f6352992b9f436dc2ef2e719676a464de924c0adb3334039c68d0df77e172847b38468708652e811cc9278a997e7cf9242d42c1ad0b7dfa54e40b5acdb1197f24f6f900e1e3e80438380992ae6867f90afbc032ee644c700d5eb34bc18692"}}}, &(0x7f0000000480)={0x34, &(0x7f00000002c0)={0x20, 0x5, 0x81, "ba83f95eefd64b10ac926f6785c542d57c79d61170cbf625f82d66281413e175998667126dff05d35127b6b706189625a62edbe362e9a224c5e5806c3f78a477d337c06556e078985ff244e6306a2e18b8ba74e566dcde2b0c90206b4924a59e953a8aab7b1425e6162a33882e0f6e1245eef6616df2a35574841958ff9791d227"}, &(0x7f0000000040)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000180)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000380)={0x20, 0x0, 0x76, {0x74, "a82837f7a4598eb2e17a23250a9024b990b2cbb11666ec59539482e44f7c2d5342fc14acb365d2f120a4f32ed8dff27f34a127c7f6962b1543a98c9d82b9643a0c9bf3dd0d79d76dc57e19d04d54fe27d511ffd348faf3b512ab7ad863e1d40ce0ec6a62be79f0f2203fedd77a0673267105e934"}}, &(0x7f0000000400)={0x20, 0x1, 0x1, 0x5}, &(0x7f0000000440)={0x20, 0x0, 0x1, 0x5}})

4.742395651s ago: executing program 4 (id=781):
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x84)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc000ff}]})
ioctl$PTP_PIN_GETFUNC2(r0, 0xc0603d0f, &(0x7f0000000040))

4.299799257s ago: executing program 0 (id=782):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000200)=ANY=[], 0x1, 0x61db, &(0x7f0000007f00)="$eJzs3UuPHFfZB/Cn+jaXvEmsLKK8FkKTxFxCiK/BGAIkWcCCDQvkLbI1mUQWDiDbICey8ESzYcGHACGxRIglKz5AFmzZ8QGwZCOBskqhmjlnXNPpdo89ma6eOb+fNK56+lRNn/K/qy9TVX0CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIgf/uDH56qIuPKrdMOJiP+LfkQvYqWp1yJiZe1EXn4QES/EdnM8HysxXIqocuOzEa9HxMfPRNx/cGe9uen8Pvvx/T//4w8/eepHf//T8Mx//3Kr/8a05W7f/u1//nr3ybcXAAAASlTXdV2lj/kn0+f7XtedAgDmIr/+10m+Xb1w9eaC9UetVqvVR7Buqye72y4iYrO9TvOeweF4ADhiNuOTrrtAh+RftEFEPNV1J4CFVnXdAQ7F/Qd31quUb9V+PVjbac/nguzJf7Pavb5j2nSW8XNM5vX42op+PDelPytz6sMiyfn3xvO/stM+Sssddv7zMi3/0c6lT8XJ+ffH8x9zfPLvTcy/VDn/wWPl35c/AAAAAAAssPz3/xMdH/9dOvim7Mujjv+uzakPAAAAAAAAAPB5O9j4fy2V8f8AAABgUTWf1Ru/e+bhbdO+i625/XIV8fTY8kBh0sUyq133AwAAAAAAAAAAAABKMtg5h/dyFTGMiKdXV+u6bn7axuvHddD1j7rStx9K1vWTPAAA7Pj4mbFr+auI5Yi4nL7rb7i6ulrXyyur9Wq9spTfz46WluuV1ufaPG1uWxrt4w3xYFQ3v2y5tV7brM/Ls9rHf19zX6O6v4+OzUeHgQNAROy8Gt33inTM1PWz0fW7HI4G+//xY/9nP7p+nAIAAACHr67rukpf530yHfPvdd0pAGAu8uv/+HEBtVqtVqvVx69uqye72y4iYrO9TvOewXD8AHDEbMYnXXeBDsm/aIOIeKHrTgALreq6AxyK+w/urFcp36r9epDGd8/nguzJf7PaXi+vP2k6y/g5JvN6fG1FP56b0p/n59SHRZLz743nf2WnfZSWO+z852Va/s12nuigP13L+ffH8x9zfPLvTcy/VDn/wWPl35c/AAAAAAAssPz3/xMLdfx39KSbM9Ojjv+uHdq9AgAAAAAAAMDhuv/gznq+7jUf///ChOVc/3k85fwr+Rcp598by/+rY8v1W/P33n6Y/78f3Fn/461//X+e7jf/pTxTpUdWlR4RVbqnapCmB9m6z9oa9kfNPQ2rXn+Qzvmph+/GtbgeG3F2z7K99P/xsP3cnvamp8Pt9rq/035+T/tgtz2vf2FP+zCd6VSv5PbTsR4/j+vxznZ707Y0Y/uXZ7TXM9pz/n37f5Fy/oPWT5P/amqvxqaNex/1PrPft6eT7ueta1/8zdnD35yZtqK/u21tzfa91EF/tv9PnhrFL29u3Dh9++qtWzfORZrsufV8pMnnLOc/TD+7z/8v77Tn5/32/nrvo9Fj578otmIwNf+XW/PN9r4y5751Iec/Sj85/3dS++T9/yjnP33/f7WD/gAAAAAAAAAAAAAAAMCj1HW9fYnoWxFxMV3/09W1mQDAfOXX/zrJt8+r7s/5/tTqI15XC9afudaf1gf/ffUCbY9a3UXdVk/2ZruIiL+112neM/x60i8DABbZpxHxz647QWfkX7D8fX/N9FTXnQHm6uYHH/706vXrGzdudt0TAAAAAAAAAOBJ5fE/11rjP5+q6/ru2HJ7xn99O9YOOv7nIM/sDjA6ZaDq/uNv06Ns9Ub9Xmu48Rdj2vjfw925R43/PZhxf8MZ7aMZ7Usz2pdntE+80KMl5/9ia7zzUxFxcmz49RLGfx0f874EOf+XWo/nJv+vjC3Xzr/+/VHOv7cn/zO33v/FmZsffPjatfevvrfx3sbPLpw7d/bCxYuXLl068+616xtnd/7tsMeHK+efx752HmhZcv45c/mXJef/pVTLvyw5/y+nWv5lyfnn93vyL0vOP3/2kX9Zcv6vpFr+Zcn5fy3V8i9Lzv/VVMu/LDn/r6da/mXJ+b+WavmXJed/OtXyL0vO/0yq95n/ymH3i/nI+ecjXPb/suT885kN8i9Lzv98quVflpz/hVTLvyw5/9dTLf+y5Py/kWr5lyXnfzHV8i9Lzv+bqZZ/WXL+l1It/7Lk/L+VavmXJef/7VTLvyw5/zdSLf+y5Py/k2r5lyXn/91Uy78sOf/vpVr+Zcn5v5lq+Zfl4ff/mzFjxkye6fqZCQAAAAAAAAAAAAAYN4/TibveRgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP7HDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgQAAAAAAAyP+1Eaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwd68xcp31/cDP7M1rBxIDIX8nfxM2jgnG2WTXl/hC62LCteFWEkKhF2zXuzYLvuG1S6BR7ShQImFUVNE2vGgLCLWRqgqr4gWtAOUFalWpErQv6BtEhcqLqAooIFVqK2CrmfM8z87Mzs7sesfrM+d8PlLyy86cmXPmzDOz+7Xz3QEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJrd9YbZT9WyLKvVavkFm7PsRfW5cWJz45LX3tjjAwAAANbu541/v3BLuuDwCm7UtM0/3vntry4sLCxk7xv+49HPLSykKyaybHRDljWui67+4P215m2CJ7Px2lDT10M9dj/c4/qRHteP9rh+rMf1G3pcP97j+iUnYImNWS3d2fbGf27OT2l2azbauG57h1s9WdswVD936bZZrXGbhdET2Vx2KpvNplu2z7etNbb/+l31fb01i/saatrX1voK+cnjx+Mx1MI53t6yr8X7jH70+mzipz95/PhfXnj+9k6z52loub/8OHdsqx/nJ8Il+bHWsg3pnMTjHGo6zq0dnpPhluOsNW5X/+/243xhhcc5vHiY66r9OR/Phhr//Z3GeRqpZR3O09Zw2X/fnWXZ5cXDbt9myb6yoWxTyyVDi8/PeL4i6/dRX0ovzUZWtU7vWsE6rc+Z7a3rtP01EZ//u8LtRpY5huan6UdPjDU97z9buJZ1GtUf9XKvlfY12O/XSlHWYFwX32k86Kc6rsHt4fE/fs/ya7Dj2umwBtPjblqD23qtwaGx4cYxpyeh1rjN4hrc1bL9cGNPtcZ87p7ua3DqwulzU/Mf+/h9c6ePnZw9OXtmz65d03v27Ttw4MDUiblTs9P5v6/xbBffpmwovQa2hXMXXwOvbtu2eakufHFsyfvvtb4Ox7u8Dje3bdvv1+FI+4Orrc8Lcumazl8b76mf9PErQ9kyr7HG87Nz7a/D9LibXocjTa/Djt9TOrwOR1bwOqxvc27nyn5mGWn6p9MxLP+9YG1rcHPTGmz/eaR9Dfb755GirMHxsC6+t3P57wVbw/E+Nbnan0eGl6zB9HDDe0/9kvTz/viBxui0Lu+oX3HTWHZxfvb8/Y8du3Dh/K4sjHXxsqa10r5eNzU9pmzJeh1a9Xo9PHfnU3d0uHxzOFfj99X/Nb7sc1XfZu/93Z+rxne3zuez5dLdWRh9tt7ns9N38/r5HMuyz3/riYe/8fjn37Ds+aznzU9Mrf1n8ZRLm95/R5d5/425/xf5/tJdPTk8OpK/fofT2RlteT9ufapGGu9dtca+X5ha2fvxaPhnvd+Pb+3yfrylbdt+vx+Ptj+4+H5c6/WnHWvT/nyOh3Vyarr7+3F9my27V7smR7q+H98dZi2c/9eEpJByUdPaWW7dpn2NjIyGxzUS99C6Tve0bD8asll9X8/svrZ1uuPu/L6G06NbtF7rdKJt236v0/RnX8ut01qvP327Nu3P53hYF7fu6b5O69s8u3ft750b4382vXeO9VqDo8Nj9WMeTYuw8X6fLWyMa/D+7Hh2NjuVzTSuHWusp1pjX5MPrGwNjoV/1vu9ckuXNbijbdt+r8H0fWy5tVcbWfrg+6D9+RwP6+LpB7qvwfo2b9zf359dd4RL0jZNP7u2//nacn/mdUfbabpea2UkHOe39nf/s9n6NqcOrDZndj9P94ZLbupwntpfv8u9pmay9TlPW8JxPn9g+fNUP576Np87uML1dDjLsksfebDx573h71f+9uJ3v9ry9y6d/k7n0kce/PGLT/zDao4fgMH3i3xsyr/XNf3N1Er+/h8AAAAYCDH3D4WZyP8AAABQGjH3x/8rPJH/AQAAoDRi7h8JM6lI/t/yxufnfnEpS838hSBen07DQ/l2seM6Hb6eWFhUv/zBL8/+199fWtm+h7Is+9lDv9dx+y0PxePKTYTjvPqm1suX+Op9K9r30Ucvpf0299e/EO4/Pp6VLoNOFdzpLMu+fstnGvuZeP+Vxnz2oaON+fDlp56sb/PCwfzrePvnXpZv/2eh/Hv4xLGW2z8XzsMPw5x+W+fzEW/3lSuv2br/vYv7i7erbbu58bCf/kB+v/H35Hz2yXz7eJ6XO/5vfPqZr9S3f+xVnY//0lDn438m3O+Xw/yfV+TbNz8H9a/j7T4Zjj/uL97u/i99s+PxX/1Uvv25N+fbHQ0z7n9H+Hr7m5+faz5fj9WOtTyu7C35dnH/09/9w8b18f7i/bcf//iRKy3no319PPuv+f1MtW0fL4/7if6ubf/1+2len3H/z/zB0Zbz3Gv/Vx9+7hX1+23f/71t2537yM7G/hfvr/U3Nv35Jz/TcX/xeA7/zbmWx3P43eF1HPb/9AfCegzX/+/V/P7af7vC0Xe3vv/E7b+w+VLL44ne+tN8/1dfd7IxN4xv3HTTi1588+VX1s9dln1nQ35/vfZ/8i/Othz/F2/Lz0e8Pnb02/e/nLj/8x+dPHN2/uLcTDqrj9/S+N05b8+PJx7vLeG9tf3rI2cvfHD2/MT0xHSWTZT3V+hdsy+F+eN8XO6+9cKSd9Cdj4bn844//fqme/7l0/Hyf3tPfvmVt+Xft14dtvtsuHxzeP5Wt/+lnr7rtsbru/ZsOMKFpb8veC22bv/PAyvaMDz+9p8L4no/9/IPNs5D/brG9434ul7j8X9/Jr+fr4XzuhB+M/O22xb317x9/N0IVx7JX+9rPn/hbS4+r38Vnu93/DC//3hc8fF+P/wc880tre93cX187dJQ+/03fovH5fB+kl3Or49bxfN95YXbOh5e/D0k2eXbG1//Ubqf21f1MJcz/7H5qVNzZy4+NnVhdv7C1PzHPn7k9NmLZy4cafwuzyMf6nX7xfenTY33p5nZfXuzxrvV2XxcZzf6+M89enxm//Q9M7Mnjl08ceHRc7PnTx6fnz8+OzN/z7ETJ2Y/2uv2czOHdu0+uGf/7smTczOHDhw8uOfg5NyZs/XDyA+qh33TH548c/5I4ybzh/Ye3PXAA3unJ0+fnZk9tH96evJir9s3vjdN1m/9u5PnZ08duzB3enZyfu7js4d2Hdy3b3fP3wZ4+tyJ+Ymp8xfPTF2cnz0/lT+WiQuNi+vf+3rdnnKa//f859l2tfwX8WXvundf+v2sdV9+Ytm7yjdp+wWiz4ffRfNPLzl3YCVfx9w/GmZSkfwPAAAAVRBz/1iYifwPAAAApRFz/4YwE/kfAAAASiPm/vEwk4rk/9L1/7dcWtH+9f/1/5vPl/5/xfr/jxSt/5+/X+j/98da+/f6/4H+v/6//r/+v/4/fVC0/n/M/RuzrJL5HwAAAKog5v5NYSbyPwAAAJRGzP03hZnI/wAAAFAaMfe/KMykIvlf/1//X/9f/1//v/P+9f8Hk/5/d/r/Pej/T2XV6v9f7ufx6//r/7NU0fr/Mfe/OMykIvkfAAAAqiDm/pvDTOR/AAAAKI2Y+28JM5H/AQAAoDRi7t8cZlKR/K//r/+v/6//r//fef/6/4NJ/7+7Qev/x5eg/n/O5/8X+/j1//X/Wapo/f+Y+18SZlKR/A8AAABVEHP/S8NM5H8AAAAonpFru1nM/S8LM1mS/69xBwAAAMANF3P/rVlbEbwif/+v/6//X/z+/4Z0nf6//n9WyP7/cKb/Xxz6/90NWv/f5/+30v8v9vHr/+v/s1TR+v+N3J+NZy8PM6lI/gcAAIAqiLn/tjAT+R8AAABKI+b+/xdmIv8DAABAacTcvyXMpCL5X/9f/7/4/X+f/6//X/T+v8//LxL9/+70/3vQ/9f/1//X/6evitb/j7n/9jCTiuR/AAAAqIKY++8IM5H/AQAAoDRi7v//YSbyPwAAAJRGzP1bw0wqkv/1/wve/4/NUf1//X/9f/1//f8V0f/vTv+/B/1//X/9f/1/+qpo/f+Y+18RZlKR/A8AAABVEHP/nWEm8j8AAACURsz9rwwzkf8BAACgNGLunwgzqUj+1/8veP8/78GP+fx//X/9f/1//f+V0f/vTv+/B/1//X/9f/1/+qpo/f+Y++8KM6lI/gcAAIAqiLl/W5iJ/A8AAAClEXP/3WEm8j8AAACURsz928NMKpL/9f8Hov+f6f/r/5e6/78xv17/X/+/H/T/u9P/70H/X/9f/1//n74qWv8/5v5XhZlUJP8DAABAFcTcf0+YifwPAAAApRFz/6vDTOR/AAAAKI2Y+3eEmVQk/+v/6//r/+v/3/D+f7he/1//vx/0/7vT/+9B/1//X/9f/5++Klr/P+b+14SZVCT/AwAAQBXE3L8zzET+BwAAgNKIuf/eMBP5HwAAAEoj5v7JMJOK5H/9f/3/8vb//zrLMv3/TvvX/9f/LzP9/+70/3vQ/9f/1//X/6evitb/j7n/vjCTiuR/AAAAqIKY++8PM5H/AQAAoDRi7p8KM5H/AQAAoDRi7p8OM6lI/tf/1/8vb//f5/8vt/819f9fuXi/+v85/f9i0f/vTv+/B/1//f8b3v8f1f+nVIrW/4+5f1eYSUXyPwAAAFRBzP27w0zkfwAAACiNmPv3hJnI/wAAAFAaMffvDTOpSP7X/9f/1//X//f5/533r/8/mPT/u+t//z8+RP1//X/9f5//r//PUkXr/8fc/0CYSUXyPwAAAFRBzP37wkzkfwAAACiNmPv3h5nI/wAAAFAaMfcfCDOpSP7X/9f/1//X/9f/77x//f/BpP/fnc//70H/X/9f/1//nzV65Pebvypa/z/m/oNhJhXJ/wAAAFAFMfe/NsxE/gcAAIDSiLn/l8JM5H8AAAAojZj7fznMpCL5X/9f/1//X/9f/7/z/vX/B5P+f3f6/z3o/+v/6//r/9NXRev/x9x/KMykIvkfAAAAqiDm/l8JM5H/AQAAoDRi7n9dmIn8DwAAAKURc//hMJOK5H/9f/1//X/9f/3/zvtf7/7/WLxf/f810f/vTv+/B/1//X/9f/1/+qpo/f+Y+18fZlKR/A8AAABVEHP/g2Em8j8AAACURsz9bwgzkf8BAACgNGLuf2OYSUXyv/6//r/+v/6//n/n/fv8/8Gk/9+d/n8P+v/6//r/+v/0VdH6/zH3vynMpCL5HwAAAKog5v43h5nI/wAAAFAaMfe/JcxE/gcAAIDSiLn/rWEmFcn/+v/6//r/+v/6/533r/8/mPT/u9P/70H/X/9f/1//n74qWv8/5v5fDTOpSP4HAACAKoi5/6EwE/kfAAAASiPm/reFmcj/AAAAUBox9789zKQi+V//X/9f/1//X/+/8/71/wfTDez/X8r0//vd///5zeFy/f+c/n+xj3+1/f+Rtq+vS///B8v1/xc2tN9e/5/roWj9/5j73xFmUpH8DwAAAFUQc/87w0zkfwAAACiNmPvfFWYi/wMAAEBpxNz/a2EmFcn/+v/141hsL+v/6/83LtD/1//X/x9Yhfv8/12rq5/r//v8f/3/wT1+n/+v/89SRev/x9z/7jCTiuR/AAAAqIKY+x8OM5H/AQAAoDRi7n8kzET+BwAAgNKIuf89YSYVyf/6/z7/X/9f/1//v/P+9f8HU+H6/6uk/6//r/8/uMd/Xfr//6H/z2ArWv8/5v5Hw0wqkv8BAACgCmLuf2+YifwPAAAApRFz/6+Hmcj/AAAAUBox978vzKQi+V//f1D6/xMD2v9/Qv//Ovb/77w5307/X/+fRfr/3en/96D/r/9ftP6/z/9nwBWt/x9z//vDTFae/8dXvCUAAABwQ8Tc/xthJhX5+38AAACogpj7fzPMRP4HAACA0oi5/7fCTCqS//X/B6X/7/P/M/1/n//f9nj0//X/O1m//n9859H/1//X/4/0//X/9f9pV7T+f8z9vx1mUpH8DwAAAFUQc/8HwkzkfwAAABgInf6f7HYx9x8JM5H/AQAAoDRi7j8aZlKR/K//r/+v/1/Q/v+fbPvn7337nUd36f/r/+v/r8q6fv5//cXv8//1//X/E/1//X/9f9oVrf8fc/+xMJOK5H8AAACogpj7fyfMRP4HAACA0oi5/3iYifwPAAAApRFz/0yYSUXyv/6//r/+f0H7/wP8+f/xfOj/t+pb/z++6er/d7Su/f/3LvbE9f9X2/8f63ip/r/+/yAfv/6//j9LFa3/H3P/bJhJRfI/AAAAVEHI/UMn8rl4hfwPAAAApRFz/8kwE/kfAAAASiPm/g+GmVQk/+v/6//r/+v/+/z/zvvv1v+vjfj8/6LS/++uOP3/zvT/9f8H+fj1//X/Wapo/f+Y++fCTCqS/wEAAKAKYu7/UJiJ/A8AAAClEXP/h8NM5H8AAAAojZj7T4WZVCT/6//r/+v/6//r/3fef2E//1//vyv9/+70/3vQ/9f/1//X/6evitb/j7n/dJhJRfI/AAAAVEHM/WfCTOR/AACA/2Pvzp40q+s7jp9OhkxPkUrlLhe5SVUu8ydwkVwnf0AqlZtchKpULkICUdwZ3FcUFXdFcV9wAUFExX0DNxR3UHHfF9wQtcai5/v9zvT06fN0zzw9fc7v93pd8NVHmueB6gI+M/P2wIwd29fvnbv/krjF/gcAAIBm5O7/37ilk/2v/9f/N9v//6P+f7f31//r/1um/5+m/19B/6//1//r/1mrufX/ufv/L27pZP8DAABAD3L3Xxq32P8AAADQjNz9l8Ut9j8AAAA0I3f//8ctnez/M/r/jaHP/j8zXv1/S/2/5//v+v76f/1/y85v/3/lg3/n0//r//X/Qf+/p/7/6G5fr/+nRXPr/3P3PyRu6WT/AwAAQA9y9z80brH/AQAAoBm5+y+PW+x/AAAAaEbu/ofFLZ3s//U9///Y1usL7f+L/l//v/WC/l//r/9fLM//n9ZT/3/ZXRf+z303/+0t+3l//b/+3/P/9f+s19z6/9z9D49bOtn/AAAA0IPc/Y+IW+x/AAAAaEbu/kfGLfY/AAAANCN3/6Pilk72//r6/0U//7/o//X/Wy/o//X/+v/F0v9P66n/P5v31//r//X/+n/Wa279f+7+R8ctnex/AAAA6EHu/sfELfY/AAAANCN3/xVxi/0PAAAAzcjdfzxu6WT/6/8Pvv//o/5f/x9X/6//1/8fPP3/NP3/Cvp//b/+X//PWs2t/8/df2Xc0sn+BwAAgB7k7n9s3GL/AwAAQDNy9z8ubrH/AQAAoBm5+x8ft3Sy//X/nv+v/9f/6//H31//v0z6/2n6/xX0/+faz19w8aUb+n/9v/6fss/+/4GJv22vpf/P3f+EuKWT/Q8AAAA9yN3/xLjF/gcAAIBm5O5/Utxi/wMAAEAzcvc/OW7pZP/r//X/+n/9/1n3/zu/9bbo/8fp/88P/f+02fT/G0dGX9b/L77/9/x//b/+n23m9vz/3P1PiVs62f8AAADQg9z9T41bJvb/vn8wHwAAADhUufufFrf4+X8AAABYvKzOcvc/PW7pZP/r//X/+n/9v+f/j7//VP9/y2mfT/8/L/r/abPp/3eh/9f/L/nz6//1/+w0t/4/d/8z4pZO9j8AAAD0IHf/VXGL/Q8AAADNyN3/zLjF/gcAAIBm5O5/VtzSyf4f7/9P/e/6/73R/2///Pr/8e+PdfX/+UfU/0/2///k+f990v9PO//9/1H9//Y/vv7/AB3252+8/z+26uv1/4yZW/+fu//quKWT/Q8AAAA9yN3/7LjF/gcAAIBm5O5/Ttxi/wMAAEAzcvc/N27pZP97/r/+X/+/vP7f8/9POszn/w/nvf8/ov/fI/3/NM//X0H/r//X/3v+P2s1t/4/d/81cUsn+x8AAAB6cM39w9buf94w2P8AAACwRKf/2oEzf0FpyN3//LjF/gcAAIBm5O5/QdzSyf7X/+v/9f/6f/3/+PvPq//3/P+90v9P0/+voP8/iH7+SGP9/7W7ff0c+v8r9P/MzLb+/7ZTrx9W/5+7/4VxSyf7HwAAAHqQu/9FcYv9DwAAAM3I3f/iuMX+BwAAgGbk7n9J3NLJ/j/w/v/Y7u+t/9f/6//1//p//f+66f+n6f9X0P97/r/n/+v/Watt/f9pDqv/z93/0rilk/0PAAAAPcjd/7K4xf4HAACAZuTuvzZusf8BAACgGbn7Xx63dLL/Pf9f/6//1//r/8ffX/+/TPr/afr/FfT/+n/9v/6ftZpb/5+7/xVxSyf7HwAAAHqQu/+6uMX+BwAAgGbk7n9l3GL/AwAAQDNy978qbulk/+v/D7b/z9f1//r/Qf+v/9f/nxfd9v8bY/8k2mmX/v+O/zr+L9tf0f/r//X/+n/9P2swi/7/xKl/u8zd/+q4pZP9DwAAAD3I3f+auMX+BwAAgGXYwy+Fy93/2rjF/gcAAIBm5O5/Xdyyz/3/12v9VOeP/t/z//X/+n/9//j76/+Xqdv+f488/38F/b/+X/+v/2etZtH/n/bfc/e/Pm7x8/8AAADQjNz9b4hb7H8AAABoRu7+N8Yt9j8AAAA0I3f/m+KWTva//l//r//X/+v/x9//bPv/zWGc/v/80P9P0/+voP/X/+v/9f+s1dz6/9z918ctnex/AAAA6EHu/jfHLfY/AAAANCN3/1viFvsfAAAAmpG7/61xSyf7X/+v/9f/6//1/+Pv7/n/y6T/n6b/H4bhhokPMNb/nziq/9f/6//1/5ylufX/ufvfFrd0sv8BAACgB7n7b4hb7H8AAABoRu7+G+MW+x8AAACakbv/7XFLJ/tf/6//1//r//X/4++v/18m/f80/f8Kh/P8/3/7q+HU59X/L/fz6//1/+w0t/4/d/9NcUsn+x8AAAB6kLv/5rjF/gcAAIBm5O5/R9xi/wMAAEAzcvffErd0sv/1//p//b/+X/8//v76/2U6uP5/0P/r/z3/fwX9v/5f/8+Z5tb/5+5/Z9zSyf4HAACAHuTuvzVusf8BAACgGbn73xW32P8AAADQjNz9745bOtn/+n/9v/5f/6//H39//f8yef7/NP3/Cvp//b/+X//PWs2t/8/d/564pZP9DwAAAD3I3X9b3GL/AwAAQDNy9783brH/AQAAoBm5+98Xt3Sy//X/+v/t/f8wdNf/P/hNrf/X/x9O/7856P/XTv8/Tf+/QgP9/1/s6094u8Pu58/Vrp//z4aG+v9ju369/p85mlv/n7v//XFLJ/sfAAAAepC7/wNxi/0PAAAAzcjd/8G4xf4HAACAZuTu/1Dc0sn+X37/f/SML9T/D8Nw9+We/+/5/xPvr/+fTf9ff1X1/+uj/5+m/1+hgf7/XDTb/3v+v/6fQzO3/j93/4fjlk72PwAAAPQgd/9H4hb7HwAAAJqRu/+jcYv9DwAAAM3I3f+xuKWT/b/8/v/ML9T/D+f0/H/9/9YL+n/9v/5/sfT/0/T/K+j/V/bzG7v8e8+g/9f/6/8ZMbf+P3f/x+OWTvY/AAAA9CB3/+1xi/0PAAAAzcjdf0fcYv8DAABAM3L3fyJu6WT/6//1//r/Zfb/m/p//b/+f9Rc+v+LLvrnO/X/+v8W+/8p+n/9v/6fM82t/8/d/8m4pZP9DwAAAD3I3f+puMX+BwAAgGbk7v903GL/AwAAQDNy938mbulk/+/s/y8YThaqJ431/9Go6f9Po//f/vn1/+PfH57/r//X/x+8ufT/nv9/dp9f/6//X/Ln31f//3c7v17/T4vm1v/n7r8zbulk/wMAAEAPcvd/Nm6x/wEAAKAZufs/F7fY/wAAANCM3P13xS2d7H/P/9f/6//1//r/8ffX/y+T/n+a/n8F/b/+3/P/L/nPP9f/sz5z6/9z938+btkafn//l2f5pwkAAADMSO7+L8Qtnfz8PwAAAPQgd/8X4xb7HwAAAJqRu/9LcUsn+1//r//X/+v/9f/j76//Xyb9/zT9/wr99P+bYy8edj9/rg778zfT/6/z+f8Pfnvq/7s2t/4/d/+X45ZO9j8AAAD0IHf/V+IW+x8AAACakbv/q3GL/Q8AAADNyN1/d9zSyf7X/+v/2+///2M2/f+wof/X/+v/D5r+P/+JPk7/v0I//f+ow+7nl/759f+e/89Oc+v/c/ffE7d0sv8BAACgB7n7vxa32P8AAADQjNz9X49b7H8AAABoxtburzSrv/2v/++r/98Yeuz/Pf9f/6//78ly+v/rjoy96vn/+n/9/3I/v/5f/89Oc+v/v7H1VZvDvRtHutz/AAAAsFT/+g//fc9ef997t367OXwzbrH/AQAAoBm5+78Vt9j/AAAA0Izc/d+OW/ay//ddFc6P/r+v/r/P5//r//X/+v+eLKf/H6f/1//r/5f7+fX/+n92mlv/n7v/O3HLacNv9P+gBwAAAFiM3P3fjVv8+n8AAABoRu7+78UtO/b/iT3+qnYAAABgbnL3fz9u6eTn//X/M+//hwPq/+P30/+fpP/X/4+9v/5/mfT/086x/z+xof/X/0/Q/+v/9f+caW79f+7+W28autz/AAAA0KhtP6Lwg63fbg4/jFvsfwAAAGhG7v4fxS32PwAAADQjd/+P45ZO9r/+f+b9/1k9//9Y/SfP/++8/79qc/T99f/6/5bp/6d5/v8K+n/9f6/9f84g/T9rto/+f2uQHnT/n7v/J3FLJ/sfAAAAepC7/6dxi/0PAAAAzcjd/7O4xf4HAACAZuTu/3nc0sn+1/8fQv9/9dFhOND+fw/P/9f/99H/7/L+7fT/f3Ph8dv//eIbr9f/c8qe+/uj4y/vp//P7wX9v/5f/3+S/n/B/b/n/3NA5vb8/9z9v4hbOtn/AAAA0IPc/ffFLfY/AAAANCN3/y/jFvsfAAAAmpG7/1dxSyf7X//f4vP/l9n/51/rQ+j/jy+v/8+muPf+3/P/9f87ef7/NP3/Cvp//b/+X//PWs2t/8/d/+u4pZP9DwAAAO069WOxuft/E7fk/t/Y9w/dAwAAADOTu/+3cYuf/wcAAIBm5O6/P27pZP/r//X/c+n/k+f/n/o6z/8/Sf+v/98P/f80/f8K+n/9v/5f/89aza3/z93/u7ilk/0PAAAAPcjd/0DcYv8DAABAM3L3/z5usf8BAACgGbn7/xC3dLL/9f/6f/2//l//P/7++v9l0v9P0/+voP/X/+v/9f+s1dz6/9z9fwoAAP//GmVn0Q==")
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mounts\x00')
sendfile(0xffffffffffffffff, r0, 0x0, 0x80000004)

3.639806381s ago: executing program 4 (id=784):
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket(0x2, 0x2, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$alg(0x26, 0x5, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x3, 0x0)
r1 = dup(r0)
write$UHID_INPUT(r1, &(0x7f0000001040)={0x9, {"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", 0x1000}}, 0x1006)
syz_open_procfs(0x0, &(0x7f00000000c0)='timerslack_ns\x00')
pipe(&(0x7f0000000100))
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x1, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="7dbf230d000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB='\n\x00'], 0x64}}, 0x0)

3.347928725s ago: executing program 0 (id=785):
r0 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004081)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000000c0)=r1, 0x4)
sendmsg$kcm(r0, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000001400)="4b9593cab6e20683df314ef0e81440821df03fa25ca04d10f3acef9ccfbc259fa987a9c21f8a3ef60800000011882c14e54eb07abe46981f64b1a5852242a0f9d364114283bcc3b48a78f444a4256826732097e002878113962f94a054ddbb8134f70cbe7c154f7a5db785185678878c35c9142c8403f50c4d3c370fa2ae449eb526f0f48a55917150d1", 0x8a}, {&(0x7f0000001c00)="e1f78d19fe0af29930a613de1b7a71161caa3376a4d4c20829fa50d9e033ea5f9f60383c132fd4cc9204b5dc18f9b6d8280610ce3522e5766d974214647eaa8903f452bc25", 0x45}, {&(0x7f0000001c80)="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", 0x475}], 0x3}, 0x0)
close(r0)

3.064069528s ago: executing program 3 (id=786):
socket$packet(0x11, 0x3, 0x300)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58)
accept4(r0, 0x0, 0x0, 0x0)
close(r0)
socket$inet6(0xa, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
pipe(&(0x7f0000001640))
syz_open_procfs(0x0, &(0x7f0000000080)='gid_map\x00')
socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = epoll_create1(0x0)
fcntl$dupfd(r1, 0x0, r1)
epoll_create1(0x0)
epoll_create1(0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x275a, 0x0)
socket$unix(0x1, 0x5, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0))
pipe(&(0x7f0000000080))
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1)

2.935968189s ago: executing program 0 (id=787):
syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000080)='./file0\x00', 0x3808008, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x6, 0x2df, &(0x7f0000000700)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_INPUT(r0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)

2.821310688s ago: executing program 3 (id=788):
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
r1 = add_key$keyring(&(0x7f0000000280), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r0)
r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000180)=@keyring)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000500)=@chain={'key_or_keyring:', r2})

2.811604709s ago: executing program 0 (id=789):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000a80)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x1c, {0x2, 0x0, @remote}, 'team_slave_0\x00'})
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00')
ioctl$sock_inet_sctp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
getpid()
sched_setscheduler(0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x0, 0x0)
io_submit(0x0, 0x0, 0x0)
preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000200)=""/218, 0xda}], 0x1, 0xffff, 0x0)

2.732112425s ago: executing program 3 (id=790):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r1)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x58, r2, 0x1, 0x0, 0x0, {0x3, 0x74, 0x600}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gre0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x7}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}]}, 0x58}, 0x1, 0xffffffff00000003}, 0x0)

2.568684549s ago: executing program 3 (id=791):
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./file0\x00', 0x16, &(0x7f0000000200), 0x1, 0x50ed, &(0x7f000000a2c0)="$eJzs3U+IVWUfB/Dnzp1x5lVw7isEtsoikGrh4CYioqtMUFF0y8VgBE4tgnThJEi0EMQW/Vt4S4paSK6kFsksjKA2LqQwArehYS7cKAaSi3Yac8957pz7HO+5d0ZtTD8fmTnnOb/zPOe5l7O43+uccwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACEEF74/bNDVfVT16bPnJtp7jywZebyvul1p0OodbbX8vqOrc++8ua2HS9OxA6zL2fLRqPfkFnX81ljVc/GhX69P6+HEMaSAer58pk1pVGLq3vKA1a6fnH30U17mxuPH27Xr146e7L80lkwsdITWCn5eXVh8Vxqdn6PJHt024VTr9Zzimb90xPuX3kRAMCSTLU6i+7H0fwjbre9P60n7WbSbift+AmhXWwsRzbuqn7z3JDWV2iezSwqjPedZ1LP3/9uu5X2T9pJ1FjCPHt3zSPNRL95ziX1lZonAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJ3kkbdHH6qqn7o2febcTHPngS0zl/dNrzsdQqOzvZaVa6vfP9z869utxw78uPmr4xeef6ye94vL0cLO4be48sRkCG8UKhfisBfXhtDqLXSa4cty4a3OynOxAAAAwN3k/s7vkW47i4NjPe1aJ03WOv+iLCxev7j76Ka9zY3HD7frVy+dPbn88Vp9xmvecLxuu7H4UysE4xh/0/EW63HXPaVxqqUjpnn+8fNTf1f1L+X/RnX+j++c/A8AAMDNkP/TcaoNyv/fvfbHJ1X9S/l/Q88hS/k/zjjm/5GwvPwPAAAAd7Lbnf+bpXGqDcr/4y+NfV3Vv5T/p4bL/6PFaceNv8YJ75oMYWrQ1AEAAIA+4v+7L361EPN69s1BmtefevTguarxSvm/OVz+H7ulrwoAAAC4GUe+2P5wVb2U/1vD5f/x2zprAAAAYCne+XDig6p6Kf/PDpf/V+fL/MqHrNNP8a8QDk2GMLGwMpcVfg7tp7sFAAAA4BaJOf3PT3f+ULVfKf/PVd//P97pIF7/33P/v9L1/4VCdte/J90YAAAAgHtR+Xr+eHv87MkF/Z6/P+z1/w/87+CrVccv5f/9w+X/enF5K5//BwAAAMvwX3v+3/bSONUG3f//vo/e/aWqfyn/t4fL/3G5pvjyTsT3573JENYvrOR3E/wmHm5XUpgfKxQ6WkmPbbFHXpgfLxQ65pIemydDeHBhZX9S+H8stJPClbV54UhSOB0L+fnQLRxLCifimfb52ny6aeH7WMgvsJiPV1Cs6V4SkfS42q/HQuGGPc52Dw4AAHBPieE5z7Jjvc2QRtn52qAdVg/aYWTQDvVBO4wmO6Q79tseZnsLcXv7zMalPf//yHD5P74Vq7JFv+v/Q7z+P3+uYff6/9lYaCSF+VhopXcMaMVjZGH343iMRivvcWV9twAAAAB3tfi9QH2F5wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAP+zda4xc1X0A8LPP8T68XkiqEBolm6TGcROv1zaQqKXKmlI1IqVZNxRURRQbe00WL9ixTYlRiIxNRCMEpQ1S8qEIoyiq+QC1AhFJAeEixREqj4iqKIBAoTVEQaSUJCJNkEI1e++ZvXPuzsOPNV76+0neOTP/87zz8Jx775wLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPD/w8GvXPO3zeKP/va8Z1+4ePyKPWsvfvW68059MoSJmcc7snBH/423j//87nPv2fPA6jvuO3z+R3vzcnk8DFT/dOZ3boi1Hl4cwv0dIXSngRWDWaAnvz8Y63vfYAinhNlArcRkf1YibTh8vy+EfWE2UKvqe30hDBYCFz71yMM3VxO39YWwNIRQSdt4vpK10ZcGzujNAv1pYGt3FvjVW5la4LudWQCOWXwz1F70BybqMwzPXa7B66/nuHXs7ZUOrysmhhvn+9naee5UQW/6wMQxPW2l6pgXpbfHQe+2BfBuK23nWz1txS9S+TeUt2ZDldC5aXLzhqund8ZHOsPoaFejmubpeX7m9S9tPJL0gnkdxg4MH5fX4S1PLL27a/kFj9+3YunL+z+295Vj7eaPCpu0mJ5vlZC/5hbM8xiN+zxZAG+/0rekEV+6QgibP/97n2kWL83/h5vP/+PLOd521uWOtb45lM3N4yODMfHaUDY3BwAAgAVjIew13Tr60Cea1Vea/4+0d/w/HvLPJ/PZaA+GMD6T2LskhNNmHs8Cd8XmLlsSwgdnUhP1gbVJ4GAI751JLK9VlZRYFEuMJIGfDOWB8SRwKAYmksC3YuDWJHBDDBxIAhtj4GASODcGwlT9OH5/KB9H24G+GFifbcQD8SyEXwzF1pJt9VytKgAAgOMknx321N8tnOtwrBni9PJAX6sM8QzshhkqSQ3pDLY2rWpYQ3erGjpb1VAb9+7mwy/V3NGq5tJpGB31GW7/5d98NjRRmv+PNZ//V+boSEfp+H8I62b+xtydeWS6Fl8/UZcBAAAAOAYD//viN5vFS/P/8fbO/4/7RLoKmcNjcTfEliUhjNUHsmr/sBzIjnoP5AEAAABYCGrH42vHwqfy2+wU7XQ+Xc4/cYT544H/8Tnz9x58cH2z/pbm/xPtnf/fX3+bdeJQ7MXXloSwqBD4QexlNTBjJAZ+/Mn6QD7+Q3ED3BSryk9MqFV1UyyxPgbGksC+RiV+WCtxWn0gf7Jqje+tjWMqL1EIAAAAwAkXdwfE4/Lx/P8P/Wb1Nc3Kleb/64/s/P+ZeXDp9P7pgRBWdofQlf4w4LH+bGHAGBjsyBMP9Wd1daVVXd8fwjnVgaVVvZiv/9+drjH4VF9WVQyc9qH9r59RTXyzL4SVxcDTn7vzrGpiZxKoNf6XfSF8oDratPHvLMoa70kb//qiEN5fCNSqumxRCNXGetOqHqnk1zFIq/rnSgjvKgRqVZ1dCWFXAGCBiv+Vbio+uGPXtVs2TE9Pbp/HRNyH3xc2T01Pjm7cOr2p0qBPm5I+1y1jdH15TO1e+ea5fImii+5dN9hOuvY7wbFiW/l+/NKJg/n9+F2oZ2acq3vq7q5Jh/yRD5ebCIVvUo2G3DnPQ+4vVjL7JJbqj/l7w0BYdPWOye2jX9ywc+f2VdnfdrOvzv7Gw0zZtlqVbqv+ufrWxsuj4WpZiaPdVsuKlazceeW2lTt2Xbti6soNl09ePnnVqrNXj505tmbs42eurI5qLPvbYqjL5qo6Gepbd7Y5ruM41NO7C5WciE8NCQmJhZbYOrCs6f/Jpfn/tubz//ipEz/58/UZGh3/H46H+bPHZw/zr4+Bfe0e/x9udDS/dmLASBLYHQO7HeYHAADgnSFO8uPezLhX+qfLv/Nys3Kl+f/u9n7/f5zW/68tXX9+o2X+l8cSY43W/0+X+a+t/7+70fr/6TL/tfX/970N6/9fXQskm+QX1v8HAADeCU7c+v8tl/dPLxBQytByef/0AgGlDC2X8W/3AgFHvP7/8//5V/8dmijN/29tb/5v4X4AAAA4eXz5z675nWbx0vx/X3vz/xO//l9odP7/SKPARKOFAa3/BwAAwALVaP2/4Rv7L21WrjT/P9De/D+edtFZlzvW+uZQtqZdSNe0e22o9pMBAAAAWBg6w+hoT5t561ZGXXv0bT6TLwXaLF304p8cPrLz/w+2N/+v+13GLU8svbtr+QWPv3nfiqUv7//Y3ldmj/8DAAAA86fd/RIAAAAAAAAAAAAAAMDb78X/2LOmWbz0+/+wbubxRr//j9f9i78veHdd7lhr6/X/8vsXfvqeXTNLFj42FMKHi4Ete7acEvJr8y8rBh6+ZPl7qok9aYkHXzj3pWri0jTwqRWnvlFNnJME1sdFEt+bBuJVFd9YnATi8or/ngbi9jiQBnrzwFcXZ+PoSLfVTwezbdWRbqtnB0NYUgjUttX9g1kbHekAb0sCtQF+IQ3EAf55HuhMe3XPQNarGBiMRe8YyHoFAMBJK34L7Ambp6Ynx+JX+Hh7enf9bVS3ZNn15Wo72mz+uXxpsovuXTfYTror/S46e63xnlCpDmFV6etqMUvHzCiPTy0tNt27Gwy51WpvnQ3KpY500/U2HlFfNqLRjVunN/W0HPia1llWd7fMsqo02Slm6ZzZpG3U0kZf2hhRm9umjS7H+51hdLQryfUHMTgc6rR6RbT7e/3iOn+NXgXFPFcd3vurZvWV5v/D7c3/K8VxvZFfDGB3vLLe3y2xzD8AAADMr6+u/fU34r/P3vjo083ylub/I+3N/+MerPxQcLa342C8/v/eJSHMXFp/OAvcFZu7bEkIH5xJTcQS2QX1z48lxrLAXXGHyfJYYv1EfVWLYuBAEvjJUB44mAQOxUC+l2J/yHfl/P1QCGfNpNbVl9gWSwwngc/EwEgSGI2BsSSwOAbGk8Cri/PARBL4txgIU/Xb6t7F+bYCAAA4Evk8q6f+bkjneQe6W2XoaJWhv1WGzlYZKq0yNBpFvP/tmKEnOXmlo5CpJ621L6mllCFeDP+I+1XKEH5YnzMtWGo6nn9QO9+goz7DA5/oroQmSvP/sfbm//31t1nrh+L8f/b6f1ngB7F7X4unjo/EwI8/WR/IdwwcipPdm2pVTeQl8kn7TbHEeAyMJIFtMTCeBNavywP73lMfyGfatcb31hqfyksUAgAAAHDCxR0EcTdNnP/fseMrA83Kleb/4+3N/2N7A8XGboi1Hl4cwv0ds72pBVYMZoG4H2Mw/jz+fYMhnFLYwVErMdmflehNGg7f78t+od6bVvW9vuzHB/H+hU898vDN1cRtfSEsLex9qbXxfCVroy8NnNGbBfrTwNbuLBD3/NQC3+3MAnDMansF4wsqP9WlZnjucg1ef++Ua4KmwyvtA50j31y/uZovpR2u+T7VmiN72pruv+W4Kb09Dnq3LcR327B3W/GLVP4N5a3ZUCV0bprcvOHq6Z3xkeIvWUvm6Xku/kq1nfRxeB3uPvretlZJOzCWfHyMzV1u7tdhR6zulieW3t21/ILH71ux9OX9H9v7StvdaCD+UPiR6/518EeFzTvfKiF/zS24z5MJnycL8b+BEU9bCGHdq1+/qVm8NP+faG/+353czvh13Jg7loTwkcLGfSxu/j9ekn0OFgLZp+S7yoHskPt/DTX85AQAAIDjrba7o7a/YCq/zU4IT+fJ5fwTR5g/7q8YnzN/u/3u/+tLljaLl+b/65vP/xcl3XT83/F/5onj/3M62XdFL0of2H1Mu6JL1TEvHP+f08n+bnP8f06O/zv+PxfH/1tw/H9OJ/vTVvqWtM2XrhDCy3/00LPN4qX5/7b25v/W/5t70b7a+n/rG63/t63R+n+7rf8HAADMqwYLzaXzvNLqfaUM6ep9pQwtFwhsucSg9f+OeP2/l05//jehidL8f3d78//4chgotr5Q1v8bWdegqltjYJuFAQEAADgZNdpBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwNvrgX/4n03N4o/+9rxnX7h4/Io9ay9+9brzTn0yhKmZxzuycEf/jbeP//zuc+/Z88DqO+47fP5HK3m5nvz2d+tyx1rfHAphX+GRwZh4bah6ZzZw4afv2dVdTTw2FMKHi4Ete7acUk18ayiEZcXAw5csf081sSct8eAL575UTVyaBj614tQ3qolz8kBH2t1/XJx1tyPt7s2LQ1hSCNS6e8Xi+qpqbfxpHuhM2/inwayNGBiMRb8xmLURA9OxxNSiEFZ2h9CVVvVoJauqK63qXypZVV1pVV+uhHBOCKE7reqF3qyq7nTkT/ZmVcXAaR/a//oZ1cS+3hBWFgNPf+7Os6qJLySBWuN/0RvCB6ovmbTxb/dkjfekjd/WE8L7Qwi9aYlfdmcletMSL3aH8K5CoNb457tD2BV4R4gfPnWfaDt2Xbtlw/T05PZ5TPTmbfWFzVPTk6Mbt05vqiR9aqSjkH7r+qMf+3Ovf2lj9faie9cNtpPuzsv1zHR5dU/d3TUne+9jv/qLlcw+H6X6Y/7eMBAWXb1jcvvoFzfs3Ll9Vfa33eyrs79deTTbVqsWyrZaVqxk5c4rt63csevaFVNXbrh88vLJq1advXrszLE1Yx8/c2V1VGPZ3+Mx1DtP/FBP7y5UciI+ACQkJBZaorPu023sZP8gL33Rn+1oT6jMfECXphXFLB0zozweg157lCM+mu8pLUe0qjRxKGVZ3TrLmtJkYjZLX5Zl5ntdaXJYrKlzZpPG+51hdLSr0XYYrr9b3Lw/O4bN+0y+6dpNAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwf+zAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCjtwLAAAAAAgzN86jJ4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALgUAAD//wNUIwc=")
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0)
pwritev2(r0, &(0x7f0000001440)=[{&(0x7f0000000100)="b8ac416ef28765bf1cbb299a07190c5b6bb1baf5302d7c7e1ebd6b78a4041fa399f2bd491332f71fc0270be6ddf29e26869c894b7c6d32f1f14e4baebc5a75194357a335c6b604f1a5eaff590e7ce8de79391a32e949978eade4f5d003540d25ef12ce12325a2311c706feae9d705f98869838e6c45592e8a7075b85cb0b4bde04353f2f08f7a53e8345d83219d77ff42e3751f97fb2a3143ccc8a83379375a486ca5671d3144d4e82a0f935deea0aa9e0501c8c847296cedbec5623d391a70c4050d2f3eb7adeb870cdaf76a9bcd936", 0xd0}, {&(0x7f0000000000)="3e58406c1c05e75f7c4e9a7e9dfa3e3545bd2d4c", 0x14}], 0x2, 0x101, 0x0, 0x0)
r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080), &(0x7f0000000880)=ANY=[], 0xbfe, 0x0)
sendfile(r0, r1, 0x0, 0x8)

2.268953724s ago: executing program 1 (id=792):
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00'})
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x17}]}, &(0x7f00000005c0)='GPL\x00'}, 0x80)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r1, 0x0, 0x25, 0x0, @val=@tracing}, 0x40)
syz_emit_ethernet(0x36, &(0x7f0000000d00)={@link_local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @multicast1, @private}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0)

2.175855431s ago: executing program 2 (id=793):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x32}, 0x9c)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000200)=[@in={0x2, 0x0, @rand_addr=0x64010102}]}, &(0x7f0000000340)=0x10)

2.100271518s ago: executing program 4 (id=794):
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x84)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc000ff}]})
ioctl$PTP_PIN_GETFUNC2(r0, 0xc0603d0f, &(0x7f0000000040))

2.090609768s ago: executing program 1 (id=795):
syz_open_dev$video4linux(&(0x7f0000000080), 0x2, 0x0)
ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc040564a, &(0x7f0000000140)={0x0, 0x1, @value=0x1014})

1.990212136s ago: executing program 0 (id=796):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000200)=ANY=[], 0x1, 0x61db, &(0x7f0000007f00)="$eJzs3UuPHFfZB/Cn+jaXvEmsLKK8FkKTxFxCiK/BGAIkWcCCDQvkLbI1mUQWDiDbICey8ESzYcGHACGxRIglKz5AFmzZ8QGwZCOBskqhmjlnXNPpdo89ma6eOb+fNK56+lRNn/K/qy9TVX0CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIgf/uDH56qIuPKrdMOJiP+LfkQvYqWp1yJiZe1EXn4QES/EdnM8HysxXIqocuOzEa9HxMfPRNx/cGe9uen8Pvvx/T//4w8/eepHf//T8Mx//3Kr/8a05W7f/u1//nr3ybcXAAAASlTXdV2lj/kn0+f7XtedAgDmIr/+10m+Xb1w9eaC9UetVqvVR7Buqye72y4iYrO9TvOeweF4ADhiNuOTrrtAh+RftEFEPNV1J4CFVnXdAQ7F/Qd31quUb9V+PVjbac/nguzJf7Pavb5j2nSW8XNM5vX42op+PDelPytz6sMiyfn3xvO/stM+Sssddv7zMi3/0c6lT8XJ+ffH8x9zfPLvTcy/VDn/wWPl35c/AAAAAAAssPz3/xMdH/9dOvim7Mujjv+uzakPAAAAAAAAAPB5O9j4fy2V8f8AAABgUTWf1Ru/e+bhbdO+i625/XIV8fTY8kBh0sUyq133AwAAAAAAAAAAAABKMtg5h/dyFTGMiKdXV+u6bn7axuvHddD1j7rStx9K1vWTPAAA7Pj4mbFr+auI5Yi4nL7rb7i6ulrXyyur9Wq9spTfz46WluuV1ufaPG1uWxrt4w3xYFQ3v2y5tV7brM/Ls9rHf19zX6O6v4+OzUeHgQNAROy8Gt33inTM1PWz0fW7HI4G+//xY/9nP7p+nAIAAACHr67rukpf530yHfPvdd0pAGAu8uv/+HEBtVqtVqvVx69uqye72y4iYrO9TvOewXD8AHDEbMYnXXeBDsm/aIOIeKHrTgALreq6AxyK+w/urFcp36r9epDGd8/nguzJf7PaXi+vP2k6y/g5JvN6fG1FP56b0p/n59SHRZLz743nf2WnfZSWO+z852Va/s12nuigP13L+ffH8x9zfPLvTcy/VDn/wWPl35c/AAAAAAAssPz3/xMLdfx39KSbM9Ojjv+uHdq9AgAAAAAAAMDhuv/gznq+7jUf///ChOVc/3k85fwr+Rcp598by/+rY8v1W/P33n6Y/78f3Fn/461//X+e7jf/pTxTpUdWlR4RVbqnapCmB9m6z9oa9kfNPQ2rXn+Qzvmph+/GtbgeG3F2z7K99P/xsP3cnvamp8Pt9rq/035+T/tgtz2vf2FP+zCd6VSv5PbTsR4/j+vxznZ707Y0Y/uXZ7TXM9pz/n37f5Fy/oPWT5P/amqvxqaNex/1PrPft6eT7ueta1/8zdnD35yZtqK/u21tzfa91EF/tv9PnhrFL29u3Dh9++qtWzfORZrsufV8pMnnLOc/TD+7z/8v77Tn5/32/nrvo9Fj578otmIwNf+XW/PN9r4y5751Iec/Sj85/3dS++T9/yjnP33/f7WD/gAAAAAAAAAAAAAAAMCj1HW9fYnoWxFxMV3/09W1mQDAfOXX/zrJt8+r7s/5/tTqI15XC9afudaf1gf/ffUCbY9a3UXdVk/2ZruIiL+112neM/x60i8DABbZpxHxz647QWfkX7D8fX/N9FTXnQHm6uYHH/706vXrGzdudt0TAAAAAAAAAOBJ5fE/11rjP5+q6/ru2HJ7xn99O9YOOv7nIM/sDjA6ZaDq/uNv06Ns9Ub9Xmu48Rdj2vjfw925R43/PZhxf8MZ7aMZ7Usz2pdntE+80KMl5/9ia7zzUxFxcmz49RLGfx0f874EOf+XWo/nJv+vjC3Xzr/+/VHOv7cn/zO33v/FmZsffPjatfevvrfx3sbPLpw7d/bCxYuXLl068+616xtnd/7tsMeHK+efx752HmhZcv45c/mXJef/pVTLvyw5/y+nWv5lyfnn93vyL0vOP3/2kX9Zcv6vpFr+Zcn5fy3V8i9Lzv/VVMu/LDn/r6da/mXJ+b+WavmXJed/OtXyL0vO/0yq95n/ymH3i/nI+ecjXPb/suT885kN8i9Lzv98quVflpz/hVTLvyw5/9dTLf+y5Py/kWr5lyXnfzHV8i9Lzv+bqZZ/WXL+l1It/7Lk/L+VavmXJef/7VTLvyw5/zdSLf+y5Py/k2r5lyXn/91Uy78sOf/vpVr+Zcn5v5lq+Zfl4ff/mzFjxkye6fqZCQAAAAAAAAAAAAAYN4/TibveRgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP7HDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgQAAAAAAAyP+1Eaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwd68xcp31/cDP7M1rBxIDIX8nfxM2jgnG2WTXl/hC62LCteFWEkKhF2zXuzYLvuG1S6BR7ShQImFUVNE2vGgLCLWRqgqr4gWtAOUFalWpErQv6BtEhcqLqAooIFVqK2CrmfM8z87Mzs7sesfrM+d8PlLyy86cmXPmzDOz+7Xz3QEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJrd9YbZT9WyLKvVavkFm7PsRfW5cWJz45LX3tjjAwAAANbu541/v3BLuuDwCm7UtM0/3vntry4sLCxk7xv+49HPLSykKyaybHRDljWui67+4P215m2CJ7Px2lDT10M9dj/c4/qRHteP9rh+rMf1G3pcP97j+iUnYImNWS3d2fbGf27OT2l2azbauG57h1s9WdswVD936bZZrXGbhdET2Vx2KpvNplu2z7etNbb/+l31fb01i/saatrX1voK+cnjx+Mx1MI53t6yr8X7jH70+mzipz95/PhfXnj+9k6z52loub/8OHdsqx/nJ8Il+bHWsg3pnMTjHGo6zq0dnpPhluOsNW5X/+/243xhhcc5vHiY66r9OR/Phhr//Z3GeRqpZR3O09Zw2X/fnWXZ5cXDbt9myb6yoWxTyyVDi8/PeL4i6/dRX0ovzUZWtU7vWsE6rc+Z7a3rtP01EZ//u8LtRpY5huan6UdPjDU97z9buJZ1GtUf9XKvlfY12O/XSlHWYFwX32k86Kc6rsHt4fE/fs/ya7Dj2umwBtPjblqD23qtwaGx4cYxpyeh1rjN4hrc1bL9cGNPtcZ87p7ua3DqwulzU/Mf+/h9c6ePnZw9OXtmz65d03v27Ttw4MDUiblTs9P5v6/xbBffpmwovQa2hXMXXwOvbtu2eakufHFsyfvvtb4Ox7u8Dje3bdvv1+FI+4Orrc8Lcumazl8b76mf9PErQ9kyr7HG87Nz7a/D9LibXocjTa/Djt9TOrwOR1bwOqxvc27nyn5mGWn6p9MxLP+9YG1rcHPTGmz/eaR9Dfb755GirMHxsC6+t3P57wVbw/E+Nbnan0eGl6zB9HDDe0/9kvTz/viBxui0Lu+oX3HTWHZxfvb8/Y8du3Dh/K4sjHXxsqa10r5eNzU9pmzJeh1a9Xo9PHfnU3d0uHxzOFfj99X/Nb7sc1XfZu/93Z+rxne3zuez5dLdWRh9tt7ns9N38/r5HMuyz3/riYe/8fjn37Ds+aznzU9Mrf1n8ZRLm95/R5d5/425/xf5/tJdPTk8OpK/fofT2RlteT9ufapGGu9dtca+X5ha2fvxaPhnvd+Pb+3yfrylbdt+vx+Ptj+4+H5c6/WnHWvT/nyOh3Vyarr7+3F9my27V7smR7q+H98dZi2c/9eEpJByUdPaWW7dpn2NjIyGxzUS99C6Tve0bD8asll9X8/svrZ1uuPu/L6G06NbtF7rdKJt236v0/RnX8ut01qvP327Nu3P53hYF7fu6b5O69s8u3ft750b4382vXeO9VqDo8Nj9WMeTYuw8X6fLWyMa/D+7Hh2NjuVzTSuHWusp1pjX5MPrGwNjoV/1vu9ckuXNbijbdt+r8H0fWy5tVcbWfrg+6D9+RwP6+LpB7qvwfo2b9zf359dd4RL0jZNP7u2//nacn/mdUfbabpea2UkHOe39nf/s9n6NqcOrDZndj9P94ZLbupwntpfv8u9pmay9TlPW8JxPn9g+fNUP576Np87uML1dDjLsksfebDx573h71f+9uJ3v9ry9y6d/k7n0kce/PGLT/zDao4fgMH3i3xsyr/XNf3N1Er+/h8AAAAYCDH3D4WZyP8AAABQGjH3x/8rPJH/AQAAoDRi7h8JM6lI/t/yxufnfnEpS838hSBen07DQ/l2seM6Hb6eWFhUv/zBL8/+199fWtm+h7Is+9lDv9dx+y0PxePKTYTjvPqm1suX+Op9K9r30Ucvpf0299e/EO4/Pp6VLoNOFdzpLMu+fstnGvuZeP+Vxnz2oaON+fDlp56sb/PCwfzrePvnXpZv/2eh/Hv4xLGW2z8XzsMPw5x+W+fzEW/3lSuv2br/vYv7i7erbbu58bCf/kB+v/H35Hz2yXz7eJ6XO/5vfPqZr9S3f+xVnY//0lDn438m3O+Xw/yfV+TbNz8H9a/j7T4Zjj/uL97u/i99s+PxX/1Uvv25N+fbHQ0z7n9H+Hr7m5+faz5fj9WOtTyu7C35dnH/09/9w8b18f7i/bcf//iRKy3no319PPuv+f1MtW0fL4/7if6ubf/1+2len3H/z/zB0Zbz3Gv/Vx9+7hX1+23f/71t2537yM7G/hfvr/U3Nv35Jz/TcX/xeA7/zbmWx3P43eF1HPb/9AfCegzX/+/V/P7af7vC0Xe3vv/E7b+w+VLL44ne+tN8/1dfd7IxN4xv3HTTi1588+VX1s9dln1nQ35/vfZ/8i/Othz/F2/Lz0e8Pnb02/e/nLj/8x+dPHN2/uLcTDqrj9/S+N05b8+PJx7vLeG9tf3rI2cvfHD2/MT0xHSWTZT3V+hdsy+F+eN8XO6+9cKSd9Cdj4bn844//fqme/7l0/Hyf3tPfvmVt+Xft14dtvtsuHxzeP5Wt/+lnr7rtsbru/ZsOMKFpb8veC22bv/PAyvaMDz+9p8L4no/9/IPNs5D/brG9434ul7j8X9/Jr+fr4XzuhB+M/O22xb317x9/N0IVx7JX+9rPn/hbS4+r38Vnu93/DC//3hc8fF+P/wc880tre93cX187dJQ+/03fovH5fB+kl3Or49bxfN95YXbOh5e/D0k2eXbG1//Ubqf21f1MJcz/7H5qVNzZy4+NnVhdv7C1PzHPn7k9NmLZy4cafwuzyMf6nX7xfenTY33p5nZfXuzxrvV2XxcZzf6+M89enxm//Q9M7Mnjl08ceHRc7PnTx6fnz8+OzN/z7ETJ2Y/2uv2czOHdu0+uGf/7smTczOHDhw8uOfg5NyZs/XDyA+qh33TH548c/5I4ybzh/Ye3PXAA3unJ0+fnZk9tH96evJir9s3vjdN1m/9u5PnZ08duzB3enZyfu7js4d2Hdy3b3fP3wZ4+tyJ+Ymp8xfPTF2cnz0/lT+WiQuNi+vf+3rdnnKa//f859l2tfwX8WXvundf+v2sdV9+Ytm7yjdp+wWiz4ffRfNPLzl3YCVfx9w/GmZSkfwPAAAAVRBz/1iYifwPAAAApRFz/4YwE/kfAAAASiPm/vEwk4rk/9L1/7dcWtH+9f/1/5vPl/5/xfr/jxSt/5+/X+j/98da+/f6/4H+v/6//r/+v/4/fVC0/n/M/RuzrJL5HwAAAKog5v5NYSbyPwAAAJRGzP03hZnI/wAAAFAaMfe/KMykIvlf/1//X/9f/1//v/P+9f8Hk/5/d/r/Pej/T2XV6v9f7ufx6//r/7NU0fr/Mfe/OMykIvkfAAAAqiDm/pvDTOR/AAAAKI2Y+28JM5H/AQAAoDRi7t8cZlKR/K//r/+v/6//r//fef/6/4NJ/7+7Qev/x5eg/n/O5/8X+/j1//X/Wapo/f+Y+18SZlKR/A8AAABVEHP/S8NM5H8AAAAonpFru1nM/S8LM1mS/69xBwAAAMANF3P/rVlbEbwif/+v/6//X/z+/4Z0nf6//n9WyP7/cKb/Xxz6/90NWv/f5/+30v8v9vHr/+v/s1TR+v+N3J+NZy8PM6lI/gcAAIAqiLn/tjAT+R8AAABKI+b+/xdmIv8DAABAacTcvyXMpCL5X/9f/7/4/X+f/6//X/T+v8//LxL9/+70/3vQ/9f/1//X/6evitb/j7n/9jCTiuR/AAAAqIKY++8IM5H/AQAAoDRi7v//YSbyPwAAAJRGzP1bw0wqkv/1/wve/4/NUf1//X/9f/1//f8V0f/vTv+/B/1//X/9f/1/+qpo/f+Y+18RZlKR/A8AAABVEHP/nWEm8j8AAACURsz9rwwzkf8BAACgNGLunwgzqUj+1/8veP8/78GP+fx//X/9f/1//f+V0f/vTv+/B/1//X/9f/1/+qpo/f+Y++8KM6lI/gcAAIAqiLl/W5iJ/A8AAAClEXP/3WEm8j8AAACURsz928NMKpL/9f8Hov+f6f/r/5e6/78xv17/X/+/H/T/u9P/70H/X/9f/1//n74qWv8/5v5XhZlUJP8DAABAFcTcf0+YifwPAAAApRFz/6vDTOR/AAAAKI2Y+3eEmVQk/+v/6//r/+v/3/D+f7he/1//vx/0/7vT/+9B/1//X/9f/5++Klr/P+b+14SZVCT/AwAAQBXE3L8zzET+BwAAgNKIuf/eMBP5HwAAAEoj5v7JMJOK5H/9f/3/8vb//zrLMv3/TvvX/9f/LzP9/+70/3vQ/9f/1//X/6evitb/j7n/vjCTiuR/AAAAqIKY++8PM5H/AQAAoDRi7p8KM5H/AQAAoDRi7p8OM6lI/tf/1/8vb//f5/8vt/819f9fuXi/+v85/f9i0f/vTv+/B/1//f8b3v8f1f+nVIrW/4+5f1eYSUXyPwAAAFRBzP27w0zkfwAAACiNmPv3hJnI/wAAAFAaMffvDTOpSP7X/9f/1//X//f5/533r/8/mPT/u+t//z8+RP1//X/9f5//r//PUkXr/8fc/0CYSUXyPwAAAFRBzP37wkzkfwAAACiNmPv3h5nI/wAAAFAaMfcfCDOpSP7X/9f/1//X/9f/77x//f/BpP/fnc//70H/X/9f/1//nzV65Pebvypa/z/m/oNhJhXJ/wAAAFAFMfe/NsxE/gcAAIDSiLn/l8JM5H8AAAAojZj7fznMpCL5X/9f/1//X/9f/7/z/vX/B5P+f3f6/z3o/+v/6//r/9NXRev/x9x/KMykIvkfAAAAqiDm/l8JM5H/AQAAoDRi7n9dmIn8DwAAAKURc//hMJOK5H/9f/1//X/9f/3/zvtf7/7/WLxf/f810f/vTv+/B/1//X/9f/1/+qpo/f+Y+18fZlKR/A8AAABVEHP/g2Em8j8AAACURsz9bwgzkf8BAACgNGLuf2OYSUXyv/6//r/+v/6//n/n/fv8/8Gk/9+d/n8P+v/6//r/+v/0VdH6/zH3vynMpCL5HwAAAKog5v43h5nI/wAAAFAaMfe/JcxE/gcAAIDSiLn/rWEmFcn/+v/6//r/+v/6/533r/8/mPT/u9P/70H/X/9f/1//n74qWv8/5v5fDTOpSP4HAACAKoi5/6EwE/kfAAAASiPm/reFmcj/AAAAUBox9789zKQi+V//X/9f/1//X/+/8/71/wfTDez/X8r0//vd///5zeFy/f+c/n+xj3+1/f+Rtq+vS///B8v1/xc2tN9e/5/roWj9/5j73xFmUpH8DwAAAFUQc/87w0zkfwAAACiNmPvfFWYi/wMAAEBpxNz/a2EmFcn/+v/141hsL+v/6/83LtD/1//X/x9Yhfv8/12rq5/r//v8f/3/wT1+n/+v/89SRev/x9z/7jCTiuR/AAAAqIKY+x8OM5H/AQAAoDRi7n8kzET+BwAAgNKIuf89YSYVyf/6/z7/X/9f/1//v/P+9f8HU+H6/6uk/6//r/8/uMd/Xfr//6H/z2ArWv8/5v5Hw0wqkv8BAACgCmLuf2+YifwPAAAApRFz/6+Hmcj/AAAAUBox978vzKQi+V//f1D6/xMD2v9/Qv//Ovb/77w5307/X/+fRfr/3en/96D/r/9ftP6/z/9nwBWt/x9z//vDTFae/8dXvCUAAABwQ8Tc/xthJhX5+38AAACogpj7fzPMRP4HAACA0oi5/7fCTCqS//X/B6X/7/P/M/1/n//f9nj0//X/O1m//n9859H/1//X/4/0//X/9f9pV7T+f8z9vx1mUpH8DwAAAFUQc/8HwkzkfwAAABgInf6f7HYx9x8JM5H/AQAAoDRi7j8aZlKR/K//r/+v/1/Q/v+fbPvn7337nUd36f/r/+v/r8q6fv5//cXv8//1//X/E/1//X/9f9oVrf8fc/+xMJOK5H8AAACogpj7fyfMRP4HAACA0oi5/3iYifwPAAAApRFz/0yYSUXyv/6//r/+f0H7/wP8+f/xfOj/t+pb/z++6er/d7Su/f/3LvbE9f9X2/8f63ip/r/+/yAfv/6//j9LFa3/H3P/bJhJRfI/AAAAVEHI/UMn8rl4hfwPAAAApRFz/8kwE/kfAAAASiPm/g+GmVQk/+v/6//r/+v/+/z/zvvv1v+vjfj8/6LS/++uOP3/zvT/9f8H+fj1//X/Wapo/f+Y++fCTCqS/wEAAKAKYu7/UJiJ/A8AAAClEXP/h8NM5H8AAAAojZj7T4WZVCT/6//r/+v/6//r/3fef2E//1//vyv9/+70/3vQ/9f/1//X/6evitb/j7n/dJhJRfI/AAAAVEHM/WfCTOR/AACA/2Pvzp40q+s7jp9OhkxPkUrlLhe5SVUu8ydwkVwnf0AqlZtchKpULkICUdwZ3FcUFXdFcV9wAUFExX0DNxR3UHHfF9wQtcai5/v9zvT06fN0zzw9fc7v93pd8NVHmueB6gI+M/P2wIwd29fvnbv/krjF/gcAAIBm5O7/37ilk/2v/9f/N9v//6P+f7f31//r/1um/5+m/19B/6//1//r/1mrufX/ufv/L27pZP8DAABAD3L3Xxq32P8AAADQjNz9l8Ut9j8AAAA0I3f//8ctnez/M/r/jaHP/j8zXv1/S/2/5//v+v76f/1/y85v/3/lg3/n0//r//X/Qf+/p/7/6G5fr/+nRXPr/3P3PyRu6WT/AwAAQA9y9z80brH/AQAAoBm5+y+PW+x/AAAAaEbu/ofFLZ3s//U9///Y1usL7f+L/l//v/WC/l//r/9fLM//n9ZT/3/ZXRf+z303/+0t+3l//b/+3/P/9f+s19z6/9z9D49bOtn/AAAA0IPc/Y+IW+x/AAAAaEbu/kfGLfY/AAAANCN3/6Pilk72//r6/0U//7/o//X/Wy/o//X/+v/F0v9P66n/P5v31//r//X/+n/Wa279f+7+R8ctnex/AAAA6EHu/sfELfY/AAAANCN3/xVxi/0PAAAAzcjdfzxu6WT/6/8Pvv//o/5f/x9X/6//1/8fPP3/NP3/Cvp//b/+X//PWs2t/8/df2Xc0sn+BwAAgB7k7n9s3GL/AwAAQDNy9z8ubrH/AQAAoBm5+x8ft3Sy//X/nv+v/9f/6//H31//v0z6/2n6/xX0/+faz19w8aUb+n/9v/6fss/+/4GJv22vpf/P3f+EuKWT/Q8AAAA9yN3/xLjF/gcAAIBm5O5/Utxi/wMAAEAzcvc/OW7pZP/r//X/+n/9/1n3/zu/9bbo/8fp/88P/f+02fT/G0dGX9b/L77/9/x//b/+n23m9vz/3P1PiVs62f8AAADQg9z9T41bJvb/vn8wHwAAADhUufufFrf4+X8AAABYvKzOcvc/PW7pZP/r//X/+n/9v+f/j7//VP9/y2mfT/8/L/r/abPp/3eh/9f/L/nz6//1/+w0t/4/d/8z4pZO9j8AAAD0IHf/VXGL/Q8AAADNyN3/zLjF/gcAAIBm5O5/VtzSyf4f7/9P/e/6/73R/2///Pr/8e+PdfX/+UfU/0/2///k+f990v9PO//9/1H9//Y/vv7/AB3252+8/z+26uv1/4yZW/+fu//quKWT/Q8AAAA9yN3/7LjF/gcAAIBm5O5/Ttxi/wMAAEAzcvc/N27pZP97/r/+X/+/vP7f8/9POszn/w/nvf8/ov/fI/3/NM//X0H/r//X/3v+P2s1t/4/d/81cUsn+x8AAAB6cM39w9buf94w2P8AAACwRKf/2oEzf0FpyN3//LjF/gcAAIBm5O5/QdzSyf7X/+v/9f/6f/3/+PvPq//3/P+90v9P0/+voP8/iH7+SGP9/7W7ff0c+v8r9P/MzLb+/7ZTrx9W/5+7/4VxSyf7HwAAAHqQu/9FcYv9DwAAAM3I3f/iuMX+BwAAgGbk7n9J3NLJ/j/w/v/Y7u+t/9f/6//1//p//f+66f+n6f9X0P97/r/n/+v/Watt/f9pDqv/z93/0rilk/0PAAAAPcjd/7K4xf4HAACAZuTuvzZusf8BAACgGbn7Xx63dLL/Pf9f/6//1//r/8ffX/+/TPr/afr/FfT/+n/9v/6ftZpb/5+7/xVxSyf7HwAAAHqQu/+6uMX+BwAAgGbk7n9l3GL/AwAAQDNy978qbulk/+v/D7b/z9f1//r/Qf+v/9f/nxfd9v8bY/8k2mmX/v+O/zr+L9tf0f/r//X/+n/9P2swi/7/xKl/u8zd/+q4pZP9DwAAAD3I3f+auMX+BwAAgGXYwy+Fy93/2rjF/gcAAIBm5O5/Xdyyz/3/12v9VOeP/t/z//X/+n/9//j76/+Xqdv+f488/38F/b/+X/+v/2etZtH/n/bfc/e/Pm7x8/8AAADQjNz9b4hb7H8AAABoRu7+N8Yt9j8AAAA0I3f/m+KWTva//l//r//X/+v/x9//bPv/zWGc/v/80P9P0/+voP/X/+v/9f+s1dz6/9z918ctnex/AAAA6EHu/jfHLfY/AAAANCN3/1viFvsfAAAAmpG7/61xSyf7X/+v/9f/6//1/+Pv7/n/y6T/n6b/H4bhhokPMNb/nziq/9f/6//1/5ylufX/ufvfFrd0sv8BAACgB7n7b4hb7H8AAABoRu7+G+MW+x8AAACakbv/7XFLJ/tf/6//1//r//X/4++v/18m/f80/f8Kh/P8/3/7q+HU59X/L/fz6//1/+w0t/4/d/9NcUsn+x8AAAB6kLv/5rjF/gcAAIBm5O5/R9xi/wMAAEAzcvffErd0sv/1//p//b/+X/8//v76/2U6uP5/0P/r/z3/fwX9v/5f/8+Z5tb/5+5/Z9zSyf4HAACAHuTuvzVusf8BAACgGbn73xW32P8AAADQjNz9745bOtn/+n/9v/5f/6//H39//f8yef7/NP3/Cvp//b/+X//PWs2t/8/d/564pZP9DwAAAD3I3X9b3GL/AwAAQDNy9783brH/AQAAoBm5+98Xt3Sy//X/+v/t/f8wdNf/P/hNrf/X/x9O/7856P/XTv8/Tf+/QgP9/1/s6094u8Pu58/Vrp//z4aG+v9ju369/p85mlv/n7v//XFLJ/sfAAAAepC7/wNxi/0PAAAAzcjd/8G4xf4HAACAZuTu/1Dc0sn+X37/f/SML9T/D8Nw9+We/+/5/xPvr/+fTf9ff1X1/+uj/5+m/1+hgf7/XDTb/3v+v/6fQzO3/j93/4fjlk72PwAAAPQgd/9H4hb7HwAAAJqRu/+jcYv9DwAAAM3I3f+xuKWT/b/8/v/ML9T/D+f0/H/9/9YL+n/9v/5/sfT/0/T/K+j/V/bzG7v8e8+g/9f/6/8ZMbf+P3f/x+OWTvY/AAAA9CB3/+1xi/0PAAAAzcjdf0fcYv8DAABAM3L3fyJu6WT/6//1//r/Zfb/m/p//b/+f9Rc+v+LLvrnO/X/+v8W+/8p+n/9v/6fM82t/8/d/8m4pZP9DwAAAD3I3f+puMX+BwAAgGbk7v903GL/AwAAQDNy938mbulk/+/s/y8YThaqJ431/9Go6f9Po//f/vn1/+PfH57/r//X/x+8ufT/nv9/dp9f/6//X/Ln31f//3c7v17/T4vm1v/n7r8zbulk/wMAAEAPcvd/Nm6x/wEAAKAZufs/F7fY/wAAANCM3P13xS2d7H/P/9f/6//1//r/8ffX/y+T/n+a/n8F/b/+3/P/L/nPP9f/sz5z6/9z938+btkafn//l2f5pwkAAADMSO7+L8Qtnfz8PwAAAPQgd/8X4xb7HwAAAJqRu/9LcUsn+1//r//X/+v/9f/j76//Xyb9/zT9/wr99P+bYy8edj9/rg778zfT/6/z+f8Pfnvq/7s2t/4/d/+X45ZO9j8AAAD0IHf/V+IW+x8AAACakbv/q3GL/Q8AAADNyN1/d9zSyf7X/+v/2+///2M2/f+wof/X/+v/D5r+P/+JPk7/v0I//f+ow+7nl/759f+e/89Oc+v/c/ffE7d0sv8BAACgB7n7vxa32P8AAADQjNz9X49b7H8AAABoxtburzSrv/2v/++r/98Yeuz/Pf9f/6//78ly+v/rjoy96vn/+n/9/3I/v/5f/89Oc+v/v7H1VZvDvRtHutz/AAAAsFT/+g//fc9ef997t367OXwzbrH/AQAAoBm5+78Vt9j/AAAA0Izc/d+OW/ay//ddFc6P/r+v/r/P5//r//X/+v+eLKf/H6f/1//r/5f7+fX/+n92mlv/n7v/O3HLacNv9P+gBwAAAFiM3P3fjVv8+n8AAABoRu7+78UtO/b/iT3+qnYAAABgbnL3fz9u6eTn//X/M+//hwPq/+P30/+fpP/X/4+9v/5/mfT/086x/z+xof/X/0/Q/+v/9f+caW79f+7+W28autz/AAAA0KhtP6Lwg63fbg4/jFvsfwAAAGhG7v4fxS32PwAAADQjd/+P45ZO9r/+f+b9/1k9//9Y/SfP/++8/79qc/T99f/6/5bp/6d5/v8K+n/9f6/9f84g/T9rto/+f2uQHnT/n7v/J3FLJ/sfAAAAepC7/6dxi/0PAAAAzcjd/7O4xf4HAACAZuTu/3nc0sn+1/8fQv9/9dFhOND+fw/P/9f/99H/7/L+7fT/f3Ph8dv//eIbr9f/c8qe+/uj4y/vp//P7wX9v/5f/3+S/n/B/b/n/3NA5vb8/9z9v4hbOtn/AAAA0IPc/ffFLfY/AAAANCN3/y/jFvsfAAAAmpG7/1dxSyf7X//f4vP/l9n/51/rQ+j/jy+v/8+muPf+3/P/9f87ef7/NP3/Cvp//b/+X//PWs2t/8/d/+u4pZP9DwAAAO069WOxuft/E7fk/t/Y9w/dAwAAADOTu/+3cYuf/wcAAIBm5O6/P27pZP/r//X/c+n/k+f/n/o6z/8/Sf+v/98P/f80/f8K+n/9v/5f/89aza3/z93/u7ilk/0PAAAAPcjd/0DcYv8DAABAM3L3/z5usf8BAACgGbn7/xC3dLL/9f/6f/2//l//P/7++v9l0v9P0/+voP/X/+v/9f+s1dz6/9z9fwoAAP//GmVn0Q==")
r0 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x80000004)

1.927828482s ago: executing program 1 (id=797):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
socket$nl_sock_diag(0x10, 0x3, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$sndseq(0xffffffffffffff9c, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300))
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x9, [@typedef={0x0, 0x0, 0x0, 0xf, 0x2}, @typedef={0x6, 0x0, 0x0, 0x12, 0x1}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0]}}, 0x0, 0x39}, 0x20)
ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000240))
write$P9_RFLUSH(0xffffffffffffffff, &(0x7f0000000000)={0x7}, 0x7)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, &(0x7f0000000240)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0x0, &(0x7f0000000000)="e06921e8682d85ff9782762f86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r5 = openat$cgroup_devices(r3, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r5, &(0x7f0000000280)=ANY=[@ANYBLOB='c *:* rwm'], 0xa)

1.006937827s ago: executing program 2 (id=798):
socket$packet(0x11, 0x3, 0x300)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58)
accept4(r0, 0x0, 0x0, 0x0)
close(r0)
socket$inet6(0xa, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
pipe(&(0x7f0000001640))
syz_open_procfs(0x0, &(0x7f0000000080)='gid_map\x00')
socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = epoll_create1(0x0)
fcntl$dupfd(r1, 0x0, r1)
epoll_create1(0x0)
epoll_create1(0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x275a, 0x0)
socket$unix(0x1, 0x5, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0))
pipe(&(0x7f0000000080))
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1)

942.115693ms ago: executing program 4 (id=799):
syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000080)='./file0\x00', 0x3808008, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x6, 0x2df, &(0x7f0000000700)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_INPUT(r0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)

827.817962ms ago: executing program 1 (id=800):
mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000080)='./bus\x00', 0x200800, &(0x7f0000000680)=ANY=[@ANYBLOB='dmask=00000000000000000000004,iocharset=cp737,allow_utime=00000000000000000000006,dmask=00000000000000000000011,uid=', @ANYRESHEX=0x0, @ANYBLOB=',errors=remount-ro,allow_utime=00000000000000000000001,discard,discard,dmask=00000000000000000000002,smackfsfloor=iocharset,fowner>', @ANYRESOCT, @ANYBLOB="01105b4e3678684895c48ddc295ff5b35ee2aea6f6d5aec39a4f7a46712f29977aca5268721559904b5123461e0d81b1d48d3ea4ca8b410a4b00e4b1b83018d0672589e8ff8145c2647a7097259c8fc053ce83f29a9941921a0e87ea41a9d39ce160792e9b2c1a"], 0x2, 0x1518, &(0x7f00000037c0)="$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")
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000140), 0x4)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000040), 0x4)

744.149859ms ago: executing program 2 (id=801):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x58, 0x0, 0x1, 0x0, 0x0, {0x3, 0x74, 0x600}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gre0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x7}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}]}, 0x58}, 0x1, 0xffffffff00000003}, 0x0)

660.855165ms ago: executing program 2 (id=802):
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0xfff20004}, {0x8b54}]}, 0x10)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000})
ioctl$KVM_NMI(r3, 0xae9a)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)

532.149636ms ago: executing program 4 (id=803):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xb8, 0xc0, 0x7d, 0x40, 0xc45, 0x8001, 0x900a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x80, 0x82, 0x99}}]}}]}}, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f00000001c0)={0x0, 0x0, 0x1, "7f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@gettaction={0xa0, 0x32, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x6}, @action_gd=@TCA_ACT_TAB={0x6c, 0x1, [{0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x14, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x6}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20000810}, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f00000039c0)={{0x12, 0x1, 0x0, 0xe3, 0xa2, 0xde, 0x10, 0x5ac, 0x243, 0x81d0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0xb8, 0x2}}]}}]}}, 0x0)
r2 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c)
listen(r2, 0x80080400)
r3 = socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(r3, &(0x7f00000000c0)={0x2, 0x4e20, @remote}, 0x10)
prlimit64(0x0, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x0, 0x0)
r4 = gettid()
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
read(r5, &(0x7f0000000200)=""/209, 0xd1)
socket$inet_udplite(0x2, 0x2, 0x88)
setuid(0x0)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, &(0x7f0000000080))
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000300)={0x0, 0x0, 0x0, 'queue1\x00'})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r5, 0xc08c5334, &(0x7f0000000400))
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x402c5342, &(0x7f00000000c0))
tkill(r4, 0x7)
ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0x0)
getsockopt$inet_int(r3, 0x10d, 0xd5, &(0x7f0000000000), &(0x7f0000000080)=0x4)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_NAME_TABLE_GET(r2, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0x98, r6, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xdf24}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xb739aba}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2e}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x40}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffff2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x400}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4001}, 0x0)
syz_usb_control_io$printer(r0, &(0x7f0000000000)={0x14, &(0x7f00000000c0)={0x20, 0x8, 0xaf, {0xaf, 0x8, "f7853896865c501bd0b6b95e600c6b2368a5989921c3e7f2f4d9cab0913f1dcc6884513eb9e97a08087595ed9238a0f6071fd7fc1c84de96c2bd6460c3ab189967006e8ea5746f1a13f77f7fdc0cfcc25fce5c8723f3caf90757f05f5a6e2394591d6faaed6a981d1f58a5d5c96ccd5e26d28ff4cae3fcf2d461cf5cd443ef7f7692393efcf2ae0136a56877c18baa940db0df14e0894ddcb7e5ef767330280127fe7c435d92e04418fcb64aa2"}}, &(0x7f0000000200)={0x0, 0x3, 0x93, @string={0x93, 0x3, "2236e274e212f0577d6740fcd906162f2b0f8cc232e6b9b3322ede940be4fac607c9a32ecd508c3d26eb86403eba949554b35f6352992b9f436dc2ef2e719676a464de924c0adb3334039c68d0df77e172847b38468708652e811cc9278a997e7cf9242d42c1ad0b7dfa54e40b5acdb1197f24f6f900e1e3e80438380992ae6867f90afbc032ee644c700d5eb34bc18692"}}}, &(0x7f0000000480)={0x34, &(0x7f00000002c0)={0x20, 0x5, 0x81, "ba83f95eefd64b10ac926f6785c542d57c79d61170cbf625f82d66281413e175998667126dff05d35127b6b706189625a62edbe362e9a224c5e5806c3f78a477d337c06556e078985ff244e6306a2e18b8ba74e566dcde2b0c90206b4924a59e953a8aab7b1425e6162a33882e0f6e1245eef6616df2a35574841958ff9791d227"}, &(0x7f0000000040)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000180)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000380)={0x20, 0x0, 0x76, {0x74, "a82837f7a4598eb2e17a23250a9024b990b2cbb11666ec59539482e44f7c2d5342fc14acb365d2f120a4f32ed8dff27f34a127c7f6962b1543a98c9d82b9643a0c9bf3dd0d79d76dc57e19d04d54fe27d511ffd348faf3b512ab7ad863e1d40ce0ec6a62be79f0f2203fedd77a0673267105e934"}}, &(0x7f0000000400)={0x20, 0x1, 0x1, 0x5}, &(0x7f0000000440)={0x20, 0x0, 0x1, 0x5}})

487.94397ms ago: executing program 3 (id=804):
epoll_create(0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x1, 0x40, 0x40}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r0}, 0x38)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000b80)={r0, &(0x7f0000000a80), &(0x7f0000000b40)=""/31}, 0x20)

79.962333ms ago: executing program 2 (id=805):
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket(0x2, 0x2, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$alg(0x26, 0x5, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x3, 0x0)
r1 = dup(r0)
write$UHID_INPUT(r1, &(0x7f0000001040)={0x9, {"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", 0x1000}}, 0x1006)
syz_open_procfs(0x0, &(0x7f00000000c0)='timerslack_ns\x00')
pipe(&(0x7f0000000100))
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x1, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="7dbf230d000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB='\n\x00'], 0x64}}, 0x0)

57.608235ms ago: executing program 0 (id=806):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000a80)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x1c, {0x2, 0x0, @remote}, 'team_slave_0\x00'})
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00')
ioctl$sock_inet_sctp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
getpid()
sched_setscheduler(0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x0, 0x0)
io_submit(0x0, 0x0, 0x0)
preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000200)=""/218, 0xda}], 0x1, 0xffff, 0x0)

0s ago: executing program 3 (id=807):
syz_open_dev$video4linux(&(0x7f0000000080), 0x2, 0x0)
ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc040564a, &(0x7f0000000140)={0x0, 0x1, @value=0x1014})

kernel console output (not intermixed with test programs):

(loop2): 1 orphan inode deleted
[  125.517235][ T4698] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  125.953874][ T4679] loop1: detected capacity change from 0 to 32768
[  126.218437][ T4679] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.305 (4679)
[  126.301879][ T3548] EXT4-fs (loop2): unmounting filesystem.
[  126.356836][ T4679] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  126.434162][ T3551] EXT4-fs (loop0): unmounting filesystem.
[  126.444693][ T4679] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  126.513857][ T4679] BTRFS info (device loop1): using free space tree
[  126.669497][ T4708] loop2: detected capacity change from 0 to 2048
[  126.692550][ T4708] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  126.729155][ T4721] loop3: detected capacity change from 0 to 256
[  126.857584][ T4679] BTRFS info (device loop1): enabling ssd optimizations
[  126.860214][ T4721] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  126.891755][ T3595] usb 5-1: new full-speed USB device number 7 using dummy_hcd
[  126.956935][ T3549] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  127.255915][ T3595] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  127.274946][ T3595] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4
[  127.307647][ T3595] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4
[  127.401266][ T4749] loop3: detected capacity change from 0 to 512
[  127.453049][ T4749] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  127.473465][ T4749] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038 (0x7fffffff)
[  127.683339][   T32] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  127.691769][ T3595] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  127.703270][ T3595] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  127.712014][ T3595] usb 5-1: Product: syz
[  127.716218][ T3595] usb 5-1: Manufacturer: syz
[  127.720839][ T3595] usb 5-1: SerialNumber: syz
[  128.022025][ T3596] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  128.071921][   T32] usb 2-1: Using ep0 maxpacket: 8
[  128.168014][ T4710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  128.185196][ T4710] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  128.202016][   T32] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  128.212678][   T32] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  128.292388][   T32] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024
[  128.294966][ T4239] EXT4-fs (loop3): unmounting filesystem.
[  128.304438][   T32] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  128.320434][   T32] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  128.334683][   T32] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  128.347151][   T32] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  128.428673][ T4767] loop3: detected capacity change from 0 to 2048
[  128.453000][ T3595] usb 5-1: 2:1 : unknown format tag 0x0 is detected.  processed as MPEG.
[  128.455461][ T4767] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  128.462723][ T3596] usb 1-1: New USB device found, idVendor=59cc, idProduct=980d, bcdDevice=b4.8e
[  128.481836][ T3600] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  128.490571][ T3595] usb 5-1: found format II with max.bitrate = 0, frame size=0
[  128.498758][ T3596] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  128.517532][ T3595] usb 5-1: 2:1 : unknown format tag 0x0 is detected.  processed as MPEG.
[  128.528690][ T3596] usb 1-1: config 0 descriptor??
[  128.534020][ T3595] usb 5-1: found format II with max.bitrate = 0, frame size=0
[  128.582888][ T3596] usb-storage 1-1:0.0: USB Mass Storage device detected
[  128.617813][   T32] usb 2-1: GET_CAPABILITIES returned 0
[  128.629669][   T32] usbtmc 2-1:16.0: can't read capabilities
[  128.706596][ T3595] usb 5-1: USB disconnect, device number 7
[  128.752391][ T3600] usb 3-1: Using ep0 maxpacket: 16
[  128.838105][ T3928] usb 1-1: USB disconnect, device number 4
[  129.412035][ T3595] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  129.591981][ T3599] usb 2-1: USB disconnect, device number 4
[  129.812405][ T3595] usb 5-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a
[  129.848338][ T3600] usb 3-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89
[  129.857536][ T3600] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  129.865608][ T3600] usb 3-1: Product: syz
[  129.866131][ T3595] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  129.869769][ T3600] usb 3-1: Manufacturer: syz
[  129.883044][ T3600] usb 3-1: SerialNumber: syz
[  129.904196][ T3595] usb 5-1: config 0 descriptor??
[  129.910679][ T3600] usb 3-1: config 0 descriptor??
[  129.964026][ T3595] gspca_main: sn9c2028-2.14.0 probing 0c45:8001
[  129.967149][ T3600] appledisplay 3-1:0.0: Could not find int-in endpoint
[  129.968052][ T3600] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[  130.222224][ T3600] usb 3-1: USB disconnect, device number 6
[  130.254399][ T4788] loop1: detected capacity change from 0 to 256
[  130.284672][ T4788] exFAT-fs (loop1): failed to load alloc-bitmap
[  130.292671][ T4788] exFAT-fs (loop1): failed to recognize exfat type
[  130.383115][ T4775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  130.413089][ T4775] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  130.703268][ T3595] gspca_sn9c2028: read1 error -110
[  130.721790][ T3595] gspca_sn9c2028: read1 error -32
[  130.726985][ T3599] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  130.736130][ T3595] sn9c2028: probe of 5-1:0.0 failed with error -32
[  130.981780][ T3599] usb 3-1: Using ep0 maxpacket: 8
[  131.000142][ T4798] loop0: detected capacity change from 0 to 40427
[  131.037979][ T4798] F2FS-fs (loop0): invalid crc value
[  131.109922][ T4798] F2FS-fs (loop0): Found nat_bits in checkpoint
[  131.228689][ T4798] F2FS-fs (loop0): Cannot turn on quotas: -2 on 0
[  131.244502][ T4798] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  131.259671][ T3599] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  131.268382][ T3599] usb 3-1: config 0 has no interface number 0
[  131.275283][ T3599] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  131.296640][ T3599] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  131.309281][ T3599] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  131.490911][ T3599] usb 3-1: config 0 descriptor??
[  132.072100][ T3599] usb 3-1: can't set config #0, error -71
[  132.078826][ T3928] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  132.097481][ T3599] usb 3-1: USB disconnect, device number 7
[  132.139918][ T3551] syz-executor: attempt to access beyond end of device
[  132.139918][ T3551] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  132.189548][   T32] usb 5-1: USB disconnect, device number 8
[  132.482134][ T3928] usb 4-1: New USB device found, idVendor=59cc, idProduct=980d, bcdDevice=b4.8e
[  132.514099][ T3928] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  132.602829][ T3928] usb 4-1: config 0 descriptor??
[  132.635942][ T1255] ieee802154 phy0 wpan0: encryption failed: -22
[  132.642355][ T1255] ieee802154 phy1 wpan1: encryption failed: -22
[  132.677326][ T3928] usb-storage 4-1:0.0: USB Mass Storage device detected
[  133.243217][ T4835] loop4: detected capacity change from 0 to 2048
[  133.305642][ T4835] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  133.506635][ T3928] usb 4-1: USB disconnect, device number 4
[  133.701614][ T3930] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  133.742072][ T3600] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  134.778501][ T4854] loop3: detected capacity change from 0 to 256
[  134.784962][ T3600] usb 1-1: Using ep0 maxpacket: 8
[  134.872155][ T3930] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  134.891048][ T4858] loop4: detected capacity change from 0 to 256
[  134.898942][ T4858] exfat: Deprecated parameter 'namecase'
[  134.927663][ T3930] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  134.941997][ T3600] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  134.952960][ T3600] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  134.980946][ T4858] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d)
[  135.002792][ T3930] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  135.036321][ T3600] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024
[  135.062990][ T3930] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  135.076302][ T3600] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  135.885936][ T3930] usb 2-1: config 0 descriptor??
[  135.891101][ T3600] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  135.904672][ T3930] usb 2-1: can't set config #0, error -71
[  135.921728][ T3600] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  135.931473][ T3600] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  135.941223][ T3930] usb 2-1: USB disconnect, device number 5
[  135.998011][ T4866] loop1: detected capacity change from 0 to 512
[  136.083836][ T4074] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  136.221841][ T3600] usb 1-1: GET_CAPABILITIES returned 0
[  136.227393][ T3600] usbtmc 1-1:16.0: can't read capabilities
[  136.411047][ T4876] loop4: detected capacity change from 0 to 2048
[  136.476882][ T4876] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  136.521753][  T152] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  136.679712][ T4879] netlink: 48 bytes leftover after parsing attributes in process `syz.4.364'.
[  136.959225][ T3930] usb 1-1: USB disconnect, device number 5
[  137.052132][  T152] usb 2-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a
[  137.132873][  T152] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  137.416239][  T152] usb 2-1: config 0 descriptor??
[  137.582653][  T152] gspca_main: sn9c2028-2.14.0 probing 0c45:8001
[  137.990751][ T4870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  138.007045][ T4870] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  138.027003][   T26] kauditd_printk_skb: 43 callbacks suppressed
[  138.027018][   T26] audit: type=1326 audit(1720782341.877:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4893 comm="syz.2.370" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4f72375bd9 code=0x0
[  138.301852][  T152] gspca_sn9c2028: read1 error -110
[  138.322014][  T152] gspca_sn9c2028: read1 error -32
[  138.424697][  T152] sn9c2028: probe of 2-1:0.0 failed with error -32
[  139.002448][ T4910] loop2: detected capacity change from 0 to 1024
[  139.009716][ T4910] hfsplus: unable to parse mount options
[  139.726451][   T14] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  140.416771][   T14] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  140.457251][   T14] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  140.497735][ T4923] loop4: detected capacity change from 0 to 512
[  140.497861][   T14] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  140.512554][ T4925] netlink: 48 bytes leftover after parsing attributes in process `syz.0.376'.
[  140.529940][   T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  140.570413][   T14] usb 4-1: config 0 descriptor??
[  140.605176][ T4923] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  140.621729][ T4923] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038 (0x7fffffff)
[  140.927913][ T3595] usb 2-1: USB disconnect, device number 6
[  141.014140][ T3600] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  141.022969][   T14] usbhid 4-1:0.0: can't add hid device: -71
[  141.036526][   T14] usbhid: probe of 4-1:0.0 failed with error -71
[  141.095357][   T14] usb 4-1: USB disconnect, device number 5
[  141.311673][ T3600] usb 1-1: Using ep0 maxpacket: 8
[  141.402294][ T4936] loop3: detected capacity change from 0 to 1024
[  141.441718][ T3600] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  141.467948][ T3600] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  141.497310][ T3600] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024
[  141.533342][ T3600] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  141.560853][ T3600] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  141.619027][ T3600] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  141.641442][ T3600] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  141.663855][ T4248] EXT4-fs (loop4): unmounting filesystem.
[  141.937135][ T4936] process 'syz.3.378' launched './file1' with NULL argv: empty string added
[  141.951716][ T3600] usb 1-1: GET_CAPABILITIES returned 0
[  141.957323][ T3600] usbtmc 1-1:16.0: can't read capabilities
[  142.097736][ T4945] hfsplus: keylen 65060 too large
[  142.108550][ T4945] hfsplus: xattr search failed
[  142.668224][ T3595] usb 1-1: USB disconnect, device number 6
[  142.682472][ T3599] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  143.271821][ T3599] usb 3-1: New USB device found, idVendor=59cc, idProduct=980d, bcdDevice=b4.8e
[  143.280906][ T3599] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  145.177875][ T3599] usb 3-1: config 0 descriptor??
[  145.502761][ T3599] usb-storage 3-1:0.0: USB Mass Storage device detected
[  145.747488][ T3599] usb 3-1: USB disconnect, device number 8
[  146.201649][   T14] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  146.521796][   T14] usb 4-1: Using ep0 maxpacket: 8
[  146.671687][   T14] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  146.724034][   T14] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  146.801755][   T14] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024
[  146.839468][   T14] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  146.860989][   T14] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  146.901664][   T14] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  146.917597][   T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  147.231820][   T14] usb 4-1: GET_CAPABILITIES returned 0
[  147.237372][   T14] usbtmc 4-1:16.0: can't read capabilities
[  148.323919][ T4981] loop0: detected capacity change from 0 to 40427
[  148.387089][ T5010] loop2: detected capacity change from 0 to 1024
[  148.408598][ T4981] F2FS-fs (loop0): invalid crc value
[  148.463089][ T4981] F2FS-fs (loop0): Found nat_bits in checkpoint
[  148.541841][ T4981] F2FS-fs (loop0): Cannot turn on quotas: -2 on 0
[  148.561542][ T4981] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  148.690164][ T5010] hfsplus: keylen 65060 too large
[  148.700983][ T5010] hfsplus: xattr search failed
[  148.779212][  T152] usb 4-1: USB disconnect, device number 6
[  149.967106][ T5016] loop4: detected capacity change from 0 to 32768
[  150.234439][ T5016] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.409 (5016)
[  150.592112][ T5016] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  150.645012][ T5016] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  150.661788][ T5016] BTRFS info (device loop4): using free space tree
[  151.570046][ T5016] BTRFS error (device loop4): open_ctree failed
[  152.081596][   T14] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  152.193182][ T3599] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  152.333159][   T14] usb 2-1: Using ep0 maxpacket: 32
[  152.447299][ T3599] usb 4-1: Using ep0 maxpacket: 8
[  152.574042][ T3599] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  152.596441][ T3599] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  152.611675][ T3935] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  152.628115][ T3599] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024
[  152.641263][ T3599] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  152.652005][   T14] usb 2-1: New USB device found, idVendor=05ac, idProduct=0217, bcdDevice=4f.f0
[  152.660063][ T3599] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  152.681417][   T14] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  152.681793][ T3599] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  152.691566][   T14] usb 2-1: Product: syz
[  152.707290][ T3599] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  152.731578][   T14] usb 2-1: Manufacturer: syz
[  152.741592][   T14] usb 2-1: SerialNumber: syz
[  152.772124][   T14] usb 2-1: config 0 descriptor??
[  152.820367][ T5074] loop4: detected capacity change from 0 to 40427
[  152.825451][   T14] appletouch 2-1:0.0: Could not find int-in endpoint
[  152.847901][ T5074] F2FS-fs (loop4): invalid crc value
[  152.857226][   T14] appletouch: probe of 2-1:0.0 failed with error -5
[  152.869503][ T5074] F2FS-fs (loop4): Found nat_bits in checkpoint
[  152.901685][   T14] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  152.963127][ T5074] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0
[  152.984470][ T5074] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[  152.992515][ T3599] usb 4-1: GET_CAPABILITIES returned 0
[  153.011883][ T3599] usbtmc 4-1:16.0: can't read capabilities
[  153.060834][   T14] usb 2-1: USB disconnect, device number 7
[  153.190383][ T3935] usb 3-1: New USB device found, idVendor=0a21, idProduct=8001, bcdDevice=f0.bb
[  153.221790][ T3935] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  153.240831][ T3935] usb 3-1: Product: syz
[  153.245233][ T3935] usb 3-1: Manufacturer: syz
[  153.249932][ T3935] usb 3-1: SerialNumber: syz
[  153.320024][ T3935] usb 3-1: config 0 descriptor??
[  153.373458][ T3935] usb_serial_simple 3-1:0.0: carelink converter detected
[  153.397436][ T3935] usb 3-1: carelink converter now attached to ttyUSB0
[  153.706797][ T3602] usb 3-1: USB disconnect, device number 9
[  153.724806][ T3602] carelink ttyUSB0: carelink converter now disconnected from ttyUSB0
[  153.749549][ T3602] usb_serial_simple 3-1:0.0: device disconnected
[  154.289847][ T3600] usb 4-1: USB disconnect, device number 7
[  156.585365][ T3557] Bluetooth: hci0: SCO packet for unknown connection handle 0
[  157.775899][ T5115] loop4: detected capacity change from 0 to 32768
[  157.872735][ T5115] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.434 (5115)
[  157.983786][ T5115] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  158.002128][ T5115] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  158.011029][ T5115] BTRFS info (device loop4): using free space tree
[  159.896068][ T5115] BTRFS error (device loop4): open_ctree failed
[  160.032086][ T3935] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  160.253825][  T152] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  160.451615][ T3935] usb 1-1: Using ep0 maxpacket: 32
[  160.461753][ T5126] loop1: detected capacity change from 0 to 40427
[  160.501756][  T152] usb 3-1: Using ep0 maxpacket: 8
[  160.514268][ T5126] F2FS-fs (loop1): invalid crc value
[  160.642381][  T152] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  160.672325][ T5126] F2FS-fs (loop1): Found nat_bits in checkpoint
[  160.700621][  T152] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  160.843689][  T152] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024
[  161.044199][  T152] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  161.121736][  T152] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  161.162083][  T152] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  161.190076][ T5126] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0
[  161.201204][  T152] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  161.381577][ T3327] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  161.552547][ T3935] usb 1-1: New USB device found, idVendor=05ac, idProduct=0217, bcdDevice=4f.f0
[  161.581742][ T3935] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  161.609253][ T3935] usb 1-1: Product: syz
[  161.613516][ T3935] usb 1-1: Manufacturer: syz
[  161.618142][ T3935] usb 1-1: SerialNumber: syz
[  161.653790][ T3935] usb 1-1: config 0 descriptor??
[  161.693606][ T3935] appletouch 1-1:0.0: Could not find int-in endpoint
[  161.710616][ T3935] appletouch: probe of 1-1:0.0 failed with error -5
[  161.726797][ T5169] loop3: detected capacity change from 0 to 32768
[  161.729609][ T3935] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[  161.752110][ T3327] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  161.761437][ T5169] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.447 (5169)
[  161.771619][ T3327] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  161.808354][ T3327] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  161.831965][ T3327] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  161.871826][ T5169] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  161.892067][ T5169] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm
[  161.915836][ T3935] usb 1-1: USB disconnect, device number 7
[  161.921894][ T5169] BTRFS info (device loop3): force zlib compression, level 3
[  161.929318][ T5169] BTRFS info (device loop3): force clearing of disk cache
[  161.937467][ T3327] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  161.963037][ T3327] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  161.971175][ T3327] usb 5-1: Manufacturer: syz
[  161.981727][ T5169] BTRFS info (device loop3): setting nodatasum
[  161.987949][ T5169] BTRFS info (device loop3): allowing degraded mounts
[  161.999905][ T3327] usb 5-1: config 0 descriptor??
[  162.021580][ T5169] BTRFS info (device loop3): enabling disk space caching
[  162.028663][ T5169] BTRFS info (device loop3): disk space caching is enabled
[  162.071887][  T152] usb 3-1: usb_control_msg returned -71
[  162.077554][  T152] usbtmc 3-1:16.0: can't read capabilities
[  162.127766][  T152] usb 3-1: USB disconnect, device number 10
[  162.302967][ T5169] BTRFS info (device loop3): rebuilding free space tree
[  162.328518][ T5202] vcan0: tx drop: invalid da for name 0x00000000000000c7
[  162.346462][ T5169] BTRFS info (device loop3): disabling free space tree
[  162.369667][ T5169] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  162.415850][ T5169] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  162.475607][ T3327] appleir 0003:05AC:8243.0001: unknown main item tag 0x0
[  162.503354][ T3327] appleir 0003:05AC:8243.0001: No inputs registered, leaving
[  163.777087][ T3327] appleir 0003:05AC:8243.0001: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0
[  163.884121][ T3327] usb 5-1: USB disconnect, device number 9
[  163.888780][ T4239] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  164.671749][ T5214] loop0: detected capacity change from 0 to 32768
[  164.688556][ T5214] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.453 (5214)
[  164.727005][ T5214] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  164.747493][ T5214] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  164.765083][ T5226] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  164.768382][ T5214] BTRFS info (device loop0): using free space tree
[  164.900716][ T5220] loop2: detected capacity change from 0 to 40427
[  164.919640][ T5220] F2FS-fs (loop2): invalid crc value
[  164.925982][ T5214] BTRFS info (device loop0): enabling ssd optimizations
[  164.953440][ T5220] F2FS-fs (loop2): Found nat_bits in checkpoint
[  165.011706][ T5226] usb 4-1: Using ep0 maxpacket: 32
[  165.032791][ T5220] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0
[  165.040177][ T5220] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[  165.081097][ T3551] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  165.132594][ T5226] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36
[  165.479334][ T5226] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c
[  165.492122][ T5226] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  165.500433][ T5226] usb 4-1: Product: syz
[  165.505258][ T5226] usb 4-1: Manufacturer: syz
[  165.510459][ T5226] usb 4-1: SerialNumber: syz
[  165.520617][ T5226] usb 4-1: config 0 descriptor??
[  165.615637][ T5240] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  165.730855][ T5226] hub 4-1:0.0: bad descriptor, ignoring hub
[  165.753877][ T5226] hub: probe of 4-1:0.0 failed with error -5
[  165.923702][ T5226] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input10
[  165.973960][ T5240] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  166.185716][ T5240] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  166.375536][ T5268] usb 4-1: USB disconnect, device number 8
[  166.391594][    C1] usbtouchscreen 4-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19
[  166.391770][ T3557] Bluetooth: hci0: command 0x0c20 tx timeout
[  166.827862][ T5271] loop4: detected capacity change from 0 to 32768
[  166.845625][ T5271] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 scanned by syz.4.467 (5271)
[  166.874628][ T5271] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  166.886544][ T5226] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  166.920281][ T5271] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm
[  166.960815][ T5271] BTRFS info (device loop4): force zlib compression, level 3
[  167.001434][ T5271] BTRFS info (device loop4): force clearing of disk cache
[  167.022050][ T5271] BTRFS info (device loop4): setting nodatasum
[  167.034728][ T5271] BTRFS info (device loop4): allowing degraded mounts
[  167.043592][ T5271] BTRFS info (device loop4): enabling disk space caching
[  167.061633][ T5271] BTRFS info (device loop4): disk space caching is enabled
[  167.141670][ T5226] usb 1-1: Using ep0 maxpacket: 32
[  167.269240][ T5271] BTRFS info (device loop4): rebuilding free space tree
[  167.301889][ T5268] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  167.305978][ T5271] BTRFS info (device loop4): disabling free space tree
[  167.323309][ T5271] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  167.333871][ T5271] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  167.371117][ T5317] netlink: 48 bytes leftover after parsing attributes in process `syz.2.477'.
[  167.431858][ T5226] usb 1-1: New USB device found, idVendor=05ac, idProduct=0217, bcdDevice=4f.f0
[  167.440951][ T5226] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  167.459457][ T5226] usb 1-1: Product: syz
[  167.468059][ T5226] usb 1-1: Manufacturer: syz
[  167.473023][ T5226] usb 1-1: SerialNumber: syz
[  167.479609][ T5226] usb 1-1: config 0 descriptor??
[  167.523506][ T5226] appletouch 1-1:0.0: Could not find int-in endpoint
[  167.540562][ T5226] appletouch: probe of 1-1:0.0 failed with error -5
[  167.571006][ T5226] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[  167.839579][ T5226] usb 1-1: USB disconnect, device number 8
[  167.872088][ T5268] usb 4-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a
[  167.914563][ T5268] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  167.988916][ T5268] usb 4-1: config 0 descriptor??
[  168.065203][ T5268] gspca_main: sn9c2028-2.14.0 probing 0c45:8001
[  168.185852][ T4248] BTRFS info (device loop4): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  168.472636][ T3557] Bluetooth: hci0: command 0x0c20 tx timeout
[  168.483850][ T5294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  168.502543][ T5294] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  168.781692][ T5268] gspca_sn9c2028: read1 error -71
[  168.787592][ T5268] sn9c2028: probe of 4-1:0.0 failed with error -71
[  168.826713][ T5268] usb 4-1: USB disconnect, device number 9
[  169.946519][ T5351] netlink: 48 bytes leftover after parsing attributes in process `syz.3.488'.
[  170.476376][ T5353] loop1: detected capacity change from 0 to 32768
[  170.500277][ T5353] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.490 (5353)
[  170.550817][ T5353] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  170.581600][ T3935] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  170.591252][ T5353] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm
[  170.609014][ T5353] BTRFS info (device loop1): force zlib compression, level 3
[  170.616497][ T5353] BTRFS info (device loop1): force clearing of disk cache
[  170.645039][ T5353] BTRFS info (device loop1): setting nodatasum
[  170.651257][ T5353] BTRFS info (device loop1): allowing degraded mounts
[  170.667291][ T5353] BTRFS info (device loop1): enabling disk space caching
[  170.677072][ T5353] BTRFS info (device loop1): disk space caching is enabled
[  170.792355][ T3599] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  170.835901][ T5376] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  170.875079][ T3557] Bluetooth: hci3: unexpected event 0x01 length: 6 > 1
[  170.876669][ T5376] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  170.906061][ T5353] BTRFS info (device loop1): rebuilding free space tree
[  170.919815][ T5353] BTRFS info (device loop1): disabling free space tree
[  170.927324][ T5353] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  170.937499][ T5353] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  170.951469][ T5388] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  170.981815][ T5268] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  170.986298][ T3935] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  171.010903][ T3935] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  171.026424][ T3935] usb 4-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.00
[  171.041233][ T3935] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  171.041867][ T3599] usb 3-1: Using ep0 maxpacket: 32
[  171.106698][ T3935] usb 4-1: config 0 descriptor??
[  171.372601][ T3935] appletouch 4-1:0.0: Failed to read mode from device.
[  171.389223][ T3935] appletouch: probe of 4-1:0.0 failed with error -5
[  171.426805][ T3935] usb 4-1: USB disconnect, device number 10
[  171.743977][ T3549] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  171.905274][ T5268] usb 5-1: New USB device found, idVendor=59cc, idProduct=980d, bcdDevice=b4.8e
[  171.915018][ T5268] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  171.932490][ T5268] usb 5-1: config 0 descriptor??
[  171.942105][ T3599] usb 3-1: New USB device found, idVendor=05ac, idProduct=0217, bcdDevice=4f.f0
[  171.951189][ T3599] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  171.969652][ T3599] usb 3-1: Product: syz
[  171.975175][ T5268] usb-storage 5-1:0.0: USB Mass Storage device detected
[  171.982601][ T3599] usb 3-1: Manufacturer: syz
[  171.987250][ T3599] usb 3-1: SerialNumber: syz
[  172.000440][ T3599] usb 3-1: config 0 descriptor??
[  172.043460][ T3599] appletouch 3-1:0.0: Could not find int-in endpoint
[  172.065099][ T3599] appletouch: probe of 3-1:0.0 failed with error -5
[  172.082573][ T3599] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[  172.260769][   T14] usb 3-1: USB disconnect, device number 11
[  172.315230][ T3928] usb 5-1: USB disconnect, device number 10
[  173.636549][ T5419] loop4: detected capacity change from 0 to 256
[  173.927787][ T5425] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  173.958687][ T4077] kworker/u4:10: attempt to access beyond end of device
[  173.958687][ T4077] loop4: rw=1, sector=256, nr_sectors = 12 limit=256
[  174.080893][ T3557] Bluetooth: hci2: unexpected event 0x01 length: 6 > 1
[  174.088514][ T5429] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  174.202382][ T5429] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  175.482038][ T5268] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  175.651645][ T3935] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  175.721657][ T5268] usb 5-1: Using ep0 maxpacket: 32
[  175.722190][ T5404] netlink: 48 bytes leftover after parsing attributes in process `syz.3.501'.
[  176.009789][ T5454] loop1: detected capacity change from 0 to 256
[  176.016799][ T5268] usb 5-1: New USB device found, idVendor=05ac, idProduct=0217, bcdDevice=4f.f0
[  176.050975][ T5268] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  176.088504][ T5268] usb 5-1: Product: syz
[  176.097774][ T5268] usb 5-1: Manufacturer: syz
[  176.291935][ T3935] usb 3-1: New USB device found, idVendor=59cc, idProduct=980d, bcdDevice=b4.8e
[  176.630394][ T3935] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  176.856151][ T5268] usb 5-1: SerialNumber: syz
[  176.867248][ T5268] usb 5-1: config 0 descriptor??
[  176.913341][ T5268] appletouch 5-1:0.0: Could not find int-in endpoint
[  176.920177][ T5268] appletouch: probe of 5-1:0.0 failed with error -5
[  176.945142][ T3935] usb 3-1: config 0 descriptor??
[  176.945820][ T5268] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[  177.014006][ T3935] usb-storage 3-1:0.0: USB Mass Storage device detected
[  177.025397][ T4077] kworker/u4:10: attempt to access beyond end of device
[  177.025397][ T4077] loop1: rw=1, sector=256, nr_sectors = 12 limit=256
[  177.160202][ T3935] usb 5-1: USB disconnect, device number 11
[  177.285744][   T14] usb 3-1: USB disconnect, device number 12
[  177.503543][ T3557] Bluetooth: hci3: unexpected event for opcode 0x200a
[  177.591721][ T3928] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  178.121638][ T3928] usb 2-1: Using ep0 maxpacket: 8
[  178.252218][ T3928] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  178.295664][ T3928] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  178.438677][ T3928] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024
[  178.581606][ T3928] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  178.608112][ T3928] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  178.630148][ T3928] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  178.664445][ T3928] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  178.682657][ T5483] netlink: 48 bytes leftover after parsing attributes in process `syz.2.528'.
[  178.979030][ T5491] loop0: detected capacity change from 0 to 512
[  179.133714][ T5491] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  179.145896][ T3928] usb 2-1: GET_CAPABILITIES returned 0
[  179.152022][ T3928] usbtmc 2-1:16.0: can't read capabilities
[  179.152732][ T5494] loop2: detected capacity change from 0 to 256
[  180.016466][ T5491] EXT4-fs error (device loop0): mb_free_blocks:1815: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt.
[  180.048198][ T5491] EXT4-fs (loop0): Remounting filesystem read-only
[  180.067288][ T5491] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.532: invalid indirect mapped block 1 (level 1)
[  180.138392][ T5491] EXT4-fs (loop0): 1 truncate cleaned up
[  180.148511][ T5491] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  180.161322][ T4077] kworker/u4:10: attempt to access beyond end of device
[  180.161322][ T4077] loop2: rw=1, sector=256, nr_sectors = 12 limit=256
[  180.196019][ T5491] EXT4-fs error (device loop0): __ext4_iget:5044: inode #13: block 7962: comm syz.0.532: invalid block
[  180.268160][ T5491] EXT4-fs (loop0): Remounting filesystem read-only
[  180.348812][ T3551] EXT4-fs (loop0): unmounting filesystem.
[  180.452141][ T5268] usb 2-1: USB disconnect, device number 8
[  180.621883][ T5265] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  180.651938][ T3599] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  180.736458][ T3557] Bluetooth: hci3: unexpected event for opcode 0x200a
[  180.876614][ T5265] usb 4-1: Using ep0 maxpacket: 32
[  181.022136][ T3599] usb 5-1: New USB device found, idVendor=59cc, idProduct=980d, bcdDevice=b4.8e
[  181.035720][ T3599] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  181.064127][ T3599] usb 5-1: config 0 descriptor??
[  181.104539][ T5527] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  181.116271][ T3599] usb-storage 5-1:0.0: USB Mass Storage device detected
[  181.130244][ T3557] Bluetooth: hci2: unexpected event 0x01 length: 6 > 1
[  181.132676][ T5527] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  181.161928][ T5265] usb 4-1: New USB device found, idVendor=05ac, idProduct=0217, bcdDevice=4f.f0
[  181.178411][ T5265] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  181.188018][ T5265] usb 4-1: Product: syz
[  181.199705][ T5265] usb 4-1: Manufacturer: syz
[  181.210135][ T5527] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  181.211816][ T3928] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  181.234390][ T5265] usb 4-1: SerialNumber: syz
[  181.258018][ T5265] usb 4-1: config 0 descriptor??
[  181.303111][ T5265] appletouch 4-1:0.0: Could not find int-in endpoint
[  181.311002][ T5265] appletouch: probe of 4-1:0.0 failed with error -5
[  181.327481][ T5265] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[  181.369115][ T5265] usb 5-1: USB disconnect, device number 12
[  181.501644][ T3928] usb 3-1: Using ep0 maxpacket: 32
[  181.516318][ T3935] usb 4-1: USB disconnect, device number 11
[  181.631791][ T3928] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  181.644697][ T5531] fuse: Invalid rootmode
[  181.821949][ T3928] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  181.861666][ T3928] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  181.892648][ T3928] usb 3-1: Product: syz
[  181.896978][ T3928] usb 3-1: Manufacturer: syz
[  181.910878][ T3928] usb 3-1: SerialNumber: syz
[  181.937160][ T3928] usb 3-1: config 0 descriptor??
[  181.971981][ T5525] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  182.281806][ T5545] program syz.4.552 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  182.461662][ T3928] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  182.711735][ T3928] usb 4-1: Using ep0 maxpacket: 8
[  182.843230][ T3928] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  182.859175][ T3928] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  182.884037][ T3928] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024
[  182.907971][ T3928] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  182.930864][ T3928] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  182.959558][ T3928] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  182.979046][ T3928] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  183.058911][ T3601] usb 3-1: USB disconnect, device number 13
[  183.281784][ T3928] usb 4-1: GET_CAPABILITIES returned 0
[  183.294780][ T3928] usbtmc 4-1:16.0: can't read capabilities
[  183.541602][ T5265] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  183.564810][ T5569] loop1: detected capacity change from 0 to 512
[  183.638836][ T5569] EXT4-fs error (device loop1): ext4_orphan_get:1396: inode #15: comm syz.1.561: casefold flag without casefold feature
[  183.662396][ T5569] EXT4-fs (loop1): 1 truncate cleaned up
[  183.668359][ T5569] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  183.759864][ T3549] EXT4-fs (loop1): unmounting filesystem.
[  183.765092][ T4521] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  183.924017][ T5265] usb 5-1: New USB device found, idVendor=59cc, idProduct=980d, bcdDevice=b4.8e
[  183.949155][ T5265] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  184.011682][ T4521] usb 1-1: Using ep0 maxpacket: 32
[  184.018079][ T5265] usb 5-1: config 0 descriptor??
[  184.026260][ T3601] usb 4-1: USB disconnect, device number 12
[  184.067050][ T5265] usb-storage 5-1:0.0: USB Mass Storage device detected
[  184.105920][ T5578] program syz.1.564 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  184.292104][ T4521] usb 1-1: New USB device found, idVendor=05ac, idProduct=0217, bcdDevice=4f.f0
[  184.325704][ T4521] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  184.345963][ T4521] usb 1-1: Product: syz
[  184.359966][ T4521] usb 1-1: Manufacturer: syz
[  184.385322][ T4521] usb 1-1: SerialNumber: syz
[  184.388429][ T5587] loop2: detected capacity change from 0 to 512
[  184.404101][ T4521] usb 1-1: config 0 descriptor??
[  184.422089][ T3599] usb 5-1: USB disconnect, device number 13
[  184.454104][ T4521] appletouch 1-1:0.0: Could not find int-in endpoint
[  184.473421][ T4521] appletouch: probe of 1-1:0.0 failed with error -5
[  184.546865][ T5587] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2213: inode #15: comm syz.2.568: corrupted in-inode xattr
[  184.566585][ T5587] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.568: couldn't read orphan inode 15 (err -117)
[  184.601884][ T5587] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  184.654347][ T4521] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[  184.672121][ T4521] usb 1-1: USB disconnect, device number 9
[  184.844197][ T3565] Bluetooth: hci2: unexpected event for opcode 0x200a
[  185.540089][ T3548] EXT4-fs (loop2): unmounting filesystem.
[  185.797519][ T5617] loop1: detected capacity change from 0 to 128
[  185.882191][ T3601] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  185.911966][ T3557] Bluetooth: hci1: command 0x0406 tx timeout
[  185.990257][ T5619] program syz.1.579 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  186.097371][ T5623] program syz.3.580 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  186.412032][ T5265] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  186.602126][ T3601] usb 1-1: New USB device found, idVendor=0a21, idProduct=8001, bcdDevice=f0.bb
[  186.706378][ T3601] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  186.867280][ T3601] usb 1-1: Product: syz
[  186.999165][ T3601] usb 1-1: Manufacturer: syz
[  187.051908][ T3601] usb 1-1: SerialNumber: syz
[  187.086656][ T3601] usb 1-1: config 0 descriptor??
[  187.173210][ T3601] usb_serial_simple 1-1:0.0: carelink converter detected
[  187.225775][ T3601] usb 1-1: carelink converter now attached to ttyUSB0
[  187.421643][ T3600] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  187.432090][ T5265] usb 2-1: Using ep0 maxpacket: 32
[  187.509691][   T14] usb 1-1: USB disconnect, device number 10
[  187.538553][   T14] carelink ttyUSB0: carelink converter now disconnected from ttyUSB0
[  187.571298][   T14] usb_serial_simple 1-1:0.0: device disconnected
[  187.721888][ T5265] usb 2-1: New USB device found, idVendor=05ac, idProduct=0217, bcdDevice=4f.f0
[  187.730982][ T5265] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  187.779362][ T5265] usb 2-1: Product: syz
[  187.783947][ T5265] usb 2-1: Manufacturer: syz
[  187.788577][ T5265] usb 2-1: SerialNumber: syz
[  187.855664][ T5265] usb 2-1: config 0 descriptor??
[  187.897330][ T5265] appletouch 2-1:0.0: Could not find int-in endpoint
[  187.937210][ T5265] appletouch: probe of 2-1:0.0 failed with error -5
[  187.962563][ T5265] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  187.971752][ T3600] usb 3-1: New USB device found, idVendor=59cc, idProduct=980d, bcdDevice=b4.8e
[  188.119812][ T5265] usb 2-1: USB disconnect, device number 9
[  188.759724][ T3600] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  188.782162][ T3600] usb 3-1: config 0 descriptor??
[  188.832982][ T3600] usb-storage 3-1:0.0: USB Mass Storage device detected
[  189.559608][ T3935] usb 3-1: USB disconnect, device number 14
[  190.135272][ T5684] loop4: detected capacity change from 0 to 128
[  190.261169][ T5684] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  190.280327][ T5684] ext4 filesystem being mounted at /66/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff)
[  190.356399][ T5685] loop1: detected capacity change from 0 to 8192
[  190.480307][ T4248] EXT4-fs error (device loop4): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024
[  190.580445][ T4248] EXT4-fs error (device loop4): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192
[  190.655579][ T4248] EXT4-fs error (device loop4): ext4_empty_dir:3120: inode #11: block 1: comm syz-executor: Directory block failed checksum
[  190.698999][ T4643] I/O error, dev loop1, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  190.755085][ T4248] EXT4-fs error (device loop4): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024
[  190.807790][ T4248] EXT4-fs error (device loop4): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192
[  190.857327][ T4248] EXT4-fs error (device loop4): ext4_empty_dir:3120: inode #11: block 1: comm syz-executor: Directory block failed checksum
[  190.875366][ T4248] EXT4-fs error (device loop4): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024
[  190.890406][ T4248] EXT4-fs error (device loop4): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192
[  191.038651][ T4248] EXT4-fs error (device loop4): ext4_empty_dir:3120: inode #11: block 1: comm syz-executor: Directory block failed checksum
[  191.082486][ T4248] EXT4-fs error (device loop4): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024
[  192.031789][ T5726] program syz.1.622 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  192.271944][ T3601] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  192.671978][ T3601] usb 3-1: New USB device found, idVendor=59cc, idProduct=980d, bcdDevice=b4.8e
[  192.681338][ T3601] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  192.698113][ T4248] EXT4-fs (loop4): unmounting filesystem.
[  192.706520][ T3601] usb 3-1: config 0 descriptor??
[  192.773027][ T3601] usb-storage 3-1:0.0: USB Mass Storage device detected
[  192.827626][ T4077] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  192.931690][ T3600] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  192.950229][ T4077] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  193.037020][ T5750] cgroup: fork rejected by pids controller in /syz0
[  193.048113][ T4077] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  193.091714][ T5268] usb 3-1: USB disconnect, device number 15
[  193.147194][ T4077] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  193.194447][ T3600] usb 2-1: Using ep0 maxpacket: 8
[  193.324221][ T3557] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  193.334806][ T3557] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  193.344161][ T3557] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  193.352171][ T3600] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  193.364238][ T3557] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  193.372970][ T3600] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  193.383978][ T3557] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  193.392214][ T3557] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  193.398027][ T3600] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024
[  193.442155][ T3551] syz-executor (3551) used greatest stack depth: 18160 bytes left
[  193.451870][ T3600] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  193.464279][ T3600] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  193.525281][ T3600] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  193.562939][ T5757] netlink: 12 bytes leftover after parsing attributes in process `syz.3.636'.
[  193.579943][ T3600] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  193.853341][ T3600] usb 2-1: GET_CAPABILITIES returned 0
[  193.859106][ T3600] usbtmc 2-1:16.0: can't read capabilities
[  194.081725][ T1255] ieee802154 phy0 wpan0: encryption failed: -22
[  194.088163][ T1255] ieee802154 phy1 wpan1: encryption failed: -22
[  194.164397][ T5775] program syz.2.640 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  194.175067][ T3565] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  194.187293][ T3565] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  194.196379][ T3565] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  194.224837][ T3565] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  194.234526][ T3565] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  194.245042][ T3565] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  194.318587][ T5780] loop3: detected capacity change from 0 to 2048
[  194.342113][ T5753] chnl_net:caif_netlink_parms(): no params data found
[  194.384303][ T5780] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  194.480585][ T4239] EXT4-fs (loop3): unmounting filesystem.
[  194.601027][ T5268] usb 2-1: USB disconnect, device number 10
[  194.692953][ T5796] program syz.3.644 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  194.731596][ T4521] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  194.793786][ T5753] bridge0: port 1(bridge_slave_0) entered blocking state
[  194.811194][ T5753] bridge0: port 1(bridge_slave_0) entered disabled state
[  194.821301][ T5753] device bridge_slave_0 entered promiscuous mode
[  194.885011][ T5753] bridge0: port 2(bridge_slave_1) entered blocking state
[  194.893913][ T5753] bridge0: port 2(bridge_slave_1) entered disabled state
[  194.914720][ T5753] device bridge_slave_1 entered promiscuous mode
[  195.137925][ T5753] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  195.167697][ T5753] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  195.269625][ T4521] usb 3-1: New USB device found, idVendor=0a21, idProduct=8001, bcdDevice=f0.bb
[  195.271624][ T3327] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  195.289118][ T4521] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  195.316721][ T4521] usb 3-1: Product: syz
[  195.329907][ T4521] usb 3-1: Manufacturer: syz
[  195.338392][ T4521] usb 3-1: SerialNumber: syz
[  195.383068][ T4521] usb 3-1: config 0 descriptor??
[  195.414872][ T5767] chnl_net:caif_netlink_parms(): no params data found
[  195.423999][ T4521] usb_serial_simple 3-1:0.0: carelink converter detected
[  195.443004][ T4521] usb 3-1: carelink converter now attached to ttyUSB0
[  195.511891][ T3558] Bluetooth: hci3: command tx timeout
[  195.523817][ T4077] device hsr_slave_0 left promiscuous mode
[  195.545755][ T4077] device hsr_slave_1 left promiscuous mode
[  195.553009][ T4077] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  195.560526][ T4077] batman_adv: batadv0: Removing interface: batadv_slave_0
[  195.569951][ T4077] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  195.618069][ T4077] batman_adv: batadv0: Removing interface: batadv_slave_1
[  195.647777][ T4077] device bridge_slave_1 left promiscuous mode
[  195.655104][   T26] audit: type=1326 audit(1720782399.517:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5820 comm="syz.1.647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff00a975bd9 code=0x7ffc0000
[  195.661937][ T3327] usb 4-1: New USB device found, idVendor=59cc, idProduct=980d, bcdDevice=b4.8e
[  195.679827][ T4077] bridge0: port 2(bridge_slave_1) entered disabled state
[  195.724243][   T26] audit: type=1326 audit(1720782399.567:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5820 comm="syz.1.647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff00a975bd9 code=0x7ffc0000
[  195.731154][ T3327] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  195.772532][ T4077] device bridge_slave_0 left promiscuous mode
[  195.778932][ T4077] bridge0: port 1(bridge_slave_0) entered disabled state
[  195.811051][   T26] audit: type=1326 audit(1720782399.577:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5820 comm="syz.1.647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff00a975bd9 code=0x7ffc0000
[  195.812218][ T3327] usb 4-1: config 0 descriptor??
[  195.839969][   T26] audit: type=1326 audit(1720782399.577:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5820 comm="syz.1.647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff00a975bd9 code=0x7ffc0000
[  195.923193][   T26] audit: type=1326 audit(1720782399.577:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5820 comm="syz.1.647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff00a975bd9 code=0x7ffc0000
[  195.942451][ T3601] usb 3-1: USB disconnect, device number 16
[  195.948933][   T26] audit: type=1326 audit(1720782399.577:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5820 comm="syz.1.647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff00a975bd9 code=0x7ffc0000
[  195.975864][   T26] audit: type=1326 audit(1720782399.577:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5820 comm="syz.1.647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff00a96cc27 code=0x7ffc0000
[  195.979277][ T3601] carelink ttyUSB0: carelink converter now disconnected from ttyUSB0
[  196.007852][ T4077] device veth1_macvtap left promiscuous mode
[  196.011863][ T3327] usb-storage 4-1:0.0: USB Mass Storage device detected
[  196.024173][ T4077] device veth0_macvtap left promiscuous mode
[  196.039725][ T4077] device veth1_vlan left promiscuous mode
[  196.051006][ T4077] device veth0_vlan left promiscuous mode
[  196.067289][   T26] audit: type=1326 audit(1720782399.577:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5820 comm="syz.1.647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff00a9115d9 code=0x7ffc0000
[  196.080598][ T5830] loop1: detected capacity change from 0 to 512
[  196.100328][   T26] audit: type=1326 audit(1720782399.577:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5820 comm="syz.1.647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff00a96cc27 code=0x7ffc0000
[  196.111391][ T3601] usb_serial_simple 3-1:0.0: device disconnected
[  196.177174][   T26] audit: type=1326 audit(1720782399.577:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5820 comm="syz.1.647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff00a9115d9 code=0x7ffc0000
[  196.180377][ T5830] EXT4-fs (loop1): orphan cleanup on readonly fs
[  196.251356][ T5830] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.649: bg 0: block 248: padding at end of block bitmap is not set
[  196.273474][ T5830] EXT4-fs error (device loop1): ext4_acquire_dquot:6777: comm syz.1.649: Failed to acquire dquot type 1
[  196.304809][ T5830] EXT4-fs (loop1): 1 truncate cleaned up
[  196.312168][ T3558] Bluetooth: hci4: command tx timeout
[  196.322748][ T5830] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  196.377505][ T5830] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended
[  196.388729][ T3600] usb 4-1: USB disconnect, device number 13
[  196.460972][ T5830] EXT4-fs (loop1): re-mounted. Quota mode: writeback.
[  196.510287][ T3549] EXT4-fs (loop1): unmounting filesystem.
[  196.649958][ T5838] program syz.1.651 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  196.780249][ T5842] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3
[  197.097026][ T4077] team0 (unregistering): Port device team_slave_1 removed
[  197.170990][ T4077] team0 (unregistering): Port device team_slave_0 removed
[  197.188099][ T5268] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  197.225534][ T4077] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  197.271876][ T4077] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  197.432329][ T5268] usb 2-1: Using ep0 maxpacket: 8
[  197.551889][ T5268] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  197.562151][ T5268] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  197.573321][ T5268] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024
[  197.589302][ T5268] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  197.599867][ T5268] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  197.611530][ T3558] Bluetooth: hci3: command tx timeout
[  197.613545][ T5268] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  197.635108][ T5268] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  197.776711][ T4077] bond0 (unregistering): Released all slaves
[  197.858015][ T5753] team0: Port device team_slave_0 added
[  197.896280][ T5753] team0: Port device team_slave_1 added
[  197.931889][ T5268] usb 2-1: GET_CAPABILITIES returned 0
[  197.937490][ T5268] usbtmc 2-1:16.0: can't read capabilities
[  198.111383][ T5753] batman_adv: batadv0: Adding interface: batadv_slave_0
[  198.139411][ T5753] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  198.247611][ T5753] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  198.341910][ T3002] udevd[3002]: worker [4643] terminated by signal 33 (Unknown signal 33)
[  198.351929][ T3002] udevd[3002]: worker [4643] failed while handling '/devices/virtual/block/loop3'
[  198.363198][ T5753] batman_adv: batadv0: Adding interface: batadv_slave_1
[  198.370170][ T5753] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  198.376519][ T5866] program syz.2.662 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  198.406201][ T3558] Bluetooth: hci4: command tx timeout
[  198.486523][ T5753] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  198.594156][ T5767] bridge0: port 1(bridge_slave_0) entered blocking state
[  198.620814][ T5767] bridge0: port 1(bridge_slave_0) entered disabled state
[  198.637887][ T5767] device bridge_slave_0 entered promiscuous mode
[  198.676883][ T5767] bridge0: port 2(bridge_slave_1) entered blocking state
[  198.694131][ T5767] bridge0: port 2(bridge_slave_1) entered disabled state
[  198.712883][   T14] usb 2-1: USB disconnect, device number 11
[  198.713515][ T5767] device bridge_slave_1 entered promiscuous mode
[  198.791007][ T5753] device hsr_slave_0 entered promiscuous mode
[  198.803161][ T3600] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  198.810979][ T3327] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  198.838392][ T5753] device hsr_slave_1 entered promiscuous mode
[  198.864566][ T5753] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  198.891800][ T5753] Cannot create hsr debugfs directory
[  198.924098][ T5767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  198.987211][ T5767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  199.129360][ T5767] team0: Port device team_slave_0 added
[  199.155493][ T5767] team0: Port device team_slave_1 added
[  199.197985][ T3327] usb 3-1: New USB device found, idVendor=59cc, idProduct=980d, bcdDevice=b4.8e
[  199.207218][ T3600] usb 4-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a
[  199.216846][ T3327] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  199.232727][ T3600] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  199.260789][ T3327] usb 3-1: config 0 descriptor??
[  199.284925][ T3600] usb 4-1: config 0 descriptor??
[  199.354297][ T3600] gspca_main: sn9c2028-2.14.0 probing 0c45:8001
[  199.361785][ T3327] usb-storage 3-1:0.0: USB Mass Storage device detected
[  199.539615][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_0
[  199.567117][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  199.671835][ T3558] Bluetooth: hci3: command tx timeout
[  199.690601][ T5767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  199.704751][ T3928] usb 3-1: USB disconnect, device number 17
[  199.743235][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_1
[  199.750361][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  199.787757][ T5767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  199.800212][ T5873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  199.848932][ T5873] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  199.963364][ T5903] loop1: detected capacity change from 0 to 512
[  200.023177][ T5903] EXT4-fs (loop1): orphan cleanup on readonly fs
[  200.045865][ T5903] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.672: bg 0: block 248: padding at end of block bitmap is not set
[  200.066235][ T5767] device hsr_slave_0 entered promiscuous mode
[  200.091920][ T5767] device hsr_slave_1 entered promiscuous mode
[  200.118820][ T5903] EXT4-fs error (device loop1): ext4_acquire_dquot:6777: comm syz.1.672: Failed to acquire dquot type 1
[  200.151774][ T3600] gspca_sn9c2028: read1 error -71
[  200.151797][ T5767] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  200.156872][ T3600] sn9c2028: probe of 4-1:0.0 failed with error -71
[  200.181302][ T3600] usb 4-1: USB disconnect, device number 14
[  200.184860][ T5767] Cannot create hsr debugfs directory
[  200.203001][ T5903] EXT4-fs (loop1): 1 truncate cleaned up
[  200.246066][ T5903] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  200.314048][ T5903] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended
[  200.427680][ T5903] EXT4-fs (loop1): re-mounted. Quota mode: writeback.
[  200.472123][ T3558] Bluetooth: hci4: command tx timeout
[  200.504528][ T5908] program syz.2.673 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  200.517029][ T3549] EXT4-fs (loop1): unmounting filesystem.
[  200.952079][ T4521] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  201.305414][ T4521] usb 3-1: Using ep0 maxpacket: 8
[  201.422570][ T4521] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  201.515088][ T4521] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  201.681464][ T4521] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024
[  201.872316][ T4521] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  201.921974][ T4521] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  201.970867][ T4521] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  201.981285][ T3327] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  201.990116][ T3558] Bluetooth: hci3: command tx timeout
[  202.033739][ T5753] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  202.051891][ T4521] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  202.201710][ T3327] usb 4-1: device descriptor read/64, error -71
[  202.216938][ T5767] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  202.273698][ T5753] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  202.302796][ T5753] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  202.317467][ T5753] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  202.361849][ T4521] usb 3-1: GET_CAPABILITIES returned 0
[  202.367615][ T4521] usbtmc 3-1:16.0: can't read capabilities
[  202.438857][ T5767] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  202.481581][ T3327] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  202.556462][ T3558] Bluetooth: hci4: command tx timeout
[  202.564518][ T5767] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  202.571765][ T5227] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  202.677484][ T3327] usb 4-1: device descriptor read/64, error -71
[  202.698130][ T5767] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  202.803188][ T3327] usb usb4-port1: attempt power cycle
[  202.831811][ T5753] 8021q: adding VLAN 0 to HW filter on device bond0
[  202.879720][ T4521] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  202.902741][ T4521] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  202.924799][ T5753] 8021q: adding VLAN 0 to HW filter on device team0
[  202.945174][ T5265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  202.955305][ T5265] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  202.971287][ T5265] bridge0: port 1(bridge_slave_0) entered blocking state
[  202.978505][ T5265] bridge0: port 1(bridge_slave_0) entered forwarding state
[  202.986845][ T5227] usb 2-1: New USB device found, idVendor=59cc, idProduct=980d, bcdDevice=b4.8e
[  202.997510][ T5227] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  203.008612][ T5227] usb 2-1: config 0 descriptor??
[  203.045910][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  203.058408][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  203.068346][ T5227] usb-storage 2-1:0.0: USB Mass Storage device detected
[  203.078074][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  203.087512][ T3599] bridge0: port 2(bridge_slave_1) entered blocking state
[  203.095978][ T3599] bridge0: port 2(bridge_slave_1) entered forwarding state
[  203.106778][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  203.128626][ T3601] usb 3-1: USB disconnect, device number 18
[  203.225738][ T3327] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  203.261865][ T5268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  203.304206][ T5268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  203.334090][ T5268] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  203.356442][ T3327] usb 4-1: device descriptor read/8, error -71
[  203.372619][ T5268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  203.430007][ T5268] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  203.437697][ T3601] usb 2-1: USB disconnect, device number 12
[  203.468768][ T5767] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  203.472717][ T5956] loop2: detected capacity change from 0 to 512
[  203.488046][ T5767] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  203.507697][ T5268] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  203.518517][ T5268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  203.528750][ T5268] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  203.538752][ T5956] EXT4-fs (loop2): orphan cleanup on readonly fs
[  203.548618][ T5767] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  203.565747][ T5956] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.684: bg 0: block 248: padding at end of block bitmap is not set
[  203.593652][ T5227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  203.602588][ T5956] __quota_error: 47 callbacks suppressed
[  203.602605][ T5956] Quota error (device loop2): write_blk: dquota write failed
[  203.620018][ T5227] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  203.628627][ T5956] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  203.641250][ T5753] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  203.650729][ T5956] EXT4-fs error (device loop2): ext4_acquire_dquot:6777: comm syz.2.684: Failed to acquire dquot type 1
[  203.665634][ T5767] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  203.672158][ T5956] EXT4-fs (loop2): 1 truncate cleaned up
[  203.673079][ T3327] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  203.696977][ T5956] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  203.725805][ T5956] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended
[  203.778148][ T5956] EXT4-fs (loop2): re-mounted. Quota mode: writeback.
[  203.792024][ T3327] usb 4-1: device descriptor read/8, error -71
[  203.839175][ T3548] EXT4-fs (loop2): unmounting filesystem.
[  203.941328][ T3327] usb usb4-port1: unable to enumerate USB device
[  203.949595][ T5969] program syz.2.685 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  203.981679][ T5767] 8021q: adding VLAN 0 to HW filter on device bond0
[  204.037895][ T3327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  204.046574][ T3327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  204.066914][ T5767] 8021q: adding VLAN 0 to HW filter on device team0
[  204.085800][ T3327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  204.109442][ T3327] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  204.136740][ T3327] bridge0: port 1(bridge_slave_0) entered blocking state
[  204.144001][ T3327] bridge0: port 1(bridge_slave_0) entered forwarding state
[  204.198240][ T5976] loop3: detected capacity change from 0 to 1024
[  204.205405][ T5976] hfsplus: unable to parse mount options
[  204.220542][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  204.232383][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  204.276181][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  204.304408][ T5975] loop2: detected capacity change from 0 to 2048
[  204.325076][ T3602] bridge0: port 2(bridge_slave_1) entered blocking state
[  204.332277][ T3602] bridge0: port 2(bridge_slave_1) entered forwarding state
[  204.366711][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  204.420805][ T5975] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  204.450492][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  204.470630][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  204.480606][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  204.489523][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  204.498741][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  204.507139][ T5975] EXT4-fs (loop2): re-mounted. Quota mode: none.
[  204.508046][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  204.534500][ T3327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  204.544476][ T3327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  204.560107][ T5767] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  204.582850][ T5767] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  204.604524][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  204.617592][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  204.688273][ T3548] EXT4-fs (loop2): unmounting filesystem.
[  204.911619][ T5985] device pim6reg1 entered promiscuous mode
[  204.950378][ T5753] 8021q: adding VLAN 0 to HW filter on device batadv0
[  204.980322][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  205.012128][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  205.358930][ T6003] tmpfs: Unknown parameter 'nr5'
[  205.367611][ T6003] loop3: detected capacity change from 0 to 128
[  207.688312][   T26] audit: type=1326 audit(1720782411.547:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6021 comm="syz.2.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f72375bd9 code=0x7ffc0000
[  207.811901][   T26] audit: type=1326 audit(1720782411.607:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6021 comm="syz.2.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4f72375bd9 code=0x7ffc0000
[  207.844648][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  207.862308][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  207.888875][ T5767] 8021q: adding VLAN 0 to HW filter on device batadv0
[  207.926394][   T26] audit: type=1326 audit(1720782411.607:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6021 comm="syz.2.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f72375bd9 code=0x7ffc0000
[  207.949140][ T3600] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  208.002182][   T26] audit: type=1326 audit(1720782411.607:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6021 comm="syz.2.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f72375bd9 code=0x7ffc0000
[  208.067630][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  208.093256][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  208.096483][   T26] audit: type=1326 audit(1720782411.617:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6021 comm="syz.2.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7f4f72375bd9 code=0x7ffc0000
[  208.151893][ T3600] usb 2-1: device descriptor read/64, error -71
[  208.230856][   T26] audit: type=1326 audit(1720782411.617:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6021 comm="syz.2.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f72375bd9 code=0x7ffc0000
[  208.238961][ T5767] device veth0_vlan entered promiscuous mode
[  208.342007][   T26] audit: type=1326 audit(1720782411.617:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6021 comm="syz.2.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f72375bd9 code=0x7ffc0000
[  208.342031][ T3557] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  208.376357][ T3557] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  208.384848][ T3557] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  208.394442][ T3557] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  208.402412][ T3557] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  208.409819][ T3557] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  208.441612][ T3600] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  208.449417][ T3935] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  208.477189][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  208.495770][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  208.571224][ T5767] device veth1_vlan entered promiscuous mode
[  208.589491][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  208.603077][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  208.651722][ T3600] usb 2-1: device descriptor read/64, error -71
[  208.692098][ T5227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  208.700790][ T5227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  208.726714][ T5753] device veth0_vlan entered promiscuous mode
[  208.774384][ T5268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  208.792446][ T5268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  208.800131][ T3600] usb usb2-port1: attempt power cycle
[  208.801308][ T5268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  208.824694][ T5268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  208.843786][ T5767] device veth0_macvtap entered promiscuous mode
[  208.866251][ T3935] usb 3-1: New USB device found, idVendor=59cc, idProduct=980d, bcdDevice=b4.8e
[  208.886081][ T3935] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  208.902785][ T3935] usb 3-1: config 0 descriptor??
[  208.917832][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  208.932686][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  208.952654][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  208.952917][ T3935] usb-storage 3-1:0.0: USB Mass Storage device detected
[  208.963385][ T5767] device veth1_macvtap entered promiscuous mode
[  208.989663][ T5753] device veth1_vlan entered promiscuous mode
[  209.089592][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  209.101442][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  209.112301][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  209.122844][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  209.132713][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  209.144020][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  209.153977][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  209.165414][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  209.184194][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  209.201023][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  209.217093][ T3935] usb 3-1: USB disconnect, device number 19
[  209.221233][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  209.241648][ T3600] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  209.241757][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  209.266692][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_0
[  209.277354][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  209.288701][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  209.303991][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  209.314553][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  209.325446][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  209.336315][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  209.346707][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  209.351777][ T3600] usb 2-1: device descriptor read/8, error -71
[  209.358266][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  209.373339][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  209.383853][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  209.393956][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  209.404593][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  209.416029][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_1
[  209.429369][ T5767] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  209.443540][ T5767] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  209.452895][ T5767] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  209.461719][ T5767] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  209.477999][ T5227] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  209.486550][ T5227] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  209.495243][ T5227] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  209.503601][ T5227] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  209.512914][ T5227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  209.521895][ T5227] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  209.530577][ T5227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  209.606541][ T5268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  209.615996][ T5268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  209.637193][ T5753] device veth0_macvtap entered promiscuous mode
[  209.657211][ T3600] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  209.689051][ T3828] device hsr_slave_0 left promiscuous mode
[  209.699445][ T3828] device hsr_slave_1 left promiscuous mode
[  209.706908][ T3828] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  209.715045][ T3828] batman_adv: batadv0: Removing interface: batadv_slave_0
[  209.724887][ T3828] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  209.732357][ T3828] batman_adv: batadv0: Removing interface: batadv_slave_1
[  209.740021][ T3828] device bridge_slave_1 left promiscuous mode
[  209.746971][ T3828] bridge0: port 2(bridge_slave_1) entered disabled state
[  209.755920][ T3828] device bridge_slave_0 left promiscuous mode
[  209.762300][ T3600] usb 2-1: device descriptor read/8, error -71
[  209.763945][ T3828] bridge0: port 1(bridge_slave_0) entered disabled state
[  209.797005][ T3828] device veth1_macvtap left promiscuous mode
[  209.803288][ T3828] device veth0_macvtap left promiscuous mode
[  209.809369][ T3828] device veth1_vlan left promiscuous mode
[  209.815274][ T3828] device veth0_vlan left promiscuous mode
[  209.892270][ T3600] usb usb2-port1: unable to enumerate USB device
[  210.377480][ T3828] team0 (unregistering): Port device team_slave_1 removed
[  210.418630][ T3828] team0 (unregistering): Port device team_slave_0 removed
[  210.462462][ T3828] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  210.481861][ T3557] Bluetooth: hci0: command tx timeout
[  210.517097][ T3828] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  211.372979][ T3828] bond0 (unregistering): Released all slaves
[  211.485540][ T5753] device veth1_macvtap entered promiscuous mode
[  211.517385][ T5265] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  211.542819][ T5265] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  211.641448][ T5753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  211.654999][ T5753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  211.665175][ T5753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  211.676318][ T5753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  211.686206][ T5753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  211.696844][ T5753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  211.707303][ T5753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  211.717896][ T5753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  211.729529][ T5753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  211.740268][ T5753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  211.751940][ T5753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  211.773708][ T5753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  211.795692][ T5753] batman_adv: batadv0: Interface activated: batadv_slave_0
[  211.816558][ T5753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  211.860560][ T5753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  211.880087][ T5753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  211.890710][ T5753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  211.901248][ T5753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  211.912533][ T5753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  211.928109][ T5753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  211.939019][ T5753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  211.949348][ T5753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  211.979029][ T5753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  211.999510][ T5753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  212.030634][ T5753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  212.053107][ T5753] batman_adv: batadv0: Interface activated: batadv_slave_1
[  212.060711][ T6060] device pim6reg1 entered promiscuous mode
[  212.091033][ T5265] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  212.102074][ T5265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  212.111860][ T5265] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  212.120627][ T5265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  212.189186][ T5753] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  212.189965][ T4142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  212.206047][ T5753] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  212.221601][ T5753] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  212.230316][ T5753] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  212.239548][ T4142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  212.272491][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  212.383062][ T4077] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  212.391155][ T4077] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  212.466949][ T3935] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  212.499477][ T6030] chnl_net:caif_netlink_parms(): no params data found
[  212.551700][ T3557] Bluetooth: hci0: command tx timeout
[  212.614788][ T4864] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  212.651646][ T4864] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  212.724664][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  212.864290][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  212.874300][ T6030] bridge0: port 1(bridge_slave_0) entered blocking state
[  212.893160][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  212.912802][   T22] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  212.917921][ T6069] loop2: detected capacity change from 0 to 32768
[  212.931700][ T6030] bridge0: port 1(bridge_slave_0) entered disabled state
[  212.958624][ T6030] device bridge_slave_0 entered promiscuous mode
[  213.002024][ T6069] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.705 (6069)
[  213.013427][ T6030] bridge0: port 2(bridge_slave_1) entered blocking state
[  213.041805][ T6030] bridge0: port 2(bridge_slave_1) entered disabled state
[  213.060709][ T6030] device bridge_slave_1 entered promiscuous mode
[  213.079645][ T6069] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  213.091057][ T3928] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  213.134181][ T6069] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm
[  213.171981][ T6069] BTRFS info (device loop2): force zlib compression, level 3
[  213.201884][ T6069] BTRFS info (device loop2): force clearing of disk cache
[  213.211909][ T6069] BTRFS info (device loop2): setting nodatasum
[  213.218124][ T6069] BTRFS info (device loop2): allowing degraded mounts
[  213.239583][ T6030] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  213.275446][   T22] usb 2-1: New USB device found, idVendor=59cc, idProduct=980d, bcdDevice=b4.8e
[  213.277373][ T6030] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  213.291986][ T6069] BTRFS info (device loop2): enabling disk space caching
[  213.301465][ T6069] BTRFS info (device loop2): disk space caching is enabled
[  213.331617][   T22] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  213.354012][   T22] usb 2-1: config 0 descriptor??
[  213.392942][   T22] usb-storage 2-1:0.0: USB Mass Storage device detected
[  213.553211][ T6030] team0: Port device team_slave_0 added
[  214.324424][ T6030] team0: Port device team_slave_1 added
[  214.359440][   T22] usb 2-1: USB disconnect, device number 17
[  214.412602][ T6069] BTRFS info (device loop2): rebuilding free space tree
[  214.457089][ T6069] BTRFS info (device loop2): disabling free space tree
[  214.481430][ T6069] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  214.495079][ T6030] batman_adv: batadv0: Adding interface: batadv_slave_0
[  214.511527][ T6030] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  214.534590][ T6069] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  214.588726][ T6030] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  214.632348][ T6030] batman_adv: batadv0: Adding interface: batadv_slave_1
[  214.639320][ T6030] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  214.641970][ T3557] Bluetooth: hci0: command tx timeout
[  214.735121][ T6030] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  214.831779][ T3935] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  214.942247][ T6030] device hsr_slave_0 entered promiscuous mode
[  215.009960][ T6030] device hsr_slave_1 entered promiscuous mode
[  215.020453][ T6030] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  215.078404][ T6030] Cannot create hsr debugfs directory
[  215.401834][ T3935] usb 5-1: New USB device found, idVendor=0a21, idProduct=8001, bcdDevice=f0.bb
[  215.421209][ T3935] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  215.451693][ T3935] usb 5-1: Product: syz
[  215.455926][ T3935] usb 5-1: Manufacturer: syz
[  215.460559][ T3935] usb 5-1: SerialNumber: syz
[  215.501330][ T3935] usb 5-1: config 0 descriptor??
[  215.566658][ T6030] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  215.573236][ T3935] usb_serial_simple 5-1:0.0: carelink converter detected
[  215.644627][ T3935] usb 5-1: carelink converter now attached to ttyUSB0
[  215.801366][ T6030] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  215.985025][ T6030] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  216.098606][ T5265] usb 5-1: USB disconnect, device number 14
[  216.116322][ T6030] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  216.139202][ T5265] carelink ttyUSB0: carelink converter now disconnected from ttyUSB0
[  216.141614][ T3935] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  216.175460][ T5265] usb_serial_simple 5-1:0.0: device disconnected
[  216.466079][ T6030] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  216.520081][ T6030] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  216.546636][ T3548] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  216.552999][ T6030] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  216.574567][ T6030] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  216.581818][ T3935] usb 2-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a
[  216.599328][ T3935] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  216.638775][ T3935] usb 2-1: config 0 descriptor??
[  216.721639][ T3557] Bluetooth: hci0: command tx timeout
[  216.762920][ T3935] gspca_main: sn9c2028-2.14.0 probing 0c45:8001
[  216.801186][ T6030] 8021q: adding VLAN 0 to HW filter on device bond0
[  216.884502][ T3928] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  216.893813][ T3928] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  216.925818][ T6030] 8021q: adding VLAN 0 to HW filter on device team0
[  216.953071][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  216.972218][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  216.992490][   T14] bridge0: port 1(bridge_slave_0) entered blocking state
[  216.999612][   T14] bridge0: port 1(bridge_slave_0) entered forwarding state
[  217.082792][ T3327] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  217.098442][ T3327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  217.111202][ T3327] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  217.121756][ T6115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  217.137900][ T6115] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  217.146888][ T3327] bridge0: port 2(bridge_slave_1) entered blocking state
[  217.154074][ T3327] bridge0: port 2(bridge_slave_1) entered forwarding state
[  217.196316][ T3327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  217.212833][ T3327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  217.263930][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  217.277216][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  217.302285][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  217.333589][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  217.381361][ T6030] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  217.419640][ T6030] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  217.461752][ T3935] gspca_sn9c2028: read1 error -71
[  217.467048][ T3935] sn9c2028: probe of 2-1:0.0 failed with error -71
[  217.500023][ T3935] usb 2-1: USB disconnect, device number 18
[  217.513497][ T3928] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  217.537631][ T3928] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  217.585483][ T3928] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  217.612692][ T3928] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  217.615785][ T6117] loop0: detected capacity change from 0 to 32768
[  217.646333][ T6117] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.711 (6117)
[  218.389931][ T3928] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  218.414695][ T6117] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  218.482066][ T6117] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  218.524370][ T6117] BTRFS info (device loop0): using free space tree
[  218.636858][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  218.681670][ T6117] BTRFS info (device loop0): enabling ssd optimizations
[  218.812035][   T14] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  218.937003][ T6126] loop2: detected capacity change from 0 to 40427
[  218.945606][ T5767] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  218.964105][ T6126] F2FS-fs (loop2): invalid crc value
[  219.034920][   T14] usb 5-1: device descriptor read/64, error -71
[  219.120105][ T6126] F2FS-fs (loop2): Found nat_bits in checkpoint
[  219.301766][   T14] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  219.321788][ T6126] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[  219.351214][ T6030] 8021q: adding VLAN 0 to HW filter on device batadv0
[  219.402642][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  219.410960][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  219.501576][   T14] usb 5-1: device descriptor read/64, error -71
[  219.522379][ T3548] syz-executor: attempt to access beyond end of device
[  219.522379][ T3548] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  219.631829][   T14] usb usb5-port1: attempt power cycle
[  219.775893][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  219.790176][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  219.958488][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  219.986194][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  220.071936][   T14] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  220.128050][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  220.144922][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  220.172032][   T14] usb 5-1: device descriptor read/8, error -71
[  220.189966][ T6030] device veth0_vlan entered promiscuous mode
[  220.491730][   T14] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  220.534735][ T6030] device veth1_vlan entered promiscuous mode
[  220.592019][   T14] usb 5-1: device descriptor read/8, error -71
[  220.712547][   T14] usb usb5-port1: unable to enumerate USB device
[  220.949335][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  220.979209][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  221.191601][ T3828] device hsr_slave_0 left promiscuous mode
[  221.207831][ T3828] device hsr_slave_1 left promiscuous mode
[  221.235623][ T3828] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  221.264733][ T3828] batman_adv: batadv0: Removing interface: batadv_slave_0
[  221.304508][ T3828] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  221.338069][ T3828] batman_adv: batadv0: Removing interface: batadv_slave_1
[  221.377003][ T3828] device bridge_slave_1 left promiscuous mode
[  221.403835][ T3828] bridge0: port 2(bridge_slave_1) entered disabled state
[  221.442716][ T3828] device bridge_slave_0 left promiscuous mode
[  221.470168][ T3828] bridge0: port 1(bridge_slave_0) entered disabled state
[  221.699635][ T3828] device veth1_macvtap left promiscuous mode
[  221.728669][ T3828] device veth0_macvtap left promiscuous mode
[  221.756874][ T3828] device veth1_vlan left promiscuous mode
[  221.785584][ T3828] device veth0_vlan left promiscuous mode
[  222.785037][ T6188] loop4: detected capacity change from 0 to 1024
[  222.792403][ T6188] hfsplus: unable to parse mount options
[  222.967609][ T4074] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  223.087476][ T6190] tmpfs: Unknown parameter 'nr5'
[  223.119263][ T6190] loop4: detected capacity change from 0 to 128
[  223.336657][ T6181] loop2: detected capacity change from 0 to 40427
[  223.370240][ T6181] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  223.631721][ T6181] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  223.855443][ T6181] F2FS-fs (loop2): Found nat_bits in checkpoint
[  223.939028][ T6181] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  223.977234][ T6181] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  223.977750][ T6196] loop4: detected capacity change from 0 to 256
[  224.670146][ T6200] loop1: detected capacity change from 0 to 4096
[  224.745802][ T3828] team0 (unregistering): Port device team_slave_1 removed
[  224.889344][ T3828] team0 (unregistering): Port device team_slave_0 removed
[  225.147043][ T3828] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  225.397823][ T3828] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  225.821155][ T6202] loop2: detected capacity change from 0 to 32768
[  225.876869][ T6202] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.730 (6202)
[  225.962072][ T6202] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  225.987787][ T6202] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  226.019942][ T6202] BTRFS info (device loop2): using free space tree
[  226.286201][ T6202] BTRFS info (device loop2): enabling ssd optimizations
[  226.428266][ T3548] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  226.707836][ T3828] bond0 (unregistering): Released all slaves
[  226.795452][ T6242] loop2: detected capacity change from 0 to 1024
[  226.802420][ T6242] hfsplus: unable to parse mount options
[  227.097367][ T6246] tmpfs: Unknown parameter 'nr5'
[  227.118761][ T6246] loop2: detected capacity change from 0 to 128
[  227.935155][ T6030] device veth0_macvtap entered promiscuous mode
[  227.993197][ T6249] loop2: detected capacity change from 0 to 256
[  227.999755][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  228.020538][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  228.074849][ T6030] device veth1_macvtap entered promiscuous mode
[  228.133474][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  228.254037][ T6030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  228.283366][ T6030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  228.315595][ T6030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  228.351545][ T6030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  228.403649][ T6030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  228.431621][ T6030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  228.451920][ T6030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  228.497995][ T6030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  228.531838][ T6030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  228.561633][ T6030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  228.590326][ T6247] loop1: detected capacity change from 0 to 40427
[  228.609861][ T6030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  228.643819][ T6030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  228.662319][ T6247] F2FS-fs (loop1): invalid crc value
[  228.691902][ T6030] batman_adv: batadv0: Interface activated: batadv_slave_0
[  228.717199][ T6247] F2FS-fs (loop1): Found nat_bits in checkpoint
[  228.734867][ T6256] loop0: detected capacity change from 0 to 8192
[  228.752876][ T3327] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  228.766035][ T3327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  228.806842][ T6030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  228.832623][ T6030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  228.849753][ T6256] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 2195)
[  228.867559][ T6030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  228.878982][ T6256] FAT-fs (loop0): Filesystem has been set read-only
[  228.896911][ T6256] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 2195)
[  228.918935][ T6256] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 2195)
[  228.958512][ T6256] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 2195)
[  228.990371][ T6256] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 2195)
[  229.032433][   T26] audit: type=1800 audit(1720782432.897:122): pid=6256 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.743" name="file0" dev="loop0" ino=1048632 res=0 errno=0
[  229.053925][ T6267] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 2195)
[  229.062639][ T6030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  229.075736][ T6247] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  229.119971][ T6030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  229.120726][ T6267] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 2195)
[  229.144872][ T6030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  229.144941][   T26] audit: type=1800 audit(1720782433.007:123): pid=6267 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.743" name="file0" dev="loop0" ino=1048632 res=0 errno=0
[  229.228568][ T6030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  229.250717][ T6030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  229.260959][ T6030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  229.282870][ T6030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  229.294039][ T6030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  229.306820][ T6030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  229.323394][ T3549] syz-executor: attempt to access beyond end of device
[  229.323394][ T3549] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  229.349395][ T6030] batman_adv: batadv0: Interface activated: batadv_slave_1
[  229.388192][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  229.405735][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  229.448748][ T6030] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  229.467527][ T6030] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  229.477331][ T6030] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  229.486468][ T6030] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  229.702785][ T4078] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  229.712348][ T5226] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  229.762540][ T4078] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  229.867587][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  229.896185][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  229.933737][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  229.985714][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  230.092017][ T5226] usb 3-1: New USB device found, idVendor=59cc, idProduct=980d, bcdDevice=b4.8e
[  230.108383][ T6281] loop4: detected capacity change from 0 to 256
[  230.126821][ T5226] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  230.180086][ T5226] usb 3-1: config 0 descriptor??
[  230.254942][ T5226] usb-storage 3-1:0.0: USB Mass Storage device detected
[  230.645282][ T6276] loop0: detected capacity change from 0 to 32768
[  230.688380][   T32] usb 3-1: USB disconnect, device number 20
[  230.708828][ T6276] 
[  230.708828][ T6276]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  230.708828][ T6276] 
[  230.960646][   T26] audit: type=1326 audit(1720782434.817:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6282 comm="syz.3.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96edd75bd9 code=0x7fc00000
[  231.333717][   T26] audit: type=1326 audit(1720782434.847:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6282 comm="syz.3.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f96edd75bd9 code=0x7fc00000
[  231.438711][ T5767] 
[  231.438711][ T5767]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  231.438711][ T5767] 
[  231.473979][   T26] audit: type=1326 audit(1720782434.847:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6282 comm="syz.3.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96edd75bd9 code=0x7fc00000
[  231.501278][   T26] audit: type=1326 audit(1720782434.847:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6282 comm="syz.3.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96edd75bd9 code=0x7fc00000
[  231.524764][   T26] audit: type=1326 audit(1720782434.847:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6282 comm="syz.3.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96edd75bd9 code=0x7fc00000
[  231.547200][   T26] audit: type=1326 audit(1720782434.857:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6282 comm="syz.3.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96edd75bd9 code=0x7fc00000
[  231.581699][ T5767] 
[  231.581699][ T5767]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  231.581699][ T5767] 
[  231.621645][   T26] audit: type=1326 audit(1720782434.857:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6282 comm="syz.3.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96edd75bd9 code=0x7fc00000
[  231.741638][   T26] audit: type=1326 audit(1720782434.857:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6282 comm="syz.3.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96edd75bd9 code=0x7fc00000
[  232.377538][ T6319] loop1: detected capacity change from 0 to 256
[  233.071399][ T6303] loop4: detected capacity change from 0 to 40427
[  233.142198][ T6303] F2FS-fs (loop4): invalid crc value
[  233.166087][ T6303] F2FS-fs (loop4): Found nat_bits in checkpoint
[  233.221582][   T32] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  233.324668][ T6303] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[  233.412117][ T6338] loop0: detected capacity change from 0 to 256
[  233.469569][ T5753] syz-executor: attempt to access beyond end of device
[  233.469569][ T5753] loop4: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  233.474346][ T6338] FAT-fs (loop0): Directory bread(block 64) failed
[  233.532037][ T6338] FAT-fs (loop0): Directory bread(block 65) failed
[  233.538729][ T6338] FAT-fs (loop0): Directory bread(block 66) failed
[  233.559413][ T6326] loop1: detected capacity change from 0 to 32768
[  233.576757][ T6338] FAT-fs (loop0): Directory bread(block 67) failed
[  233.583704][   T32] usb 3-1: New USB device found, idVendor=59cc, idProduct=980d, bcdDevice=b4.8e
[  233.599908][ T6338] FAT-fs (loop0): Directory bread(block 68) failed
[  233.612044][ T6338] FAT-fs (loop0): Directory bread(block 69) failed
[  233.614581][   T32] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  233.628183][ T6326] 
[  233.628183][ T6326]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  233.628183][ T6326] 
[  233.641825][ T6338] FAT-fs (loop0): Directory bread(block 70) failed
[  233.649216][ T6338] FAT-fs (loop0): Directory bread(block 71) failed
[  233.679693][ T6338] FAT-fs (loop0): Directory bread(block 72) failed
[  233.687175][   T32] usb 3-1: config 0 descriptor??
[  233.721663][ T6338] FAT-fs (loop0): Directory bread(block 73) failed
[  233.752969][   T32] usb-storage 3-1:0.0: USB Mass Storage device detected
[  233.772333][ T3549] 
[  233.772333][ T3549]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  233.772333][ T3549] 
[  233.819622][ T3549] 
[  233.819622][ T3549]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  233.819622][ T3549] 
[  234.107436][   T14] usb 3-1: USB disconnect, device number 21
[  234.241620][ T3601] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  234.497716][ T6355] loop1: detected capacity change from 0 to 256
[  234.911906][ T3601] usb 4-1: New USB device found, idVendor=0a21, idProduct=8001, bcdDevice=f0.bb
[  234.921911][ T3601] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  234.938600][ T3601] usb 4-1: Product: syz
[  234.946425][ T3601] usb 4-1: Manufacturer: syz
[  234.951063][ T3601] usb 4-1: SerialNumber: syz
[  234.977288][ T3601] usb 4-1: config 0 descriptor??
[  235.026455][   T14] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  235.050191][ T3601] usb_serial_simple 4-1:0.0: carelink converter detected
[  235.070065][ T3601] usb 4-1: carelink converter now attached to ttyUSB0
[  235.351955][   T14] usb 3-1: too many configurations: 9, using maximum allowed: 8
[  235.415904][ T3601] usb 4-1: USB disconnect, device number 19
[  235.426296][ T3601] carelink ttyUSB0: carelink converter now disconnected from ttyUSB0
[  235.435893][ T3601] usb_serial_simple 4-1:0.0: device disconnected
[  235.452088][   T14] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  235.463161][   T14] usb 3-1: config 0 has no interfaces?
[  235.552041][   T14] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  235.563309][   T14] usb 3-1: config 0 has no interfaces?
[  235.651623][ T3598] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  235.662234][   T14] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  235.673891][   T14] usb 3-1: config 0 has no interfaces?
[  235.761795][   T14] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  235.773947][   T14] usb 3-1: config 0 has no interfaces?
[  235.851725][   T14] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  235.869137][   T14] usb 3-1: config 0 has no interfaces?
[  235.966157][   T14] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  235.982301][   T14] usb 3-1: config 0 has no interfaces?
[  236.022062][ T3598] usb 2-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a
[  236.031159][ T3598] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  236.081667][ T3598] usb 2-1: config 0 descriptor??
[  236.123707][ T3598] gspca_main: sn9c2028-2.14.0 probing 0c45:8001
[  236.179024][ T6372] loop0: detected capacity change from 0 to 32768
[  236.216212][ T6372] 
[  236.216212][ T6372]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  236.216212][ T6372] 
[  236.229179][   T14] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  236.237098][   T26] kauditd_printk_skb: 71 callbacks suppressed
[  236.237178][   T26] audit: type=1326 audit(1720782440.097:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6369 comm="syz.4.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda03d75bd9 code=0x7fc00000
[  236.243826][   T14] usb 3-1: config 0 has no interfaces?
[  236.276997][   T26] audit: type=1326 audit(1720782440.097:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6369 comm="syz.4.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fda03d75bd9 code=0x7fc00000
[  236.442063][   T14] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  236.528514][   T14] usb 3-1: config 0 has no interfaces?
[  236.660201][ T6368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  236.764195][ T6368] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  236.793072][   T14] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  236.835723][   T26] audit: type=1326 audit(1720782440.097:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6369 comm="syz.4.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda03d75bd9 code=0x7fc00000
[  236.904304][   T14] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  236.933366][   T14] usb 3-1: Product: syz
[  236.937598][   T14] usb 3-1: Manufacturer: syz
[  236.971531][   T14] usb 3-1: SerialNumber: syz
[  236.978393][ T5767] 
[  236.978393][ T5767]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  236.978393][ T5767] 
[  236.978454][ T5767] 
[  236.978454][ T5767]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  236.978454][ T5767] 
[  237.020867][   T14] usb 3-1: config 0 descriptor??
[  237.035496][   T26] audit: type=1326 audit(1720782440.097:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6369 comm="syz.4.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda03d75bd9 code=0x7fc00000
[  237.035542][   T26] audit: type=1326 audit(1720782440.097:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6369 comm="syz.4.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda03d75bd9 code=0x7fc00000
[  237.035579][   T26] audit: type=1326 audit(1720782440.097:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6369 comm="syz.4.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda03d75bd9 code=0x7fc00000
[  237.035615][   T26] audit: type=1326 audit(1720782440.097:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6369 comm="syz.4.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda03d75bd9 code=0x7fc00000
[  237.035652][   T26] audit: type=1326 audit(1720782440.097:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6369 comm="syz.4.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda03d75bd9 code=0x7fc00000
[  237.035688][   T26] audit: type=1326 audit(1720782440.097:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6369 comm="syz.4.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda03d75bd9 code=0x7fc00000
[  237.035732][   T26] audit: type=1326 audit(1720782440.097:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6369 comm="syz.4.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda03d75bd9 code=0x7fc00000
[  237.145177][ T6380] device vlan2 entered promiscuous mode
[  237.145197][ T6380] device team0 entered promiscuous mode
[  237.145210][ T6380] device team_slave_0 entered promiscuous mode
[  237.145381][ T6380] device team_slave_1 entered promiscuous mode
[  237.213197][ T6387] loop0: detected capacity change from 0 to 256
[  237.232962][ T6380] device team0 left promiscuous mode
[  237.233167][ T6380] device team_slave_0 left promiscuous mode
[  237.233719][ T6380] device team_slave_1 left promiscuous mode
[  237.300452][   T14] usb 3-1: USB disconnect, device number 22
[  237.301137][ T3598] gspca_sn9c2028: read1 error -71
[  237.301189][ T3598] sn9c2028: probe of 2-1:0.0 failed with error -71
[  237.309857][ T3598] usb 2-1: USB disconnect, device number 19
[  238.480748][ T6396] loop3: detected capacity change from 0 to 32768
[  238.625633][ T6396] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.791 (6396)
[  238.867586][ T6396] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  239.120184][ T6396] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  239.219604][ T6396] BTRFS info (device loop3): using free space tree
[  239.319109][ T6417] loop4: detected capacity change from 0 to 256
[  239.353852][ T6396] BTRFS info (device loop3): enabling ssd optimizations
[  239.656169][ T6030] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  239.700327][ T6444] kvm: emulating exchange as write
[  239.782132][ T6407] loop0: detected capacity change from 0 to 32768
[  239.893400][ T6407] 
[  239.893400][ T6407]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  239.893400][ T6407] 
[  240.011697][ T3596] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  240.067144][ T4864] 
[  240.067144][ T4864]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  240.067144][ T4864] 
[  240.093376][ T4864] 
[  240.093376][ T4864]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  240.093376][ T4864] 
[  240.139486][  T133] 
[  240.139486][  T133]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  240.139486][  T133] 
[  240.182465][ T5767] 
[  240.182465][ T5767]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  240.182465][ T5767] 
[  240.185324][ T5767] 
[  240.185324][ T5767]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  240.185324][ T5767] 
[  240.191042][  T133] ==================================================================
[  240.191054][  T133] BUG: KASAN: use-after-free in txEnd+0x350/0x560
[  240.191079][  T133] Write of size 8 at addr ffff88805be3e040 by task jfsCommit/133
[  240.191097][  T133] 
[  240.191107][  T133] CPU: 0 PID: 133 Comm: jfsCommit Not tainted 6.1.98-syzkaller #0
[  240.191127][  T133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  240.191140][  T133] Call Trace:
[  240.191146][  T133]  <TASK>
[  240.191154][  T133]  dump_stack_lvl+0x1e3/0x2cb
[  240.265145][  T133]  ? nf_tcp_handle_invalid+0x642/0x642
[  240.270621][  T133]  ? panic+0x764/0x764
[  240.274690][  T133]  ? _printk+0xd1/0x111
[  240.278847][  T133]  ? __virt_addr_valid+0x17f/0x520
[  240.283962][  T133]  ? __virt_addr_valid+0x17f/0x520
[  240.289079][  T133]  print_report+0x15f/0x4f0
[  240.293580][  T133]  ? __virt_addr_valid+0x17f/0x520
[  240.298784][  T133]  ? __virt_addr_valid+0x17f/0x520
[  240.303899][  T133]  ? __virt_addr_valid+0x44a/0x520
[  240.309012][  T133]  ? __phys_addr+0xb6/0x170
[  240.313519][  T133]  ? txEnd+0x350/0x560
[  240.317583][  T133]  kasan_report+0x136/0x160
[  240.322084][  T133]  ? txEnd+0x350/0x560
[  240.326151][  T133]  kasan_check_range+0x27f/0x290
[  240.331089][  T133]  txEnd+0x350/0x560
[  240.334985][  T133]  jfs_lazycommit+0x610/0xb60
[  240.339658][  T133]  ? _raw_spin_unlock_irqrestore+0x8b/0x130
[  240.345568][  T133]  ? lockdep_hardirqs_on+0x94/0x130
[  240.350767][  T133]  ? txFreelock+0x580/0x580
[  240.355287][  T133]  ? do_task_dead+0xd0/0xd0
[  240.359794][  T133]  ? _raw_spin_unlock+0x40/0x40
[  240.364646][  T133]  ? __kthread_parkme+0x168/0x1c0
[  240.369685][  T133]  kthread+0x28d/0x320
[  240.373749][  T133]  ? txFreelock+0x580/0x580
[  240.378247][  T133]  ? kthread_blkcg+0xd0/0xd0
[  240.382835][  T133]  ret_from_fork+0x1f/0x30
[  240.387260][  T133]  </TASK>
[  240.390274][  T133] 
[  240.392588][  T133] Allocated by task 6407:
[  240.396904][  T133]  kasan_set_track+0x4b/0x70
[  240.401531][  T133]  __kasan_kmalloc+0x97/0xb0
[  240.406119][  T133]  lmLogOpen+0x314/0x1030
[  240.410470][  T133]  jfs_mount_rw+0xe3/0x640
[  240.414902][  T133]  jfs_fill_super+0x67d/0xc40
[  240.419582][  T133]  mount_bdev+0x2c9/0x3f0
[  240.423923][  T133]  legacy_get_tree+0xeb/0x180
[  240.428699][  T133]  vfs_get_tree+0x88/0x270
[  240.433120][  T133]  do_new_mount+0x2ba/0xb40
[  240.437629][  T133]  __se_sys_mount+0x2d5/0x3c0
[  240.442326][  T133]  do_syscall_64+0x3b/0xb0
[  240.446772][  T133]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  240.452766][  T133] 
[  240.455086][  T133] Freed by task 5767:
[  240.459057][  T133]  kasan_set_track+0x4b/0x70
[  240.463658][  T133]  kasan_save_free_info+0x27/0x40
[  240.468682][  T133]  ____kasan_slab_free+0xd6/0x120
[  240.473713][  T133]  __kmem_cache_free+0x25c/0x3c0
[  240.478650][  T133]  lmLogClose+0x29d/0x530
[  240.482988][  T133]  jfs_umount+0x298/0x370
[  240.487318][  T133]  jfs_put_super+0x86/0x180
[  240.491821][  T133]  generic_shutdown_super+0x130/0x340
[  240.497193][  T133]  kill_block_super+0x7a/0xe0
[  240.501872][  T133]  deactivate_locked_super+0xa0/0x110
[  240.507248][  T133]  cleanup_mnt+0x490/0x520
[  240.511680][  T133]  task_work_run+0x246/0x300
[  240.516285][  T133]  exit_to_user_mode_loop+0xde/0x100
[  240.521577][  T133]  exit_to_user_mode_prepare+0xb1/0x140
[  240.527122][  T133]  syscall_exit_to_user_mode+0x60/0x270
[  240.532673][  T133]  do_syscall_64+0x47/0xb0
[  240.537111][  T133]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  240.543014][  T133] 
[  240.545332][  T133] The buggy address belongs to the object at ffff88805be3e000
[  240.545332][  T133]  which belongs to the cache kmalloc-1k of size 1024
[  240.559399][  T133] The buggy address is located 64 bytes inside of
[  240.559399][  T133]  1024-byte region [ffff88805be3e000, ffff88805be3e400)
[  240.573192][  T133] 
[  240.575513][  T133] The buggy address belongs to the physical page:
[  240.581924][  T133] page:ffffea00016f8e00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5be38
[  240.592089][  T133] head:ffffea00016f8e00 order:3 compound_mapcount:0 compound_pincount:0
[  240.600404][  T133] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[  240.608391][  T133] raw: 00fff00000010200 0000000000000000 dead000000000001 ffff888012441dc0
[  240.616972][  T133] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000
[  240.625549][  T133] page dumped because: kasan: bad access detected
[  240.631962][  T133] page_owner tracks the page as allocated
[  240.637670][  T133] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 2991, tgid 2991 (klogd), ts 66891962479, free_ts 16609128340
[  240.658418][  T133]  post_alloc_hook+0x18d/0x1b0
[  240.663183][  T133]  get_page_from_freelist+0x322e/0x33b0
[  240.668729][  T133]  __alloc_pages+0x28d/0x770
[  240.673316][  T133]  alloc_slab_page+0x6a/0x150
[  240.678086][  T133]  new_slab+0x84/0x2d0
[  240.682165][  T133]  ___slab_alloc+0xc20/0x1270
[  240.686841][  T133]  __kmem_cache_alloc_node+0x19f/0x260
[  240.692306][  T133]  kmalloc_trace+0x26/0xe0
[  240.696721][  T133]  syslog_print+0x11d/0x9b0
[  240.701234][  T133]  do_syslog+0x819/0x910
[  240.705485][  T133]  __x64_sys_syslog+0x78/0x90
[  240.710177][  T133]  do_syscall_64+0x3b/0xb0
[  240.714599][  T133]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  240.720499][  T133] page last free stack trace:
[  240.725162][  T133]  free_unref_page_prepare+0xf63/0x1120
[  240.730731][  T133]  free_unref_page+0x33/0x3e0
[  240.735403][  T133]  free_contig_range+0x9a/0x150
[  240.740257][  T133]  destroy_args+0xfe/0x997
[  240.744684][  T133]  debug_vm_pgtable+0x416/0x46b
[  240.749537][  T133]  do_one_initcall+0x265/0x8f0
[  240.754306][  T133]  do_initcall_level+0x157/0x207
[  240.759242][  T133]  do_initcalls+0x49/0x86
[  240.763584][  T133]  kernel_init_freeable+0x45c/0x60f
[  240.768791][  T133]  kernel_init+0x19/0x290
[  240.773126][  T133]  ret_from_fork+0x1f/0x30
[  240.777556][  T133] 
[  240.779877][  T133] Memory state around the buggy address:
[  240.785501][  T133]  ffff88805be3df00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  240.793566][  T133]  ffff88805be3df80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  240.801631][  T133] >ffff88805be3e000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  240.809687][  T133]                                            ^
[  240.815829][  T133]  ffff88805be3e080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  240.823884][  T133]  ffff88805be3e100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  240.831938][  T133] ==================================================================
[  240.943335][ T6452] device vlan2 entered promiscuous mode
[  240.943355][ T6452] device team0 entered promiscuous mode
[  240.943368][ T6452] device team_slave_0 entered promiscuous mode
[  240.943513][ T6452] device team_slave_1 entered promiscuous mode
[  240.952195][ T3596] usb 5-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a
[  241.020276][ T3596] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  241.023634][ T6452] device team0 left promiscuous mode
[  241.023654][ T6452] device team_slave_0 left promiscuous mode
[  241.023800][ T6452] device team_slave_1 left promiscuous mode
[  241.035547][ T3596] usb 5-1: config 0 descriptor??
[  241.073757][ T3596] gspca_main: sn9c2028-2.14.0 probing 0c45:8001
[  241.180407][  T133] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  241.187652][  T133] CPU: 0 PID: 133 Comm: jfsCommit Not tainted 6.1.98-syzkaller #0
[  241.195485][  T133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  241.205569][  T133] Call Trace:
[  241.208868][  T133]  <TASK>
[  241.211819][  T133]  dump_stack_lvl+0x1e3/0x2cb
[  241.216553][  T133]  ? nf_tcp_handle_invalid+0x642/0x642
[  241.222054][  T133]  ? panic+0x764/0x764
[  241.226158][  T133]  ? vscnprintf+0x59/0x80
[  241.230536][  T133]  panic+0x318/0x764
[  241.234467][  T133]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  241.240671][  T133]  ? check_panic_on_warn+0x1d/0xa0
[  241.245829][  T133]  ? memcpy_page_flushcache+0xfc/0xfc
[  241.251257][  T133]  ? _raw_spin_unlock_irqrestore+0x128/0x130
[  241.257280][  T133]  ? _raw_spin_unlock+0x40/0x40
[  241.262178][  T133]  check_panic_on_warn+0x7e/0xa0
[  241.267154][  T133]  ? txEnd+0x350/0x560
[  241.271282][  T133]  end_report+0x66/0x110
[  241.276089][  T133]  kasan_report+0x143/0x160
[  241.280931][  T133]  ? txEnd+0x350/0x560
[  241.285032][  T133]  kasan_check_range+0x27f/0x290
[  241.290018][  T133]  txEnd+0x350/0x560
[  241.293946][  T133]  jfs_lazycommit+0x610/0xb60
[  241.298737][  T133]  ? _raw_spin_unlock_irqrestore+0x8b/0x130
[  241.304671][  T133]  ? lockdep_hardirqs_on+0x94/0x130
[  241.309906][  T133]  ? txFreelock+0x580/0x580
[  241.314445][  T133]  ? do_task_dead+0xd0/0xd0
[  241.318992][  T133]  ? _raw_spin_unlock+0x40/0x40
[  241.323881][  T133]  ? __kthread_parkme+0x168/0x1c0
[  241.328951][  T133]  kthread+0x28d/0x320
[  241.333051][  T133]  ? txFreelock+0x580/0x580
[  241.337579][  T133]  ? kthread_blkcg+0xd0/0xd0
[  241.342194][  T133]  ret_from_fork+0x1f/0x30
[  241.346650][  T133]  </TASK>
[  241.350059][  T133] Kernel Offset: disabled
[  241.354392][  T133] Rebooting in 86400 seconds..